skysight-inc/HackerNews huggingface dataset:
Why pick McKinley's assassination as your evidence, and not, say, the Spanish-American War? And one person (however important) getting shot isn't what most of us think of when you say "people die".

And why pick that as the most recent example, instead of, say, the invasion of Iraq?
I used to have those: 8-24 characters among which 1 uppercase/lowercase, 1 special character among a whitelist, and renew that every 2 months. At renewal, must be different from all your previous passwords and the new password must be at least 3 character different from last one. SSH keys can't be used per security policy and the same rule has been applied to the password manager.

A pain.

And yes the most annoying is that it's never the same rules, and I resort to using Keepass or worse, my browser password-remembering system (stores passwords to Google/Mozilla servers)

Is bruteforcing passwords still a thing nowadays? Once in a while I tend to forget my Wikipedia account password and after a couple of failed attempts I get shown a captcha.

On another day, I got locked out of my own account because I was trying to log in using another mobile device with another SIM in another country.
Netflix elaborates on this in their blog post: https://about.netflix.com/en/news/new-top-10-on-netflix

> Figuring out how best to measure success in streaming is hard, and there’s no one perfect metric. Traditional measures like box office or share of audience (which was designed to help advertisers understand success on linear TV) aren’t relevant to most streamers, including Netflix. Having looked at the different options, we believe engagement as measured by hours viewed is a strong indicator of a title’s popularity, as well as overall member satisfaction, which is important for retention in subscription services. In addition, hours viewed mirrors the way third parties measure popularity, encompasses rewatch (a strong sign of member joy) and can be consistently measured across different companies.

Years ago, Netflix got a lot of flak for using "users who saw atleast 5 minutes of a series" as an indication people watched it. Quantifying video performance based on watch time has become more industry standard (especially on social media which loves autoplaying videos) as it accounts for retention.
It seems like hours watched for a subscription service seems useless, there are no ads to catch eyeballs why care how many hours watched if the person is still paying for it? It seems like the perfect netflix user would use the service infrequently but still pay for it.
I assume forums are trying to make it harder for spammers to sign up, but by doing so they are blocking users who don't want to be spammed themselves.
Wiktionary says no:

carcass (plural carcasses)
Concise and simple functional components are often desirable. But class components and OOP allow you to make components that are complex yet generic and reusable.

Example from real experience: I had an `InfinityScroller` functional component. The `loadMoreItems` prop signature was a function with ten arguments because different usages require different state data when deciding what to load.

I converted the component to class based. `loadMoreItems` became an abstract method. No more overly complicated type signature because I can just access and update `this.state`.
You can easily publish a snapshot of a bare Git repository on IPFS[0], and there are front-ends like git-remote-ipfs[1] which integrate IPFS into the Git workflow. The difficulty is that this only gets you a single snapshot. Any change to the repository results in a different CID & URL, which you then need to somehow provide to everyone so that they can see the updates. (This is where IPNS would come in, except it's still a work-in-progress. PubSub for name resolution helps but it's not enabled by default yet.)

[0] https://docs.ipfs.io/how-to/host-git-style-repo/

[1] https://openbase.com/js/git-remote-ipfs
I'd much prefer this were the case.

History strongly suggests it is not.

In large part because non-manifested risks, or not fully manifested risks tend to be dismissed or belittled, most especially when that denial is presently remunerative. Vaccination and non-pharmaceutical interventions against global pandemics, an economy based on massive surveillance by states / enterprises / other actors, global warming, CFCs and ozone depletion, use of lead (in fuels, paint, glazes, toys, and other materials), asbestos, tobacco, car and highway safety, racism and ethnic favouritism, industrial safety, mercury use, plastics, unoderised natural gas, mine safety, electrical codes, fire codes in buildings, ...

In the infosec / cybersecurity world we've at least the advantage of being able to provide proofs of concept which move a given risk from the theoretical to the manifest. Even then, effective reduction or mitigation takes far too long.

If there's a correction, I'd suggest that the onus be placed not on the advocates but the deniers. A marked penalty for advocating a position which turns out to be untrue with credible basis for knowing that it is untrue is one possibility that's occurred to me. How that would play out I'm unsure, but I'd be willing to explore the question.

You're advocating ought.

I'm describing is.
I think this is a non-necessary comment. This shouldn‘t be on HN. You might want to rephrase that.
Once a company receives funding at a scale rivaling that of state subsidized enterprises, there's a good chance it'll encounter the same pitfalls.

- operational ineffiency due to lack of pressure to make profits

- lack of competitiveness due to ability to undercut rivals on price, thabks to the endless amount of runway provided

- lack of a reality check internally as the company is seemingly always expanding, always hiring.
Getting more IPv6 loopback addresses would be nice in exchange. Every now and then it's useful to have more than one.
Interesting, I’d have said TV shows have an advantage in this metric. (How many top shows have less than two hours worth of episodes?) On the surface I think the charts show this, as only the most popular English movies are over ~15M hours but virtually all of the TV shows are.

Either way, since TV and Films aren’t listed together I’m not sure either one is “penalized” really.
Basically if you forget to query over an index and incur a full table scan, things are going to get very expensive, and it'll probably be a surprise since devs aren't going to bother checking charges run up.
Brave built its own crypto wallet into its browser
U.S. pensions are hundreds of billions of dollars short, vote to use leverage
Not many places will try a brute force attack directly on a login interface, but if your database is leaked the definitely. Nothing to rate limit an attacker then
How you managed to convert devastating footage of washed away bridges and roads into an attack on unionisation is something future historians are going to have to work very hard to explain.
https://archive.ph/i66la
> ...deal with database connections.

I think, you mean connection pooling?

Amazon Aurora has http endpoint too, for its serverless offering.

I use S3 with duckdb files in 'em as a sharded OLAP database of sorts. No transactions or joins though, but my workload is write once, ready plenty. Hoping Databricks' serverless SQL is a good fit once it emerges out of beta.
When I'm writing desktop software, I don't have to worry about whether yaml adds a dependency that I can't afford to maintain.

People who develop web apps want that level of convenience. And if we can't solve the security problem in a distributed fashion, web development will end up owned by big players who can pay the money to solve the problem in a centralized fashion.
Microsoft states that x64 emulation is only available on Windows 11 on ARM PCs
At risk of maybe going too far on a tangent, I understand this idea and the species example is a good one.

The planets are different because they were first defined as mystical and cultural concepts, before they could be understood as scientific ones. There are plenty of people who still think about the planets as cultural concepts rather than scientific ones. (What is a Jupiter? It’s a thing in space that our culture has named “Jupiter.”) I think we should define the planets the way co-star does. By listing them:

DATA PLANET = MERCURY | MARS | ETC

Scientists can have their own definitions of things, but they will face resistance if they try to dictate culture through their definitions.

https://www.costarastrology.com/why-haskell/
Shifted to the right? Compared to when?
If management plans to work at the company for life, sure. But with average tenures in the 2-4 years, they're also incentivized to ship new products/features.
CHM homepage says it’s closed to the public ‘until later this year’.
That's good to hear! Although I would have been frustrated and made anxious by their security practice. Did they change their security practices after that 'event'? And did you manage to regain access to your development box?
That's got to be one of the finest tutorial videos I've ever watched (and I watch a lot)!
>"The dependency graph includes a lot of crap, like packages containing trivial single-line functions like "is-object" and "is-stream".

I've never understood introducing this kind of dependencies. Depending on the legal conditions (usually favorable) one can simply extract the code they need from those packages and put it into some consolidated lib on their own.
I’m just mad we’re losing out on “Planet X”. When I was a kid Pluto was a planet so the new one was X (10) and it was cool. Now this new planet is just going to be planet 9 again… totally lame.
Carousel on top of the list has "Watch now" link for each entry.
Certainly for someone with defective default hardware ;)
the zeroth draft gives folk with an allocation a free new IP address.
You just reposted this trhead
Most people don't look at reviews before watching something, especially on netflix, and the movie seems to tick a lot of boxes for a lot of people. Then they watch it.

I wanted to like it, but it was just so unlikeable. Half of that for me was Zach Snyder's cinematography (which he did himself).
> Were there any NATO bases being build in Ukraine (or Georgia, as another example) at the time of Russian military incursion?

No. Ukraine had just started talks with NATO about the possibility of joining. Not sure why this is relevant, I was already calling this a pre-emptive move from Russia, not a reactive one.

Georgia is a different case, as they had not been attempting to join NATO as far as I know. Russia is imperialistic, and like every empire, they do not take kindly to supposed vassals tryin to assert their independence for the sake of their people.

> Who is doing that? Yes, it is obviously nice to have a buffer from "hostile NATO states", but there are multiple other considerations why Russia would like to control its neighbors (economical, political, ideological, etc.).

I should have presented a stronger alternative, you are right that 'pure malice' was a straw man. The better point would be that, while Russia's imperialistic, controlling tendencies need to be stopped by the international community (as is true for any other imperialistic tendencies, such as the US or China's), bringing hostile military alliances to Russia's borders is not a stake way of achieving this goal. NATO expansion at Russia's border is too big a peril for Russia to ignore, and is bound to provoke a reaction. Other diplomatic means of protecting Georgia, Ukraine, Moldova etc. are much more likely to cause a stable peace in the region, and assuage tensions.
Don't forget the AUPs of the advertising networks, and the financial institutions that receive deposits from them, and the sites that convert cryptocoins into usable currency, and the tax/currency 'acceptable use' laws of the country(s) of all parties and currencies involved.

You can, of course, choose to violate any/all AUPs, but it's best to be aware of them before doing so. Unwitting AUP violations are still sufficient cause for enforcement.
Goodness Factor
As much as i am with you on this, i must say it‘s pretty good for someone like me.

I usually swipe notifications away. Then forget about them.
Lock the screen and go „ah, damn.“

But obviously, this shouldn‘t be forced on normal people.

Apple has lost what they had.
If you lived there you'd understand. It's a common theme.
Rittenhouse's mother asks for donations to legal fund
Going the other way round, I found one article where "carcus" is mentioned in singular form.
The number of transforms that Babel is doing with an "evergreen" config ("last 2 browser versions") at this point is effectively miniscule. It's a massive toolchain for what increasing turns out to be a minimal amount of actual work. "Last 2 Browser Versions" is effectively everything through ES2019 at this point which covers almost all of the "modern JS syntax". If you aren't using custom transforms you might not be transforming anything that matters in Babel in 2021. I've seen a bunch of projects with huge Babel pipelines where the only actual transform was Typescript's type removal and at that point, if your codebase is entirely Typescript, Typescript has all the downlevel transforms you need "baked in" (and arguably a little bit cleaner and simpler to Babel's kitchen sink but also still somehow millions of plugins approach) and it's just setting Typescript's compile option to the ES level you are most comfortable with. (In 2021 that may even be as high as { "target": "es2019" } or higher in your tsconfig.json and even there Typescript's not going to even need to downlevel much.) Typescript can also transform TSX/JSX to JS without the need of Babel, if you are using React.

Even ES2015 modules which some people still think is the big reason to keep Babel around: a) has full Browser support if you use type="module", but most people still want to pack their JS because just about no one is assuming HTTP/2 or HTTP/3 yet, and b) Babel has never done module format transforms, that's always been the domain of your packer (webpack, parcel, rollup, snowpack, what have you).

If you are updating your project stack in 2021 right now my personal top recommendation is that I really like the approach of snowpack (https://www.snowpack.dev/): ES2105 modules with <script type="module"> dev experience (which is great), great Typescript support, and a simpler overall config experience than most other options right now. (It uses esbuild under the hood rather than babel for dev and basic transforms/bundling. It can optionally piggy back webpack and parcel for Production bundling that needs more "power".) Especially that <script type='module"> dev experience feels great now (with Hot Module Reloading too) versus waiting for a full bundle even for dev builds.
I have the first omnia version (of three). Will buy the next version.

Really pleasant experience. Great all in one home router. It took my one minute to setup up and nowadays I got bird on mine for BGP LB with a home k8s cluster. One of the very few open products that is nice to use.
Firefox's 250k LOC are riding on the millions of lines of code of the underlying operating system and GUI | TCP | audio toolkits that it used. To compare it to npm development, you would need to factor in the total footprint of every package that you had to install to compile Firefox in 2011.

... And I think it's an interesting question to ask why we can trust the security of, say, Debian packages and not npm, given how many packages I have to pull down to compile Firefox that I haven't personally vetted.
X.400 was actually pretty great and was definitely better designed than the disaster of SMTP (I spent my youth in the email deliverability industry and know all the ingredients of that sausage), but it wasn't a network transport protocol. There is no way that the Internet could have been built on the OSI transport and routing implementations. They were not good.

Nothing has stood up to as much scrutiny and scale as TCP/IP. The simplicity is definitely an important part of it. Protocols that are used by trillions of devices need to be simple, and the equipment used to switch and route their traffic have to defer as much handling of state to the clients as possible. The more state that routers have to maintain, the less reliable they will be. TCP/IP accomplished that and that's why it was better.
OP here. To clarify. The affected firmware versions are always available in the detailed description text. Its just that we couldn't show them in the header due to parsing failures in few cases
Sometimes. Sometimes they're so progressive that it ruins the narrative and dramatic tension. At this point it ends up being a surprise when the terrorists aren't really a secret conspiracy run by a capitalist defense contractor or rogue domestic spy agency of some sort.

And it's always the rich widow and never the creepy janitor who ends up being the murderer. Can't "punch down"!
I hate working for someone irrespective of what I do. Starting and running a successful business is not easy. Working in the current paradigm for a living is a curse. I have never once felt any fulfillment from work in my more than a decade of working. I’ve always been paid really well and the workload has mostly never been too bad. In my opinion some people are just built this way and I will probably never be happy as long as I’m working. On the flip side, I’ve taken a few years off here and there and I’ve literally never been happier or bored during any of those periods.
you mean bubbles as echo chambers, i mean bubbles as semi-permeable barriers
I only imported 10 dependencies, but those 10 dependencies each had 10 dependencies which each had 10 dependencies which each had 10 dependencies and all of the sudden I'm at 10k dependencies again...
They manipulated themselves. "Let's boost publicity for this clown! It makes the Republicans look bad! He's smearing all the other primary candidates! We might even be able to make him win the primary! Plus, it's good for ratings."

Yeah. Brilliant. (Though it probably would have worked if the Democrats had run anyone less flawed than Hillary.)
Everything is in the eye of the beholder. There should be consensus among scientists before drawing conclusions.
For those who don’t know, much of Serde’s magic is powered by Rust procedural derive macros, which generate (i.e. “derive”) code from a Rust struct definition.

You can, of course, write your own derive macros, and apply several derive macros to a single struct.

I wrote some to derive SQLite schemas and migrations and queries and auto-generate frontend TypeScript RPC code. So my source of truth is the Rust struct, and that sort of magically generates everything else.

I don’t know if this is a good idea, but it’s been pretty fun so far. :-)

There are also derive-macro-powered crates to do GraphQL, other flavors of SQL, WASM bindings, etc etc.
I'm sure they put the burden of proof on the person wanting the refund. Yikes.
Hey gang, I'm the author of this post! Very excited to see it show up on HN. I'm currently on Paris time (finally got some vacation in) but I'm happy to answer any questions you all might have about the article, our transition, and even TypeScript in general (although there are plenty of other smart folks that might have better answers than me on that last one).
Twin cylinder 4 Stroke 8.6cc engine on a mini dyno
Why I Like Jupyter Notebook
The statistics only count users in Japan. It is also used on other asia countries.
The longer term solution to this is public key signatures with an ephemeral key, rooted to some trusted identity source (e.g., a GitHub account with strong 2FA). There’s lots of work on that front coming out of the Open Source Security Foundation.
Sypros still out here scamming people.

https://www.evolutionm.net/forums/project-cars-build-threads...
link?

update:

Ha. Wiktionary has an entry which says "misspelling of carcass" https://en.wiktionary.org/wiki/carcus
OP here: There is a misunderstanding. The affected firmware versions are always shown in the description text. Its just that in some cases we are not able to show them at the "header" level due to parsing failures
Maybe there's a second one!
I'm no expert, but there's probably a balance. There are certainly some benefits to zoning out for a bit, but there's also an opportunity cost. Spending N hours a week in dial tone mode is likely a good idea, but spending A LOT of time idling is probably not ideal (for whatever your definition of an ideal life is).
Still. Generics. `extends` with ternaries. `infer` within conditional types. Type narrowing. Lots of the language quirks.
It gets worse: if you use 2fa the security code generated by the symantec thing is just appended to the password, so if your password is still a valid length, but then the 2fa takes it over 30 chars, it fails. It is the worst.
Paying gives you a static IPv4 that remains the same for as long as you're subscribed.

It's not a bad option if you're already paying for gigabit, sadly nearly impossible to get symmetrical gigabit here, but still for an extra $5 or $10 a month it's ok.
Most of this reads like a justification. Even the title "...get [it] so wrong" makes it sound like it just happened to them (the media). Trust in media in the US is at an all time low that didn't just happen. US mainstream media is utterly useless for any topic that's politicized somehow yet other topics don't suffer from this decline in usefulness. I might not be able to point a finger at the exact place where the problem lies but the problem is there and its not "just happening". A Justification why it "happened" is the exact opposite of what has to be done to fix this.
FWIW, binary pbm is a good format for these sort of images.

Heres a script to make one from /dev/urandom. Use something.pbm as the file name. size is in octets.

case $# in
1) file="$1"; size="100";;
2) file="$1"; size="$2";;
*) echo >&2 'Usage ... file [size]'; exit 2;;
esac

(echo 'P4
# random.pbm

'
echo $size $size
dd if=/dev/urandom bs=8 count=$((size * size))
) > "$file"
If anyone likes more folklorish stories, The Issa Valley is a really good read
The bottom line is that FSD as sold is nowhere near ready for prime time, still. As in, you always have to supervise it.

Who's wants to be their cars supervisor?

For me, it's either fully drive and enjoy your driving ... or full FSD and relax ... if it's somewhere in between, per Tesla, it's pointless (and don't get me wrong, lane assist and cruise control are handy, but they've been around for eons).
I watched the prequel first, Army of Thieves, which was actually pretty good.

I watched Army of Dead for just the one lock picking character, hoping he had a bigger role, and was sorely disappointed that I wasted as much time as I did.

I was on shrooms for the first movie, that might have biased my reception of it, but it was at least better than the second.
I've got a silly question, could there be some long term effects of an object that had been there?

For instance, could there be some kind of elasticity or residue, something like radiation that could cause a dissipated gravitational like effect long after the thing has moved on or otherwise "disappeared" in some way?

In this very likely wrong model maybe the thing causing the effect visited hundreds of years ago and was just passing through and so it's no longer directly observable...
I mean, maybe in the theoretical sense, but do conventional computers barely work in practice? Seems a bit of a pedantic argument.

Gil Kalai and others with similar arguments play an important role in the QC community. They keep the rest of us honest and help point out the gaps. But I do think the ground they have to stand on is shrinking, and fast. Ultimately, they might still be right – that much is certain – but it seems to me that the strides being made in error correction, qubit design, qubit control, hardware architecture, and software are now pushing the field into an exponential scaling regime.

To me, the big question is much less whether we'll get there, and much more "what will they be good for?"
Brave Browser Launches Built-In Crypto Wallet