skysight-inc/HackerNews huggingface dataset:
It's full of hatred. I can understand being upset, but being so frustrated that you revel in the deaths of innocent people? These people are victims learning the most painful and lat lesson of their lives. Saying that the trash has been taken out when someone dies (yes, a quote form that article), is lacking humanity.
I think the article does a disservice to itself by casually adding in things like "SQL injection" and a few other issues that are really not unique to GraphQL. A more concise article that only touches on the issues that are GraphQL specific would be welcome.

Beyond that, I find the authorization sections unconvincing. As someone who's spent quite a bit of time thinking about authorization in GraphQL APIs, I think that the only viable option for authorization in GraphQL is node level authorization, especially if using the relay convention. You're forced to write every authorization check as a function of the relationship between the user and the subject at hand and it avoids accidentally leaking information (which is also issue with REST APIs that do authorization at the controller level, à la https://news.ycombinator.com/item?id=25728175).
I was just talking to an amateur pilot the other day and somehow this general topic came up.

The FAA works on an honor system. If they chased people around looking for violations and fining people (which apparently they used to do) then people would try to circumvent detection, or avoid declaring an emergency and end up creating a bigger one.

They need transparency for things to improve, so they expect you to self report and they bring the hammer down if you don’t by hitting you where it hurts: right in the flight certifications.

From what I’m seeing it looks like Virgin didn’t self report before the news folks got wind and the FAA heard it through the grapevine, so they’ll get a big fat wake up call, and if that doesn’t get their attention then things will get much worse for them. Or, this is just SOP and an angle that sells ads and so it’s being hyped while nothing particularly egregious is happening from the FAA’s point of view.
It says "over". Well it does now anyway.
A lot of ports, especially from Japan, only do menus and graphics in new/general-purpose engines and use a native library with their old codebases for logic.

I can imagine that this was done here, Godot isn't really ready for a game like this IMO - it would have taken a huge amount of work.
"Flattening the curve" is about not overwhleming hospital resources, to avoid non-COVID avoidable deaths spiking.
.02% of the entire US population is less than 66k.
> The guy is, at minimum, a total fucking creep

This is exactly the kind of commentary I was talking about. The guy spots a serious problem 30+ years ahead of time, devotes his entire life to fighting it, while making tools that every developer uses every day, and all you have to say is, "He said some mean things, so let's reduce his entire existence to that". Thank God this mentality wasn't around during the second world war. We'd have stuck with Neville Chamberlain because he was such a nice guy compared to that drunken misogynist Churchill fellow.
https://archive.is/sdzvp
If you shame people, they dig in their heels.

If you care about stopping the pandemic, you need to create an environment in which someone can safely stop believing their falsehoods.

You actually have to convince people, regardless of whether or not they deserve your effort in convincing them.
What seems to missing from this discussion is fundamental understanding of the mediums used for communication and why you might choose one of the other. We all know about them and yet skirt around the obvious issues with articles like this.

Email generally gets through way faster than a mail letter but is often thought of as being similar. (E)mail gets the text through and no more in general although it can carry pictures and other media. (E)mail is store and forward - it will tolerate delays and eventually arrive.

A phone call/direct conversation is immediate and generally requires more setup cost in time and effort. If the other end is unavailable it wont work at all. Telephone calls may suffer from lag and drop outs. Vocal comms do allow subtle extra information without needing crass emojis etc. Vocal comms are much faster.

There are other factors such as delaying tactics and the like. For example if your work stack is too much, you can simply ignore emails for a while but an incoming call has to be answered or not at that point in time. To be fair, most people understand that non answer means try again later even if you know they could have answered at that time.

Emails can be sat on. Emails can also be fibbed about: "Sorry, my spam filter must have eaten it" or "Your GMail is not sending to my Hotmail".

Email is also often treated as IM. The thing about IM is it is instant by design and is supposed to be a two way chat. smtp isn't.

On balance: for me, I prefer telephony or direct contact than email unless it is impractical or I need a record - even then I still can record a conversation.
Our Shared Common Weaknesses
Thanks for the response. As SquareWheel also commented, the lack of punctuation seems disinterested or dismissive to me. I suppose my criticism of lack of punctuation is not different than others criticism of its inclusion.
OK, this entire article was just completely bizarre IMO:

1. A bunch of the points at the top had to do with writing your own GraphQL parser. I don't disagree this is a complicated task, or that some libraries have implementation bugs, but GraphQL has certainly been around long enough that there are some hugely popular, battle-tested server implementations available. I'm not arguing those implementations are 100% bug-free, but they certainly have tons of eyes on them and are in widespread active development.

2. Many of the bugs have nothing to do with GraphQL. SQL injection or URL path injection are possible everywhere (hint, use a library like slonik that makes it easy to write SQL that looks like string concatenation but actually makes it virtually impossible to have a SQL injection bug).

3. Many of the other bugs are either standard IDOR-type bugs, again possible in any framework, or that arise from a potentially recursive type definition. Yes, if you have different permissions applied at different levels of a recursive hierarchy, you need to be very careful about how those permissions are applied.

4. In contrast to this article, I find GraphQL to be a dream from a security perspective precisely because it is strongly typed. E.g. I define many custom scalar types that I use for inputs that guarantee that by the time I see a value that it is already validated so it can't cause an injection attack. For example, suppose you know all your identifiers are alphanumeric. Just define an AlphaNumericString custom scalar type and you know then that many types of injection attacks would be impossible.
Broken analogy.
So central planning? “Regulations state that all manufacturers must maintain 30 days inventory of critical supplies”.

That would just make things worse.
And a resilient electricity supply system, as Texas discovered.
Interactive Cellular Landscapes: Protein Synthesis
I, for one, want to protect my Nation against terrorists.
Ah yes, the solution to crime in the country with the highest incarceration rate, is more incarceration!
I might be sentimental in thinking that you shouldn't kick someone when they're down. Dying for your mistakes is one way to be "down", and mocking someone is a great way of "kicking" them.

Goes beyond tribalism.
"TCP implementations should follow a general principle of robustness: be conservative in what you do, be liberal in what you accept from others."

https://datatracker.ietf.org/doc/html/rfc761
> Humans belong on Earth. There is nothing out there besides a nice view and a whole lot of empty space.

Well, disagree. There's a lot out there, almost everything in fact.
You can't guess the 2FA code. It changes faster than you could ever attempt to test all combinations.
The guy who wrote that book has a good blog too

https://www.robinwieruch.de/
A lot more free than say Germany in the 1930s? Personally, I think we underestimate the sheer size, scope and momentum behind the machine that is the state.
My experience back in 2018 was similar. I wanted to do some fairly simple 2D things and it was quite a lot of hassle. I’m sure the issues I hit are fixed now, but at the time it was frustrating.

With that said, I’m still happy to have contributed a little bit of code to gdnative. Nothing exciting, just some quality of life stuff I wanted at the time (a few variadic template wrapper functions around the C api to avoid having to manually construct godot list objects of parameters). Last I checked it was still in use, although moved to a different file.
I can't say that I use twitter more, maybe I don't know how to use it or curate who I subscribe to. There's definitely people, specially here on HN who regularly claim it's great once you subscribe to the right people and tags, but to me it seems I'm constantly fighting the algorithms since they show me stuff I don't wanna see.
What about converting the images to wavelength frequencies? That would expose identification in multiple domains? Maybe even a meta hash based on that and the gradient.
You do know that's a choice you make, right?
It's somewhat curious that a google exact search for "photodna.dll" only pulls up seven results.

This seemed to be the most interesting one:

http://www.herdprotect.com/knowledgebase_signer.aspx?serial=...
Life is one big status game
So, why is IoT security like this?

Is it just people who aren't used to deploying to a maliciously hostile environment suddenly having to deal with that?

I've heard that hardware-side pay tends to be lower than software-side, so is it hardware companies not wanting to pay for experienced software people?

Is it actually not any worse than typical software, but just more noticeable because meatspace?
Long Covid: Much More Than You Wanted to Know
Off topic, but is your username a reference to the overton window?
The death is of their own creation. They literally chose to die, and moreover, they chose to take actions that would harm other people. How could I have sympathy for someone who actively chooses to harm others and succumbs to their own demise?
Most elementary to high school in Japan is really unnecessary repressive. It's closed society.
JIT makes much less sense when overnight interest rates are 0%. The cost of carrying too much inventory is negligible.
Just FYI! You want P100, not N95. People in ERs use P100 with a surgical mask ontop. ALSO! 3M is the only trusted supplier (it is hard to make P100s). Why did n95 get all the hype??

https://www.3m.com/3M/en_US/p/d/v000057510/
A YouTube comment described it best:
"Someone spent a ton of time to make sure this game is designed and plays great, and then spent just as much time making it look like it doesn't."
When the youngest generation has not known a period when there was NOT a war, something else needs to happen.
Everyone in the country consumes the same media, but that media is not produced by everyone. Most mass media is developed by urbanites in large urban centers (LA and NYC). They have a very sheltered lifestyle that leads to anything outside of it looking alien and absurd.

Folks in rural and suburban areas having lawns and needing to spend an hour a week on lawncare is already infinitely more time than folk in urban centers spend on such tasks. To the urbanite, what the rest of the country considers "lawn obsessed" is only a difference of degree, not kind. For the media producer--who, again, is almost universally an urbanite--to communicate this feeling to the rest of the country, they have to exaggerate the effort spent.
But it's okay if Apple does it.
We welcome your contributions
https://github.com/SteamDatabase/FileDetectionRuleSets

(it might be a false positive; or just as likely there is some utility app or launcher tucked in with it that was written in XNA, in which case it's a match for both engines -- that has happened for a lot of titles)
IIRC, you can log in with external clients, but those clients need to support the embedded google login screen which can ask for 2FA / anything else. If you want to log in with just an email and password then you have to change that setting.
1. someone holding up a racist sign at a protest doesn't mean they're going to go around committing violence against minorities. You're going to have a hard time convincing a judge that falls under "self defense".

2. You'd be fine if republicans commit "self defense" by punching ANTIFA and BLM activists, right?
Thats invisible stuff in the background. Yes it matters a lot, but the point still stands. Reddit struck a goldmine with their original UI, but that goldmine cant really be monetized to the extent their investors want, so they are trying their best to fix what isnt broken and failing.
NeverTellMeTheOdds.exe
> AI has occasionally (rarely?) shown great success in solving problems without needing domain experts. See AlphaGo.

Games are always orders of magnitudes easier then analyzing reality. They are highly constrained to the narrow domain and space of possibilities. Reality doesn't. There is work on understanding physical laws by the AI but it's very long path and they are much less successful than their artificial reality colleagues.
NASA’s Perseverance Rover Successfully Cores Its First Rock
Godot is severely undercounted because of its export format -- many Godot games are just a single EXE! There are actually a few hundred Godot games we could detect (the ones exported in a particular format), but not in the particular criteria for this report.

https://www.gamedatacrunch.com/steam/list/all/reviews_total/...
John McAfee discussing getting his security clearance when he worked for Lockheed-Martin:
"They asked me very revealing questions.... Had I ever taken drugs? Yes. What kinds? Almost every kind. Uh, how much? A lot. Have you ever sold drugs? Yes. So I assumed I would never get the clearance but I did and it came in very quickly."

(clearly decades ago, and he's less than reliable, but fun nonetheless!)
You don't have to. I think there's a difference between that and chasing down posts on Facebook so you can gloat over their death.
they're the same place (literally, same demographics and that), HN just pushes people to be passive-aggressive instead of regular aggressive because of the rules on tone, even though the spirit of the rules is to be inquisitive rather than abrasive.
What about deaths due to smoking or obesity? Should we ban bacon and cigarettes?

"Smoking is the leading cause of preventable death. Worldwide, tobacco use causes more than 7 million deaths per year. If the pattern of smoking all over the globe doesn't change, more than 8 million people a year will die from diseases related to tobacco use by 2030.Mar. 23, 2020"

"Obesity has reached epidemic proportions globally, with at least 2.8 million people dying each year as a result of being overweight or obese. Once associated with high-income countries, obesity is now also prevalent in low- and middle-income countries.Jun. 9, 2021"
What sort of better algos?
It’s a pretty well documented/discussed aspect of text-based digital communication. Kind of like how text written in all caps is interpreted as “shouting”.

I’m honestly shocked there are HN users who are unaware of the tone implications.

Period. Full Stop. Point. Whatever It’s Called, It’s Going Out of Style (2016): https://www.nytimes.com/2016/06/10/world/europe/period-full-...

The Period Is Pissed (2013): https://newrepublic.com/article/115726/period-our-simplest-p...

Stop. Using. Periods. Period. (2016): https://www.washingtonpost.com/news/wonk/wp/2016/06/13/stop-...

The Secret Emotional Lives of 5 Punctuation Marks (2014): https://www.mentalfloss.com/article/59060/secret-emotional-l...

Why Does Using a Period in a Text Message Make You Sound Angry or Insincere? (2016): https://theconversation.com/why-does-using-a-period-in-a-tex...

Yes. A Study Shows that Ending Your Texts with a Period Makes You Sound Like an Asshole (2016): https://www.mic.com/articles/130042/ending-your-texts-with-a...
I have been looking for a simple Windows screen recording app over the last few months. This app let me record my screen with audio straight to webm without needing any extra installs or mucking around with config settings.

Thanks for sharing.
I came across this too. Really nice idea.
If you want companies to hold more inventory (complete or not), a good first move would be to stop taxing them for it. After doing that, we could look at whether additional regulatory measures were required.

If you want them to in-house more production, allow all of them to write-off 100% of capital equipment purchases in the first year.
A political group clearly stating their opinions is a different thing than people projecting meaning which was not intended.
I'm taking this app maker's divorce announcement with a grain of salt, their wording suggests they want to get back together soon as Apple get a nicer garden gate ornament.
Texas schools are surveilling students online, often without their knowledge
Not a single AI model is better, but what about the consensus of the 36 AI models? Ensembling different models is a common technique to improve machine learning models, did they test that?
There are several industries built around hacking human minds: advertising, pay-to-win mobile games, political consulting, user engagement services like Facebook, and of course literature.
List of godot games on steam: https://steamcommunity.com/app/404790/discussions/0/41244879...
DARPA grant to work on sensing and stimulating the brain noninvasively [video]
IP has never been a scare resource in one way of thinking (it's always been way cheaper to copy than pay the right holder), but we recognize that we need to incentive the creation of new IP
Covid was just the finger on the trigger for the whole world's loaded footgun. Excessive interdependency and each new generation of the managerial class keeping things lean to look good on paper has landed everything up shit creek. Idle hands were justifying paychecks.

I've seen companies go from doing everything in house to outsourcing everything. It was ugly before covid, but now it might be sinking the ship. They used to retain the necessary talent, keep a stock of necessary $THING, and get things done on time and on budget. Now the MBA's see a way to cut costs on paper but it all ends up late and over budget. On to the next ship for them after this top heavy piece of shit sinks.

I'm sure there's a careful business calculus for not bringing people up from the bottom but goddamnit I used to see results, and happier coworkers.
I recommend the ICEBreaker if you're starting out as it's meant to be a learning platform.

https://www.crowdsupply.com/1bitsquared/icebreaker-fpga

There's a bunch of FPGA boards that are reasonably cheap and powerful.

https://github.com/kelu124/awesome-latticeFPGAs

The ICE Sugar boards look pretty sweet too.

https://muselab-tech.aliexpress.com/store/5940159
I sent an email about a domain I wanted for $100, they got back to me with $65k, I used a different domain. But definitely worth a try.
Landlines are even easier to geolocate...
I really struggle to believe that people in Georgia with a lawn are spending 5 hours a week maintaining it. That's basically an entire weekend day. Why can't you mulch it, or use the clipping bag?

My grass grows quickly in Spring and Fall, but it takes about 20 minutes to mow it. I don't usually bother to pick up the clippings unless it's really long.
(I’m not downvoting you.)

If you read some of the emails that were offensive, it’s understandable why the sender thought they were ok.

I think the problem is that formal is taken for intimidating, and that’s not OK for us to go down that road as a society. This email, for example:

> We acknowledge that our request has a very short timeline and certainly appreciate that you are very busy.

That seems like a very courteous and respectful way to open or close an email to someone when you actually are under pressure and need a response despite the circumstances. I can see why/how the recipient could have been rankled to receive this email, but it’s only passive aggressive if you are expecting it to be, are overly sensitive, or have self esteem issues.

The thing is, sometimes people are in a crunch and do need something from you. That’s not ideal, but it shouldn’t be considered actually outright hostile. IMHO it’s important that it be OK to convey a sense of urgency if you couch your statements with respect and understanding.
Physical activity and the risk of severe Covid-19 illness and mortality
The covid vaccines do not prevent transmission, and people who are unvaccinated are not intentionally infecting others with covid. Taking the vaccine is also not the same as not driving sober because there are real fatal risks to taking the vaccine. Also, the main risk of death from covid is for people that do have preventable personal illnesses, or serious health issues. The average person dying from covid in the US has 4 comorbidity and only 5% of deaths do not have comorbidity [0].

So, tell me, why should a healthy, young person, who already had covid and went through it no problem, take a vaccine that could literally kill them? Because vaccine passports as introduced in some places will majorly mess up the lives of many people.

[0] https://www.cdc.gov/nchs/nvss/vsrr/covid_weekly/index.htm#Co...
If everyone accepts the statistics, the argument usually moves to the counter-factuals.
Wikipedia=fake news
You can't just log in via username/password with IMAP anymore. The email client either has to support the google login window or you have to go in to your account and generate a program specific access token for it.
Do you think I was downvoted more by people who disagree with my actual sentiment, or people who couldn’t see I was being sarcastic?
Apple’s AR headset will leave a lot of the hard work to the iPhone
then it will remain part of the UK

the nationalists have absolutely no leverage over the UK

if you thought the Brexit negotiations were one sided: you've seen nothing yet
HAHHAHAHA
$350 Lego Set was Missing Pieces, brilliant company response
The difference is that it doesn't matter if the behavior is justified.

The only thing that matters is getting them vaccinated. Even if you have to forgive them, even if you have to give them sympathy they don't deserve.

Shaming doesn't work when the half population is unvaccinated. You actually have to convince people, even if they don't deserve the effort.

Because if you don't get them vaccinated, many people will die.
Thanks for the Rec
It's base pay, more or less.

> How are "wages" defined by the OEWS survey?

> The following are excluded from the collection of OEWS wage data:

> Non-production bonuses

> Stock bonuses

> Year-end bonuses

https://www.bls.gov/oes/oes_ques.htm
It's incredible that it functions as well as it does considering it's on Unity.
Please no. The last thing we need is another bunch of half-baked regulations passed because a bunch of people who don't know what they're talking about demanded "something must be done!" in response to some temporary crisis. COVID will subside eventually, dysfunctional regulations have much greater staying power.
Almost nothing relevant to humans who live about 80 years and evolved on Earth. If humans lived millions of years and there were other life supporting planets then space travel might be interesting...assuming one could even navigate between star systems.

Again and again I see the pattern of real world tech aspirations being driven by science fiction fantasy. The thing is though that real world tech is constrained by reality while fiction is not.

No, you will not be riding in driverless cars on mars in 2100.