skysight-inc/HackerNews huggingface dataset:
Writing code as a sequence of "echo ... >> ..." lines would be awful. It should at least use a text editor (doesn't lose the copy-paste functionality).
Ask HN: In light of Log4J why don’t we use outbound firewalls?
With the Log4J vulnerability it got me thinking out how to secure my apps from similar problems in the future. I already use a WAF such as CloudFlare as an inbound firewall, but what I want is an outbound firewall, like Little Snitch.

Also, when building with un-curated package managers such as NPM and PyPi, it’s virtually impossible to audit all dependencies. We now regularly hear news of packages being replaced with backdoored versions makes me very nervous. These could make outbound connections to exfiltrate data with not outside input.

I would love it if PAASs (with I prefer) such as Heroku and Fly.io had configurable outbound firewalls. Being able to whitelist what outbound connections were aloud would help enormously, even though it would not solve all potential exploits.

Does anyone know of one (I can’t find one)? Why do PAAS (and to some extent IAAS) not have this functionality built in?

(Obviously with your own infrastructure this is possible with normal firewalls)
patch-package (yet another dependency) does a decent job for that sort of thing
Something not listed: OS development. It is critical to have ISA docs for OS development. I bought an e-reader just to have the Intel x86 SDM available to me at all times.
Auto-Rename Files Using Python
> Click Save anf your

Small typo there! Otherwise neat idea, akin to linktr.ee which has gone viral over the past few months.
i wonder what tool was used to gather the requirements for FRET?
Same for me. But now it's mostly 'used to visit'.
As unrelated as it may seem I consider this statement to be true. It's terrible that society is not creating a tax system that prevents real estate from being an investment vehicle.
If real estate would be cheaper I would have probably settled down already several years ago. Now I am just thinking why should I work 40h+ just to afford an ugly, old & noisy 2-bed-room condo in suburbia if instead I can use that extra money to live like a king in an emerging economy, affording everything I desire from restaurants to cleaning services & at the same time afford the luxury to work less. Also many of my friends gave up on buying real estate & opt for working less/ more leisure instead.
It feels like the boomer middle class society is breaking apart & I believe that to be a good thing because as more people change their views real estate will become affordable again. In the meantime I believe there are better investment opportunities anyways compared to current real estate prices in Western Europe.
A major discussion about this already in the past year:

https://news.ycombinator.com/item?id=26633708 (181 points/8 months ago/128 comments)
One of the coolest things about HN, imho, the content is never overshadowed by the ui/ux.
Perhaps. I am not sure if WASM is going to be it.

It certainly could be
The funny thing is, the tracking cookies aren't even necessary. There is plenty of data in things like canvas, fonts, GPU capabilities, IP address etc which are perfectly capable of de-anonymising anybody on the web, and the storage for the tracking could be done entirely server side. Cookies are just used for this because devs are lazy.
False, since the BGH ruling in the "Planet49" case (judgment dated May 28, 2020 - I ZR 7/16), the following applies: Cookies and comparable technologies may only be used with consent in Germany as well, regardless of the processing of personal data. This is only different if the cookies are "absolutely necessary" for the technical provision of the respective service or they serve solely to transmit a message via a public telecommunications network.

So technically necessary cookies still don't need consent.
Wouldn’t smaller tokens need comparatively lower resources though?
Same here. It's very off-putting, no matter how interested I am in the content. Some other such deterrents for me are the usual autoplaying media, newsletter popups, and blog-spam recommendations.

Lately, I've also included in-your-face code of conduct or diversity rules, and fixed-position author portraits in blogs.

For YouTube it's opening with "hey guys!11!", forced hand gestures, manic editing (where pauses between phrases are shorter than between words), and superfluous stock imagery.

Life's too short and it's only getting shorter.
Very little unless you use shaders for effects. . Updating terminals fast enough was a solved problem on 30 year old hardware. Most of the slowness of some terminal apps is down to poor design not CPU rendering (see the speed differences between various CPU rendered terminals)
I chose WezTerm because Altacritty is optimized for dumping large amounts of text to the terminal which is something I don't care much about. There are a lot of other terminal emulators that have lower latency for just normal typing, etc. Wezterm, kitty, zutty, uxterm, xterm.
If you think your customers stink you’ve got problems.
Ha! I think the real question is whether LightG is on advertiser's payroll, or just really ignorant.

I am betting on evil
I think the cookies acceptance should be done by browser settings.
Or in others word, opt-in is not an option for the ad industry.
Why don’t all those people affected by this ask for their money back?
That is a common misconception in the industry here in Germany but that doesn't make it true. I was often told to add a Cookie Consent banner even for sites that don't use any Cookies at all. Fact is, you don't need a Cookie Consent banner for functional cookies.

The issue with Matomo is that even though nicer than Google Analytics it is optional for the working of the website, so it should only activate if the user consents.

There is some serious cargo culting regarding these kind of laws going on. I remember back in the day that you would add "I don't take responsibility for the external links" kind of disclaimers on every website. Or everyone thinking they need a Impressum (legal info/contact info) page on their website because it is required by law. (No only for commercial sites, which is reasonable.)
Nobody is thinking about it that hard. Half the sites don't need it but they don't know for certain they don't need it, so they stick it in to be on the safe side because throwing a plugin on that adds it is about a 2 minute job and actually figuring out if they need it requires a lot more work.

Path of least resistance wins.
Why would you want to do business with such a business? If they are that stuck in their ways, they probably don't care about customers anyway.
30 year old hardware didn't have to render fancy antialiased fonts at 3840x2160 @ 144Hz.
Not really related to the question but I find it amusing that we have cookie popup blockers similar to ad blockers now.
"Python is basically slowly becoming a TypeScript." If only.
> content creators speak in a sort of code

They are not worried about down ranking, they are worried about being demonetized or worse.

Youtube has also propped up videos from what they consider better sources around Covid when you search specifically for Covid terms.

> Are there algorithms down ranking YouTube videos by words said in them?

Algorithms certainly rank them, ie. I just searched from a video transcript and YouTube (but not Google Search...strange) found it.

Does saying cunt unnecessarily specifically down rank it?

I think the evidence is yes, YouTube clearly doesn't have the neutrality Google Search has. An example from within the industry, don't forget there are different concepts. SEO, ranking, monetisation, this is about monetisation, but it mentions age rating which will effect ranking - https://www.youtube.com/watch?v=exkT826z-3U&t=175s

Coded words also become part of that sub cultures lingo after a while. They help with cohesion in that group. People use them to signal. But youtube is demonetisation.
> Both the claim "Spartans did this" and "Spartans did not do this" are affirmative claims that require evidence.

Hmm. That is an interesting perspective, but I do not agree.

Isn't "Spartans did not do this" actually a negative claim? And aren't negative claims notoriously difficult to prove?

What if this were consorted with extraterrestrials or some other random claim? Then it's easy to dismiss lack of evidence with "does not mean the phenomenon itself was absent".

Do we really need to find evidence that Spartans did not do this for every claim? Or rather, perhaps we should insist on proving the negative only of claims for which the evidence is strong in the first place.

Shouldn't we take as the null hypothesis "Spartans did not do this" and then evaluate evidence that they did?

In this specific instance, because of 2000 years of tradition, the unchallenged null hypothesis has been "Spartans suffered only healthy, well-formed children to live". This is the only reason people are saying anything like "We need more evidence they did not" despite the weakness of the evidence for its being true.
Wezterm has more features and for me being written entirely in Rust made it easy to send a bug fix patch. Kitty however seems to have a noticeably lower latency at least on mac.
The core issue is people want free shit.
TLP has unintended side effects on Mobile devices
this looks awesome.
Very nice work. Some comments:

- "Make sure to set letter-spacing: 0 when working on a multilingual layout" is an advice that's too strong. Letter spacing breaks only with connected scripts, Arabic or Devanagari. (And it's a bug, Arabic script users make use of letter spacing heavily in real life.) Most other scripts - CJK, Cyrillic, Greek, Hebrew, Georgian - will work just fine with letter spacing, and it will have the same meaning as in Latin. But - just as with line height, letter spacing value sometimes needs to be customized.

- You probably don't need to flip the "?" icon for Hebrew users, they don't flip it as in Arabic.

- Arabic letters being rendered over themselves with custom opacity is an unfortunate bug in Webkit. Firefox doesn't have it. But yes, this means that font opacity has to be used sparingly until it's fixed.
> there's nothing inherent in money that makes it that way

Yes there is. Typically money is legal tender, which means you’re mandated to accept it by a government with large numbers of guns and prison cells.

That’s what for all debts public and private means.
richard, do you think a DAO would be better for this than traditional non-for profit organisation? notably newlimit is a for-profit. given the aubrey de grey was ousted from sens in suspicious way after the capital injection, its time to rethink traditional legal entities for this kind of work?
Agreed that doesn’t make a lot of sense. You need to “put” html, css, images in the visitor’s computer just as much as you do a session cookie. How is one allowed and not the other?
This was a solved problem in the 1980's with Amiga consoles separating input processing, high level terminal handling and rendering into separate threads.
Environmentalists would buy the land they want to protect, if it were legal
This seems all well thought-out and the drawings are very well-made. However, descriptions like "We make a path p : true ≡ false from the assumed path (homotopy) h : Refl ≡ loop by constructing a non-trivial Bool-bundle over the circle, hence obtaining a map ( Refl ≡ loop ) → ⊥." are largely incomprehensible for people without an undergraduate in mathematics.

The combination "try to understand the math concepts that are not explained", "deal with a programming language and syntax I've never seen before" and "deal with emacs" quickly extinguished any interest I had as a mere physicist.

That being said, I think the core issue is that I'm not in the target audience. At the same time, it's being posted in a more general forum, and I think it's important for others to know that thye shouldn't feel too frustrated when they can't figure out the goal (let alone the solution) to the exercises.
And the solution is communism, of course. Duh. Isn't that the logical conclusion?

The problem is definitely not YOU. It's not like you could do anything about this situation yourself, say by making contributions to projects you'd like to support. No, it's those evil capitalist white men who use terrible phrases like 'welfare queen' to hurt the feelings of helpless black ghetto women, obviously. We need communism, and we need it now.
Discussion from a year ago: https://news.ycombinator.com/item?id=24052002
Except that molecules in our cells are moving at hundreds of miles per hour. A pretty vigorous scene. A mosh pit. A many-to-many collision.
True, some cats couldn’t care less about mice. I had an outdoor cat that was into pigeons which I didn’t have a problem with. At the same time the dog we had was a natural mouser. She got the problem under control.
Public universities in the US are largely funded by state and federal dollars. For example, Washington State received a $565MM budget from state appropriations [1].

[1] https://budget.wsu.edu/20121-23-operating-budget/
> rerender only the parts of the screen which changed

e.g. Firefox is already good at doing that on the GPU. WezTerm isn't yet, but We're Working On It™ (i.e. someday it will be done), follow https://github.com/wez/wezterm/issues/1134
Oh I wrote it days ago:

https://www.stavros.io/posts/making-ai-podcast/

I posted it here but it didn't get much traction.
When I look at "Germany, 2011 weather data, 2030 cost assumptions" in https://model.energy/ I get an optimized solution (for synthetic baseload production) that has PV and wind curtailment at 4.6% and 12.3%, respectively. This solution includes batteries and hydrogen; generally when hydrogen is included curtailment is limited (because you can make hydrogen when the sources would have been curtailed, up to some point of sufficiently rare curtailment that the extra electrolysers don't make sense.)
Use WinUI. The end.
I have a Nest smoke alarm and it was bad for going off due to the vapours from showers, boiling water when cooking.

But to the credit of Nest/Google/Alphabet they replaced it free of charge. It was just an off-the-cuff comment I made on Twitter and Nest said send it back. They sent a new one, a new model, and when it arrived I sent back the older model. The new model is much better essentially zero false positives due to water vapour.
> Even if they were, what do you want them to do? Refuse to work?

Yes, if an employer asks an employee to help violate any law, the employee has the legal right to refuse to do so. (I'm sure there'll be some country where that's not true, but generally...)

The responsible thing to do there would be to work with the employer to come up with a different design that does not have the same issues. If the employer explicitly insists on an illegal design, be sure to save proof that you informed the employer that it's illegal. Beyond that, it's tough and not everyone will be up for continuing the fight, and I don't blame the employees if they don't. A decent employer, however, of which there are many, will be okay with a legal alternative.
https://docs.microsoft.com/en-us/visualstudio/get-started/cs...

I take it you're leaning largely on this?
> I think French people are a bit more "proud" or happy about the Latin link than Hong Kong people are about the Chinese link

A little bit off-topic, but I'm curious: do HK people proud or happy about their UK link?
If one assumes the content is sarcastic, it’s trying to point out that hey all these incredible big and successful entities support it so it can’t be worthless.

Problem is that if you’ve been alive awhile you’ve seen situations over and over and over again where things that important institutions valued very highly did in fact turn out to be worthless.
Thanks for your time. I am about to start a new personal project and your post, combined with some curiosity, is all I needed to hear. I've reached a point where doing the same thing with the same tech is making me feel uneasy.
Backwards compatibility over quality is possibly the dumbest fucking idea our field has punished itself with. When we fail to combat it, we deserve the pain we get.

That said, unpaid developers deserve shit just as much as they are receiving compensation. Although fame can be some sort of compensation, you shouldn't lose more of it than you've gained by doing the project.
Because they prioritizing results that make them the most money over the results you want.
What's much worse: These popups have basically trained the average user to simply click the biggest, most colorful button with "OK" | "Accept All" on it, whenever something suddenly pops up on a website.

This is what happens when politicians, completely divorced from technical realities design "solutions" to something...
Sparta was at its peak for a few centuries - aren't customs likely to have changed significantly over that time. The baby killing period could have been during a particular leader, or a bad couple of winters or under some other crisis.
... if the terminal is poorly designed and renders every character update even when the buffer is filling, rather than batch updates.
A clickbaitey site I visited recently detected incognito mode and would not let me in. I don't remember if it had a simple overlay or missing content, since I immediately went away.
This article is just pointless.

Of course you can only do a valuation on cash producing assets.
Non-cash producing assets can only be priced.

That obviously does not mean that gold, oil, crypto, art, any highly demanded collectible have a price of zero.
Not everyone is up to date.
This is part of the reason why electron is so popular these days.
I suggest contacting Citizen Lab for technical support.
Where has this been proven? And what's wrong with using the old ways?
Support for macOS is not poor—though it could go that way eventually. It would be more accurate to say that Alacritty qua macOS software is now almost unmaintained. If you encounter a problem, don't hold your breath; deal with it in your own fork. (I did this for many months.)
Sure. I’m not saying death is the sole provider of meaning, but still a major one, no matter how far we push it. As long as an inevitable end exists, we will adjust our life and actions with it.
Wait why doesn't logged-out YouTube have a cookie consent popup?
Unless of course one uses categories like 'welfare queen', in which case one instantly becomes an evil capitalist white man bent on putting down helpless black women. One has to be extremely careful how they categorize things, lest they be angrily downflagged and downmodded into oblivion by the virtue signalling outrage mob.
Maybe we can release the documentation and tutorials separately, and possibly some of it for free. It's much better if you have all of the code though!
And furthermore, the two skills depend on each other. If you can't keep your balance, keeping your feet in the pedals means falling down and not getting back up right away (as you also have to learn how to quickly get your feet off the pedals and onto the ground). If you can't pedal, you can't get a fast enough speed to make it easier to keep your balance. Combine that with the fear people might have of pedaling at a higher speed and falling, it's understandable why some people never learn how to ride a bike
Entrepreneur Raised $200M to Help You Buy Your Dream Watch
I use a Tor Browser, so that's probably why.

Also possible: i'm not sure which CAPTCHA service they use, but if it's a 3rd party, it's possible they have already uniquely-identified you on another website, and therefore would let you through transparently.
I find glue traps as inhumane, the mice get trapped and they die an agonizing slow death. Once trapped they cannot be detached from the glue bed without their skin being ripped off their bodies.
I'm impressed how quickly Cloudflare write these educational articles during incidents.

I suppose them prioririzing it acts as good marketing?
Kwangmyong (North Korea's Intranet) addresses (and more)
Are Python, Ruby, and Lua all inherently insecure? Why do so many programs that care about security use them? They all allow monkey patching, after all.
1. Install the .NET 6 SDK: https://dotnet.microsoft.com/en-us/download/dotnet/6.0

2. Terminal ,pick a folder, `dotnet new wpf`

3. `dotnet run` and you have an (admittedly empty) hello world app

It's telling me it took 1.5s to build the app.

Want to publish the app?

`dotnet publish -o ./publish -r win-x64` which takes a bit longer as it has to download some runtimes (60 seconds max, then cached). Zip up the resulting folder and ta-da you have an application. Just unzip and run the .exe.

If you want a single-file exe (as in completely statically compiled without self-extraction) that's a bit more advanced and requires a few properties in the csproj to configure how to handle native assemblies that expect to exist on disk. If you want it to have no runtime dependencies, add `--self-contained`
https://en.wikipedia.org/wiki/Build_a_better_mousetrap,_and_...
A "Great British" list of books shouldn't focus in the majority on left-wing critique. Like I said elsewhere, I'll give you the marmalade, but the rest is the product of metropolitan miserabilists.
>which is often the only thing that one really needs)

tail 1_gb_of.txt

...will get the last line of output long before the rendering engine finished initializing. And it will probably do so even on a 10year old laptop with no GPU, in virtual console, while the system is running under load ;-)
The walk thing I just found amusing, my parents loved walking but I hated it as a kid, came to appreciate it more.

Then in the lockdown with a small child, with one nice walk nearby, walking it again and again it goes so boring - it resonated as something funny, it seems like people are looking for things to be offended by?

It's also funny as Guardian readers are right in the "going for a walk" demographic - it's poking fun at themselves.
And yet Brexit happened anyway.
>so complicated

Compared to what? GUI programming has always been hard on all platforms I tried.
Because instead it’s death by starvation over 3 days. And often the rats will tear off their own limbs in an attempt to escape from the glue.
People would still take the deal because it gives them the hope that they can somehow avoid the biggest, most unavoidable, irreversible unknown: death.

And for a billionaire the second choice is a no-brainer. They lose all the material possessions but still have all the knowledge, experiences and relationships that would allow them to easily get back in the saddle.

On the other hand for a person living day-to-day trying to make ends meet the idea of "enjoying" some more years of the same may not be as thrilling as it is for a millionaire. Sure, nobody wants to die, leave family and loved ones but at some point they may want an out. Some lives are hard or become unpleasant enough to feel like a never ending punishment, like extending a life sentence in prison.
Some searches work, but then adding or changing a term blows the results up. "n scale track set" returns mostly N scale results, but "n scale flex track" brings in "all model railroad and slotcar" results it seems.

Almost as if "flex" is an Paid anti-keyword. As far as I can see, amazon only sells one brand of that, themselves, and in a big bulk pack. There was a listing for "one piece at a time" sales but that one either has no sellers or has something else wrong.

It might be that they were advised that selling search keywords or favoring results for pay might be legally shaky... but de-emphasizing searches for money is a different matter?

Of course, search is hard, perhaps Amazon just can't find talented people willing to work for the meager salaries they can afford to pay? Perhaps they've been locked out of the areas where they could hire the best talent? .... no? must be other reasons then.