skysight-inc/HackerNews huggingface dataset:
Aren’t you referring to parameterized/prepared queries? Any proper DB driver/library should have this feature.

do_sql('SELECT * FROM tab where name = ?", "abc")

https://www.php.net/manual/en/pdo.prepared-statements.php

I recall getting curious when I was younger where the deranged advice of “sanitize your queries” came from — realizing that you should be able to simply tell the database that this is a string, not part of the query itself. SQL injection should barely exist as a concept, let alone be the #1 web vulnerability.

IIRC it turned out MySQL supported parameterized queries for ages, but the stdlib php MySQL library just didn’t add support for it. This discovery solidified my understanding that PHP has been giving developers brain damage for decades.
It's kind of funny. I recall watching the recent Apple developer conference live on Youtube and the comments section had been turned off. What are these giant tech companies afraid of?
Right? The way Panos spoke was just so bizarre and eerie.
Well, we still haven't got a standardised set of quantum-resistant cryptographic recommendations from NIST (expected to arrive 2022-2024), but since the article was released, the NSA have replaced Suite B with the CNSA [0]. CNSA is similar to Suite B, in that it is also not quantum-resistant, and also recommends AES, ECDH, ECDSA, and SHA-2. However, it also recommends RSA & classic Diffie-Hellman over multiplicative groups of integers, while Suite B exclusively recommended elliptic curve-based public-key crypto.

Things are definitely in a bit of a weird state, the current messaging from the NSA [1] is pretty mixed:

> For those partners and vendors that have not yet made the transition to Suite B elliptic curve algorithms, we recommend not making a significant expenditure to do so at this point but instead to prepare for the upcoming quantum resistant algorithm transition.

> For those vendors and partners that have already transitioned to Suite B, we recognize that this took a great deal of effort on your part, and we thank you for your efforts. We look forward to your continued support as we work together to improve information security for National Security customers against the threat of a quantum computer being developed. Unfortunately, the growth of elliptic curve use has bumped up against the fact of continued progress in the research on quantum computing, which has made it clear that elliptic curve cryptography is not the long term solution many once hoped it would be. Thus, we have been obligated to update our strategy.

> It is important to note that we aren't asking vendors to stop implementing the Suite B algorithms and we aren't asking our national security customers to stop using these algorithms. Rather, we want to give more flexibility to vendors and our customers in the present as we prepare for a quantum safe future. Where elliptic curve protocols are to be used, we prefer Suite B standards be used to the fullest extent possible as they have a long history of security evaluation and time tested implementation that newer proposals do not yet have.

I think from any other crypto vendor, it would be a lot easier to take this at face value, but the NSA's incentives are so mixed, it's difficult to know what to think.

0: https://en.wikipedia.org/wiki/Commercial_National_Security_A...

1: https://apps.nsa.gov/iaarchive/programs/iad-initiatives/cnsa...
I'm normally not a fan of ORMs but I've had good experiences with Entity Framework.

I really like the automatic migrations.

For small apps and a single dev it hits a sweet spot.

I find .Net really good at being kitchen sink included and business ready. If you're making internal small apps I've yet to find a better platform. Especially if you're in an MS Office heavy environment.
With TPM requirement, MS succesfully shot itself in the foot.

With TPMs sold out around the world for the next 12-18 months, and Windows 10 still being offered to OEMs, Microsoft has assured that legal installs of Win11 will be almost unheard of.

They have just assured the revival of the long since tamed WaREz culture.

P.S. Some lucky chip hoarders made a fortune, just look at this:

https://www.ebay.com/itm/174871167203

TPM chips cost literal cents up until recently, now $100
I'm happy to see remote/in office added as a normal part of the description of jobs. The normalization of remote work (or a return to cottage industry, if you think really long term) might undo some of the societal damage of the industrial revolution.
Plenty of games sold for Switch, isn't it?
EVs are changing the future of roadside breakdown UK
Never ran into problems when I was using it ~5 years ago.
Don’t forget the tire and wheel shops: loads of potholes boost their sales from repairing the damage done to the cars as a result of encountering the deeper potholes.
Sadly not available on Safari 13+. Reader view worked well for me.
I like that it has no math or equations, only practical tips.
My argument represents the exact opposite of bias. If the IPCC estimates are too conservative and result in poor predictions, and if their consensus mechanism excludes worst case scenarios, then more inclusive estimates and including more scenarios leads to more impartiality—the opposite of bias.
Cross-origin alert/confirm removed from browsers, breaking educational resources
I think this is about pingbacks and trackbacks, basically that you could (theoretically) treat blogs as a distributed forum with RSS and a few other technologies providing the topical or temporal links between them.

Looks like TFA’s tool was a way to surface these.
They are pretty rare, at least here in the US, and widely seen as undesirable or 2nd-3rd tier at best.
Have you tried S3 with auto tiered storage?

Only the most recent stuff lives on fast media, the older stuff gets auto migrated to media that has much better cost/byte ratios, including all the way to Deep Glacier storage if that’s what you want.

I would be very curious to see what the TCO is of a well-configured Backblaze B2 storage solution is, compared to a well-configured S3 auto-tier solution. And then also compare relative performance, too.
Nicely done, and unless you've previously written code to generate these, that was a lot of work. Thanks!
Plenty of graph databases, even distributed ones, come with transactional guarantees and ACID to boot. Not everything is eventual consistency.
Serious enough that it’s close to impossible to buy modules. On eBay they are being scalped for serious $$$
Show HN: Build bulk image processing pipelines with AI
It's so cool to get a tour like this, fascinating stuff.

The part at 13:30 seems to be some really valuable knowledge, when he says: if you are not occasionally adding things back in, it means that you are not eliminating stuff aggressively enough.

Smarter Everyday did a tour of the ULA facilities [0], which is also worth checking out if you like this kind of thing.

[0]: https://www.youtube.com/watch?v=o0fG_lnVhHw
Except that very verbosity may make it easier to read, as the types themselves may supply further information to the reader about what the variable actually means.
> Why does every new front-end developer job now ask for React as a core competency?

Simply because the web apps you are going to work on are and will be written in React. There are Vue job postings, Angular job postings, etc.

> Do people think it's going to still be a dominant framework in a few years?

People and organisations that invest in React either think so or don't care. Web apps tend to be rewritten, not maintained anyway, so React is currently a pretty good choice given its ecosystem, its corporate backing, and the sheer number of "React Devs". What about the next iteration? We'll see.

> Is that a framework you would use to build an app?

TBH I don't like React either, or Vue, or Angular. But I have built apps with those and they do the job, regardless of what megacorp is or isn't behind them. Was it enjoyable? No, it didn't feel like programming. Were they necessary? Probably not. Do they have a future? Certainly, as long as front-end developers will so eagerly look for solutions to non-existent problems and reinvent the wheel.
https://archive.is/MHbh5
Dynamic didn’t really go anywhere, but more appropriate examples that have now pervaded the language are await in general and IDisposable for ref struct. If it has a GetAwaiter it can be awaited, with no interface. If it has a Dispose() it can be disposed with no interface.
Respectfully, I'd challenge you on that and say you have good reason.

>Actually, we pretty much don't change that ever.

A classic mistake.
Sorry - it's not always easy to predict what is paywalled where.
My computer doesn't slow down, is lightning fast, and just works, year after year.

Can say that about pretty much any OS, highly depending on what exactly it is you do with it, and if you happen to be lucky enough that you're the one which doesnt't have one single problem. Especially the 'just works' bit rings much less bells for me when it comes to Linux than it does for other OS. Which kinda harms the feeling of freedom I get from it.
I dont know why u talking about bombing china. China is obviously lying about the virus, is restricting access to information and is at the inception of the greatest disaster in recent history. meanwhile their gdp is almost back to two digit growth while some people are in the street, died and countries collapsed. they need to be held accountable. trump is right.

to answer the rest of your comment:tsmc is building its factory in the US, mainly because of trump actions, trump also destroyed huawei, a company that never respected any patents and IPs and just cheated its way into market domination backed up by CCP money. in a few weeks he totally made this company unable to produce and sell its devices, he turned the trade balance claiming that china was having a better hand than usa (which was and still is true). I am asian. I have never heard one racist thing against asians from trump. However. Democrats and Journalists permanently think and say that Asians are one entity, corroborating the hive mind notion that they are all the same and have no complex thought. This is totally racist. Many countries in Asia such as Japan and Korea are also calling covid the China Virus. the world is more complex than the petty moves of trump haters and while the way he speaks can be too frank and rude he was never perceived as a racist in asia. I guess the problem is mostly with politically minded americans and europeans.
and finally if criminals - released by democrats because of covid- and crazy people are beating asians in the street. I would rather look at the profile of the perpetrators and draw out conclusions. Most of the people were biden voters and Id argue than 90% of the people I saw commiting crime in NY on asians were voting AOC or BIDEN for sure. does it mean biden is racist?
Yes, in about a decade, in the next fad cycle. Then it's back to static languages again and so on.
You know, this is a great example how people will find a reason to whine about just anything at all.

We still have microformats, and you're for some reason you're ranting about web economy issues like "like/subscribe" that have absolutely nothing to do with CSS.
> Instead I've been using modern Linux distributions. This is freedom. My computer doesn't slow down, is lightning fast, and just works, year after year.

That doesn't match my experience of modern Linux at all. Plenty of forced "upgrades" that broke things, sometimes leaving me with an unbootable system (systemd).

I switched to FreeBSD and things are much better.
Yes, at OpenBSD hackathons they used lpd as a queue for mp3s so all the devs could submit music to be played for the room.

https://patrick.wagstrom.net/weblog/2003/05/23/lpdforfunandm...
> We don’t need to solve just for the physical actions, but also for the human experience of building and the feeling of mastery. Particularly for physical trades.

Why? At the end of the day there'll be two companies offering to build your wall. Human vs Tech-assisted Human (and eventually, robot). If one is faster, more accurate and cheaper, the buyer will choose it. The other will go out of business.

It's not about masons embracing this, it's about clients embracing superior outcomes (quality, price and/or time). Eventually the few masons that make the switch to superior outcomes will push the others out of the market.

That is of course assuming tech-assisted/robot will actually be better. At the moment it's not in the vast majority of cases. But granting that assumption, I don't think 'satisfying the human experience of a mason' will go into the equation for long.

That's not a value judgement, I think building good human experiences is important. I just don't think in the decision making process it'll matter due to inevitable competition.
People of HN: Any idea on how YT copyright checker works?
I am quite amused by the fact the checker can scan a uploaded clip to all the sources to find the copyrights. Any idea on how does that work?
But what scenario do you want to prevent? I think in case of abduction, the backpack would likely be left behind.
DevOps Unbound: Why Testing Is So Frustrating
The Fastest Race at the Olympics May No Longer Be the 100-Meter Sprint
I suspect, this may be far too common for anyone who lives a "checkpointing" style of life, i.e. once I achieve this, I will pursue this ambition.

I've realized this sort of checkpoint-based planning is not helpful for the long run because naturally, times change, and with that ambitions change. If you haven't already had a taste of making progress towards the said ambition, and it happens to require a distinct set of skills, it becomes quite a mountain to climb.
https://themarketherald.com.au/archer-materials-asxaxe-award...
I would say the classic mistake is arbitrary redesign. Users hate change. Not inflicting random change on them is one of our secret weapons. Not saying we'd never do it, but there's a hierarchy of problem importance, and "need to have meaningful YC launch titles" is multiple levels below "don't inflict arbitrary change on users".
Not sure it's losing motivation rather than being confronted to one's wishful thinking.

If I have so many plans for when I retire early, how come I do none of it now? If that's really what I want, how come I don't spend at least a few minutes on it every week?

I don't have to find a 50h/week activity to replace my work. I don't need any activity that replace my work routine. I can simply take whatever hobby I had while working, and spend at least as much time as when I was working full-time.
Why? Isn’t most of the West one of the the least densely populated areas in the United States? Seems there would be lots of land to build single family homes.
Germany’s ‘Cube’ to Be ‘World’s First’ Carbon Concrete Building, Needs No Steel
> I have never seen someone under 20 using RSS

Im under 19 , i use rss daily for a lot of things from reading blogs to sending alerts about new updates in services me and my friends host.
Vista was huge improvement (or say Win7 basics was made here), but just too heavy in 2006.
Ask HN: My MacBook Air M1 is super fast. Now what?
As a generic back-end services developer, my entire usage of this laptop can be summed up as the place where I run vim, a web browser, python, docker and compile go binaries.

Any suggestions as to some killer apps to show off this super fast laptop?
Chains of Fury: An Upcoming FPS with Comic Book Style
Do you really think random people will leave Windows behind? And do what? Most of the average PC users don't even know there's an alternative (aside maybe for macs, which they probably consider overpriced, so not a direct alternative).

I think people who complain about this situation are people who know enough about computers to know that an "older" but higher-end computer would run just fine. The random Joe probably isn't running a 6th gen maxed-out i7, but some cheap low-end PC that they're used to having to change fairly regularly because it breaks for no reason.

I'm not defending MS here, but I think their strength is based on enterprise clients, where people change computers much more often, as based on their support contracts, and run-of-the-mill users who don't even think of "Windows" as being different from "the computer".

Power users are either "stuck" somehow on Windows (games, or other software that requires Windows) or are already on Linux. In the first case, it may be an issue, but they'll probably just grumpily whip out their card and upgrade. What else are they going to do?

I'm in the second situation and running a 3rd gen i7 and have no intention of upgrading it as long the computer works. But I only occasionally boot it in Windows to play some game. When games won't support Windows 10 anymore, I'll just play some other game.
I don't think it's as bad as that.

You can still create a local account and login to your PC without a callback to Microsoft.
Is there a big movement like in Paris to make it more bike friendly? Own lanes and that sort of stuff?
There's a lot wrong with SQL. Chris Date [1] wrote several books comparing SQL to a more pure implementation relational algebra, Tutorial D. In Date's words:

> SQL is incapable of providing the kind of firm foundation we need for future growth and development. Instead, it’s the relational model that has to provide that foundation. [...] We see SQL as a kind of database COBOL, and we would like to see some other language become available as a better alternative to it.

Summarizing Date's points:

- Real relations don't contain duplicate tuples but SQL tables allow duplicate rows.

- Tuples and therefore relations don't ever contain nulls. Personally, I have trouble understanding how to support this limitation given LEFT JOIN.

- Domain types only provide type aliases not a new type. For example, you can compare or join on different domain types if the base type is the same. Date uses the example of `p.weight = sp.qty` to show a comparison on domain types that shouldn't be allowed.

- SQL has many ways to express the same query. His example shows at least 12 ways to answer "Get part numbers for parts that either are screws or are supplied by supplier S1, or both."

- SELECT DISTINCT should have been the default instead of SELECT ALL.

My personal gripes:

- SQL is quite chatty, so much so that you can omit words in some incantations.

- It's hard to dynamically build queries. It composes poorly for anything dynamic, even simple things like ordering by a column name.

[1]: https://en.wikipedia.org/wiki/Christopher_J._Date
Red Hat creates social networking site (2006)
The trick is to ask somebody who you know, who built a house similar to the one you plan for a copy of the plans.
how much work would it take to reduplicate this effect exactly in CSS?
They will stop patching it in 2025. And a lot of old hardware that still runs the software just fine will then be insecure.
They are banking on the power of the normies not being aware of such power tools, let alone having the patience/competence to go through those workarounds. And they are right. Normies don't usually care/bother, they will just order that Windows 11 laptop.
Crystal would be a better example of a statically compiled language with duck typing.
One nifty use-case for ORMs is decoupling the logic from the data.

I can prototype in Python/SQLAlchemy/SQLite and deploy to Python/SQLalchemy/PostGreSQL via a pipeline with confidence that I'm actually managing the complexity.

Cracking open some legacy code with vast swaths of embedded SQL is a source of much weeping and gnashing of teeth when the time comes for maintenance.
Thank you, I hadn't heard of this before. Looks fascinating!
My laptops operate almost exclusively in clamshell mode. So, having a Touch ID on the external keyboard would be great!

Sure would be nice if it worked with Intel-based hardware, though. ;(
ME was not the version that preceded XP, it was Windows 2000. There were two completely different product lines, with a different kernel, etc.

Windows 3.x -> Windows 95 -> Windows 98 -> Windows ME

Windows NT 3.x -> Windows NT 4.0 -> Windows 2000 -> Windows XP -> Windows Vista -> Windows 7 -> Windows 8 -> Windows 10

Many people believe that XP was the successor of ME because this is where non-business users were migrated to the NT line of Windows.
With Firefox's tracking protection on, the only thing I get for the homepage is a single line error message, as the WebGL context drops unexpectedly.

If you visit at least once without tracking protection, and then turn it back on, and visit (even with cleaning all caches), then the site loads correctly.
Here goes nothing:

- Have the people that will run the work (tech lead, senior dev, whatever) break the work down in meaningful chunks/modules.

- The number of modules is important: it should be roughly equal to the man-months you're trying to budget for --just a rule of thumb. Basically, not two few and not too many.

- Have the same people give you two numbers for each chunk: the best case scenario based on what their gut tells them and the worst case scenario (where 'worst' here is a bit short of nuclear winter, but not optimistic).

- Your project will take the total of the averages of the min/max estimates.

You're welcome. Source: 20 years of delivering tech projects on time...
Well... Games are such a pain to support or port exactly because of the nature of development. For most games post-release life cycle is supershort, i.e. nobody cares about long-term polishing, bug-fixing, proper platform support.

This is why Proton/Wine are such a massive undertaking.
Didn't happen, but they became more popular. The fact is, that dynamic languages are great for small personal projects, or modular scripts, but if your projects grow more than 10k Loc, and you have 2+ devs working on it, dynamic typing becomes a major liability.

The raise of unit testing in the early 2003-2006, coincided with the raise of popularity of the Python web frameworks and Ruby on Rails. Suddenly Unit testing became a necessity, while previously it was a 'nice to have', as static typing covered a lot of the errors that dynamic languages introduced. Before 2005, in most places, 'integration testing' was the norm, but not unit testing.

In the other hand, Objective-C took a very interesting turn, where it is a static typed language, but it is message oriented, and you can use it in a semi dynamic typing way. You can send a message (method call) to any object, which allows for interesting compositions (eg. [(id)myObject anyMethod] ). Calling a method on a nil object, doesn't raise exceptions, etc...

I thought it made an awesome compromise. Unfortunately, Swift went the opposite way, which I didn't think was the right call. (as Java already covered that area well). Hence Swift hasn't taken off, appart from iOS as it didn't really introduce anything new, just little soup of paradigms that don't fundamentally make things much better. It was a missed opportunity.
But were they trying to hide comments like in this case?
Microsoft Stops Free Trials of Windows 365 After Running Out of Servers
A very gruntling article!
There are also privacy implications related to using a TPM.

https://www.cs.auckland.ac.nz/courses/compsci725s2c/archive/...
From what I've heard from friends who build, it's less about having six guys show up and two days later there's a house, it's about what happens when they're busy and don't show up for three months while the cost of materials goes through the roof and you're stuck renting and/or paying two mortgages.

If you can engineer out some of the potential delays that can take a huge amount off the overall cost.
you are the one doing whataboutism right now. I am just arguing that trump was never racist against asian and that he tried to do things and was deemed a racist as a result. I never said he did not downplay covid. everyone did including Sir Fauci and all the democrats.