skysight-inc/HackerNews huggingface dataset:
Are other languages/runtimes also that risky as Node with npm?

npm packages seem like a cardhouse.

I know that the node_modules folder is often times criticized for its sheer amount of 3rd party libraries. Is it because of JavaScripts "missing" standard library?
I checked a number of companies that I know that have IP and patents and they came out empty. Maybe it is only accurate for public companies? Or maybe just partially accurate?

This seems to be more of a partial source and not a definitive resource.
At least it's usually a costly barbarity for the state, with no perverse incentives. Though I'd argue it's not a dichotomy, and a maximum sentence combined with risk assessments that can extend a sentence beyond the maximum is state of the art.
Sorry, I meant children (rather than anyone younger than you are, which seems to be how some people use the word kids).

While I agree with being able to check the results with many modern calculators, my argument is that it is useful to know when the results have to be checked. For example: if you know that all of the points are less than 5 and you are adding 20 of them together, a result greater than 100 means you have to go back and check what was entered.
https://www.thingiverse.com/devonjones/collections/openforge
Pfizer's oral Covid-19 antiviral cuts hospitalization, death by 85%
> it would be cheaper to just shoot

Ah, no, that's not how this works.
There is an "edit" link, but it disappears if your comment is too old.
Even just employment.

If your employer's ease of access to China is at risk versus your employment.... I doubt many companies side with individual.
Sunlight is a source of power; by assuming unlimited sunlight input we can rearrange as much material as we want, but we can't add or subtract any.

If we arrange more material into phytoplankton, that would seem to leave less material available to be krill.

> It’s like fertilizing soil with the dead… it could in theory support ever growing populations.

But this cannot work in theory. A population cannot grow if its only nutrient input comes from dead members.
Open source database on vulnerabilities exploited in the wild
Hi! We are working on an open source database on vulnerabilities exploited in the wild.

Not all vulnerabilities are equal. We believe the ability to react within hours to vulnerabilities that are being exploited is the foundation to all vulnerability management.

This wouldn't be possible without your contributions. So to all Hackers / Security guys and gals keep the contributions coming.

Let us know if we can make life easier for you!
Ten red flags in the FDA's risk-benefit analysis to vaccinate children aged 5-11
Any protection offered by Deno isn't robust. Only OS-level protection is secure. Any tooling will require access to file system - and file system access is enough to compromise developer system.

Let's assume that you have Deno compiler for other language. You run it through seemingly innocent deno run "https://..." --allow-write=. src/ (you use optional parameter to --allow-write, right?).

Unfortunately, webpage hosting script was compromised. Now our compiler can write to .git/hooks, .npmrc (npm can do arbitrary script execution in version 6 or lower, even on npm --version), .idea/ etc.
You might like the Shinobi keyboard from TEX Electronics? It's a mechanical keyboard in the format of an old-style ThinkPad keyboard.

https://tex.com.tw/products/shinobi?variant=16969883648090
Have you noticed whether `nice(1)` also triggers these QoS change, or is it limited to libdispatch?

> it sounds like on the M1 Pro maybe the two highest QoS levels (interactive and user initiated) now preferably map to p cores 0-3, and maybe now default and utility map to p cores 4-7

That seems unlikely, though I don't have an M1* device what feels more likely is that the two clusters are independently powered (the turbo-ing works on a cluster basis so that's almost certain), therefore the machine favors fully loading the first one before it starts "spilling" to the second (and thus has to power it up).
Looks interesting, but the modal for 10% off if you give them all your contact data can only be dismissed by clicking the "NO THANKS, I'D RATHER PAY FULL PRICE" link. Does this passive-aggressive dark pattern actually work? For me, it just always leaves a bad taste and impacts my trust in whatever company does this.
The author says proxys are expensive and then proceeds to spend a shitton of money buying all that hardware.
I was on desktop Beta feature briefly but was incompatible with anyone who wasn't.... pretty useless to me so I reverted. Surprised to see it rolled out this morning (EU)
The 480 was probably barely used and the mining GPU are used at low power and controlled temperatures. It proves my point.

Old doesn’t mean heat abused. Gaming laptops or ones with discrete GPUs often have issues and it’s always because of the GPU. If it posts it doesn’t mean that the GPU won’t die soon or is problem free, gaming laptops have the most heat abuse and are constantly dying and having issues. Performance degradation because it’s old is a different claim from saying heat damage doesn’t exist.
Abba: Voyage Album Review
I feel like the X200 / X201 were almost perfect laptops in their time (apart from being hot asf). Every model after them has a catch or a few.
For me, the entire 40 series was a disaster, especially with the removal of all physical trackpad/trackpoint buttons. I've actually seen a security architect repeatedly slam the client-provided T540 onto a desk in rage. Lenovo apparently saw the error of their ways with the 50 series and they had dedicated buttons back ever since.

X250 was my favourite of that form-factor, as it still had external and internal battery replaceable easily by user. I seem to recall even upgrading the RAM. They can be found for $250ish CAD if you wait/bargain a little.

I too however could never commit to a project like that; just don't have the time/energy/priority. I believe it's the type of thing you undertake for the process, not results :). I ended up being one of those fools who paid for a T470-but-with-good-keyboard, the T25 Anniversary model, and 3 years later I'm still a very happy fool :).
> is not an open source license

To be honest, this is disingenuous. "Open source" has several definitions, and even though some people would like _their_ definition to be the "official" one, I'm pretty sure most reasonable people would still definitely agree that this project is open source, seeing that the entirety of the code is on GitHub.
If I did myself a favor and didn't buy anything that wasn't good for me I'd probably die or be even poorer due to the cost of "healthy" foods.
Consider it a filter for old people who wouldnt be able to pilot the drone anyway ;-)
This all made me up think of the Johnny Cash song “25 Minutes to Go,” though in my head it was sang as the cover by Eddie Vedder.
Yeah, from an announcement logistics perspective it makes sense. Nobody wants to look like a dummy saying “Ok, at long last, tomorrow you die” and then the hangman calls in sick the next day and you gotta go back to the cell and say “oops, my bad, we gotta reschedule to later in the week.”
> google was not present in the WWW design, was it

That's because you were supposed to Ask Jeeves.
Pluto should be our ninth planet
Interesting, I hadn't heard that theory - are you saying the Italians had him killed because he knew too much or that they failed to protect their clandestine ally from France and the UK?

Or is it more that factions in Italy that benefit from human trafficking got the upper hand on those that were working with Qaddafi to limit it? Italy is #3 in the world for trafficked humans after all, presumably some powerful people profit from it.
HUDs are good for when it can be unsafe to look away from what's going on around you. That includes flying in formation, close to the ground or in combat, and cycling.
since here's many compiler hackers then I'd want to ask question:

How do you distribute your frontend with LLVM?

Let's say that I have lexer, parser and emitter written in e.g Haskell (random example)

I emit LLVM IR and then I use LLVM to generate something other

but the problem is, that I need to have LLVM binaries and I'd rather avoid telling people that want to contribute to my OSS project to install LLVM because it's painful process as hell

So I thought about just adding "binaries" folder to my repo and put executables there, but the problem is that they're huge as hell! and also when you're on linux, then you don't need windows' binaries

Another problem is that LLVM installer doesnt include all LLVM components that I need (llc and wasm-ld), so I gotta compile it and tell cmake (iirc) to generate those

I thought about creating 2nd repo where there'd be all binaries compiles for all platforms: mac, linux, windows and after cloning my_repo1, then instruction would point to download specific binaries

How you people do it?
To me it comes across as hubris to claim 'nothing happened' for hundreds of millions of years just because we can't see any evidence for it. Looking into the fossil record tells us very little about what was going on hundreds of millions of years ago, despite it being the best tool we have for looking back at such long scales.
I am. I live in Chicago.
And among those twelve countries you have: United Arab Emirates, Saudi Arabia, Bahrain, Oman, Belarus, Kuwait, Qatar

Personally, I would prefer my country not to be in same exclusive club .
Tetris came a decade later so computers were more common and floppy disks were a thing making it easy to copy and share information.

Not to mention all the reasons why a book of roleplaying rules has less memetic potential than a small quick to play single player game. Today with good screens and internet it is plausible, pretty sure there already are such systems out there, but it couldn't have happened in the 70's and I'm pretty sure it would never happen in the 80's either.
There’s an argument to be made that political austerity causes social segregation and people to die in poverty of preventable problems.

Why don’t we set aside the rap battle and Mathematica concerns and focus on well known human society features failing people.

Cut the crap with the pearl clutching “there’s an argument to made other peoples behavior did…” and consider yours as a member of an implicitly caste based society.

Treat yourself like the subject of study instead of abstractly focusing on the flock, dad.

Western psychotherapy role play is the worst personality trait.
+1 for ToDoist! I've using for two years. I'm building a dashboard and weekly review space to understand better how is my productivity. Check it out at https://todolytics.com/
Cause the terminology is not historically relevant to the region or the way people talk about those areas
"proprietary" is the opposite of "free" (as in freedom), not of "free" (as in free beer).
> There are still many things I need to set up on the new laptop, for example: suspension/hibernation on closing the lid doesn’t always work

Sounds like a problem of hardware not designed for Linux. Everything has been working out of the box for me on a Librem laptop.
What is your site may I ask?

Just curious about the difference in value from using your API and web scraping as there is a cost to web scraping as well.
It'll be like skydiving or visiting Everest basecamp or Antarctica.

Maybe soon you'll pop open the window on one of these new suborbital flights and skydive from the black back to Earth!
ahhh nice, it's been years since i've seen a obfuscated .bat!

very nice use of substring, but a bit too linear... with some input redirects and nested spaced variables it would have become more robust and unpredictable, but i suppose nowadays batch chiselers are rare.

edit: by the way in the article is missing a -useless- decoded line (n.4)
Cool!

My first search ("bosch") turned up almost a quarter of a million in the main company. Waay more than e.g. Ericsson, Milwaukee, Ryobi, Microsoft and Google which I searched next.

Is there a "leaderboard" page?

Edit: found the top lists at the bottom, but I don't want to pick a category, and the list format shows list position but not patent count unless you click each entry, which to me was not very accessible.
So what if you are 100% sure and the bar is absolute certainty vs. reasonable certainty
No technical information whatsoever plus passive aggressive modals for 10% off. It just doesn't smell good.
All the depictions of the screen are just photoshopped mockups. The HUD is perfectly opaque. If this was really how it looks, it'd be an extraordinary feat of engineering. If it's just AMOLED in the glass or a projection onto the glasses, it could only add light.
If you want to save taxpayer money, then you should be advocating for an end to the death penalty. Sentencing a person to death ends up costing significantly more than life imprisonment.

https://www.amnestyusa.org/issues/death-penalty/death-penalt...
IBM fulfills a particular niche: when you need to have a contract with a company the will take the fall contractually.

There are plenty of too-big-to-fail companies that at the end of the day don't care if the project succeeds, just that if somethings goes wrong you have some definition of legal recourse. You buy IBM because you write in your contract "we agree to buy the necessary computers systems and software as require per our vender (IBM) and the vender will be responsible for ensuring compliance."

Sounds great to both parties, except the loophole doesn't say that the requirements need to be correct. If things go great, fine. If things go wrong, customer gets to argue with IBM. Good luck with that. IBM isn't known for their hardware and software in the computer world, they're known for their lawyers.
And to clarify, you should run this once by hand to collect the list, don't add the grepping to the actuall installation script or you are back to square one :D

Here's what I use with yarn, install.sh:

#!/usr/bin/env bash

yarn

function run_install() {
local dependency="node_modules/$1"
if [[ -d "$dependency" ]]; then
yarn --cwd "$dependency" run postinstall
fi
}

run_install 'esbuild'
run_install 'other_package'
...
They are real and common and good, but I don’t consider the sound they make all that calming.

I use an insta hot dispenser to make tea. Virtually silent hot water on demand. That seems calmer to me.
Try NextDNS
Have you used or seen a HUD before? For example if you play video games, how many times might someone die while looking away from the screen? What about compared to glancing at their health, or Ammo? While the uninitiated think a HUD blocks your vision, it actually rests in a position (and is translucent) in such a way that you see through it and any glance would be milliseconds comparer to seconds of looking away. Plus your peripheral vision. Would notice changes to things while looking at the HUD compared to looking completely away.
>Considering that Taiwan is already independent

Not according to the PRC, and a lot of countries and international institutions either. Some (usually with close ties to China, but now always, e.g. Spain[1], probably because they do not want to give their own separatist movements any political ammunition) consider the ROC part of the PRC, others are deliberately vague on whether they consider Taiwan independent or even a nation, like e.g. the US[0].

The WHO for example is very adept at avoiding any position on Taiwan[2].

And then of course, there is this guy... [3]. (Just if you like some cringe about a serious topic)

>China's goals of "peaceful reunification".

(PR) China doesn't really talk about peaceful reunification. They officially consider Taiwan part of the country already, a part that is just a little rebellious at the moment. They are more talking about a peaceful end of the conflict, but recently use the word "peaceful" a lot less.

[0] https://en.wikipedia.org/wiki/Policy_of_deliberate_ambiguity

[1] https://en.wikipedia.org/wiki/Spain%E2%80%93Taiwan_relations

[2] https://www.youtube.com/watch?v=UlCYFh8U2xM

[3] https://www.youtube.com/watch?v=z88zeQ25pjQ
Yes, the X270 was the last X series with a separate battery. All later models have only built-in batteries.
The nationalists in Taiwan at one time claimed sovereignty over all of China, I believe.
The USA would not tolerate a state wishing wishing to go independent and definitely would not allow outside interference promoting that.
This is a China Taiwan issue. USA, or anyone else, should not be involving themselves.
For some of the IDE functionalities Emacs can be behind. Like debugging, or jumping to function definition (it depends of the languages and extensions).

For some other functionalities it is far more advance, like support for Git (magit) or very fast navigation inside the project (projectile, Helm etc), mass renaming things (grep, ag and wgrep) etc.

In general IDEs are very bad at text manipulation and good at structural manipulation, whereas Emacs is very good at text manipulation and okay at structural manipulation (or excellent for it but only for Lisp).

The set of functionalities in an IDE is fixed, whereas Emacs is extensible, by it users.
Hivestack | Montreal, Canada | HYBRID (ONSITE/REMOTE in QC only), FULL-TIME | https://hivestack.com/

We are a young startup in hypergrowth phase.
We have created a full-stack programmatic digital out of home platform and are currently running in 25+ countries

We are mostly a Python shop but we also have some Spark/Scala, Golang and JS projects.
Here’s for more info on our stack: https://stackshare.io/hivestack/hivestack

We have opening for several position:
- Python/Golang developers
- DevOps
- Data Engineering
- Team Lead / Engineering Manager

You can see the full Job Description here: https://hivestack.com/careers/
I agree, but where's boundary?
Collaborative planning, the forgotten step of accessible development
That's how the newspaper business approached the internet and it nearly killed them all. You can't do this in a competitive field where operating your platform is expensive. Excalidraw is probably run by a few people not trying to get rich and able to iterate on code at their own pace. That is an ideal situation to keep it simple. It just doesn't work for most businesses.
nobody claimed that, so i'm not sure why you mention it. you know it's possible for someone to actually just not understand right?
Controlling the CPU Scheduler with BPF
It is a HUD. This currently touches only a small part of what I need to see implemented. Directions and turn-by-turn navigation, overview-map of riders position, highlighting obstructions, traffic congestion...

Looking not only at computer games but aviation much of these is in use for many years. It a more efficient and saver to show this transparently into the field-of-view.
Link should probably be changed to remove the anchor part, as this jumps to the bottom.
Hotspot (https://www.kdab.com/hotspot-video/) :)
What's slow in your opinion? I assume it's either config evaluation or the state refresh?
If you decide that anything some society has determined to be acceptable, you'll not find very many things to call barbaric. Certainly you'll find no cultures which engage in barbaric behaviour, which is ironic since the original meaning was basically "anyone who isn't Greek".

To hold that no culture is barbaric can be seen as a very enlightened position, but it is of course also a position that does not provide any moral guidance at all with respect to established customs, such as for example Kaluli manhood rituals where the young boys must ingest the sperm of their elders by the Anus (a practice much reviled by the nearby Etoro who instead prescribe oral ingestion).
Not knowing if today will be the day your life will end is not a question over niceties. It's a form of torture. The critiques from human rights associations and the U.N. committee against Torture here aren't exactly new.
yes I used Google Glass for a year. it definitely obscures your vision compared to not using it.

it's funny you mention games because most games I've been playing have been moving away from having a HUD visible all of the time, and only show it contextually.
There are many issues with this article. First of all the fact that the hashes are truncated does not matter, collision attacks are not an issue in this case, preimage attacks are. Secondly, in recent linux kernel versions /dev/random is basically the same as urandom but better as it blocks at boot until enough entropy has been collected, although i can see this being an issue in older android devices. There is also a lot of nip-picking which is sadly common in soatok articles, but I will agree with the conclusion, there are better meesagers out there.
> Almost all the references from point to articles written by Chinese scientists in the last year. Color me skeptical.

Except the first reference, which is the entire point of the article: French scientists found bat coronaviruses very similar to SARS-CoV-2 in Laos.

No more partisan posturing please. You are straining to defend preconceived notions by ignoring new information, rather than paying curious attention to the world around you. Turn politics brain off, turn science brain on.
Why the downvote? Does someone don't like open APIs?
Also in insurance. I'm a big fan of using python to generate "read-only" pretty formatted workbooks. It makes the process more reproducible but people who "need my data in excel" still get that.
It feels more inconsistent to me that people online are so outspoken in favor of criminals' rights and perfectly silent on victims' rights.
Personally I prefer "Taiwan" and "West Taiwan" solely to annoy pro-CCP shills/50 cent army posters.
I 100% agree with you that math is real and that there is real benefit from learning it. With that out of the way,

> It's treated as some kind of tournament to get into college

and

> But most people admit that they forgot all of their math immediately upon finishing school.

in those 2 quotes, you summarize the current issues with school mathematics. There is no real benefit in learning school math as most people will just use up to 6th/7th grade math in their daily work. Even professions that "do math" daily (like carpenters) have, most of the time, figured out ways to do it "quickly" without really doing math (see, for example, the diamonds on a measuring tape and how they are used to solve the Pythagorean theorem).

That leaves school math as "the great sorter" of students. Students that "can" take advanced math classes and use those as leverage in college admissions. To see this process in motion, look up parents' concerns with California's new math sequence and how those usually involve college readiness (as in, college admission advantage) over career readiness (as in, calculus II is needed for whatever profession my kid will do after high school).
Not bothered its a leading cryptocurrency name ?
My impression of the USN, and specifically submarines (from the outside looking in) is they're trained as primarily as nuclear engineers who just happen to have some rather awkward sleeping arrangements.

It's very possible that this results in a slightly different management structure compared to the army.
Efficient Recursive Levenshtein (Edit) Distance Algorithm
My read of the headline was that this was malware in embedded hardware electronics systems, or describing some exploit / attack surface for same.

May I suggest that a clearer phrasing would be ‘Malware embedded in Coa’? Or is ‘embedded malware’ a somewhat confusing term-of-art in the cybersec community?
The US has imposed similar "peaceful" economic sanctions on a few countries until they obliged to requests too. This move is hardly specific to Chinese diplomacy.
Not if you were on a big mountain, enjoying an Alta Vista
That's fair, but it describes the change in great detail, and makes it easier to figure out that the primary issue was only on Windows systems.