skysight-inc/HackerNews huggingface dataset:
Apple's patch only partially addressed the flaw as it can still be exploited by changing the protocol used to execute the embedded commands from file:// to FiLe://

At some point some manager has to look at code like that and fire the developer: "You're too FUCKING STUPID to work here!!!".

Let the downvotes commence. But really, there's this eternal wailing and gnashing of teeth about hiring the right people. But then what? If they can't implement case-insensitive string checks then what, exactly, did they learn in 4 years of college?
Yes, here in Australia we have other uses for north-western land that's primarily used for raising cattle. We dig it up for ore.
Take a look at FreeNAS. It is FreeBSD, which is self-recommending for things like NAS, built on ZFS (all the nice parts of a modern file system like snapshots, easy backup, etc.) and has a nice management GUI.

https://www.freenas.org/

(I also don't recommend exposing your NAS directly to the internet. They frequently make doing so attractive with the ability to run addons like file sharing or "private cloud" services. If you must, run them in a VM on the NAS and isolate the VM from everything else on your network. And keep up with patches.)
It solves the problem of being able to teach you about some interesting mathematical objects and algorithms for enumerating them.
Very few of us can read Chinese (which explains why no one treats China like a country made of people), but I expect that in a country of a billion people many people have all kinds of rude opinions for and against the government expressed all over the internet.
Brazil is the large country in the NE of South America.
Apple won't allow fortnight back until verdict is final and nonappealable
It would not drain your phone battery. The speaker is almost always going to be plugged in anyways. And stepping into another room to take a call while others are listening to music isn't all that uncommon.
Backblaze has a bunch of sheisty rules put in place because they're afraid of supporting data hoarders, and want to minimize the amount of space users take as part of their 'unlimited' plan, so I am not surprised.
There's also talks by Cal Newport and Michael Easter on this subject, you can find them on YouTube.
> We have information that Joe failed to deliver his project in language X. Given that information, there is no reason to believe that rewriting the tool in language Y is going to be successful

Correct, which is why further analysis must be done. It seems you disagree with the analysis of the Rome Tools team?
This is a talking point for the environmental left, but it's not really true. Ranchers don't get cash subsidies (most other crops do). Farmland, including pastureland, is generally taxed at a lower rate than other lands, but that's because we usually want to disincentivize conversion to other uses. Likewise, sometimes there are NRCS grants available, but those are for things like wetland investments or fallowing ground. Public land grazing rates are lower than what you'd typically pay for private lands, but public lands generally have very low value/productivity with huge tracts of unfenced ground requiring relatively large investments to retrieve and drive cattle, and with a much higher mortality rates. Even if public land grazing were marginally less expensive, only a very small portion of cattle are fed on public lands -- I think it's something less than 2%. People like to distort the meaning of "subsidies," to cast disfavored industries in a negative light, but cattle are no more subsidized than housing or roads or cars or computers or any of the other things that make life better.
Skin-Whitening Products Are Still Big Business in Asia
Google describes the strict site isolation as "Site Isolation is a large change to Chrome's architecture that limits each renderer process to documents from a single site" And they developed that largely in response to Spectre.

What the paper did was related to the site isolation, and not Spectre, but there was a lineage there...Spectre -> Site Isolation -> This Side Channel attack still works.

They showed that while Google said "single site", they really meant "same tld, but hostnames can differ" and "if you have control over a page on b.whatever.com, you can artificially gain side-channel visibility to c.whatever.com" via window.open() or iframes and some memory pressure.

Seems fairly significant given that many sites have user generated content on a.example.com and more important/sensitive stuff on b.example.com.
Curious that this could have come directly from G.K. Chesterton.
“Everyone knows that debugging is twice as hard as writing a program in the first place. So if you're as clever as you can be when you write it, how will you ever debug it?”

— Brian Kernighan, The Elements of Programming Style

(fortunately the interview itself is not so trite as the headline)
This is not a jab to you or your team but the title makes is sound as if you believed Rust guarantees business success?

(The link is dead btw, yields an empty screen. I'd be curious to read the article.)
so the point of decentralization pushes is for the censorship resistance. if helium organization went away today, there would still be 192,000 nodes that still get to function and perpetuate the network.

so basically, nobody cares about that particular area of centralization and it allows for vetted hardware that meets some additional standards to come onto the network (at one point they didn't gatekeep and allowed any hardware).

I think this role can go away though.
Sorry what is the conflict of interest in offering the most accurate information they can?

Even discarding whether we drill into the issues with the relatively small body of ivermectin studies, for or against. There isn’t anything approaching a consensus there.

On the other hand what does have a consensus is that the vaccines work.

Recommending the best possible action is pretty clear and obvious. Using ivermectin as a prophylactic isn’t close to settled and even if it did have a positive result that doesn’t necessarily make it as effective as the vaccines. Nor is it as reasonable a treatment regimen.

As far as actually treating active/severe COVID cases we do have verifiable and working treatment mechanisms. Let’s just actually use what we know works. Makes more sense for everyone.

I’m all for having more, and better studies don on ivermectin. But this is absurd.

The loss of authority with the public is certainly about politics. But it is very obviously a political action being taken upon them, rather than one they’ve put out themselves. They have been politicized, as have many things in recent history for outside political gain.

I have some pretty serious issues with the FDA around many aspects of policy but unless you actually believe (and maybe you do I don’t know) that the vaccines are harmful ( in which case nobody can dissuade you no matter what), then the current advice is pretty obvious and clear cut.

Ideally ivermectin would show a clinical benefit because the best ways we have to treat an active/severe case are very expensive (Remdesivir/monoclonal antibodies) are unlikely to trickle out to most of the world.
Well, in that case there’s no reason to bother with lab grown meat in the first place.
He is vaccinated. He's been vaccinated since April. Breakthrough infections are a thing. He's also concerned about recent data from Israel about waning efficacy. He'd get a booster shot today if he could get it.

Also thank you for what I presume is you insuinuating by putting "friend of yours" in quotes that you think I'm talking about myself. I've been vaccinated since April and I have been a lot more careful about this virus than at least probably 90% of the people out there, at least in the US. I still wear masks outside the house and avoid going indoors very often (I didn't do it at all until I was vaccinated).

Hell, I wore masks on hiking trails outdoors while holding my breath when walking past others on the trail back in 2020, which was probably overkill in retrospect. I also only had food delivered, never even going through the drive thru, and didn't order anything that couldn't be heated in the microwave for 3 minutes to try to kill the virus since it was unclear whether it transmitted via surfaces back then (so no sushi, sandwiches, salads, ice cream, iced coffee, etc).

Personally I wouldn't try to hunt down some of these alternative drugs, which I'm pretty skeptical of, but there seems to have been some mixed data on this one and I can at least understand why someone might want to give it a shot in reasonable and proven to be safe doses, especially if they have no choice but to be surrounded by it all day long (I work from home, my risk at work is nonexistent).
Really weird humblebrag with no value.
Yes, he's been vaccinated since April, around the same time I got it.
Gig Buddy app for Music Enthusiasts 1
Hey guys, if you love live music events and music in general , we are looking for beta tester for our gig/event buddy app launching 24th September. If youre interested please sign up to our waitlist and an invite code will be emailed to you.
I setup mine to automatically restart every night and it fixed a lot of issues.
I think the idea is to diversify revenue and not be dependent on that income source long term.
500 BAT have been deposited into your account.
I'm totally ignorant about the macOS installing issue, shouldn't the binaries for mac suffice?

https://www.python.org/downloads/release/python-397/
Google Apps: erroneous notifications that payment information is invalid
Hopefully the banner that's now appeared at the top "This post is a trending issue." means they'll actually look into this.
It's late for me to edit this, but I want to add that I think this is why so many young people seem to be struggling to find themselves. We live in a world of constant distraction and you will only find yourself in the quiet. I didn't struggle with this, but I had that quiet being homeschooled in the woods with no TV and Internet too shitty for gaming. That's when I discovered I loved computer programming, and I never looked back. I don't want to imply that finding yourself is just about work, but it's probably the biggest part given how much time we spend doing it. My wife on the other hand is constantly inundated with distraction and she is still struggling to find herself. I strongly feel that's part of the problem.
We’re mad that the Bidens profited from coverups but assume the Trumps haven’t ever benefited from the same type of coverup? Do people really think Trump became a billionaire by just being a sweet person? Do people really think that Trump hasn’t ever used his influence to squash a story or report that he didn’t like?
For those unaware: Aaron Patterson, aka tenderlove, is an influential and longstanding personality in the ruby community who’s made many significant contributions to Ruby and Ruby on Rails over the years.

He’s also a fantastic writer with a quirky style, highly recommend perusing his technical writing: http://tenderlovemaking.com/
There are some thing to be considered, such as:

- ASCII-only mode

- METAR/TAF, ICAO codes

- Forecast

- Environment variable for your location (instead of trying to detect)

(If it already has some of these things, they should be documented.)
This is what bundled payments are attempting to accomplish. These bundles take into account the procedure (cot codes) in addition to transmissions and rehab costs generally. Disclaimer: not an expert on this specifically.
While I appreciate the hard work that went in to this, it seems like it's solving the wrong problem.

My home and work computers already have DNS addresses and valid TLS certificates for those addresses. It would be nice if Tailscale DNS supported resolving those domain names, so that when I'm at home I can enter in the normal DNS address of my work machine and route the request over Tailscale. Instead, peers on Tailscale get a <host-name>.<email-address>.beta.tailscale.net address (or with this new feature <host-name>.<random-animal>-<random-animal>.ts.net), which doesn't match any existing domain names already configured on the peer.

They do support Split DNS configuration, which almost works for this, but it resolves all domain names with a particular suffix, not just the names used by peers on the network. As it resolves domain names to the native IP address of the host, not the Tailscale IP address, it only makes sense to be used with subnet nodes that expose an entire subnet to the VPN.

I just want host.corp.com to access a work machine (or host.home.org to access a home machine), no matter where I am, rather than having to use different names depending on whether the VPN is connected or not.
The article is a satire piece. It's also not my article, I just found it on the web and thought it was funny. And the link works for me, you will have to enable JS though if it's disabled.
This is what other countries with large well functioning private systems (Netherlands, Germany, Switzerland) do - they set reference prices that generously cap the costs that can be charged.

What people don’t understand is the appetite for healthcare spending is practically limitless - there is always something more you can do even if the benefit is marginal. As such you have to control spending somehow and the options are (not exhaustive):

- ration care by capping total healthcare spending - “we will do 1,000 hip replacements this year, everyone else waits”

- make the cost visible to patients so they ration their own care - Singapore does this even in their public system. There is no free care, you are expected to pay something according to your ability. This is what the US is trying to do with the move to HDHPs

- closely regulate coverage and prices. Many systems do this.
> Well, that's one way of doing it. The better way, imho, is to actually have a database to store the state

It doesn’t matter how the state is stored, you still need to reconcile it. So yeah you can write your target state into a database if you wish, but you need something else to compare that with the state of the actual world and progress that towards the state you requested.

> When you have an actual database backing your SQL queries, the migrations would all run in this DB, produce a final state of the DB, then this final state would get applied to bring up your system in one shot.

Yes, what you are describing is how Terraform works. Without SQL.

Except it’s never “one shot” because it’s a DAG of requirements where each resource creation can fail.

> Sure, and that's fairly easy to derive, because we already have a unique identifier, the bucket name

In this specific case, sure. But for a KMS key or in the general case, no you wouldn’t. You’d also be hard-coding provider specific information into your system - “a bucket ARN can be derived from the name attribute”. This is not always the case - consider any REST api that accepts a POST request to create something, but returns only an incrementing integer primary key to uniquely identify it.
Do we really need higher wages, or do we need cheaper housing?
Case fatality ratio is only counting diagnosed cases. Unknown, asymptomatic cases are irrelevant.
What kind of audio output does a raspberry pi support?
Honestly, the suggestions about how to get into FAANG pretty much assumes one does not have a family.

The part about working hard and getting promoted is typical management BS.

Maybe you have been lucky. But many of us like myself have gotten the shaft when it comes to these sort of things.

BTW, if using banded hundies, you wouldn't come close to a wheelbarrow full ($110k median is 11 $10k bands)
https://archive.is/Onfb0
Why donate when hundreds of millions of investments have already been made?
>>>We, the men, should learn to do the same.

Some guys started doing this. "MGTOW monks" and Men's Rights Activists, for example. They were quickly ostracized as hateful misogynists, despite their focus largely being on providing help, support, and motivation to rectify particularly-unique male problems. They have some demographic overlap with the maladjusted incel demographic so of course all communities get painted with that same brush.
The appropriate analogy is at the automated checkout, a computer vision algorithm can't assure you correctly scanned an item. So it automatically sends a robot to the parking lot to boot your car, and a drone hovers over you and jamming your cell phone. Why? Idk, why not. Maybe if the store is really enthusiastic they tape your mouth, bind your hands, dump you in an alley and forget about you.
Airbus reveals next generation of its zero emission battery electric Plane
What It Looks Like When You Get Intercepted by an F-15C Eagle
Biomarkers of dairy fat intake, cardiovascular disease, and all-cause mortality
My understanding is that - depending on the jurisdiction - a pharmacist is allowed to refuse filling a prescription if:

- They are morally opposed to the medication, ex: "abortion pills"

- They know that the patient is taking another drug that would result in a deadly interaction

- The patient is drug-seeking a scheduled drug, ex: they've brought multiple valid prescriptions for opiates, but from different doctors

The pharmacist doesn't know why you've been prescribed Ivermectin. They can ask, but you're under no obligation to tell them. Maybe you need it for river blindness. Unlikely, but it's none of their business.

I guess a pharmacist could claim moral opposition to filling an Ivermectin prescription if they believe that sans Ivermectin the patient would instead get a COVID vaccine. That makes sense to me. But it's a slippery slope I'm uncomfortable with.
> First: the opinion which it is attempted to suppress by authority may possibly be true. Those who desire to suppress it, of course deny its truth; but they are not infallible. They have no authority to decide the question for all mankind, and exclude every other person from the means of judging. To refuse a hearing to an opinion, because they are sure that it is false, is to assume that their certainty is the same thing as absolute certainty. All silencing of discussion is an assumption of infallibility. Its condemnation may be allowed to rest on this common argument, not the worse for being common.

J. S. Mill wrote the rebuttal to your argument 160+ years ago. He wasn't using it as an anti-vaxx argument either, so it might be time to stop the moralising and simply try to make a persuasive case. I'd wager it's easier without the moralising anyway.
> I understand that you have to design the schematic and then get the PCB layout done, but in terms of figuring out which pins to connect, is it just a matter of figuring it out from the microcontroller manual?

yes. if you're using ST parts i suggest using their CubeMX tool, if only to figure out pin assignment. makes it way smoother.

i've seen multiple real projects with real engineers who should get this shit right screw up pin assignment.

also seen them just... not read the data sheet. i don't understand how they expected the board to work, but, it happened.
I find it interesting that the people that call other people irrational and say things like "follow the science" ignore things like the fact that a whole lot of people died from being intubated before the doctors (the smart people, right) figured it out. Or the "science" that said the vaccines are gonna stop covid and it's important that we all get it so we can go back to normal but then we all got it and oops it doesn't actually stop covid at all and uhhh oops it turns out we didn't even test for that...
I am quite sympathetic to the author’s viewpoint and have quite a few behaviors that are similar. I share files to my friends from my own server at home via aft.

But I don’t know if I fully buy the argument here. Mac OS is a scriptable environment and nothing even requires you to have an iCloud account or use all the Apple ecosystem stuff on a MacBook. My work laptop is a MacBook and I still use only open source stuff on it, which I script for greater productivity, and it feels very efficient.
https://www.nksc.lt/doc/en/analysis/2021-08-23_5G-CN-analysi...

Whole report is worth a read, but page 22 is where this "censorship" is discussed. Given this is HN I think some of you would be interested in the technical specifics in order to give a proper, informed opinion here.

The censorship involves blocking certain personalized ads within some of the core Xiao Mi apps by filtering political keywords. The keywords are all in mandarin, so ads that would be blocked would be Chinese ads. The list of keywords seems to be controversial political statements or news organization based on the report, including a pro china newspaper. The code is only run in China regions, but is stored on all these phones. Technically a standard software update could modify the code to remove that block.

I understand concerns about censorship are high, but logically I don't see the concern here; that is if you're not in mainland China. If you're in mainland China the wrong personalized ad can get you into trouble so this very elementary ad censorship is necessary, but this is about the EU region. It's bold to assume they'd allow this to be run in other regions after the user updated the apps, there's just no reason too, nor is there anything particularly invasive or malicious going on here that is different from other smart phones, based on the technical report.
Those slides was 2.5 years ago, there ought to have been some very interesting development since then if it is just 5 years away, right? Can't you link something more recent?
Then have Congress subsidize it and remove subsidies from other less sustainable producers.
Big discussion earlier: https://news.ycombinator.com/item?id=28618316
Sadly even some randsomware provides a phone number with useful tech support to help grandparents learn to purchase and transfer bitcoin. :/
Moving away from Fenix does not mean that I no longer believe that advertising is universally harmful for the people who are constantly subjected to it. As I mentioned in my post, I am still a user of Firefox on desktop, and I wouldn't think of browsing the modern web without an adblocker anymore. The problem is that Fenix in its current state is too immature for me to use in a practical, day-to-day manner. That does not mean that Fenix cannot be improved in the future, and I absolutely believe that Mozilla is capable of doing so if they restructure their priorities.

I am concerned about the future of Firefox as much as you are, and that is the reason I wrote this post. I wanted more people to know of Fenix's issues so that it can ultimately become a better browser.
Show HN: Redis Launchpad – An app store for Redis based apps
My plan is to connect a single pi-kvm to the aging Avocent in my homelab rack. The Avocent can connect to dozens of devices, but the IP interface for it is old and unreliable. Hopefully the pi-KVM will make that experience painless.
Concessions not required - they simply need to adjust to the new reality. It is bad for their business because it is preventing apples users from accessing the banned content, and of course monetarily from any lost sales opportunities that remain for that app on the app store.
Zero Trust Infrastructure Automation with Twingate
Sorry about that, will keep that in mind for future reference.
Who is this "Google" person that "thinks" he is a terrorist? There is no actual human entity here that is doing any "thinking" at all. It is an automated system, that cannot be argued with or challenged by normal means.

Terrorism is an INCREDIBLY SERIOUS allegation. It should be dealt with by law enforcement and the courts. And the penalties for _false_ accusations, which is exactly what this is, should be severe as well. It can be life-ruining.
It almost certainly depends where you are.
I'm reminded of the patent officer in 1910 who said everything that's possible has been invented. Or Malthus.