skysight-inc/HackerNews huggingface dataset:
I didn't. I was ill the previous week and woke up on the Thursday during the night with what I thought was really bad heartburn even though I don't really get it. Eventually fell back asleep and bought some antacids over the weekend. Weekend was pretty eventful, taking kids on walks and doing a lot of that with them on my shoulders.

So on the Monday I went swimming and thought the pain was related to being still a bit sick or heartburn. The reason I went to the hospital was the antacids weren't doing anything and it was pretty painful. I also nearly threw up in the changing rooms at the pool.

By the time I got to the hospital I was actually feeling quite a bit better and feeling a bit sheepish about being there. Then they hooked me up to the EKG and I knew something was very wrong by everyone going into overdrive. I didn't know how wrong until after the surgery (you're awake through the PCI) and the surgeon took me through what was going on. Basically I was minutes away from dying as my left coronary artery was completely blocked. They had to stent the clot to fix things.

The aftermath is that there wasn't a known cause. I have no chronic issues, or clotting issues and my arteries themselves are perfectly healthy. I was lucky and there was no visible damage to the heart. I'm back exercising again and now in my second set of rehab.
Gron in Awk
I think the title is fine, it's showing how even the most simple memory safety bugs can be exploited to lead to system compromise. Not every submission has to be about something happening right now.
> this smells of not using a whitelist mechanism

What makes you think that? I just skimmed the draft and it seems to use a sensible whitelist as default. Developers can allow or deny additional elements/attributes as they like.
We need a standard for serializing both time and place in order to specify local time. It is already done ad-hoc using "continent/city" timezone database. Current three-letter timezones have the disadvantage that a place can change a timezone.
Life in the Facebook Metaverse
This is not true but one of those arguments to mask morality and religious reasons with.
Sure if you shift the goal posts by adding more detail to the context then the situation is different. There's a reason the first two words of my reply were "it depends".

Please don't make assumptions about my experience based on that though. It's pretty impolite before I'm even able to respond to the new criteria and makes you look like you're not actually responding in good faith.
Thank you for all the replies! I didn't know type theory was a field, so I'll go look at that.
Facebook Novi is here but where is Diem?
Google, when used with double quotes and exact title, finds aggregator sites, but I was simulating looking for the original: https://joshmitteldorf.scienceblog.com/2020/07/08/politics-i...

Here is one more, search: Ten Elements of the False COVID Narrative

Google: nowhere

Brave: first result

And it's not like Google just didn't index the site, it works for topics that are "less controversial", search: Universal Clock implies Universal Clockwork

Google: first result

Brave: first result

Whatever the explanation - either Google censors some topics, or its search engine works differently - the result is the same, for this example Brave outperformed Google.
Didn't we just do this twice recently?

https://news.ycombinator.com/item?id=28851167

https://news.ycombinator.com/item?id=28878445
nvi

OpenBSD (as well as the others?) come with pdksh and nvi out of the box.
> Biomass is not carbon neutral very short term (...)

Well, mankind has been outputting industrial emissions for the last, say, two centuries. It's very safe to assume that most managed forests around have been capturing anthropogenic CO2 emissions for the last century or so.
I wrote about the pipe operator on ReScript (compiles to JavaScript), as well as its proposals in js here:
https://link.medium.com/of6CK4nvvkb
I think neeva is interesting. Once payment and a login is required it changes the incentives and opens up new feature possibilities. One cool feature is linking your private cloud document storage making search very personal.

It remains to be seen if they can get enough people to pay in order to keep going though.
Yes, thank you!! Is stuff like that „timeless“ if one wanted to learn from it?
Wondershare DVD Creator 6.6.1 Crack and Registration Code 2022
Yes, thanks a lot!
I was mainly thinking in the difference between an atom in laboratory conditions being observed in a very controlled way, vs an atom at the core of a protostar, for instance, but that's an interesting point, thanks!
I would assume this is easier if you are indexing more frequently and have been indexing for longer, and Google has more resources to allow them to crawl more often (another advantage to scale in search, which combined with other advantages of scale, is why Google has an effective monopoly IMO).

If you recently started crawling you won't be able to detect which content was 'first', and if you don't crawl as frequently as google you are reliant on your crawl frequency being quicker than the 'content stealing' speed.
I wonder why the footer said it is dated to January 26, 1995 (after ITU in Kyoto 19 September, 1994) while the first page said April 22, 1994?

This PDF file is encoded PDF format version 1.3 witch was released in 2000. It is coherent with the informations stored in the PDF heather fields telling us this file was created 02.02.2000, 10:20 and last changed 02.02.2000, 18:20 by Acrobat Distiller 4.0 .

So at lest we can say this PDF file here is not an authentic one from 1995, witch of cause not necessarily means there could not be another PDF file somewhere else(?).
Thanks for the insult
Sorry posting from a phone which has terrible autocorrect and hadn’t edited.

In repose to “illegal to work more than 10 hours in Germany”

I had a call last night to go to a field in the middle of nowhere for 3 days to look after an event as the colleague who was supposed to do it has covid.

This means sitting on site doing whatever I want, until/unless something goes wrong.

The coverage needed is 12 hours a day, so that’s fine, I do the job, get paid the overtime, and another colleague takes over on Saturday to do the same job for a few days.

If I was limited to 10 hour days I couldn’t cover 12 hours, we’d need two people on site, and that means I’d have to be away from home twice as long.

That’s not a good thing for me
Congratulations on the launch! micro/m3o looks like a lot of work.

> AWS is a fairly complex beast which makes it hard for new developers to get started. In the past we needed VMs and file storage, but today with the Jamstack and other modern development models, the building blocks we’re looking for are changing.

Yes! Here's a decent read on how the Big3 cloud providers are being unbundled [0]: https://www.swyx.io/cloud-distros/ Heroku, the blog argues, was ahead of its time, but now PaaS start-ups like replit.com, railway.app, render.com, glitch.com, posthog.com, vercel.com, netlify.com are back on the menu, making a big splash as it were, even if most of them themselves rely on Big3 infrastructure underneath.

Curiously, m3o is taking the hard path that fly.io once did before settling on their current "global, auto-scaled ec2 with free vpc and load balancer" offering (which is uber awesome as a fargate / lambda replacement) and focusing on just one or two core use-cases (of late, seems like fly.io is particularly putting its weight behind the elixir ecosystem). supabase.com is another such project that's narrowed itself down to being a firebase alternative (as opposed to, say, an alternative to all of GCP) with their FOSS tech build-out being mostly around Postgres.

Risking the ire of Dan Abramov here [1], but I suggest m30 errs towards simplicity (and not just easy). Good luck!

[0] https://archive.md/bV9oM, "The Founder's Dilemma: To Compete or Unbundle" (a16z)

[1] https://news.ycombinator.com/item?id=19485609
Great news. But nobody cares. And I'm shadow banned so fuck you.
The latter is still valid for Ethereum until the update to ETH v2 and Proof of Stake is live. We are not there yet.
I switched from vscode to (doom) emacs. I don't know how it is now, but the vi-like key bindings of vscode were pretty bad at the time.
Would be nice if "BrandonText-Light" font supported `font-variant: tabular-nums` — this would prevent digital clock display from slight horizontal jumps on each second change.
The actual title of the article is "How a simple Linux kernel memory corruption bug can lead to complete system compromise". Which is a much less tabloid title than the changed title here. It also more properly reflects the purpose of the article which isn't discussing the specific bug but how such bugs can be exploited and more importantly how to prevent such bugs from being exploited.
Reminds me of Swatch's "Internet Time" from the 90's - https://en.wikipedia.org/wiki/Swatch_Internet_Time

Also, obligatory XKCD: https://xkcd.com/927/
Swiss court rejects Google appeal over cloud contract
Sorry, this is off topic, but the relevant difference between the particular were you are using and are isn't one of tense but of mood. The were is a past subjunctive form, where "past" is there more as part of the name of the form than a description of its meaning. The are is present indicative. The part described with were isn't in the past relative to the part described with are, thus it is not a distinction in tense. The were part is counterfactual and the are is factual, a distinction in mood.

I will probably be voted down for saying this, but I am a linguist, specifically a semanticist, and I find the association between "past"* subjunctive forms and counterfactuality fascinating.

* Note, there are some constructions where the "past" part is semantically past as well, but this isn't one of them.
No. SNI sends more information. It sends a "servername" in the ClientHello. With earlier TLS versions the host could also be leaked in the server certificate that is sent to the client to be verified. With TLS1.3 that is fixed. All that remains is to plug the SNI leak. Experimental encrypted ClientHello is available, but not in popular graphical browsers.

Popular graphical browsers send a servername in the ClienHello even when SNI is not required! (Most HTTPS site submitted to HN do not require SNI.)

To see how SNI leaks host names,

https://github.com/kontaxis/snidump

# example.com - with no SNI

echo -e "GET / HTTP/1.1\r\nHost: example.com\r\nConnection: close\r\n\r\n"|openssl s_client -connect example.com:443 -ign_eof -noservername

# example.org - with SNI

echo -e "GET / HTTP/1.1\r\nHost: example.org\r\nConnection: close\r\n\r\n"|openssl s_client -connect example.org:443 -ign_eof -servername example.org

You should see "example.org" in the snidump output. Neither the example.com nor the example.org sites require SNI.
How to make the ultimate Terminal Prompt on Windows 11 [video]
Isomorphism means having the same “interface.” Unless you specify, for each structure, a different set of operations (functions), what’s left is their, well, structures, which in this case are identical.
How is this any better than just using UTC written as 14:15Z?

It is a bit nice to hide the number that is not correct, but it makes the lookup a little harder than an offset too. Not to mention the worst part which is that hour hour goes by but there is no numerical increment to see.
Not all EU countries, Ireland is in same boat as UK when it comes to digital services and government website login
Probably for the same reasons mentioned here: https://news.ycombinator.com/item?id=28929226

They're easily confused with I and U, respectively.
Rust should have native ways to express this stuff. You don't want the answer to be "write this part of your problem domain in C because we can't do it in Rust".
how accurate is this? It shows only 5 tables for Airbnb, seems like it should be much more.
I agree. The title is quite factual.

It would be nice if the article stated what's affected more clearly, and importantly, that patches were rolled out long ago for most distros.
There appears to be very roughly 500 million tons of wood in English forests, so Drax would need to use a little over a million tons per day to work through it all in a year.
That could be solved with software that displayed the local time for each participant you add to an event. But then I guess I don't see the point of this any more.
Anti-competitive laws will probably shoot this down immediately
On the other hand you have access to probably hours of talks of C executives and them expressing different emotions less or more subtly

why wouldnt it be possible to train on it?
You must be reading something in this that I am not.

Its calling itself a public cloud, but you cant deploy your own apps to it. Instead it appears to be a collection of APIs, that you can consume with your app that you must host elsewhere (sure, thats easily resolved to some extent).

Im still not sure why you are comparing to fly, which is a completely different product.

I may be totally wrong, of course, but thats what I understood from the website.
Stupid people are having more kids?
Sorry about that. I never have understood the difference between tense and mood, to be frank ;) Thanks.
If you break your word about an acquisition, make it the cost of the purchase + 100% of any value that acquisition generated (a good rule of thumb would be ~10x the amount of money spent on supporting that BU or the total amount of revenue, whichever is higher).

Seems like everyone is concerned about moral hazards for normal crimes yet white collar crimes like this are extremely underpunished to the point that you can factor that fine into your P&L.
I think we’ve seen how Google can kneecap it’s open source products with Android, taking more and more portions into closed source. Why won’t they take the same step with chromium if Microsoft edge and Brave become too popular?
I live in the US. Most companies and organizations here use 12 hour time, so I use it too. The work hour selection is using 24 hour time. It would be a nice UX improvement to present the time using the user's current locale settings.
I have been gravitating towards this. Feel like I only got very shallow learning from my CS courses. Bought physical books now to grok the subject better (for now theory of computation, algorithms etc).

Feel like especially my math foundation is lacking, so thanks a lot for these recommendations!
It doesn't matter if attackers can intentionally use older browsers, they can also use other tools like curl or even an intentionally malicious browser application that doesn't have these features either.

It matters if users use the secure browsers, and with Chrome, Firefox, and (hopefully) Safari implementing it the vast majority of them will within a few release cycles.
Nothing is ever really just a local exploit. It's always also one half of a remote exploit chain...
A large amount of free software is developed by companies. If they stop it hurts us all.
How did you get this info?

I am inclined to apply, but what would be the the best company? Bitfinex or tether?
C++ Weekly: Targeting Commander X16 with C++17
The power stations at those dams didn't produce much power to begin with, them being very old designs. Note that most of the tens of thousands of dams in the US are just old relics serving no function, that are very expensive to remove. I agree that it's not an environmentally friendly way to generate power.
That's not how XSS generally works. You need a victim to visit a trusted page where you've managed to insert some html/scripts, and then execute that in the context of the user (cookies, read sensitive data etc). If you can trick a user to use a different browser, you probably already have full control.
I personally configure custom search engines for things like this so if I want docs specifically, I'll type something like "py collections" which directs me to https://docs.python.org/3.10/search.html?q=collections.

I find this especially useful since I often otherwise find myself typing site:python.org (or similar things, like if I just want to see the MDN page instead of going through w3schools or blog posts for examples).

edit: in the particular example for str.replace, I found it buried in the results for "py replace", at the top of "py str.replace" (helps if you know what Python calls the type) and basically nowhere for "py string replace".
Myanmar has a +30m delta too, as has Australian Central Time and Newfoundland.

As mentioned elsewhere Nepal has a +45m delta.

edit OK I crunched the numbers

Country / Pop. / Timezone

* Afghanistan 32.9M UTC+04:30

* Central Australia (Northern Territory and South Australia) 246.5k + 1.771M UTC+09:30

* India 1.353B UTC+05:30

* Iran 83.1M UTC+03:30

* Myanmar 55.6M UTC+06:30

* Nepal 28M UTC+05:45

* Newfoundland and Labrador 520k UTC-03:30

This comes out to around 1.556B people or around 20% of the world's population.
I am still rocking my Pixel 3, which for me is the perfect size. I just don't see much need to upgrade much anymore, the pixel 3 has a nice screen, decent hacker news browsing experience, and wireless charging. I'll keep an eye out for a black Friday deal but otherwise I will keep my phone for now.
I am using WebGPU from D, it's an interesting solution and works well, but it has some drawbacks. First of all, because you have to match so many APIs, it only offers a common subset of functionality. Secondly, because it's primarily a Web API, it has a lot of validation, which wouldn't be needed for a desktop application. Thirdly, while it's still a low-level API, it doesn't offer the kind of control that AAA engine devs would like. It takes care of synchronization , memory management, transition barriers. AAA devs would prefer manual control over that.
I'd suggest it really depends on the exact problem space you are working on.

Some NLP related problems can be solved at a similar level of quality of humans - (humans actually make a lot mistakes as well).
Boring machine learning is where it's at
I have parts of code that are extremely messy, but I don't spend time on refactoring, because once it works it doesn't need any changes...
The moment it starts requiring frequent updates I'll take the time to sit down and do a proper revision or rewrite. I do tend to be very careful with my API interface FWIW...
Just another day in the life...
Searching for "kicad", "kicad pcb" or "kicad-pcb" on DDG, Google, Bing and Brave, only Brave still shows a link to kicad-pcb.org on the first page, so the campaign seems to be going in the right direction
> History is full of people who challenged this thinking and completely overhauled human understanding of a topic

At the risk of argumentum ad logicam, this is a textbook example of survivorship bias. History is also full of people who were adamant they were correct in the face of ridicule, and turned out to be wrong anyway.
Well, at one time something like 20% of the deaths in Pittsburgh were happening in Carnegie's steel mills according to the Economist [0]. So it's nothing new, unfortunately. It seems to almost be a pre-condition for getting really really rich.

[0] https://www.economist.com/books-and-arts/2003/01/30/pittsbur...
> An attacker will always be able to use an older browser version that does not have the built-in feature.

You do not purify DOM for the attackers' browser, they can just open the dev console and execute arbitrary JS anyway, you purify it so that user-input that one renders is also safe for others users to see without allowing attacker controlled scripts to be executed or DOM elements that leak user info on load to be inserted.

And you can always simply start to show a banner that tells "contnet blocked, upgrade your browser" in a few years, once a big enough majority of your target user base upgraded to a browser that supports it.
It's also horrible for non English content from my experience.
a basic test shows that brave search, just like google search, prefers mainstream propaganda over true facts. I cant tell to which extend because it seems like brave search only allows me to see 2 pages of results. There's no next page button or on scroll update.

duckduckgo seems to handle this better. But there are even better ones which im not going to mention because i dont want anyone to change them.
In the corporate world, it’s sort of like the WSJ or Economist or (insert trade magazine / news source here) in the sense that you know the executives are reading it, so if you want to know what data they are making their decisions off of it is a good resource.

You can see it change some of the practices and thoughts, and move the Overton window on certain ideas (e.g. remote work or flexible work).

Like anything, situations are situational, and any guidance should be tailored to your organization. Whether your executives do this is important to watch, because if they don’t you will quickly be cycling through the latest fad of management. If they don’t adjust at all, the company will become stagnant or fall behind. So HBR is a good resource to get ideas on what to do, and then move from there.

McKinsey is similar in this sense - they have such influence in the C-suite and boards of most companies, that you better watch out when they get on the war path to sell something. This is a bit more dangerous than HBR, because executives can point to them if an initiative fails and say to the board and shareholders “it’s a best practice, it’s what the people we spent millions of dollars to advise us told us to do, and you approved the millions of dollars of spend - are you saying you approved that waste of money?” So things from McKinsey are more likely to have an operational impact. And people at McKinsey get and recycle some of their ideas from HBR or HBS.

All told, I think HBR can help diagnose problems, ID potential issues with a strategy or HR program (e.g. what are the benefits and negatives of remote work, and how do I approach that with my team?), and serves as a useful reference. Not every article applies, but the one or two that do could save 1000’s of dollars or literally years of going down the wrong path.

The one thing that I think case studies do is turn people neurotic - you must be perfect at all times, or like the case study if you make that one mistake you will be sidelined and your career will fizzle. In reality, your career is not a ton of big moments to screw up like they highlight in the case. You may get a few of those (that increase in frequency as you move up with responsibility) but what I have found more important is showing up every day and putting in consistent results so that when you do screw up, it will not be the pattern. I think COVID made people more willing to accept little things and there has been an emphasis on failing well, being resilient, and using it to inform the organization so the mistake is not made in the future.

For most people on this forum, very little that you do will be a career ender or blacklist you from industry. There are countless industries you can move to (everyone is competing on technology), and so making a big mistake isn’t really that bad (as long as you learn from it). Just don’t be reckless and disregard the really bad consequences.
Fish is really great for an interactive shell, I love using it. Not so great when it comes to scripting though. For example I think there's still no way to easily exit a script on error except to manually check exit codes.

However I haven't tried writing scripts in zsh yet, just sh/bash.