skysight-inc/HackerNews huggingface dataset:
And you’ve concluded that those things don’t have a causal relationship?
Unfortunately NSO group likely has a different definition of weekend.
There's a lot of talk now about a number of things including web application firewalls and how we must fund open source and I hope something good comes out of it.

However, the thing that I wonder is why we still are in a position where every single application and every single dependency can attempt to load dlls (ref npm hacks lately) or reach out to the network?

Why is Deno the only one who seems to have a good solution for this, and why doesn't Deno have more traction?

I know one can do a lot more using outbound firewalls and selinux but after seeing how brilliantly Deno solves this I wonder why not every program lets me do this.
Lets address some points instead of cargo culting.

How would you go about the left pad issue?
Oh boy, we're gonna need more than 4,294,967,296 IP addresses!
I hope you are answering the parent. Because rhis is exactly what I said. You as a user of any foreign library have to look through it. You can't trust code you didn't write. That is also one of the reasons why in the past so many parts where reinvented. Those guys where not stupid, but why on eaeth would you risk the security of your work just to not write the login process yourself? And then some smarty pants came and told you this is all unnecessary and it is "best practice" to just include some library, package or whatever it is called nowadays.
A couple months ago, Twitter announced that all staff are required to use U2F for their accounts. Why not have this requirement for important accounts, as well?
Radiance – A Validated Lighting Simulation Tool
Yup, 2011. That's the one. One of those US presidential campaigns stayed up throughout because of EBS-phobia.

Geez. We have decades-old cloud war stories now? I suddenly feel really old.
I've emailed several film and TV companies in Japan to buy film rights, and never received any Japanese spam. Ditto with China.

The only Asian "spam" I observe are way off YouTube recommendations, which have nothing to do with my interests.

Advice: improve your spam filtering.
Table four from the Twelve Tables [1]:

> A father has the right to kill his deformed child.

These were laws in ancient Rome, not Greece, but the societies shared many beliefs and customs. Not that this is proof one way or the other about what was common practice, but people thought it was important enough to lay down in law. [[the father also had the right to kill any of his kids, so it's interesting they spell this case out explicitly]]

[1] https://historycooperative.org/the-twelve-tables/
If you imagine a line from Jupiter to Saturn and continue it again about the same amount (roughly down to the right in the northern hemisphere) you should see Venus, should be brighter than Jupiter.
Parler has serious issues and the main problem is that it is dominated by white far right conservatives.
Here's a subreddit that does a decent job of documenting every terrible thing posted on that site, including but not limited to anti-semitism ,islamophobia ,transphobia and other forms of racism etc.
https://www.reddit.com/r/ParlerWatch/

By being on the site, someone is giving an endorsement to its users and indirectly to the riots that occurred on Jan 6 in the Capitol as well as the unfounded allegations of election fraud.

And from what I have read about Fediverse, it had amassed a million users, but for the investment it will require someone to post regularly there for relatively limited exposure, governments and companies may not find it to be worth it. It is (a sort) of a chicken and egg problem.
There's a lot of nuance missing from your post. First, $6bn between 1993 and 2000 is worth a bit more in today's money. Second, the $6bn you mention is only what Intel Corp received directly; money to their suppliers, subsidiaries, companies they acquired immediately after the subsidy was granted, etc won't be counted in that total. And lastly, if you counted 2021 in the number you'd have to add tens of billions more due to a huge surge in chip manufacturer subsidies passed by the senate recently.

There's nothing wrong with subsidising Intel. They're competing against countries like South Korea whose government recently announced a package of chip manufacturer subsidies worth $450bn after all. They won't be able to compete if they're aren't given a little help.
Good reviews also barely mean anything these days. The worst item I have ever bought online, which damaged itself on opening for 100% of buyers, had ~4.1 rating. At this point, it is fair to say getting less than 4 stars means the seller was too poor/naive to hire "online promotion" services or whatever they are called, rather than anything else.
Our foodways still often have less than savory actualities, often filled with exploitation, environmental destruction, and far too often, literal slavery.

From chocolate to ahi, we would be fools to think that the way we desire to eat doesn't some things that could be done better.
Probably. Mr. Beast is a fairly popular YouTube channel and he transitioned from cursing to not cursing in the past few years. Since he’s dedicated to getting more views and likes perhaps more so than any other human in history, if it helped at all, he would be dropping curse words every other minute.
On the topic of 3D printers, 3D has a lot of industrial, repair/replacement, design and medical usage so I would not say it is limited to novelties and prototypes.

Some chirugs will do a test run on a printed hearth before they do it on a patient (they actually scan how the hearth looks like in the patient and model after it), protheses are being printed to custom fit per patient,...

Yes, home printers are still very into novelties and arts. But for custom parts 3D printing is very common.

As soon as mass production starts then yes, other techniques are much faster.
Meh, those are PR words. India’s democracy is a facade anyway. Might as well call China a democracy, both follow the same (Nazi) ideologies.
My computer is a completely still but very useful machine...

Otherwise, a little light on details. More like "here's this very high level idea, it's cool, bye".
I wonder if counter-suing them would be an option and lesson to teach the crooks.
Plus it would be an amazing publicity
Instead of expecting every library to follow best practices, can this be solved in the package manager instead. First of all, require all non-lower constraints to include a mandatory reason field. Heck, while you’re at it, mandate a reason-field for including the package in the first place, package.json doesn’t even allow comments for describing why a package is included, sigh.

Second, downstream applications should be allowed to easily force an override from an upstream constraint. The constraint might have been added because it broke feature foo in the library but I only use bar so I can accept that incompatibility.

In fact pip’s separation of requirements.txt and constraints.txt does play quite nicely with this model. Libraries could, in theory, provide a constraints.txt file with a tested combination of packages, which downstream applications are free to completely ignore or to use in pip install -c. In practice it’s a fair bit of administration so might be tough to apply. Would have liked to to see some more mentions of constraints.txt mentioned more in the article btw, this is the pip alternative to lock-files, but it is a rather new feature so I guess that’s why author advices pip-tools and frozen requirements.txt instead.
Protonmail is down for maintenance until 09:00 UTC
Well however liked or disliked India’s PM is - at home or outside, he is anything but a nobody. Especially to the western neighbours. So I hope, for your own intellect’s sake, you said that in zest :)
They likely do use them, and get work done, and from a productivity standpoint might be faster without the red tape.

Discussions like this make me wonder if as a society we'd be better off not trying to perform the impossible: have OpSec that is flawless and never leaks data that might be misused; but to not allow the misuse to happen.

Medical information misuse touches at least the topics of discrimination, selecting victims of misinformation campaigns, exposing personal issues and preferences (E.G. did someone get an abortion; is a topic ripe for abuse, as are medical histories related to other issues.)

Living in a glass house is far from ideal, but in a world where individual rights are better defined and protected, data security could be more standard.
Ask HN: Do companies named after HTML elements have advantages in SEO?
Went to check my email. Got a big red error message that says it's down for maintenance. Had to find the status page to see when it will be available again (09:00 UTC) apparently. https://protonstatus.com/
True. It's also very cheap to add that functionality, since GPS breakouts that can be accessed via UART can be bought on Ebay for as cheap as $11: https://www.ebay.com/itm/363562034686
> have every commit in master

Yes, but a PR commit is not in master.
You can get them in stainless steel too, e.g. https://www.paperandtea.com/products/p-t-infuser
I don't agree that it should be checked into source control. I do believe it should be cached somewhere. How much bandwidth of popular sites are used by redundant actions. A single request for a 2GB archive is much better than a 1,000,000 small requests that are all a few KBs or MBs in size.
Off topic?
I just read an article about Sesame Street, and followed it up with an article about tornados, followed by a video of "Planes I see from my front yard." I'm not sure what topic HN really falls under.
"You can _not_ buy thousands of rounds worth of any ammo other than .22 with a week's worth of minimum wage pay (if you know something that I don't, let me know where you're finding these deals)."

It's pretty close. Ammoseek shows 9mm starting at ~$0.30 per round, and most other popular pistol calibers starting at ~$0.40 to ~$0.45 per round. And it's easy to find better deals if you're checking the r/gundeals subreddit periodically. That puts 2000 rounds of 9mm at around the gross income weekly income for someone earning $15/hour.
at the bottom:

>[1] See “Methodology” for information about how estimates were produced
He’s a nobody especially to the western neighbor. Nobody knows or cares about him there. I assure you, India doesn’t come in a conversation unless it’s cricket season :)
Golf also used to be the golf of the common people, too.
> why more companies are not using this in their marketing campaigns

It might be an effect of the basic premise of teabags.

Customers caring enough about waste, eco behaviors etc. already have a decent alternative: loose leafs. Compared to other infusion beverages, the jump from teabags to loose leafs isn’t that big, which makes it harder to mark a clear big eco conscious claim on teabags.

Arguably there has been more traction on biodegradable nespresso pods for instance.
Yarn pnp was in a poor state tooling-wise last time I checked it a year or so ago. Too many tools depend on ./node_modules/ (or actually an entire module.paths thing) to exist on a filesystem. Was it resolved somehow?
Bet it's log4j.
Does it count if you don't use a computer and just watch a show on Netflix?
You’re correct on the vast majority of people aren’t violent and unreasonable part… but I very much think you’re missing a point.

Yes, you could mostly always buy something like a part to make a gun fully automatic or a suppressor online. Anybody with the slightest technical skills could make the full auto parts with some metal stock & a dremel. But a lot of people aren’t thinking into it that much when they’re impulsive.

But in the year 2000, you would have to put a bit of effort into finding these things online, and if you were underage it would have been much harder to instantly/easily purchase.

Now wish.com and everything else exist - you can find the parts in seconds, and you have a plethora of ways to easily purchase them underage & shipped to your door in two days.

Yes, the vast majority of these are ATF/Fed or whatever else honeypots… but sometimes that doesn’t really matter if you already have a plan & are ready the day your parts come in.

1000 rounds of 7.62x39 is ~$350. Do minimum wage workers not take in ~$350 weekly anymore?
Sharing a free serverless and low-code platform (still in beta state)
Also /r/OctAPI of course!
In Cmake mark third party libraries as SYSTEM. I think this translates to -isystem instead of -i and should not generate warnings.
As opposed to several years of literal dictatorship in Pakistan? Sure, Imran Khan has been legitimately elected but Pakistan has been far far worse at democracy than other South Asian countries.

https://freedomhouse.org/country/pakistan/freedom-world/2021

https://freedomhouse.org/country/india/freedom-world/2021
You could also consider to decouple the sensor from the Christmas ornament an broadcast the values over BLE or WiFi. That way you could place the sensor in the window without rethinking the rest. I think the greatest disadvantage would be that you have to relocate the sensor with the ornament.
Show HN: Pastebin-like tool with focus on privacy and security
Hmm. Just saw this and it seems it's all over. Pity it wasn't posted yesterday morning!
I remember telling my dad that the internet is serious back when it was reported to have a million users. We used to argue because he thought it was just a passing fad and everything was fake.
Yeah, I had a scare about plastic in the tea bags a while ago, as I tend to drink 1 or 2 cups of tea a day from tea bags. I found this brand, Clipper [0], that makes a plastic-free tea bag. Shipping from the UK takes a while, but the tea is pretty darn good, and I'm glad to no longer be ingesting micro plastics.

[0]: https://www.clipper-teas.us/about/our-sustainability/
Or read the open access, no ad, and what appears to be upstream source: https://www.nature.com/articles/d41586-019-01789-0 that covers the Macaque question along with the completely omitted loss of function topic, video, pictures, and other details.
Looks like it's the opposite. They'll sue in jurisdiction where the other guy have to appear in court.

If not - they'll auto-win and Verisign will happily transfer the domain to crooks.
The confusion between Git and GitHub
I suppose that in the brain most neurons talk to their relatively close neighbors.

To get something comparable to brain tissue, we need to be able to disperse the computing power and memory across a large number of small nodes. Currently both CPUs and RAM are hyper-centralized.
I mean, I didn’t claim it to be a (largest) democracy =D
I agree, writing (and arguably configuring) robust logging libraries isn't much fun, and not easy to do yourself.

So, don't. Ship the logs as quickly and as simply to a system which is explicitly for log management.

The choice isn't between writing huge logging libraries or using log4j, it's whether you want an application to handle its own flat-file logging and rotation in the first place.

Java has always been obnoxiously complex to steer towards sane, basic, modern syslog, which I think is a shame.
Dude get your facts right - the USSR and USA leaders were trying to bring global nuclear winter to thwart the global warming. They were willing to put humanity through suffering to save it. But their efforts were cut short by the deep state.

Which lead to the events in the documentary mad max.
Nodejs has a node-gyp problem. Every node_module that somewhere down the dependency tree requires a "native" module will require recompilation on the target machine (or in worst case: the user machine).

I really would have hoped that the NaN module related problems will be fixed over time, but here we are in 2021 and nothing's been fixed.

As long as npm doesn't use binaries and headers, those things will stay broken. The thing that they argue with to use "always source" is kinda ridiculous when considering that probably the most of all npm packages are using webpack or another bundler before pushing their own package to npm - because npm itself has become impossible to use as a package manager alone.

I mean, a couple MB of libraries with the wrong dependencies can lead to multiple phantomjs installation, which is an inactive, deprecated, and unsecure project for years already... just because of some unit tests that have no place in a production npm package.

My hopes are that more sane developers come together, switch to ESM and implement better policies for evaluating their dependencies (e.g. blocking sources from people that have more than 1000 npm packages and brag about it).

Pikapkg was a great idea in my opinion, and I was using it before they moved the project to building astro as a platform :-/
Zoo the doctors vaccinating the bin Laden kids were no spooks?
https://bitinfocharts.com/comparison/bitcoin-transactionfees...

1,7$ at the moment, which isn't much. I used to remember it much higher.

But for me, a wire transfer is free though ( Belgium - European transfers, also suppliers swallow transaction fees)
This book has been a godsend for my chronic pain problems, including, somewhat surprisingly, neurological stuff: https://www.amazon.com/Trigger-Point-Therapy-Workbook-Self-T... (I suggest looking up "whiplash" in the index.) As weird as it sounds, when I massage the muscles around my head and neck, I get noticeable cognitive changes in the minutes and days that follow.
Disappointed to see so many knee-jerk reactions to this. Vendoring dependencies is a simple way to ensure consistent build inputs, and has the bonus effect of decreasing build times.

To respond the two major criticisms:

1) “It takes a lot of space”

Don’t be so sure. Text diffs and compresses well. I have a 9-year old Node repo that I’ve been vendoring from the beginning and it’s only grown 200MB over that time. (Granted, I’m fairly restrained in my use of dependencies. But I do update them regularly.)

But even if it does take a lot of space… so what? If your dependencies are genuinely so huge that this is a problem, then vendoring may not be right for you. But you could also use one of the many techniques for managing the size of your repo. Or just acknowledge that practices are contextual, and there’s no such thing as “best practice”—just a bunch of trade-offs.

2) “It doesn’t work well with platform-specific code”

This can cause some pain if you’re in a multi-platform environment. The way I deal with it (in Node) is by installing modules with --ignore-scripts, comitting the files, running “npm rebuild”, and then adding whatever shows up to .gitignore. I have a little shell script that makes this easier.

This is only an issue for modules that have a platform-specific build, which I try to avoid anyway. But when it comes up, it can be a pain in the butt. I find its pain to be less frequent and more predictable than the pain that comes from not vendoring modules, though, so I put up with it.

Bonus) “It’s not best practice”

Sez who? Dogma is for juniors. “Best practices” are all situational, and the only way to know if a practice is a good idea is to examine its tradeoffs in the context of your situation.
Yeah, and it’s a dumb guideline. If there’s no feedback we will never improve. Slashdot used to have meta moderation for this very reason.
Feels that way in Australia lately.. We have to vote for Party X or Party X light.
>> This is a great idea.

Indeed, but cottage industry of ambulance chasing lawyers are heavily lobbying politicians to not let these great ideas see light of the day.
That's still far too low. It should be in the high 90th percentile, where everyone who wants or needs to use it can. When three quarters of the population of a country have no access even if they want it its a sign that more needs to happen.
Like the people you list don't exist on twitter.
I might be misremembering but at runtime, the Node process loads .pnp.js, which is a kind of monolithic “compiled” modules file containing all the modules installed. No reading of the .zip files occurs at runtime. (Again, I might be misremembering or have misunderstood. Please confirm/deny this if you know.)
Pfizer and Moderna Investors Became $10B Richer After Omicron Emerged
Some teams force all pull requests to be squashed to a single commit.
The State of Obesity in India
An Individual Contributor’s guide to roadmap planning
I highly recommend this movie https://en.wikipedia.org/wiki/Dark_Waters_(2019_film)
That's like saying criminals are notorious for being under 6' tall. There exist state-sponsored hacking groups. There also exist plenty of not-state-sponsored hacking groups too.
Detailed breakdown of Nubank’s F-1 filling
This week, the world’s largest neobank, Nubank, went public. The article breaks down company’s F-1 filling.
CNN Producer arrested for persuade minors to engage in unlawful sexual activity
This would be highly effective at filtering out people with physical disabilities that affect typing. For example, I have chronic issues with my joints. On my personal computer I use an ergonomic keyboard (Advantage2) which has keys in weird positions. My typing speed on this keyboard is much lower than it was earlier when I used a normal keyboard. Nowadays when I use a normal keyboard, my typing speed is also slow because I am used to typing on the ergonomic keyboard, not on a normal keyboard.
Of course, it is by the metric of population, yes. By the metric of democratic freedoms, nope.
No reasonable search engine considers tags for indexing, so no.

If that's what you are asking?
Here is a "technically the truth is" comment:

The internet is not the (world wide) web. It is actually referring to the underlying infrastructure. The web, email, streaming services, VoIP, ... are working on top/using the internet.

The introductory paragraph of Wikipedia actually includes this differentiation: https://en.wikipedia.org/wiki/Internet

After reading the methodology section of the submitted page, I am still unsure whether the survey actually uses the terms internet and world wide web synonymously or not.
I use the old-fashioned snap traps. They work fine. Sometimes it's necessary to tweak the catch to make it more sensitive. They're made of wood and wire, and aren't an environmental problem.

I live near a greenbelt and there's a never-ending invasion of mice. If I leave the garage door open and unattended, they're in in a flash and setting up shop. The only way to get rid of them is the traps, and you have to get rid of them.

Peanut butter bait is irresistible. I used to use gloves to bait them cuz the books say they mice are deterred by human smell. They aren't. They aren't deterred by The Cat, either, as they know The Cat prefers human flesh. They're not very smart, either, as if you put two traps adjacent, they'll crawl over the body of their buddy dead in the first one and get caught by the second.
Eh, I'm not sure I agree. I think the natural tendency for people is to think "My case is different, I need the strongest tool for this job!". People stock their medicine cabinets with Extra Strength Tylenol instead of regular, or buy anti-bacterial soap instead of normal soap, because it's easier to go straight for the big guns.

Even in these small cases the information is tremendously easy to find and people don't look for it and/or care about it. The consequences of the wrong Tylenol or anti-bacterial soap are small comparatively, but when the consequences of bad choices get in the way of ecological conservation for no good reason, it seems like that's prime territory for regulation.
I'm against NFTs but seeing these posts I feel like using some blockchain with low fees that is dedicated for DNS would be actually a good idea...
I wonder whether it counts people who use internet, but don't know it. My grandma uses her phone to chat with me, check the weather, recipes and news. But if you ask her whether she uses internet or not - she'd say no and she has no use for it.