skysight-inc/HackerNews huggingface dataset:
meta comment (npi), i find it really odd that very very often on crashes <x>, you really notice an increase in criticizing articles about <x>.
ShardingShphere's MetaData Loading Process
The vulnerability affects any process with network-facing endpoints that log user-input data. It's not LDAP-specific.
If you read this you might be interested in this protocol which started as an idea for truly censorship-resistance Twitter but it's evolving into a generic suite of many subprotocols that involve interaction between users.

https://github.com/fiatjaf/nostr

Kinda like the "fediverse", but improved in the sense that it is not federated, but also not P2P (because pure p2p doesn't scale).
Who could have imagined that if you give the whole of the market share to an add-salesman he would prevent you from blocking adds.
The "logical" people tend to cast doubt on the veracity of the evidence or believe unquestioningly according to tribe.

"This study was badly done", etc.
Have you ever heard of a better use case for clamped down functional languages? The only issue with crypto right now is how infantile it is - that's what most critiques boil down to (especially on this site). Any long term speculator is happy to see it, so long as they see the same problems the forever skeptics see but with a dash of optimism rather than arrogance.
You absolutely have a point- and yes it opposes the other.
The other point is valid from a scientific perspective though.
I highly recommend you read Norbert Weiners "Cybernetics the human use of human beings" to be able to grapple with the dualism at play. In particular he discusses the manichaean vs augustinian version of evil. He could not reconcile the two but reflecting on the general ways that information leads to effects, and the ontological conflict between "we have free will so its your fault you are oppressed" vs "its not your fault it was engineered to oppress you" - the problem is dual.

Social media platforms are giant algorithmic feedback engines creating the most reliable way for their regular users to fulfill their neuro-chemical and social needs. That these people cannot find better information in their mediasphere means that we need to encourage people and remind them of their agency - yes - but we cannot leave it at "words of encouragement" when the other end is "massive highly personalized feedback loop of all the people you miss seeing"
Most developers here are focused on business related development, to the point that many technical details are forgotten.

It might be different in other companies though.
> Probably the AWS managers running this are foreigners and dont give a shit about this country's laws.

Incredible.
How did that conversation go?

“We like your solution but did you seriously just use Maven?”

What did they say exactly?
Mind that Strong Towns isn't about picturesque communities, but about sustainable economics in the face of rising costs of extensive infrastructure and low income generated per area.
Apparently "best tool for the job" means find he bottom of the barrel that can still engage somehow with the codebase. This Idiocracy went to the point where returning function pointers gets questioned during code review because "this might be too complex compared to imperative call".
> That’s nice when you and your counterparty are part of the same democracy, or potentially allied ones. But how do you enforce contracts when your government and their government are at war?

You should look into actual historical examples here!
Navigating well designed, huge monorepo Scala codebases is surprisingly easy. Spark is a great example of a huge monolith that's relatively easy to work with considering the complexity of the app.

If you follow the design principles outlined in this doc (https://www.lihaoyi.com/post/StrategicScalaStylePrincipleofL...), Scala projects are really refactorable, which is nice.

But I've also worked on lots of large Scala codebases that are completely incomprehensible and painful to change. Scala allows for devs to make beautiful monoliths, but that's not usually what happens.
It is worse than nothing, because incorrect positive results and non-published negative results lead people to waste years of their lives building off something which is not true.
Right; distributed smart contracts complement legal systems, like a road network complements a rail network.

Of course, that’s just the simple, “immutable logic” kind of smart contracts. The “updatable policy” kind of smart contracts are really just a way to encode and implement a legal system. (See: the regulation model in security tokens.)
Wow, Georgism is actually being discussed again. I guess cats do have nine lives.

I for one hope it makes its way back into the political mainstream, as unlikely as that might be. It's really quite a brilliant and simple system of taxation.
Yeah that’s got to be up there on the list for dumbest technical related rejection I’ve ever heard of, particularly if the code was done well otherwise.
> web 3.11

I hear there's something called "Web NT" (new technology) that'll be big in 5 years.
As an Indian driver, I'm worried about bumpers and mirrors getting cameras and other electronics which makes scrapes much more expensive. My car has electronic mirrors which fold forward if something overtaking from behind gets too close. Ill be scared of driving a car with cameras on the mirrors.
> People like personal transportation and big detached houses with yards.

People like these houses so much we have to pass laws banning other types of homes on most of our residential land.

Gotta make sure they don't accidentally demand the wrong type of housing!
Right click -> Copy Link to Highlight on chrome
The matter is different, the article is not using the language I understand you assumed.

Its point is "a large number of people are tribal - truth is secondary to them, as they live in an inner world of familiarities, not of "intellectual"¹ structures: if you want to change their mind, to use obstensions and theorems is inefficacious: you can change their mind more easily - and painlessly, for them - with methods from the mental functions they live in".

Note: unfortunately, some of us think that using a non-objective language is manipulation, and call that morally inappropriate. There is a difference between "treating children like children", and "treating children with awareness".

The author of the article is not intentionally² saying that you, andi, or people you probably would call "normal" (or mathematicians who know about non working theorems, or engineers knowing that engines work or not work through facts and not social cheers and frowns), believe or not absurdities: it is advising you to be careful when breaking the bubbles of entities that you think should follow logic and facts, and instead are living a completely different inner world "of sensation". They do exist.

¹"intellectual": term to be read here in the common acquired sense, not in the pure one

²..."just factually".
> but I began to run into issues related to client cert auth with private repositories.

Yeah, I think that's the worst thing about private infrastructure in 2021 is getting those certs correctly installed and seen by the software and both sides.

I'm thinking that tailscale or something like it may be a better alternative in the future where authorization is at the link layer before the tcp connect can happen.
But why do I have to care about that? Due to the overreach of US policies even companies in countries which don't have sanctions against Russia have to worry about the efficiency and performance of payments going towards Russia. SEPA and ACH may be marginally performant but SWIFT is incredibly expensive, which is the only option you have for international transfers that doesn't depend on an American monopoly of power.
Not trying to nitpick, but just a heads-up that the term is " eminent domain" (I know it's a pet-peeve when people don't correct me if I'm saying something wrong, but feel free to ignore me if you don't care).
Cars are nice, but I don't think people like being forced to drive because the other options all suck shit.

People like being able to walk and bike places too, IF the walk and bike options are actually decent (in terms of safety/comfort and distance).

And people certainly don't like getting fat, and yet there's a strong link between car-dominant infrastructure and weight. Surprise surprise, getting exercise as part of your transportation is a lot more reliable than getting exercise as leisure.
Yes, I'm aware of that. However, I need to go through a mutual fund and rely on their stock picking strategy and fees (we've had mutual funds default very recently). I want to enter into a position in a specific stock according to my strategy at a price I'm comfortable at.

This again leads to the same point: why are we so _comfortable_ with the status quo?

I want to think about what could be possible, not what sub-par alternative is available today.
Parroting that we are in decline is definitely a contributor to the mood of doom.
There are a few, one of the popular ones on this site, https://www.science.org/doi/10.1126/sciadv.abd1705 shows the results are pretty similar in different fields [[a search for "replication" on hackernews will bring up some others]]
8u121 seems to address the RMI vector but not LDAP (per https://www.veracode.com/blog/research/exploiting-jndi-injec...).
In OP article the interfacing with real world is solved by some group voting.

In the real world, when disagreements arise, we have voting + due process + a hierarchy of courts. It could be argued that due process is an essential part of finding justice.

Baking due process into a smart contract is, although extremely interesting, probably impossible.
I know this is missing the point a bit but, if people had multi region enabled for their services, they would not have been impacted.

So the issue here was part aws centralization, part services not being ready for failure.

My company uses aws to run hundreds of serverless services and our infrastructure was not impacted despite half of it being on US region.
> One way to find out would be to offer a bet.

I have had a lot of success with this approach when people are trying to feign ignorance or muddy the waters. People often know the right answer and just don't want to cop to it. I'll say team A has all the best players and they are clearly going to win.

Well this stat isn't the whole picture, anything could happen, that player is pretty good too...

Ok if I gave you $100 to bet, which team would you put it on?
Part of this is being addressed through increased reporting requirements for data, software, analysis pipelines, pre-registered protocols, and the like. This has led anecedotally to some improvements in quality, and at minimum it makes initial due diligence on the publication significantly more impactful.
Using 9 for dialing out is a terrible setup that nothing should use.
David Friedman's book 'Legal Systems Very Different From Ours' might provide some inspiration:

http://www.daviddfriedman.com/Legal%20Systems/LegalSystemsCo...
1500 pages to govern 330 million people. Was there ever a time in history when an individual understood all the laws of a country?

The fact that the provision you mentioned was discovered is an argument FOR this system. The fourth and fifth estates need to play precisely this role, of parsing and communicating the actions of government and business.

Living up to the unfortunate pun, cryptocurrencies make crypto-fascists giddy. No accountability. No transparency. No arbiters of justice. Every segment of society decouples from accountability to any other: individuals hide from governments, governments hide from the press, business hides from government...

What exactly is the argument that you think would make that a worthwhile future to pursue?
Disclosure: I'm a very very large miner and I've been doing it across many protocols over the last 7 years.

You're right that miners choose profitability, but we also choose technology. I don't mine BTC any more, I mine with GPUs (and thus ETH). There are a dozen chains I could mine with these GPUs, but I'd like to see the success of ETH over others.

I can tell you with certainty, no quorum of powerful individuals influenced that decision.
"Seems feeble?" You can go on about implementation details, UX flaws, problems with the state of crypto today - but what's been mathematically obvious since Bitcoin's inception is that the right ledger is both permanent and open enough to disregard issues of trust (you could say it has infinite trust, which is an exaggeration, but in a practical sense this is how its used without blemish), and that governments and central parties are easily corruptible and capable of cheating in ways so as to never get caught or noticed.

You either know very little about cryptography and game theory or very little about government to be asserting such doubt. Crypto-currencies have many problems, but finding ones where trust can be taken for granted is trivial.
In a country where a sizable minority feel that simply wearing masks during a pandemic is an unconscionable infringement of personal liberty?
We recently started using a combination of tailwind and BEM instead of bootstrap.

It means that we can have our own custom "button button--sm" classes - a single place to change general styling - and on top of that get all flexibility of the tailwind utils for edge cases.

I don't think it's perfect, but it's so far much more flexible than bootstrap, and we don't need to duplicate loads of classes for each similar component.
>and have found that instead of producing garbage, the method is surprisingly effective:

I'm not enjoying this article. Effective at what exactly?
New rules can be added at runtime - https://developer.chrome.com/docs/extensions/reference/decla...
Take it from someone who grew up in Santa Clara: El Camino Real fucking sucks.

Now, many businesses along El Camino Real are great, don't get me wrong. But the road itself is miserable. When we lived in Sunnyvale there was a bigass Korean market literally across the street from us; we'd only drive there, despite it being, again, directly across the street, because that's how painful and dangerous-feeling it was to cross by foot.

This is not a problem we ever had while living in Munich.
Relevant github link:

https://github.com/automerge/automerge
A centralized database can't achieve being public without putting trust in a third party (and no Web3 developer seem to eminently trust the government) to verify the double spend problem, otherwise blockchain is just a database. Non-falsiability can be verified through cryptography, yet we have no centralized but non-falsiable database system ready to use.
I would be glad to have funding explicitly set towards appropriate and open documentation of the actual protocols, equipment, and materials, plus a combined effort to enhance these reporting requirements by the journal. There has to be a balance between the one-off interesting new findings and the large-scale work, but clinical trials definitely fall under the latter category.
I think people acquire false beliefs using the peer-effect vulnerability. :|
Virtue signalling is necessary to maintain social capital within social networks, and people will change their words and adapt worldviews accordingly-
especially when theres no "skin in the game" !
We as a society, in many aspects, used to eat AND build better when we were poorer

Spoken like someone whose never been poor.
It seems the people stressing to me about how logical they are tend to be equally dogmatic.
In court filing, Facebook admits ‘fact checks’ are nothing more than opinion
This people said this, this people said that, the ME LAW OF SOMETHING. Gosh, did this guy write a bestseller? Unbelievable.
Nope, and I don't understand how this myth arose or keeps popping up. MBTI is not perfect but it has decent test-retest reliability and decent correlations with other measures.
Automerge: Library of data structures for collaborative apps in JavasScript
Absolutely. We could overturn zoning more easily than implementing LVT; it’s not popular but it’s legally dubious.
I think this hilarious surprise from "network is the computer" principle and "it just so happens to go through xyz" transparency is just awesome.
Its even simplier then that.

“My feelings” > “Your rational points”

We simply evolved like that and next step of evolution was to become more rational. We are somewhere in the middle.
Dear HNers, I hope that you will remember this article (or all the previous one) the next time you will invoke science like a religious dogma in a discussion.

If you can't reproduce it, it's not science.

I believe in science, but I also know scientists are humans and thus fallible.

We live in a post-truth world, I have no certainty about anything anymore except what I can check by myself, which is not much.
I don't see how the system is very good for its intended audience either. If papers about making sound with code actually included sound and code, people in academia would be better off too. It would make it easier to search through literature, and to build on each other's work.
I would say money instead of giftcards then make a nice card with the intend, that way it doesnt rot in shelf somewhere and will hold value..
What if you start a corp and that corp signs up?
> Usually local roads are only eligible for local funding where as arterials are eligible for federal funding.

This is part of the problem. Want to build infrastructure to support walking or biking or transit? Fill out a grant, maaayyyybe the feds will help.

Want to build a highway that'll be used as a local road because the area is super low density? Excellent! *Uncle Sam's wallet instantly flies open*
"I can get my favorite articles delivered to my door, I can watch my sports games live, I can talk to my parent's across country instantly and cheaply over the phone. Try doing any of that with 'the internet.'"
Sometimes you're just early, bud.
That's actually incorrect:

Vivaldi generates revenue from partner deals with search engines.
Every time you search using one of the pre-installed search engines, you’re helping us grow, one search at a time. Currently, we work with DuckDuckGo, Ecosia, Startpage, Yahoo!, Bing, and Yandex.
The only exception is Google – we don’t make money when you search with Google. However, we know that some of you use this search engine daily, so we include it in Vivaldi.

(Source: https://vivaldi.com/blog/vivaldi-business-model/)

The other other source of revenue is bundled partner bookmarks (see again the linked document).
Not that hard to make ones mind when I personally use two perfectly fine blockers, you posted no proof of your hyperbolic claims that all Safari ad blockers are scams and at the time I replied you hadn’t even posted any names of problematic blockers.

And now you’re calling me a scammer for criticizing your statements…
We use TypeScript not Scala, but I've already found some other TS projects that use monorepos for the exact same reason I would do.

Still searching for pros/cons with current toolings etc, as most articles about monorepos are 3-4y old and therefore outdated in some points
Does this apply for technical interviews though?
Not one perspective, right then- how many? Is 2 perspectives the best number? Or do we need to add every conscious perspective? Who is deciding what the "meridian" of bias (which is a range) is located? Cuz right now its in Greenwich UK but im not sure if that "fact" was known to the other side of the world until forced.
Empiricism is empire and quantum is weird mannn
Avoiding Internet Centralization means.. avoiding browser centralization.. means avoiding the dominant browser stack (currently chrome-based).. means avoiding browser auto-updates.. means discouraging user agent strings & browser/os version fingerprinting.. means avoiding cloudflare..
The point is they see the benchmark and assume it’s the best because they don’t have another measure, like using IQ as the only metric to success.
If a problem actually gets solved then what will everyone complain about? It will make this place completely irrelevant!
Why are we talking about the mortality rate and not the overall mortality of the virus? Seems that the metric that matters is how many people it kills. Especially since we are actively fighting the virus harder than most in the past few years.
But tracing cannot be done anyway with a sidecar and no modification to the service code anyway. With a sidecar (or eBPF) you will get blackbox metrics for free (connections throughput, latency, errors etc) but tracing it needs to be done inside the code (even automatically by some third-party library/addon or instrumenting manually). I understand the point that, once you are there instrumenting for tracing, you can also instrument for metrics and not use a sidecar. But to be fair distributed tracing is something that's catching on only now and metrics give you already some kind of visibility that it's better to have that not to have. On top of that you can add tracing and improve the observability.
> The pictures they post of supposed stroads look like normal arterials to me.

That's because in America, most arterials are stroads. We've gotten used to bad infrastructure.

And yeah it works on some level, sure. American businesses still manage to function, people still manage to do things. But there are a number of major downsides still.
I guess I never really thought about that, actually the more i think about it the more likely it seems, as my boss has been quite hostile towards socialist ideas.
I don't think they are talking about the cost of running an open source project. They are talking about the cost of creating and deploying a robust application. In that sense the cost has absolutely gone down. It's trivial to create a web application today in a way that would have been incredibly costly 20 years ago.

You don't have to pull a Paul Graham and invent a the concept of a web application for the first time. You can piggyback on decades of development and open source software and frameworks and libraries. One developer and create and deploy an application in a weekend that would take a team of engineers months to build 2000.
I thought, for sure he had to be using glue or something to make these things. Not according to this line from his About page -

"I can build freestanding structures out of cards (no tape, no glue, no tricks)"

And he has a few pictures of him knocking down some card buildings. I still find it hard to believe there's no glue for some of these... But Wow! Impressive stuff.
> FOR THE FIRST TIME IN HUMAN HISTORY, YOU CAN WRITE A PROGRAM THAT EVERYONE CAN TRUST TO DO WHAT THE CODE SAYS.

Yes, which often translates to: "If someone interacts with this buggy code in an unexpected (to the developer) way, allow them to irreversibly transfer all user funds to themselves"

But hey, code is law.
> Yeah, that's kinda the poster child use case for Tailwind and similar frameworks. Landing pages are all about being jazzy and unique and eye catching, and not so much about code reusability/composability.

It doesn't matter, you can have an entire newspaper and perfectly done in functional css with incredible results without having to mastermind any architecture.

http://minid.net/2019/08/12/in-defense-of-functional-css/
No. It argues that the immunity is superior to that of vaccine if you already have it. It does not argue that choosing this strategy to gain immunity is superior to getting a vaccine.

(It may very well be wrong, though. The virus is neurotropic, and several other neurotropic viruses come back to haunt healed patients a few decades later. The vaccines don't have this risk.)
Confirmed myself here... yes, it does :(
Worse, scientific organisations are institutions. I trust individual scientists to be reasonably honest, but I trust the bureaucratic organisations they belong to as far as I can throw them...
Why would you need a button class when you can have that button in a component?
But hey those are some of the brogrammers favorite things??