skysight-inc/HackerNews huggingface dataset:
> (to do dynamic lookups), because you can't use :column to select the "username" or "email" column.

that's by design. in 99% of cases you should never, ever do this.

maybe if you're building a database exploration/management/manipulation tool, sure... but for all other cases (including weird manual table sharding schemes), the queries should be literals that are included in static code (possibly codegened if there's too many of them).

under no circumstances should a user string ever be used to construct a column name.

> Of course, using an ORM or query builder can potentially solve this issue, but getting those to work and/or refactoring your code to do so is non-trivial,

orms are really complicated. query builders are probably okay for solving the issue most of the time. if i was building production software that i thought may be targeted, i would either write all the queries by hand, or codegen them ahead of time. if i had to pick them at runtime based on user input, i'd have one lookup function that takes the user data and returns a handle to the prepared query.

> and it's not guaranteed that they're safe from sql injections either.

is that actually true? i'm pretty sure if you use a prepared/tokenized query, all your sql injection nightmares will go away.

sanitize untrusted strings and use prepared queries. problem solved.

personally i think database drivers should have a mode that removes any capability for doing queries with raw sql strings.
>>>There's a mention of "KVM switches".

I'm not at a Combatant Command, but work in a smaller military operations center. KVMs are prolific because we frequently need to switch between computers on discrete networks with different classifications. For example: an unclassified network (with access to the World Wide Web, most common workstations for daily business), a US-only SECRET network, and 1-2 other US + $friendlycountry SECRET networks. You'll have 2 monitors and 2 keyboards at one workstation, each supporting 2 of the 4 networks. It's a mess.
There's no easy way. One way is to use `max-age=0, must-revalidate` but then your origin server should be optimized for conditional GET requests.

It's a very tricky balance between origin server load and consistency. By deciding to use HTTP cache you agree to eventual consistency and this decision comes with its upsides and downsides.

There has been a proposal in 2007 for a thing called cache channels. It defined a mechanism for an origin server to expose a feed which caches would poll at an interval. The feed would list resources that have gone stale since the last query. This mechanism in conjunction with conditional GET requests would've solved part of the issue of hinting browsers to invalidate their local resources.
> I wouldn't recommend anyone choose C as a language for new software

Unless you are doing firmware where all those constraints are still around, and you have to deal with whatever compiler the vendor supplies for their microcontroller, which will almost certainly be some variant of C.
In some countries, cops don't even carry guns on a daily basis
This is a nice take about the coordination problem - https://www.edge.org/response-detail/10464

6 billion chimps brains dont really get into "sync" so easily because of huge variation in types of intelligence, learning rates, personality types, needs, resource availability etc.

That doesnt mean its not possible.

We already see enough evidence how fast it is to get a whole bunch of chimps to believe bullshit, and perform the same behavior repeatedly without too much questioning and thought. In that sense we already look like an ant colony. Social media, wall st, video games have shown us you can scale it up to the hundred million mark (talking about the number of people given the same info perform the same behavior). In the past religions and empire took centuries to do the same. So its just a matter of time to push it to the billions but its going to be in fits and starts due to difference in people stated above.

Also Nature show us its possible to keep the 20 billion neurons with 1 trillion connection in our head in sync long enough to inject beauty into the universe. So anything is possible.
.NET is one of those languages you want to give a chance, and every time you do, it does something incredibly short sighted and harmful to itself.

You just can't change Microsoft. You can put fancy new skins on things and say you're part of the cool kids, but remember the people who made all of Microsoft s terrible moments aren't the young devs that care. It's management.

The only way I will ever use .net is if an actual open source implementation detached from MS happens. Openjdk it.
There were a ton of issues using Gecko, starting with (at the time) no CDM (HTML5 DRM module) so no HD video content from the major studios, Netflix, Amazon, etc. -- Firefox had an Adobe deal but it was not transferable or transferred to any other browser that used Gecko -- and running the gamut of paper-cuts to major web incompatibilities especially on mobile, vs. WebKit-lineage engines such as Chromium/Blink.
Startup, WA

Gold Bar, WA

Skykomish, WA

At least from Apple Maps, they’ve all got a USPS but no bank.
I could go on, but I think these points illustrate that ClickHouse has a different set of design choices for different problems. I would never use it for eCommerce, but it's great for analytics.

I agree with this. You are poking at a straw man.

My reply was in response to this comment by the OP:

> No, you're not there yet: doing timeseries with timescale is way riskier than with clickhouse, which is both a bit older (not much) and more mature (much more), while also being more widely used

TimescaleDB - which some don't realize - inherits all of the reliability of PostgreSQL, i.e., the 20+ years of usage and tuning (and broad tooling ecosystem).

What I was disproving was the statement that TimescaleDB/PostgreSQL was somehow riskier than ClickHouse.

ClickHouse is impressive, but deployments are still far behind that of PostgreSQL. ClickHouse is also younger and less mature than PostgreSQL.

I can see that you are the CEO of Altinity. Nice to meet you. I'm the CEO of Timescale. I think it's important that we strive for transparency in our industry, which includes admitting our own product's shortcomings, and to accept valid criticism.

We've done that many times in this HN thread (and in the blog post). I think we would have had a more productive discussion in this HN thread if ClickHouse developers were also as transparent with ClickHouse's shortcomings.

I'm happy to continue this conversation offline if you'd like. The database market is large, the journey is long, and in many ways companies like ours are fellow travelers. ajay (at) timescale (dot) com
"You should be flattered."

Ugh.

Also: "We can because there's no law against it." Really icky attitude. No concern for ethics or how it impacts other people. Wow.
Exception handling is one of the things that often gets disabled, yes. Even on desktop apps you find people advocating that - and the nice thing is, you can disable it and it won't cost you anything.
The real takeaway from this is not that it's impossible to beat the market consistently (it's not) or that the price movement of securities are random and normally distributed (they're not), but that as an average retail investor (or sometimes as a sophisticated institutional allocator), it is very difficult to find funds that can outperform (which isn't a linear/one dimensional thing btw, more sophisticated analysis is required) that also you can invest in.

When allocating capital to funds you are being adversely selected against: those who can generate returns probably aren't interested in your money (there's a lot more money in the world than profitable trading/investment opportunities).

As such, I normally recommend to people that unless they are professionals and know that they are doing or HNW (say >50mil), they stick to ETFs for the bulk of their portfolio. To be clear this isn't the optimal strategy, but it's easy and it mostly works.
Chproxy is designed to handle this

https://github.com/Vertamedia/chproxy
Honestly I don't trust the vaccine, but I got it anyway because I see the virus as a bigger danger to me
> DS/A don't actually translate to a real-world bar. It's more parallel to "have you been to and passed college?" which is probably not what you want.

Any study that can confirm that?
https://news.ycombinator.com/item?id=28940730
Any link without the paywall?
Yep. Much more effective than ESR's guide.
Sending and receiving works from Sweden right now. Maybe there was a longer than usual delay, but hard to know.
Thanks a lot for this! I really appreciate it. Comments like this is why I really like HN.
Hi HN! I'm one of the HN lurkers: I read you a lot but haven't had the courage to join the conversations (which is something I want to start doing).

I'm submitting my article here with the hope of starting a healthy debate around something that, to be honest, I'm not sure if it's more prevalent in Spain (where I am from), or specifically the companies I've worked for: why do people start trying to solve something without checking previous work on the topic?

Have I been hanging "with the wrong crowd"? Am I missing positive aspects for doing that?
There's no compatibility requirement here, because the old behavior is UB (both in theory and in practice).
Depending on the fund, returns of the S&P could be irrelevant and not a suitable benchmark. Evaluating a fund isn't as easy as "does it beat the S&P?". There's a lot of other factors to consider.
Seems to work for me as well.(from US)
My somewhat ironic advice is: don't listen to random strangers on the Internet.
On the other hand, it is reversible. https://woodworkingparts.wordpress.com/2010/08/17/hide-glue-...

"The significant disadvantages of hide glue – its thermal limitations, short open time, poor gap filling capability and vulnerability to micro-organisms – are offset by several advantages. Hide glue joints are reversible and repairable. Recently glued joints will release easily with the application of heat and steam. Hide glue sticks to itself, so the repairer can apply new hide glue to the joint and reclamp it. In contrast, PVA glues do not adhere to themselves once they are cured, so a successful repair requires removal of the old glue first – which usually requires removing some of the material being glued."
For starters epochs could never work in ecosystems that value binary libraries, regardless of possible ABI issues, which is also a reason why Apple went to such an effort to define an ABI alongside language versions.

Lets say you have a noexcept function compiled in C++20 that calls a throws() function, compiled in C++03, which actually ends up throwing, linked together.

What is the runtime supposed to do now?

To which semantics does it follow now?

Call std::unexpected() as it is supposed to do pre-C++14 or call std::terminate() as it should do in C++20?

What about the user defined handler that was configured for such scenario? Which of them gets called, or do both get called, in which order?

Maybe I am doing it more complex that it is, but I see several scenarios from point of view where multiple compilers, binary libraries and semantic changes come into play, editions turn just into another way to define language versions, because they don't cover all possible uses cases how a language might evolve.

Anyway, history will tell how things work out in the end.
Article says:

> Last year, 374 officers died - 245 of them due to Covid-19, more than any other cause combined.

But yes it's very high!
For developers there is another watchlist at https://git.feneas.org/feneas/fediverse/-/wikis/Watchlist-fo...
It looks pretty good. Can I add this to my website voxodyssey.com
I disagree--those other countries operate under different rules. Power does corrupt.
Epic is suing Google over direct and considered anti-competitive action preventing alternative stores from taking hold, and they might have a case.

https://www.theverge.com/2021/8/19/22632804/epic-google-laws...

Meanwhile, you reference Cydia (my alternative to the App Store), but I am myself suing Apple for over their efforts to lock us out competing on iOS.

https://www.washingtonpost.com/technology/2020/12/10/cydia-a...

https://cache.saurik.com/lawsuit/complaint.pdf
Yes, UTC is a timezone. And it is calculated based on TAI.
Depends on what you use it for?
They even made a film with this car. It's called: Up in Smoke.
Granted I live in Japan, but I carry a coinpurse (an old camera bag) because the 10-yen, 100-yen, and 500-yen coins are so useful. Vending machines are on practically every corner here, and the drink sizes are such that $1.20 for a drink is normal. I think most US vending machines have gigantic cans of Coca-Cola / Red Bull / Monster for $3+.

The US probably could get by with just $1 and $5 coins.
Wasn’t Chicago screaming to defund the police last year anyway? Seattle fired those that wouldn’t comply. I expect Chicago will follow suit.
Brain bursts can mimic famous AI learning strategy
It’s basic computer science. Clickhouse doesn’t fsync etc.

Clickhouse (and other systems with the same basic architecture, like elastic search and, shudder, mongodb) work very well on happy path. They are not advertising themselves as ACID.
The Democrats are in charge, and it would remove population from a very blue state and give it to a mostly red state.
The whole, "destroy instruments onstage" thing always seemed so wasteful and stupid to me. Why not do something useful and give it to someone who might use it?

Nope, just destroy it because you or your audience are knuckledraggers.
I hear you, but being able to read books on my phone is a game changer for me. I wasn't able to do that with my old 5" phone. Also, along the same line, not straining my eyes to read a text or work email is pretty great too.
i meant exec as in a shell script to replace the current PID, not python exec()
I'm sure plenty of shady vendors out there would be more than willing to offer a market rate plus bribes. Especially in software since they have the margins to afford it.
If we read into this article as pushing an agenda, then the agenda is probably written here. https://blogs.imf.org/2019/02/05/cashing-in-how-to-make-nega...
> All of the leo deaths in Chicago for 2020 were covid

And? This does not mean that being in law enforcement in Chicago is a risk-free, attractive proposition, even to those who are vaccinated.

> Any cop quiting because they don't want to protect others is a cop that should find a new line of work

That's a fair argument but it doesn't change the reality that Chicago is very unlikely to be able to easily replace the officers it terminates.
The right has definitely fragmented in the past five years (older conservatives, Trumpers, the alt-right, etc.). You're again getting this wrong and can only think in a "left vs. right" framework (typical of leftists and alt-righters).

The "silent majority" exists in this case especially around wedge issues like trans sports inclusion [0].

[0] https://19thnews.org/2021/05/gallup-americans-oppose-transge...
Works for me as well from the US. ‘Primary’ might be the key word? Fastmail must have redundant networks for situations like this.
Hence the problem for every manufacturer of consumer technology. The guy who almost outruns a hungry lion still gets eaten. Not sure how we can call that "outrunning the supply chain crunch."
You know a site like this can be entirely static and hosted for free with github pages, gitlab pages, netlify, vercel, or any other free static site host.
There is a balance to be struck. You don’t want zero or infinite friction to outside trade, each has major drawbacks. You want to be able to take advantage of others’ efficiency and for others to be able to take advantage of yours. You don’t want to be trapped by change or let dependence on outsiders become a vulnerability.

One key problem is being undercut by a foreign inferior product. Food where safety isn’t taken as seriously, products of explosive labor practices, things not built to design standards. It can be hard for consumers to understand and correctly value these things and they can destroy domestic products. These things tend to not be very elastic, you can’t just notice an industry you no longer have is facing shortages and rebuild it overnight.
I don't notice stuff like that either, especially not for cars, so I disqualify myself from any discussion that relates to build quality.
How is bamboo lumber made? (2016)
Thanks was gonna ask this same thing code books ok I am reading a few of these it depends on what you trying to learn.

I am reading up on C and SQL at the moment, looking to expand into C++ I was reading about python but stopped as I'm kind of on the fence with it I can't see its benefits but that might be my lack of understanding
I don't see anything there that says Netlify is managing or maintaining the details. The customer provides the package.json, If that file contains a reference to a library or code that introduces bugs or vulnerabilities, it's on the customer. Thus it still puts the burden of maintenance on the customer.

In a managed SaaS installation, the customer would be paying for the functionality of, say, docusaurus, but the company would provide and maintain the dependencies. It's the difference between paying for a server to run a version of mysql you specify and paying a service to run mysql and keep it in a known good configuration while the customer is able to use mysql.
>"...bleakness inherent in the Russian psyche..."

This is one big pile of BS.
Let me know when someone wakes up after being drugged at a frat party and is pregnant with a vaccination, that they need to care for, financially and emotionally, for the rest of their life. Especially if that vaccine told the person they loved them, and it'd feel better if they used bare mRNA instead of a vector.
Hard to imagine how an economic system that has literally no real safeguards against wash trading is "safer" in any sense.
> Credit card transactions take far less, and they deal in legitimate risk (chargebacks, stolen cards, fraud, etc).

Actually the merchant takes practically ALL the risk and the credit company has relatively little. If a stolen card is used or fraud is perpetrated, typically the merchant takes the hit depending on the type and scope of the fraud. If there is a chargeback, that money is held indefinitely until there is a resolution, but the merchant needs to dispute and prove that the product or service was rendered without any uncertainty, and much of the time the card company will favor the cardholder.

On top of that, the credit card processor will charge you the merchant a hefty chargeback fee regardless of resolution (as I recall, though they may reverse it if the decision ruled in your favor). Most of the time it's not worth the effort to dispute smaller chargebacks for smaller amounts. It's fair amount of work that just may not be worth fighting.

If your business is deemed in any way high risk, your merchant fees can be as high as 30% or more, but those are unusual edge cases.

When dealing with consumers directly that's the inherent risk and overhead.
There were definitely a bunch of HN gatherings in the early days with great turnouts.
seems to me MUCH more likely they know it's the former, and their primary implies higher capacity.

your speculation rests on the idea that they are incredibly stupid not to think of using the redundancy they built in.
> the most predictable possible thing in DoD software buying though,

FTFY
> AFAIK clang will usually just treat a signed overflow as an unsigned overflow when optimizing as it simplifies things.

This was a bit of a surprise to me; I thought that Clang could use the presence of signed overflow to infer bounds, like when it "breaks" naïve overflow checks. I didn't know about the treat-signed-as-unsigned behavior you described.

If that's what clang is doing, that's pretty neat! Quite a bit of reasoning to work through there.

Thanks for taking the time to explain!
Yes, theoretically that is a risk. But practically, it has never and would never happen.

And an eye exam for specialty contact lenses is way more than $100. Really, more than $100 in many places just for a simple reading glasses RX. And many docs won't just do your Rx. They require you do a full exam.
>I am resisting the urge to disagree, but since you did (literally) write a book about building a browser, I will defer to your expertise and try to learn from you

Respect
What can you build with AWS Amplify?
December 2020, the Minneapolis city council voted to defund the police department $8 million for the 2021 budget. [1]

February 2021, the Minneapolis city council voted to add $6.4 million to the police budget. [2]

[1] https://www.msn.com/en-us/news/us/minneapolis-city-council-v...

[1] https://www.nytimes.com/2020/12/10/us/minneapolis-police-fun...

[2] https://www.msn.com/en-us/news/us/minneapolis-to-spend-2464-...

The budget for 2020 was never in question, the riots and defund police movement started in the summer of 2020.

City policies were being discussed late in the year, concerning the 2021 budget.
That was my first thought too - maybe basswood is cheating. It does look though after some research that it seems that the process can be applied to other woods as well, since the process consists essentially of removing the non-cellulose component of the wood (hemicellulose and lignin) with heated chemical solution, then heat-pressing the resulting cellulose-only matter into hard block material.

Naturally, the harder of the hardwoods (IPE, Brazilian Teak, Ebony) are also relatively low-lignin wood types (that also grow relatively slowly, sensitively or in unfavorable geographical regions for logging and transport) and the result of removing the non-lignin would logically yield a lower improvement factor (and possibly take longer).

In general, the difference between softest readily-available lumber (such as basswood/spruce) and hardest (IPE) is about one order of magnitude. The result of this study at 23x means basswood can be made more than twice as hard as the hardest hardwood that is reasonably available. It would likely take a lot of lumber weight input though (explained below).

To your comment: Most common timber/lumber woods (softer: spruce, red pine, fir, chestnut, tamarack/larch and medium: cedar, maple, oak, birch) are rapid-growing and have established forestry industry around them. If you were to take white pine or spruce it should yield similar results to the study since you're basically condensing it to cellulose and they have similar weight densities. You would need to also factor the density of the wood since yield would be ratio of cellulose * weight of the source wood.

Since this is a high-waste process (only 40% of the weight is kept in the final product which is then compressed to the target density of 10000lbf or so) it would probably make most sense when using waste-wood as input (wood chips, sawdust, offcuts, recycled wood) and not on viable timber. This is similar to LVL and OSB (although it uses glue for binder)

Some composition comparisons:

Nordic Spruce: 39.5% Cellulose [1], 0.43 kg/m3 [5] (the poster child for engineered lumber construction in europe)

Black Walnut: 47.7% Cellulose [2], 0.63 kg/m3 [5]

Brazilian Teak: 53.0% Cellulose [3], 1.05 kg/m3 [5]

Basswood: 42.7% Cellulose [4], 0.41 kg/m3 [5]

[1] https://www.mdpi.com/2073-4360/13/10/1619/pdf#:~:text=Sjostr....

[2] https://yadda.icm.edu.pl/yadda/element/bwmeta1.element.agro-...

[3] https://bioresources.cnr.ncsu.edu/resources/color-and-chemic...

[4] https://www.fpl.fs.fed.us/documnts/pdf2019/fpl_2019_jia001.p... (pretty cool that they can make the basswood transparent to a significant extent also).

[5] https://cedarstripkayak.wordpress.com/lumber-selection/162-2...