skysight-inc/HackerNews huggingface dataset:
I Can only recommend it.
I am forced to use windows for work.
I used it daily for the last year and it's so much better than Powertoy FancyZones .Plus vim muscle memory everywhere, regardless whether i'm in wsl, tmux, vim or windows.
There was some recent news article about this. I think it is not unreasonable take, because obviously crypto is safer to use for fringe groups than Visa or Paypal. But I agree the wording is way too hysterical, that is a bad sign.
You mean "I'm not keen on making my coworkers think I'm insane"
So, without financial or similar incentives given to people who host it, how does anyone expect a non-financial model work?

Maybe that "proof of waste" is solving a real problem (though I'd also favor for a more environmentally friendly consensus algorithm)
First off, how nice of you to quote only the first and last part of my comment while paraphrasing the middle part as if you're telling me something new:

> Beyond the rules applicable to the specific type of input (for example: it should be a correctly UTF-8 encoded string with a maximum length)

versus

> You aren't understanding. You should only need one regex per input.

Also you're hopping between sanitation and validation as if you believe they're the same thing. My original example was a case of doing specifically validation badly and you specifically spoke about validation in your original comment. You then replied with a comment suggesting one should apply encoding, specifically escaping, to inputs. That is not called validation.

Apparently with this most recent comment we're back to validation.

At this point I don't know how to talk to you because you seem to make this conversation about something new with each comment and I'm past humoring it.
Firstly the model of sshing into your server and trying to run commands on it directly is more or less obsolete.

Secondly the presence of all these utilities on a machine is far from guaranteed - expecting Python to be present is no more or less likely.
Show HN: Tempe – A Chrome extension to create unique email address each website
Have you considered nix os? I personally don't use it but I think it could fulfill your needs. You could have a work user with the home directory encrypted and a seperate personal user. Then you can install packages in a user independent way and you won't have any cross over between your users.
I guess I was naive to expect this to be about anything else, but the title of this should be "Why I Think Trans Women Shouldn't be Allowed to Compete as Women". It's adapted from some report by some right-wing Canadian thinktank, which apparently is very interested in fairness in sport.

I was hoping to read about those interesting cases where women generally outclass men (ultra distance running), or where individual women have completely outperformed men in a sport where they have no biological advantage. My favourite example of this is Lynn Hill's first free ascent of The Nose on El Cap. Shortly after she returned and did it in under 24 hours. No other climber repeated the ascent for 4 years, and none matched her time for over a decade.
do you have a source/more info on your last paragraph?
Yep, had the same experience renting in Germany. With Sixt, Enterprise and Buchbinder. Always trying to sneak something up on you.

I like Enterprise cause they're affordable, but they really take it to the next level. I had a full insurance (0% OOP) and they still made me do the handover dance twice.
The emergence of collective, cumulative culture in animals, humans and machines
They don’t say ‘most’ they say ‘many’ and the ‘up to’ is classic wording to limit the scope of what they are claiming.

If this is the best defence of their performance vs AWS Arm they can come up with then they have a major problem.
Lossless compression is apparently equivalent to general intelligence:

http://mattmahoney.net/dc/rationale.html
You're certainly not going to be able to -lgnustep-base -lgnustep-gui on macOS without installing libgnustep-base and libgnustep-gui. You should be able to link against libobjc without GNUstep.

I'm not sure if Cocoa has diverged enough to be incompatible.
Hi Hacker News, I create a small chrome extension to create a unique email address called Tempe (Temporary Email). Tempe is a chrome extension that allows you to create a unique temporary email address. This is useful when you sign up for any website that requires you to use an email address.

With a unique email address, you can sign up to the website and track the usage of your email address. For example, if the website has a data breach and your email is exposed to the public, suddenly your inbox full of spam and marketing emails. With Tempe, you can easily create a filter to target a specific email address and block it (Skip Inbox / Delete or Mark as Spam).
To be fair, this is easy to say in hindsight; but it also does not account for companies that successfully embrace new technologies/paradigm shifts/etc, and for all the fads that incumbent companies rightfully dismissed.
Save the whataboutism. This is bad regardless of who does it.

If you’re upset about the “with Chinese characteristics” I suggest you learn some history. All you have to do is Google the phrase.
I mean if it works smoothly with no human interaction required (including both upselling and forced cheerfulness, maybe even an Expectation for tipping? I don't even know), where do I sign? As long as I get a written proof of renting and returning.
Even milder things can be tricky, like "I'm fine with gay people but they shouldn't be allowed to marry or adopt". Is that homophobia?

You will end up having to either force your particular views on everyone, or just disallowing discussion of controversial topics altogether.
What's up with justifying corporate manslaughter? Also yay for assuming.

The point here was that employees who knew better didn't have an option to say, shit, it's not looking good, it's too risky to come to work / stay at work. And at least one person died because of that[2].

For the record, my partner used to live in Kansas, I've spent a fair amount of time there (years, months at a time). K-State campus, where she was working, was hit by a tornado during that time. I know what a tornado siren sounds like. My mother lives in Kentucky now; luckily, way North of where the damage was. I've spent about half of my adult life in Texas, driving through OK more times than I can remember on I-35.

I'm aware of the measures that can be taken to ensure safety in case of a tornado. Like, having a tornado shelter, or not cheaping out on construction. And perhaps allowing people to leave work early without punishing them if they feel scared enough.

As for warning time, Amazon got between 11 and 21 minutes of lead time[1]. Enough time to walk a mile, or drive 15.

Amazon then ordered people to stay at the facility[2], and directed them to "shelter in place" in bathrooms, where some of them met their death[1].

Specifically, the person in [2] clearly "had an idea about what weather even is", and had enough time to get home safely. He is dead now.

But hey, it's practical.

[1] https://www.reuters.com/markets/commodities/amazon-driver-di...

[2] https://nypost.com/2021/12/12/amazon-worker-texted-girlfrien...
Hah, nice catch! Ye he does. If I remember correctly, he also like falls over if you run into a wall, or was it jump into it?

It is hard to stress how good and impressing that game was at the time.
Looks like original is up? Or is it a re-upload?

https://github.com/Jeromeyoung/JNDIExploit-1
> Isn't the headline against the rule on HN?

Yep, it perhaps would have been better with a [Ask HN] title and the link in the post.
I have something to say about this as I have ran both setups:

* Qubes for 5 years

* Windows with VMs (1 year)

Long story short I would go with Qubes unless you require Mac OS virtualization, then I would go with a DIY VMs on KVM.

Things I hate about both setups:

* Screensharing, you can only share whatever is in the VM

* Overhead, you need more RAM than you would expect to keep things running smooth, every VM loads it's own kernel. Even in Qubes I typically just run HVMs to keep it simple, installing software in template VMs is kinda annoying

Qubes Pros:

* You get to learn about Xen

* Proper hardware separation easily

* Super easy disk encryption

* UX feels better as you can easily mix windows of different VMs

* Expanding storage is relatively easy and backing up as well

Qubes Cons:

* You get to learn about Xen

* Takes time to setup, audio, camera, mic, video ports not always working as expected

* no way to virtualize Mac OS natively

* No secure boot

I would recommend Qubes, yes it's a pain to setup, but you will learn new things. It will be a more secure environment if done properly.
A GitHub employee replied on Twitter:

https://twitter.com/_mph4/status/1470343429599211528

> I just personally looked into this and can confirm we did not take down this repo nor are we actively removing Log4j related content from @github
, consistent with our policies re: dual-use

Maybe too early to grab pitchforks?
Judas Iscariot
> Raytracing excluded

about that - screen space ray tracing has been around a while, and even if you miss little things (no diffusion from lights off screen or behind a shade) the resulting eyecandy is often enough to trick people mind even if it's not physically correct... and three generation older hardware is more than enough to run that.
Criticising a political system is not xenophobia.
Don't they cover themselfs with mandatory arbitration contracts?
I'm not from the anglosphere. Google does not spit out anything useful to me. What did happen? I still don't know what you are talking about.
Very interesting. First time I heard about loading bash "builtins" from a shared library. How does this compare to LD_PRELOAD?

Personally, I just run things in network namespaces with "ip netns exec offline|wireguard $COMMAND" to restrict net access.
It's 2048 vs Threes again.

What you did is highly unethical - it's a blatant rip-off, with no credit to the original AND it's a for-profit. Shame on you OP. Flagged.
What makes you think we can continue to do that? Even if we can, what makes you think we can do it sustainably? And if we can do it sustainably, what makes you think we will? History doesn't really provide any encouragement here.
Declarativeness (vs imperativeness) is the property of a language. Whether it allows you to express the desired state, as opposed to a sequence of simple operations.

Idempotency is the runtime behavior.

You can absolutely write idempotent program using imperative language (case in point: chef and its recipe can be expressed as machine code, which is a very imperative language, yet it is idempotent when you run it).
I do :)

"We analyzed 700 million words, phrases, and topic instances collected from the Facebook messages of 75,000 volunteers, who also took standard personality tests, and found striking variations in language with personality, gender, and age."

https://journals.plos.org/plosone/article?id=10.1371/journal...
Oh, that really hurts. I'm lucky my grandpa's sister is still around. I should go see her more.

During Thanksgiving I found out my grandpa had a rebellious streak. He quit a steady high-paying job with an American bananero to live in the jungle by himself for a bit. Apparently he had a really tense relationship with authority, which I see in my mom, one of my brothers and definitely in myself.

During his time living out in the wild, he constructed platforms in trees to sleep on. His outpost was near the villages his family lived in, so his main task out there was to keep the area free of leopards. I learned that one of my aunts in Central America might actually have photos of my grandpa as a young man with his leopard trophies!

My God. The things I missed hearing. Era muy chingon mi abuelo.
a single example: a 100 years ago the efficiency of ICEs was less than 50% of today's. we're left with maybe 2x until physics doesn't allow us any further improvements.

another example - transistors - we've got maybe 10, maybe 20, maybe 30 years of improvements ahead of us, after that there are fundamental limits that forbid progress.

the rate of change of total technology improvements will slow down and at some point will start to approach zero; maybe even go negative as we as a civilization start to forget how to do things faster than invent new ways of doing things.
I made something similar. Whenever I install a new workstation that runs Linux, I run this script:

http://github.com/pkrumins/install-computer/blob/master/inst...

This script installs all packages that I use, links all the dotfiles, all dockerfiles, all services, docker networks, setups all virtual hosts, and the new workstation is ready to use in 15 minutes. Before this script, it would take days to properly set a workstation up as I'd always forget something (missing file or configuration options).
I think the point is, you've been suckered.
> Any significant text (just a few paragraphs) has enough clues to predict a speaker or writer's gender with considerable confidence.

Do you have any examples of this?

Not saying I don't believe you, but unless the text contains something very obvious (e.g. "my wife"), I often can't tell if the writer is a man or a woman.

It's much easier to tell in Italian, French or Spanish, for example, all languages where the gender of the speaker is baked into most sentences.
What does this say to an AWS customer who hasn’t previously considered Graviton (probably the majority). I’d argue something like:

‘Wow. Intel is conceding that Graviton is faster for some workloads and seems to be really concerned about it. We should do a detailed cost benefit analysis.’

Completely counterproductive in my view.
A younger self used to be very strict about DRY.

For a living codebase, nowadays my general rule of thumb is to consciusly duplicate code until it covers 3 different cases, and only then refactor (unless the DRY way is as fast and obvious).

It takes more than that to yield spaghetti and a lot of time is saved on premature generalization. Plus the generalization is often way more straightforward once the explicit cases are already implemented.
Type Enthusiast's Notes about TypeScript part 1
They already have the mechanism in place and actively use it to block content by region as requested by respective governments.

https://docs.github.com/en/github/site-policy/github-governm...

https://github.com/github/gov-takedowns
> Since symlink support is not universal on Windows (Possible since around the time WSL was introduced, but still requires either special privileges or developer mode enabled)

Symlinks have been supported since Vista, though by default creating a symlink does indeed require Admin rights.
Hardlinks can be created by anybody and are extensively used by Windows itself.
The source is Twitter. Im sure the news will, if true, hit the, well, the news and be resubmitted.
>There are discussions still going on USENET. SPAM is low, quality high.

Then the last thing you should want is more people using it.
The wide audience itself is a big motivator to get them working on Arm.
> Car "sharing" companies? Are people going to miraculously not going to require car rentals (eg. for trips) anymore?

Indeed. Stuff like DriveNow (which is BMW's service) or public transport are eating up car rentals, and Uber plus videoconferences are eating up the "executive wants to drive from the airport to their destination" market... and anyway, the financial situation of Hertz and friends was dire even before corona hit, because they all have leased their cars for "cashflow/capex vs opex optimization" instead of outright buying them for cash.

There will absolutely be specialists remaining - UHaul etc. for moving trucks, or stretch limo and camper rentals - but the days of point-of-sale rental companies are over.
Could you go into this a bit, is there caselaw you're relying on? AIUI (and I've not being following closely) Germany's equivalent to CFAA (in USA, or CMA in UK) makes the provision of 'hacker' tools capable of being used for intrusion to be a crime. Honestly, I thought it was an absolute liability law (that you can't work around by proving you had no ill intent)?
The big jump for ARM adoption was the iPhone and later Android. A lot of important C libraries got first-class ARM support because they were battle tested on the iPhone.
"society disproportionately worships youth."

Does it really? The derision of millenials seems never ending, along with 'kids these days' and 'back in my days'.
From 100,000 dead in my country, less than 5000 where in age groups < 60, nearly 65 years. This is blatant misinformation to get kids to vaccinate themselves, which I find is highly questionable.
Didn't women in Ancient Greece (specifically Athens) speak a different dialect of Greek to the men?
Fundamentally it's the same thing. The UNIX tools are the "batteries included" standard library of the integrated shell programming environment. And if you need to extend that library you quickly whip up a new minimal command line tool in C (or any other language which allows to write small and quick and dirty command line tools, like Python).

The only downside of shell scripting is that it isn't trivially portable to Windows (or even macOS because of the differences between GNU and BSD tools), so it often makes sense to create big Python scripts that do more than "one thing right". If the whole world would run on UNIX, shell scripting would make much more sense.
This is an interesting challenge - problem is even if they manage to move to a new ISA can they maintain their margins. I’d argue probably not: ie the problem is losing the ISA monopoly rather than a performance / technology disadvantage.
DeepMind: Scaling language models: methods, analysis, insights training Gopher [pdf]
Isn't it literally the innovator's dilemma?

Edit: I felt they'd found one organisational solution to this after the netburst bust, what with their R&D branch in Israel (?) working on an alternative (pentium m and what would become the 'Core' architecture) without too much disturbance and avoiding the pitfalls of working on competing products?
Everyone can, but most just use Github. As a consequence they get to shape the development processes of pretty much anyone and also to do shit like this.
Shell is a very high level language that is undoubtedly bizarre at times. Its routines can be written in any programming language you want without much of a boilerplate or any special bindings, because supporting for command line arguments, environment variables, reading and writing files is a bare minimum that most languages support. It is a tradeoff - it has its immense advantages and a couple of often hard to navigate disadvantages. But the ability to easily compose whatever you want is something you can't ignore.

I think the perfect very high level language is closer to shell than to python for example. The power of Tcl/Tk (still it has some big weaknesses) or Rebol/Red is something that I admire.

The following statement is probably controversial: shell is more akin to Lisp for human beings. I dabbled at Scheme, but it is harder for me to grasp than Shell, but in the end they are more similar than not.

I hold a candle for Oil shell for example.
> "Some former employees are now asking whether they were cut out of trading owing to incompetence, or deliberately misled."

The saying goes - never attribute to malice what can be explained by mere incompetence - but let me try.

Having fewer people selling their stock on opening days puts less pressure on the stock price and would make price drop smaller. Clear incentive to screw up former employees who are "spent fuel".
Show HN: Receive monthly snail-mail letters
That turns out not to be the case. It is in both active development and use.
While we're transitioning percentage wise to cleaner energy, our sheer growth means we are burning coal,oil and gas at record rates.

It's depressing honestly. The earth is only going to care about the absolute number.
I know HN commenters can sometimes get a little too vitriolic about crypto, but this parody (including takes like “built by the same literal fascists who tried to do a coup”) is too much.
Hackers Are Actively Exploiting Log4Shell Worldwide
I just use screen for that now. Not even minicom any more.
I don't speak any Spanish or Italian, but I had French in school (it's been a while) and I presently cannot recall how the gender of the speaker is more obvious than in, say, English.

I'm curious, could you give me an example please?
Just checked my overdrive library and they has it. Thanks for the tip
Nope, nowadays any recent-ish Android can receive custom ROM very easily, using GSI.

But the restriction is that many OEMs and/or carriers forbids bootloader unlock.
Deaf Irish men and women who went to school in the mid 20th century would have learned different sign languages.

"The fact that the Catholic schools are segregated on the basis of gender led to the development of a gendered-generational variant of Irish Sign Language that is still evident (albeit to a lesser degree) today."

https://en.wikipedia.org/wiki/Irish_Sign_Language
As someone who's recently gotten into deliberate practice, I, too, started reading this worried I'm heading in the wrong direction.

And it left me with a similar feeling: the author suggests that acquiring tacit knowledge is more important than deliberate practice, when in fact deliberate practice is the most effective way to acquire tacit knowledge.

In the bicycle example, that would mean trying out different approaches, figuring out what works and what doesn't, and working with a coach (parent) to practice more effectively.

So, pitting these concepts against one another seems wrong, but keeping tacit knowledge in mind when applying deliberate practice might make it more efficient.
TSMC in Early-Stage Contact with Germany About Potential Plant
Sorry to be un-HN-like, but thanks for the laugh :D
There must be some hormone thing happening that tightens and sheens the skin. I think people say, "she's glowing."

As a teen, I once got heckled by some coworkers. "Wow, are you pregnant? Your face is radiating!" I had accidentally put on too much oily sunscreen that day. I'm a cis male with a beard.
Care to elaborate why you believe so?
This reminds me a bit of the start of the book Perfume by Patrick Suskind.
UPDATE: GitHub CISO pointed out that GitHub did NOT take down the JNDI Exploit repository.

https://twitter.com/_mph4/status/1470343429599211528

https://twitter.com/christophetd/status/1470346676053422081

This is surprising, considering what is outlined in a previous comment[1]. I hope GitHub provides more transparency on the takedown actions for "malicious content / exploits" like they do for DCMA notices[2].

Apologies for making wrong assumptions. I removed the original Tweet (see screenshot[3] for the original).

[1] https://news.ycombinator.com/item?id=29538151

[2] https://github.com/github/dmca

[3] https://i.imgur.com/sJe3OTI.png
Hey there HN,

One day last year my son got something in the mail addressed to him. It was an ad, but it had his name on it. And we got letters every day (cough cough invoices), but this was the first one he got. He was over the moon with excitement, just because of this small thing. And then I thought to myself, "hey I can take this small thing and bring joy to other people too".

And so the Compass Letters were born (https://thecompassletters.com/) - it's a subscription service to get an actual letter, through the actual post in your actual mailbox. It's a journey, the charmed compass travels to a beautiful place on the earth and a local character writes a letter in which they describe where they live and what makes them unique. What they do, what they eat.

The letters are completely hand-drawn and the Compass speaks many languages: you can get the letter in English, German, Italian or Spanish.

We're trying not to have an impact on the environment. Paper and envelopes are from recycled paper and the website is hosted in a hub that's 100% powered by green energy.
Update to that post: https://github.blog/2021-06-04-updates-to-our-policies-regar...