skysight-inc/HackerNews huggingface dataset:
Two somewhat related pieces of recent UK news:

> How a proposed secrecy law would recast journalism as spying[1] (20/07/21, Guardian)

> The Home Office now wants harder and more extensive secrecy laws that would have the effect of deterring sources, editors and reporters, making them potentially subject to uncontrolled official bans not approved by a court, and punished much more severely if they do not comply. In noisy political times, a government consultation issued two months ago has had worryingly little attention. Although portrayed as countering hostile activity by state actors, the new laws would, if passed, ensnare journalists and sources whose job is reporting “unauthorised disclosures” that are in the public interest.

> Endorsed by the home secretary, Priti Patel, the consultation argues that press disclosures can be worse than spying, because the work of a foreign spy “will often only be to the benefit of a single state or actor”.

> Calling for parliament to consider “increased maximum sentences”, the Home Office claims that there is now not necessarily a “distinction in severity between espionage and the most serious unauthorised disclosures”, including “onward disclosure” in the press. Journalism could even create “far more serious damage” than a spy. Yet the 66-page document does not mention “journalism” once, and refers only to “onward disclosure … without authorisation”.

-----

> Priti Patel is urged to spare a billionaire dubbed 'Britain's Bill Gates' from a 'grotesque and unjust' extradition to US[2] (25/7/21, Mail Online)

Interesting for the plea made by Conservative ex-cabinet-minister David Davis on behalf of the beset billionaire, in terms which (though he would never allow it) could just as well be applied to Assange:

> America has a ferocious legal system with a 97 per cent conviction rate, where prosecutors, not judges, set the sentences. Defendants, too, are subjected to coercive plea bargaining. For example, people are encouraged to admit an offence and get a lesser jail sentence rather than continue to plead innocence and, if convicted, get a much longer term.

and later:

> He ended up in solitary confinement for 23 hours a day in a Pennsylvania penitentiary, without a clock and thus unable to know what time of day or night it was.

> He and his co-charged were treated like criminals long before any trial began – placed in chains, frog-marched and strip-searched.

> It is now up to the Home Secretary to decide whether Dr Lynch should stay in this country or be sent to a US cell.

> I, and many others, urge Priti Patel not to submit to this grotesque and unjust process. She must wait for the outcome of a separate High Court trial examining the fraud allegations against Dr Lynch.

I'd love to see just one member of the British Government stand up for Assange like that, but I guessing he is lacking the £8B collateral of Dr. Lynch.

1: https://www.theguardian.com/commentisfree/2021/jul/20/propos...

2: https://www.dailymail.co.uk/news/article-9822229/Priti-Patel...
What I'm interested in seeing is the types of phrases that dropped during this time period. What is not considered a sign of "cognitive distortion"?
> Communities of Iroquois Native Americans

Had wampum https://en.wikipedia.org/wiki/Wampum

Which was absolutely used as trade goods between Iroquois bands, between the Iroquois and other natives, and between the Iroquois and settler colonialists. Standardized trade goods, portable and of a broadly recognized value: in other words, money.

Money which was good enough that the English, being kept short of coin by the Crown, adopted it for their own internal trade. Leading to the expression "shelling out", and the slang term "clams" for the dollar.

Single Iroquois bands may not have done much if any internal trade, but the same is true of my nuclear family. I would expect some wampum changed hands for things like marriages, though I don't have a source on that and it might not be true in this specific case.
First, the number of marijuana users is likely not far away from the number of tobacco smokers in the US.

It still wouldn't be close. It's much more expensive to treat a single case of cancer (or lose a person's life) than it does to treat a single case of... whatever marijuana causes.

Just the fact that marijuana isn't known to dramatically increase fatalities in its tens of millions of users should tell us what we need to know.
50% is also what I had found on Stackoverflow (2018) - https://laurent22.github.io/so-injections/
Good for the author, but the article leaves "MOM GET THE CAMERA!" impression.

>Then I just plugged the Pi into a USB power brick, and… it worked!

Might as well attach a diesel-fueled generator and a pentium 4 to the back of the desk.

The project seems like a perfect opportunity to play around with some arduino-like board. It could probably be embedded inside the control panel and powered from the desk itself.
No one should be surprised by this
Because .com is the defacto US cctld at this point.
Note that according to browsers every subdomain of such a service is in the same origin, they can read each other’s cookies and run Javascript in each other’s sites.
Talked to an Uber driver in Chicago who said he wouldn’t want to live anywhere else because Chicago has everything he could want, while acknowledging that certain neighborhoods are dangerous, like in most cities.
That also depends on the severity of the bug. :)
In PHP's case, Stack Exchange is not necessary to get SQL injected tutorials. The official docs for _years_, if not decades, included them. The docs for how you were supposed to do SQL were just full of the antipattern of building queries by string formatting and concatenation. I wouldn't be surprised if some dark corner of the docs still had those available.
A lot of people are talking about the bug but not the fix.

Is anyone else incredibly surprised that the fix was just adding auto_increment to the primary key column for two tables[0][1]? Not having these as auto_increment seems like incredible oversight to me. In what common scenario would you want a setup like that?

[0] https://github.com/signalapp/Signal-Android/commit/83086a5a2...

[1] https://github.com/signalapp/Signal-Android/commit/b9657208f...
Disable your AV is a perfectly cromulent suggestion. It is a root kit that operates at the lowest level of your operating system, and any issue with it and it will affect every layer above it.

Now, if disabling works you should set reasonable exclusions and enable the product again.
You add nothing to the conversation.

Make an actual argument. Are you saying that the legislation reduced the level of housing created? Are you saying that redlining increased housing stock? Are you saying that black people having equal access to credit made white people less likely to build houses?

Linking to Wikipedia with a wink and a nod to racism is not an argument. Be explicit with your argument here.
Toward Car-Free Cities: Why London’s Congestion Charge Is Working
I’m not sure what point you’re making here? IMO, while JS is certainly more bloated than ever as a result, the current popularity of frameworks like React, Vue, etc. makes it much less likely that a beginner will introduce XSS than 10 years ago.
That would be a way to address the underlying complaint. But it wouldn't be "reparative".

The perversion here is the assumption that the next minority you hire is a complete stand-in for the implicitly-assumed minority who missed out before, leading to the existing imbalance.
I had a similar thought, but I wonder how much a 'powder' would qualify as microplastic - can a microplastic be so small that it doesn't have the same food-chain impact as slightly-larger microplastic? Is it possible to make a substance that is universally 100% excreted by every organism?
It's being hosted by the company's recruiter, so I'm assuming it's more of an initial chat.
Do you have evidence the poll is faked, or does it just go against your confirmation bias?
I'm curious where you think your comment contradicts mine.
It is a universal law, known and understood subconsciously in many different ways.

Here in Poland we have a saying "you get to know a real friend in bad (times)" (Prawdziwego przyjaciela poznaje się w biedzie).

When you feel the values or friendship will not stand the test you will not invest yourself in it and it becomes empty words.

Just as democratic values that are set aside when it doesn't exactly align with profit or power goals.

People will not stand for something they believe to just be empty words and that's why things like Assange case are so damaging to democracy.
In their defense, I tend to think social science is shoehorned into an academic formula that it can never really fit into.

You kind of have to have a hypothesis, then "test" it with data. A more reasonable approach (IMO) would be "We found this interesting phenomenon" followed by inevitably speculative interpretation. That's realistically how it works in practice, but to be published you need to fit a popperian formula. A more ponderous version of this probably wouldn't have been accepted.

I mean, using a method of diagnosing depressed individuals on a collective psychology of a society is already veering into wtf territory, in terms of interpretation. OTOH, it is interesting and probably significant somehow.

IDK how or what they could have done better, and this does seem like a result worth publishing, assuming the methodology is good. Ultimately, I think people reading the paper mostly read it that way anyhow. Authors found X. Seems interesting. Here's how they're interpreting it. Here's my speculation.

Journalists OTOH, they'll cite the hypothesis verbatim if it fits the article they're writing. I think that's where the shoehorning is a problem. As long as you're reading the paper directly yourself, who cares what order the paragraphs are in.
This link explains how the Tiktok algorithm may cause mental health problems...
https://www.abc.net.au/news/2021-07-26/tiktok-algorithm-dang...
Almost everything is expensive now. Look how much assets in general have gone up: stocks, real estate, collectibles, commodities, and so on. College, healthcare, and insurance too. No reason cars should be an exception.
(More related to the comments than the article) I've seen tons of takes on this since watching the end of the race this morning and, although it certainly played a part in deciding the outcome, it's a shame that more focus has seemed to be on making excuses or how the Dutch riders messed things up instead of Dr Kiesenhofer's incredible story and ride.

Kiesenhofer was on a fantastic day: van Vleuten's earlier attack from the peloton made no inroads to Kiesenhofer, assuming the time gaps shown on the TV were correct.

Watching on the TV we knew there was still a rider out front and, even if the race "ardoisier" (blackboard holder) wasn't the best, team management should have figured out a way to get that information to the chasing pack. I mean, the race finished on a motor racing circuit with pit lanes containing team helpers! It's not like it was like stage 16 of this year's Giro, where poor weather stopped race images being broadcast[1].

[1] https://cyclingtips.com/2021/05/gallery-amazing-images-from-...
Not to mention,

"The Times found being named a Sheriff’s Office target could have serious consequences. Deputies showed up at homes at all hours of the day and night, writing tickets for violations like overgrown grass and making arrests for any reason they could find. By 2020, some 1,000 people had been ensnared. About 100 were 18 years old or younger."

"Since we have determined that you are a criminal, we will ensure that you are a criminal."
> Is there a fluorine compound that will happily oxidize Teflon?

No. It can't be done. PTFE is fully oxidized (well, fluorinated).

> The point of my rambling is can it be conclusively shown in controlled laboratory experiments that these compounds are completely nonreactive with the human digestive tract?

I haven't looked for the study, but even if it hasn't been done, it's clear that fully fluorinated substances are not major health risks.

What so many "oh no, TEFLON!!1!" people don't understand is that PTFE really is as chemically harmless as the evil chemical companies say it is. The problem is that this stuff isn't entirely PTFE (or even PFA, which is close enough even if it's oxygen in some spots instead of fluorine). Fail to fluorinate one location on that PTFE molecule and you've left a reasonably reactive pocket that can start causing trouble. (You end up with an inert PTFE chain hung off of some other molecule, which will gum up the works.)

So... just fully fluorinate stuff, then? Unfortunately there's only one fully fluorinated molecule chain, and that's PTFE. Everything else, other than PTFE, is more reactive, and thus more toxic. (I guess there's also tetrafluoromethane, but that's gaseous.) And you need other things than PTFE: PTFE is chemically inert enough that it's difficult to mechanically bond to things. Other fluoropolymers are used to make bonding layers to help attach PTFE to substrates. These are what you should worry about in your cookware: they're intentionally more reactive!

The other wrinkle is that I mentioned that fluoropolymers are chemically inert, because they are. But they're not thermodynamically inert. Get them hot, and they decompose into things with more reactive sites, usually in an uncontrolled way that admits some pretty nasty byproducts. (See "MTV flares" for an example of how to harness this.) Thus, the fact that PTFE pans kill birds who are sensitive to these decomposition products is real, and you should never use PTFE at high heats.

Fluoropolymers are useful, good for many things, and often quite safe. But there are real dangers. Don't listen to the suits from the chemical company who insist that it's all safe, or the tinfoil hats who insist that it can never be safe. As with so many things, the truth is in between.
I'm worried that cars, given subsidies, are too much of an anti-agglomerator, and thus active measures must be taken.

It is as if we used to have clumps of matter bound together by gravity, enforced by magic that new matter must be spread out (zoning) but also charged the matter (cars). Merely stopping the magic doesn't meant gravity will overpower electromagnetism.

Zoning and car culture achieved dominance in tandem, and so I am quit skeptical of any certainty that fixing one alone is sufficient to roll back the clock.

There could be other sorts of hystersis too that make this challenging. Really we should be very careful and vigilant and not rely on one tactic to eradicate the scourge of suburbanization.
Transliterating Old-School Basic
We should of course recycle it.
> "they were under orders to “[m]ake their lives miserable until they move or sue."

Disgusting.
Zoning and Price of Raw goods. For awhile lumber prices alone added an additional 15-30K to the cost of building a new home.

This caused the builder to focus on building more higher end homes, so new homes in the 5-6x median income market were being built but the home in the 2-3x median income home that most people would buy (and should buy) was not cost feasible to build.
If I did want to close that hole, is there anything more clever than just having a username that isn't an email address, and allow more than one account to use the same email address?
To me the crazy bit was the other nine having to perform the execution. Imagine doing that to someone you knew.
I don't think all natural fiber sources have this issue. Finely ground non absorbent insoluble and non fermentable fiber, like wheat bran or just cellulose appear to have the opposite effect.
You may have done it already through RabbitMQ.

Also I want to comment that it is awesome and I love it. It’s simple and effective. OTP being bundled into the language is really very brilliant.
Full disclosure, I am an active participant in WebAssembly standardisation, my github is here (https://github.com/conrad-watt). What follows is purely my personal opinion.

This announcement is deliberately phrased to scare people who do not have sufficient context. I don't know why some AssemblyScript maintainers have decided to act in this extreme way over what is quite a niche issue. The vote that this announcement is sounding the alarm over is _not_ a vote on whether UTF-16 should be supported.

There has been a longstanding debate as part of the Wasm interface types proposal regarding whether UTF-8 should be privileged as a canonical string representation. Recently, we have moved in the direction of supporting both UTF-8 and UTF-16, although a vote to confirm this is still pending (but I personally believe would pass uncontroversially).

However, JavaScript strings are not always well-formed UTF-16 - in particular some validation is deferred for performance reasons, meaning that strings can contain invalid code points called isolated surrogates. Again, the referenced vote is _not_ a vote on whether UTF-16 should be supported, but is in fact a vote on whether we should require that invalid code points should be sanitised when strings are copied across component boundaries. Some AS maintainers have developed a strong opinion that such sanitisation would somehow be a webcompat/security hazard and have campaigned stridently against it. However sanitising strings in this way is actually a recommended security practice (https://websec.github.io/unicode-security-guide/character-tr...), so they haven't gained the traction they were hoping for with their objections.

The announcement is worded to obscure this point - talking about "JavaScript-like 16-bit string semantics" (i.e. where isolated surrogates are not sanitised) as opposed to merely "UTF-16", which forbids isolated surrogates by definition, but inviting the conflation of the two.

AS does not need to radically alter its string representation - if we were were to support UTF-16 with sanitisation, they could simply document that their potentially invalid UTF-16 strings will be sanitised when passed between components. Note that the component model is actually still being specified, so this design choice doesn't even affect any currently existing AS code. I interpret the announcement's threat of radical change as some maintainers holding AS hostage over the (again, very niche) string sanitisation issue, which is frankly pretty poor behaviour.
With this party clients, you don’t avoid this. The failings of a third party client will still reflect on the whole of the core product as well. Articles would still talk about a bug like this breathing a Signal issue, even if limited to a third party app.

Additionally, I find it quite a stretch to call the app “half-baked”. I think it’s pretty great.
> Which is why you see crappy apartments being built at a faster rate than cookie cutter homes were being built in 2007.

I wish this were true!
Because Google doesn't label misinformation because Google really wants to, but because it's pushed by the government under the guise of "just a private company".

It's supposed to be unconstitutional to have your government censoring things, but covid-19 is the catch all excuse for any authoritarian violation these days.
I was just reading it (on mobile) and thinking that it’s perhaps the easiest to read and clearest article I’ve seen for a very long time. Something to do with the headings and short explanations, the visual layout and the simple but not _too_ simple charts. 10/10 for me - but I don’t need the alt text, so I’m not disagreeing the images should have those, especially as they are important to the flow.
They have been saying that since the car released. Kia has been playing NY nightclub bouncer with the availability and enjoying the extra $$ they get on top.

Of note drive an Optima so not a super Kia hater just what they have done with the release of this model
You could have said the same thing about asbestos.
I noticed the same when I attempted to search for text on the page, very disappointing.
Listen up peasants, this is a prime example of why you can't trust the government.

For all of you leftists out there, I hope you get the same treatment or worse as Assange got for voting in authoritarianism.
The top code snippet in the "latest vulnerabilities" section (as of the time of writing) is:

$query = "SELECT * FROM wp_misure WHERE Id = '".mysqli_real_escape_string($link, $_GET['id'])."'";

This is not vulnerable to SQLi unless I misremember how real_escape_string works.
> there is something to just enjoying yourself. I have little adventures four times a week

That's what people often don't get about outdoor exercise. You can combine physical and mental exercise - exploring new areas, impromptu orienteering, just the sheer focus required to run or bike in complicated terrain is a huge plus and makes it easier to stay engaged.
> PHP has supported [...] safe HTML for decades, but the programmer has to understand the problem and the solution.

That's not good enough for a language advertising as "Hypertext Preprocessor" though. PHP's distinguishing feature is that's kicked off from SGMLish processing instructions in otherwise static HTML, and it has all context available for perfect injection-free HTML-aware templating. Eg escaping quotes when it's outputting into attributes, escaping "]]>" when outputting into CDATA sections, or with the help of a real markup processor, suppressing/escaping <script> elements or onclick or other event handler attributes where advised through a grammar such as an SGML DTD. But it doesn't because it's just such a hack job of a language, by the developer's own admission.
And my point is that there is a difference between a polarizing purely-aesthetic design choice and a polarizing feature-set choice. The decision to maximize screen real estate at the cost of a physical keyboard was primarily a feature-set tradeoff. It could have gone spectacularly wrong, but the tradeoff was at least calculated around producing some tangible benefits that people already admitted they wanted. It turned out to be popular in the end because people really wanted to browse websites on their phone, and physical keyboards make it hard to build a portable phone with an acceptable screen.

Similarly, the decision to build an electric-only car vs. an ICE/plugin-hybrid car (and in the process free up space under the hood, remove gas tanks, produce a different driving experience) is also a polarizing feature-set choice that produces some aesthetic results. By contrast the design of the Cybertruck, as best I can tell, is almost entirely aesthetic in nature. Insofar as it maximizes certain features, they’re “Mad Max bulletproof indestructibility (but not the windows)” features and I’m not sure those are going to carry the mass market. And Tesla really needs to carry the mass market if they’re going to stay in business long-term. Picking weird aesthetic hills to polarize on and/or betting that what the mass market really wants us to resist small-caliber rifle attacks might work out in the end, but it sure seems like an unnecessary risk.
Also, finding relevant resources for Nix can be tough because "Nix" is often used as a shorthand for NixOS.
That's obviously because we view .com as our primary cctld, not .us. The .com tld has been the common commercial domain space for the US since long before the Web existed and long before you could freely register .us domains.

Why would we switch over to primarily utilizing .us given the very early adoption of .com in the culture and economy? It would be nonsensical to do so.

You can see that early adoption well represented here:

https://en.wikipedia.org/wiki/List_of_the_oldest_currently_r...

northrop.com 1985, dec.com 1985, att.com 1986, xerox.com 1986, ibm.com 1986, sun.com 1986, intel.com 1986, ti.com 1986, boeing.com 1986, alcoa.com 1986, adobe.com 1986, amd.com 1986, 3com.com 1986, tandy.com 1986, and so on.
Are the blue book sites up to date with these current trade in value trends, or is there a better place to reference prior to trade in?