skysight-inc/HackerNews huggingface dataset:
Nailed it - except one massive feature missed IMO is pl/pgsql.

As a language it’s a bit clunky* but once you learn it, and you start moving database logic into the database, suddenly everything is 25% LOC, often literally 100x faster, and easier to understand.

As an added bonus, when I’ve moved very complex data transforms into pl/pgsql, the non-programmer technical people can now read the logic and have more than once pointed out problems (with solutions).

* it helps a lot if you write your SELECT and other statements in lowercase. Feels barbaric I know, but reading shoutycode all day gives me a headache.
It can support those languages, they just need some people who actually speak them to come along and make it happen. If you can help, I'm sure it will be appreciated.
I once emailed Bob Yannes in 1998 about the C64 SID chip. I mentioned my soft synth (SoftSID) and the Elektron Sidstation. But all he was bothered about was his Ensoniq Fizmo. I'd love to get my hands on one of those now.

I told him of the bad review in Future Music. He was a bit annoyed but explained what they had missed in the review.

A nice guy.
No they don't. This is a common myth when it comes to cases like this.

If the defendants had been selling their product with the exact same name, or ripping off their logo directly, then you have a point.
IntelliJ is decent and has drivers for pretty much all database systems. It can be downloaded has a stand-alone too (DataGrip)
I still don’t understand the reaction. People get tied up in a knot over this but it is an effective deterrent to child pornography full stop. Even if it rubs you the wrong way to have software fingerprinting your files, I really don’t care if it means placing a deterrent in place against child trafficking.

Let’s walk through this.

1. Criminal kidnaps child and abuses him.
2. Criminal produced video of said abuse and sells it on the web.
3. Criminal continues to sell it and it spreads.
4. The video is detected by authorities who promptly add it to database.
5. Video is cryptographically hashed and now anybody who stores this content in iCloud can be identified
6. A customer of the criminal is caught
7. Forensics leads authorities to criminal who produced the video
8. One less criminal to profit from kidnapping and abusing children

Everyone tries to make this approach as a slippery slope to facial. It doesn’t have to be that way if the right people are in the loop to blow the whistle.
And they typically use their experience to make that point, and argue that they lost time.

I'd say that having done something lends more authority to the opinion that one should not do so.
Go ask them how many of them would like to move family and all to Paris or Amsterdam and how many people from Paris or Amsterdam would like to move to Novosibirsk.

I've lived in Northern Canada. Snow isn't nearly as much fun as it is cracked up to be when there is 6+ months of it in some years (I recall one year where the snowplow went on the tractor in October and we had the last snow in June).

Those areas are well outside the ones where humans feel comfortable most of the time and don't underestimate the energy budget on a per-person basis required to make those places habitable to begin with.
Indeed. The only oat milk or for that matter any non-milk milk that I like in my coffee. I don't see the similarities at all in the branding or packaging. Like oatly, glad they lost.
My two cents: I get the impression this is related to NSO pegasus software. So once the Israeli firms leaks were made public Appple had to respond and has patched some security holes that were exposed publicly.

NSO used exploits in iMessage to enable them to grab photos, texts among other things.

Now shortly after Apple security patches we see them pivot and now want to “work” with law enforcement. Hmmm almost like once access was closed Apple needs a way to justify “opening” access to devices.

Yes I realize this could be a stretch based on the info. Just seems like an interesting coincidence… back door exposed and closed…. now it’s back open… almost like governments demand access
> probably good in the moral sense

How, how is it even morally good?? Will they start taking pictures of your house to see if you store drugs under your couch? Or cook meth in your kitchen??

What is moral is for society to be in charge of laws and law enforcement. This vigilante behavior by private companies who answer to no one is unjust, tyrannical and just plain crazy.
Or, redesign houses to not need nearly as much energy for heating and cooling, preferring natural heating via the sun and cooling via breeze. https://www.codylundin.com/codys_house.html
Is the database frozen or can they push out updates independently of iOS updates? If not, targeting individual users definitely doesn't seem possible unless you control OS signing.
Everybody knows that Oatly doesn’t come out of a tit. Nobody is being misled.
> The people who wrote the XML signature standard didn't just take an XML document and whack a PGP signature around the whole thing! They thought about use cases like 'what if you wanted to only sign part of a document' and 'what if, after signing, the document was processed by something that reordered the attributes' and 'what if you have signatures from multiple sources and want to collate them into the same document'. They decided they wanted to support all of them.

You forgot to add the part - what if someone wants to add comments randomly without it changing the signature, even when those comments (mildly) change how the xml doc is parsed!
Funny how we are both downvoted without anyone disputing what we say.
>"Doesn't hurt to know it, sure, but it's entirely not useful for a large majority of developers these days"

I read about a lot of things that are not immediately useful for me. Still somehow it falls into nooks and crannies of my brain and helps me to solve various problem when / if need arises. I do not even remember the exact things but general understanding of what is available and how does it functions approximately. If I need details Google does the rest.

>"It's a lot easier to understand:

display.disable();"

No arguments about this one. Even though I do work with bits sometimes I wrap those into something digestible like your example. Inlining helps not to use performance when it is needed.
Yes, that is correct. I was trying to use the most favorable interpretation of the data in my reply but yes, it’s closer to 50% (at least fully) in most places. My state included.
Are you talking about a client application? PgAdmin is the goto for postgres administration. But some ppl like DBeaver and I really like Datagrip.

However, I also really like using clis when they are available. In that sense psql is quite good and pgcli is really cool.
> The crazy thing is it _is_ hitting the wealthy parts

Until wealth can't buy its way out of the consequences of climate change, this hasn't really happened.

Who cares about what's going on in SF when you can hop on your plane and fly to one of your properties elsewhere?

I lived somewhere where people would build multimillion dollar homes on the beach, and every few years hurricanes would wash them away. It's happening at an increasing frequency now. It's no big deal, though, because wealthy people can afford to insure and rebuild every time it happens. It's just one of the costs of having a beach house in a desirable area.

Similarly, wildfires are just one of the costs of having houses in the Bay Area.
Matching means suspect. It doesn't have to be a true match.

It could be worse. But end to end means the middle has no access. Not some access.
I'm not sure what chord menu you mean. :(. I /think/ you are describing "echo-keystrokes", which defaults to one second.

M-x is basically instant for me, though. So, not sure why anything like that would be slow.
I think I agree with all of this. SAML is by far the worst commonly-used industry cryptographic protocol (you could generalize and say "anything reliant on XML signatures is the worst industry cryptographic protocol", and if you go looking for stuff like that outside of SAML, you should know that a lot of the bugs are portable between systems).

I think the root cause of insecurity here is the near-universal attempt to use general-purpose XML libraries to build SAML. When the Go instability bugs were announced, I think there was a general take from the Go community that `encoding/xml` was not an appropriate foundation for SAML libraries, and, in this instance, I think the Go community was right: I think it should have been self-evident that you couldn't safely build SAML on `encoding/xml` (it doesn't even really handle namespaces!)

When I did my own SAML in Go at my last job, I wrote my own soup-to-nuts XML, including DSIG canonicalization. It was annoying, but you can't get SAML wrong; you need to be able to predict what every component in the system is going to do. What makes this worse is that most SAML systems defer the cryptographic stuff to libxml/xmlsec; for obvious reasons, some of them sane, nobody wants to implement DSIG themselves. But then they interpret the signed message in a general-purpose XML library, and now you have competing XMLs in a single system. It's bananas.

In the esoterica of DSIG, there are even worse problems. DSIG is a very flexible format; it has has pluggable canonicalizations, happily supports multiple signed subtrees under different keys in the same parent message, and supports both detached and embedded signatures. There's a famous, respawning DSIG bug where you can trick validators into verifying a signature on one subtree but passing on a different subtree to the calling application. A researcher at Duo Security tricked SAML implementations by embedding comments in text fields, which, after canonicalization, tricked parsers into returning altered text fields. Technically, SAML responses are supposed to be strictly schema-validated, so you can't sneak arbitrary subtrees into the middle of a SAML response --- but there's at least one extension field in a SAML message that has an any-typed free-form tag.

It's also worth remembering that SAML's problem domain is difficult even setting the XML part of this aside. It's pretty common to find very bad authorization vulnerabilities in multitenant SAML RPs, because you have to check mesaages carefully beyond their signatures. Many of the high-level OAuth2 protocol issues port over to SAML as well. It's tricky to audit!

People stick up for SAML because what it does (facilitating centralized SSO) is extremely valuable; it's probably more valuable than the bugs are harmful, as long as you're using well-known tools that people have already been incentivized to scrape for SAML vulnerabilities. If I was adding SAML support to something new, I'd consider beyond all the standard SAML checks also rejecting any message that doesn't have the same shape as what Okta, Onelogin, Google, or Shib generates.

But if you have the option, I'd also say avoid SAML.
And a peanut is neither a pea nor a nut.
Please don't take this personnaly as I'm not targeting you specifically with my comment: but I don't know how I feel about wealthy foreigners coming to a place, buy property and extract rent from locals, who may not even be able to afford ownership in the first place.
I don’t think fingerprinting and comparing against a database of cryptographic hashes of CSAM is “illegal searches”.
SpaceX does produce an engine in 48 hours. This is nonsense. If anything their goal is to have a production line that finishes an engine every 48 hours. The engine from start to finish still takes month to produce.

ULA would not have wanted to buy the engine from its competitor SpaceX. And the military would not want that either, as a collapse of SpaceX would have meant both military providers being unable to launch, thus violating redundant access to space requirements.
If they told that, people would (try to) remove it. The whole point is that you can't know which (if any) of the hundreds of thousands of files on your device it is. So they aren't telling. Could be they have (or at least claim to have) written their system so it chooses files at random; I think that's what I would do (or claim to have done).
Yes.

https://twitter.com/castro4congress/status/11585766801827184...
sadly GitHub's version of org-mode parser haven't been updated for a while, there is a fair amount of very annoying issues :( https://github.com/novoid/github-orgmode-tests
firefox needs a better support forum
i like firefox a lot, more philosophically .. independent, open source, rust

anyway, a while ago, firefox starting crashing on me like crazy

and tried to get support from there https://support.mozilla.org/en-US/questions/

but after a while i just gave up, they need to setup a discourse forum or something, some place more interactive
How socially complex are the most advanced fish?
> Wars are used to force citizens to give up their labour for free to the state.

Wet streets don't cause rain, and wars aren't started in order to collect taxes. Wars are started to pursue particular goals, many of which I have listed in my prior post.

> The US does and will go to war if it feels its dollar/oil hedgemony is threatened.

This is an interesting, and oft-repeated theory, that, unfortunately does not survive contact with history. It's not a strong explanation for the majority of the conflicts that the US has been involved in. It is not remotely an explanation for the majority of the conflicts that other countries are involved in.

Which dollar/oil hegemony is Russia trying to maintain in Crimea? China in Tibet? USSR in Afghanistan? Argentina in the Falklands? Sudan in Darfur? Israel in Lebanon? Saudi Arabia in Yemen? ISIS in Syria?

Never mind that BTC doesn't do a thing about the dependency of industrialized sociaties on oil, minerals, fresh water, and other limited material resources.
About half the Epic (electronic medical records) terminals I see have the password posted on the front of the terminal. Often in a nice, professional PTouch label (so presumably by IT).
The problem is that while we're all pretty sure there are more grave SAML vulnerabilities, they're not super easy to find. You can't just read this blog post and then go attack a SAML system; finding SAML bugs is actual research.
So I discovered recently that if you set up git-auto-commit mode with an org directory tree, then configure it to auto-push to gitlab on add/change, I get nicely formatted documents for free.

Later on I can convert them via pandoc to docx or markdown so they can end up in sharepoint/confluence and I only minimally have to touch either of those horror shows.

I was writing some docs yesterday, and my colleague who's always bagging me about my use of nothing but emacs and terminals complimented how nice it looked rendered in gitlab.
First - 'Doing A Good Job' is not 'Maximal Effort'.

Second - professionals have incredible power and market wages are what they are. Most corporations do not profit in some exceptionally linear way beyond employees.

The 'Giant Lie' is that corporations are some magical entities that collect magic surpluses and shareholders and owners run off or private jets.

The vast majority of companies are not hugely profitable, and most small and mid-sized one's are not. Especially not in some disproportionately 'non linear' way.

Stock prices may be crazy - and those who trade stocks may or may not be making bank - but that's a very odd historical situation we have where shares are trading at absurd levesl relative to profits. That's a market 'dysfunction that may or may not be around for a while that some people managed to make money from, like Bitcoin, it's just a Ponzi-ish thing that has happened.

Corporations are not drowning in profits, and White Collar employees soak up the vast majority of corporate spending.

FYI everything I'm saying applies to mostly white collar professionals, for unskilled labour it's a different story.
You seriously overestimate the intelligence of the general population.

I would wager a sizeable percentage of people don’t know that dairy milk comes out of a tit.
Funny enough, it's not nut butter either, because peanuts are not nuts. And for that matter, they're not even peas!
I’d argue that the problem of minors declared sex offenders for nude pictures has reached a critical mass that scares me. At this point, sex offenders of truly vile things can hide by saying that they are on a sex offender registry because of underage selfies. And I think most people will believe them.
In addition, certain classes of attack will cause the attacker's stake to be automatically forfeit via slashing. So in that case not only is the wealth of the attacker obliterated, but their stake itself is destroyed and the network can continue onward as if their stake never existed.

In such a situation, the price effect of the negative news from the attack would be partially canceled out by the jarring reduction in ETH supply.
I miss writing JS like this. I was complaining to my manager earlier how I get frustrated by react sometimes.
Last time I was in the hospital, I asked my nurse if she liked her job. We got to talking and she mentioned she previously worked as a barkeep. I said, "Well, at least you're making better money now." She said, "Actually, I made more money as a barkeep." I was completely shocked.

Does this mean we need to increase health care costs? Of course not. We need to get rid of the waste, same as with university tuition and adjunct professors not making much.
What about coconut milk? That has been called milk for more than a century. Should we start calling it coconut broth instead?

Restricting the use of the word milk to mammal products is silly imo. From a consumer standpoint it makes sense to call milk alternatives <substitute> milk (e.g., soy milk, oat milk, etc.) to make it clear to the consumer that they can use it as an alternative to regular cow milk.
Gonna get downvoted for this, I maybe the few that supports this and I hope they catch these child exploiters by the boat load and save 1000s of kids from traffickers and jail their asses
Sad, Big Pharma strikes again.
I don't think being ignorant of something widely known counts as being misled.
I don't believe they could - the protocol has some mitigations against this including an inactivity/censorship fee that applies equally to every staker.
Sounds like q-sound. There was a Rodger Waters album mastered with it (Amused to Death) that has a dog barking way outside the normal sound stage.
Silly question, but: what have you done? Have you stopped flying & driving a car? Do you not use iPhone and eat bananas to minimize global transport emissions? What’s your energy usage compared to 1, 5, 10 years ago?

The “climate industry” is full of people loudly proclaiming they’re holier than thou, but realistically there are few serious global solution except basically going back to pre-industrial world. Thanks but no thanks, I’d rather bet on technological breakthroughs in the next few decades.
Protecting an initial screwup is fine, protecting the coverup is what I take issue with.
Yeesh. Please don’t complain about your poorly-researched laundry list of preferences not being upvoted. Come on, nobody cares what editor you yourself do or don’t use.
(for a reference to "appropriate xkcd picture with blinking Hitler inserted" - https://xkcd.com/528/ )
"Your iphone is not Apple's device". Well, is it not ? When you "jailbreak" it, who has the key of the cage ? How many network exchange does your phone with Apple do every day, every hour, every second ?
The database is shipped in the iOS image.
Oh look a 6 hour old account splitting hairs and playing semantic games.

I have real work to do.
Expensive though, at least in Germany it's twice the price of normal milk and they don't even have to hold cows. I understand it's also a smaller market but still, I wonder if this is really warranted. It also won't help less determined consumers switch away from dairy products, though luckily there are knock-off brands that also taste nearly the same.
Buying political parties?
I do run Emacs in GUI mode and it's embarrassingly slow due to various factors I gradually managed to pinpoint:

1. 5K retina display (other Mac owners seem to share the experience)

2. A font with a lot of graphemes (those without emoji seem to render faster)

3. The synchronous nature of LSP; I still don't get it why LSP can't work asynchronously in Emacs -- it does in VIM.

Hence me asking about terminal mode where it also works rather confusingly to me (I mean the colors).

> (macOS + inside terminal) isn't a common workflow for emacs contributors

As a guy who worked on OSS before -- and wants to do it again -- I am never feeling entitled to other people's work. I just wonder why those scenarios are supported in the first place (if no contributors are interested in making them work well).

> as a beginner to an ecosystem, if you are going to be opinioniated about having an unusual workflow, you are always going to run into problems

Fair enough and I don't think it's a bitter pill at all, I appreciate the feedback. But again, I am wondering why the supposedly first-class option (GUI) is also having problems. :(

> 2. people who want that workflow who care about having 24 bit colors didn't bother to file a bug report (did you?)

I wouldn't even know where to begin. The whole community and ecosystem seem extremely foreign to me and I never even got as far as to find a bug report template (admittedly I didn't try very hard). There's just something... alienating about this community, especially Emacs devs. Maybe I am wrong, I hope I am wrong but, just an accumulated feeling.

In any case, the reason I am getting a bit ticked off is that Emacs is supposedly hugely popular. I'd expect a 5K screen and some richer fonts to not trip it but perhaps you're right that macOS isn't a focus.
You can shield people from a mistake without also shielding them from a coverup.
Fortunately, it seems that matching is split between client-side and server-side, so extraction of the database from the device will not easily enable generation of matching images.

https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...
For the narrow formal definition in your link, that being an assertion without evidence, then yes, it's a fallacy.

In the colloquial language we are using here, there is absolutely evidence, tons of it, that this will take the same downward trend of previous infractions.
Big correction: it will be the other kids’ parent who will decide for your kid. Apple will give your children’s picture to the other kid’s parents.

That’s terrifying.
That sounds broken. :(

Good luck getting it fixed, if you are still trying. A basic profiler-start, type, profiler-stop, profiler-report can probably pay the blame easily.
> they are known to be able to see a human move a mile away

I don't doubt that Giraffes have good eyesight, but being able to see a human move a mile away doesn't seem like a particularly difficult feat. A human could also do that with a clear line of sight.
As a student of a former journalist and journalist myself (mainly photojournalism for the independent student paper, but I wrote for the high school paper), I don't agree with the sentiment that they are dissimilar, specifically because of their mutual emphasis on clarity and efficiency. Can the reader still understand the contribution from the abstract or first sentence of every paragraph? What if they just skimmed over the figures and captions? Does the title reflect the content of the work? I have this same attitude as a photojournalist: could a reader understand the event if they were to look at an uncaptioned image?
That's just wild to me. If I held up a card with a decimal number on it and asked you to remove the X least significant digits, would you have to look up which way to shift them?
Steampunk, Harry potter, medicinal mushrooms, software performance and speed, uncompetition.
Most people use their country's embassy approximately never.

Where they do need to use it (such as registering a birth) it's usually replacing use of a different government office, had they not lived abroad.