skysight-inc/HackerNews huggingface dataset:
I don't know the answer but I'd be surprised if it wasn't mostly a garbage-in, garbage-out problem.

Old school SEO techniques dominate Amazon, things like overly long and descriptive titles. Even legitimate brands look like scams, presumably because they're trying to fight back against scammers.

For example, compare the titles on Amazon's and Walmart's listings for a comparable LG 80 series TV: https://www.amazon.com/dp/B08WHRW6QR vs https://www.walmart.com/ip/LG-55-4K-UHD-80-Series-Smart-TV-w...

But the worst, by far, is Amazon showing multiple distinct items on the same page, as though they are merely variants. I don't have any ready examples, but think things like USB memory card breakout devices on the same listing as USB cables. That's got to break search in a lot of weird ways. And I don't care if it is a 3rd party seller problem, that doesn't excuse anything.
How to avoid memory exploits in your rust code
Following the German debate the courts and watchdogs interpretation of the law is that strictly necessary means that the functionality is not possible without cookies or other technology and the consent has to be of the same quality as per GDPR.

Privacy law in Germany is usually stricter than in other EU country's even if the text is identical.
You can already do like in real industries, pay someone to write you a logging framework and they will be responsible for it. Guess what, you can even pay someone to just be responsible and audit FOSS code for you. Looks like we are already a serious and respected industry that just contains a few complaining entitled users benefiting from the free work of others...
Rule number one. Use what you know.

Rule number two, use what can last you for the first three years.

Rule number three, build with considerable haste. Don’t choose anything from 1 & 2 that limits that.

Everyone’s preferences from there are all relative. If I was building something from scratch today I’d use cloud run for containers, stripe for payments, datadog for monitoring and APM, RoR for my app, Postgres, bigQuery for analytics (if needed), Vue for my frontend, postmark for email, cloudflare, and probably a mix of other tools as needed.

If I was screwing around and not trying to use what I know, I’d probably try to build as much as I can on top of vercel and planetscale. Vercel makes killer projects and tools, and I can see planetscale being a market leader in 10 years that everyone uses by default. But, that’s a big bet to make when starting a new company.
Stay with Node and React, add TypeScript. New tools like SWC and bundler like Parcel or Next.js make it truly good experience. Check out Turborepo too.
In the Rails world Jumpstart Pro and Bullet Train are two popular SaaS app frameworks.

[1]: https://jumpstartrails.com/
[2]: https://bullettrain.co/
My guitar tab program, which I pay for, refused to show me my library of tabs when I was supposed to play for some kids at a mountain campfire because it couldn't verify my membership because no internet connection. I'm not a good guitar player, and my memorized repertoire is... well, not of interest to 12 year olds. :)

I wouldn't say the campfire was ruined, by my goodwill toward this product certainly was.
The legal and fiance constructs of many open source projects are pretty badly organized. This makes it hard for accounts at big cooperation to handle them. Many open source projects are also pretty bad at marketing to non developers and do not have an aggressive founding campaign.

Some “social” organizations are much better at this and have very good people taking care of marketing and accounting to people who control money.

Most members of open source projects just want to code and not take care of tax exception for donations and filing out the correct tax forms in time.
Successful pure play open source businesses are rare. As in RedHat; most others I can think of were successful in the sense they had good exits.

On the other hand if you look at companies that build value-adds on top of open source, then the number is huge. It starts Facebook and includes a wide number of enterprise software companies like VMware, companies like Cloudflare, etc. They owe a lot of their success to open source and are major contributors in the aggregate.

It's therefore really limiting to assume that open source necessarily has to be maintained by for profit, enterprise software companies. Most successful companies build SaaS or other value adds over their open source projects that actually solve business problems. The reason: that's what enterprise customers want to buy. I've run two companies in the database space that take this approach. We're not very worried about competition from Amazon.
The majority of backend web apps only talk to a limited few services; db’s, internal queues, external apis. My main app talks to two internal db’s, and maybe 4 external apis. It should be possibles to specify the host names of these services and block everything else, certainly on a PAAS such a Heroku (they even know what internal services you are using), but that functionality isn’t there… I simply don’t understand why not.

It should be possible to build this sort of firewall based on hostnames not IP addresses? Maybe with a custom DNS server? And to be honest I would take the configuration complexity if it made my apps more secure.

There will be apps that talk to more, and as you said use UDP etc. but these will be the minority.
From reading that paper, the purpose of senescent cells is to prevent tumor growth. I don't know if I'd want to suppress or eliminate that functionality over a long period of time.
Why would an advertiser ever choose a “less manipulative” ad version because they know more about their potential client? “Good will” seems woefully idealistic.
My parents both reported consistent elevated blood sugar levels after getting the Pfizer vaccine. Not sure if it was related or just coincidence, but there seem numerous reports of the same online. It should be temporary though.
A half baked idea, curious what people think:

Would it be possible to create an insurance policy against these major FOSS vulnerabilities?

The insurance company would then require audits of your tech stack, and fund security research. This is analogous to what car insurance companies already do. And then companies who are not insured are viewed as suspect, etc etc.

There's apparently a misalignment of incentives because there's a break in the chain of responsibility. The idea here is to close that loop.
Gotta admit though, there has never been a better time to be a mouse.
Some libraries don't have certain books. Vaccines buy those books for your library (and, as you say, put them in the front).
This article should not be flagged. I realize it's a hot political topic likely to involve some flame-warring, but it also brings up a crucial topic about how a novel legal approach can be an end run around judicial review, this time from the other side of the political spectrum.

The first I heard about this was here on HN, and until this was flagged there were good, useful comments that taught me something new (e.g. the accredited investor one for me).
If I could choose an age for my physical body that would last indefinitely? I'd choose 29.
XXE Attacks Explained
As the adage goes, "A language is a dialect with a flag and an army"
I think so. Knowledge is power. You can get it handed down from an ivory tower but academia only has a monopoly on reputation, not information. It comes down to whether or not companies want to hire the stinky self-taught developers. I think the answer is mostly yes. You can always create your own company if that doesn't pan out, assuming you are into that sort of thing.
Addressing the "wealth gap" sounds good but is ultimately misguided.

If you look 100 years back, Rockefeller was the richest man in history (and might still be...), yet 1 of his 5 children died in infancy of a bacterial disease. These days, such diseases are extremely rare for about 1bn people in the western world, all of whom are effectively wealthier than Rockefeller was.

Yes, you can "save" people from poverty by giving them money, but ultimately you're just condemning their children to the same fate (after your money runs out). The only real progress is technology. And billionaires spending on anti-aging is exactly the kind of technology that will immensely benefit billions of people in the future.
economy is not just there for itself, it serves the community. Innovation and growth is also not a goal for itself. If a company fails at a fundamental task, like providing fair working conditions, then discussions about consequences in a democracy are needed. Then one can formulate policies, elect leaders and change the game.
Pretty cool. I didn't know there were groups using Haskell at NASA.
The way I used to deal with Windows programming was to buy the Charles Petzold “Programming <X>“ book where <X> was the version of Windows I wanted to program for.

Petzold stopped writing these and so I stopped writing Windows programs.
I stopped using KeePassX in favor of Apple's keychain few days ago. Seems like a lucky coincidence for me (nevertheless, last update was 3 years ago).
It is dark, bombastic, takes itself very seriously. But it is really well made, an INCREDIBLE cast, and by the end it really comes together.
> I am a bit of a noob when it comes to American legal system and also the following of precedence. So let’s say if a small town in Texas decides x is legal or not legal, does that mean the rest of the country has to follow?

"Precedent" applies in courts, not in legislatures. A small town may decide that X is legal or illegal, and the validity of that declaration depends on its scope.

Speed limits? Go right ahead.

Banning religious or ethnic minorities from city limits? Not a chance.

Higher levels of government generally override lower levels of government. A state law absolutely wins versus a local resolution, for example. A federal law usually wins over state law, but the federal government has limited jurisdiction over local matters. The federal government can't make it illegal (for example) for a state to teach creationism in public schools, but it can make federal funding contingent on it. That's a carrot rather than a stick.

The US constitution sits at the highest level of the hierarchy, and no government may enact laws that conflict with it. This is (mostly) where the Supreme Court comes in.

At the moment, a limited right to abortion is constitutionally protected. However, the argument behind the Texas law is that it isn't infringing on the right, it's just allowing people to sue each other about it (whereupon the individual case will need to be heard separately and possibly appealed). Constitutional rights apply against governments, not individual people.

The proposed California law would apply this reasoning to firearms, which is another constitutionally-recognized right.

From here, you can see why critics of this technique are worried. If it's okay for people to sue each other over the exercise of otherwise-protected rights, then that can frustrate the very existence of those rights.

> I can see in a constitutional framework it may be useful to have an unelected body decide to interpret the constitution but other than that it just really looks to me an overreach for unelected individuals to irreversibly decide whether someone I know can have abortion or carry guns

That first part of your claim -- an unelected body interpreting the constitution -- is exactly what's happened. The right to carry firearms comes from the second amendment, and the right to abortion derives from the right to privacy that is implied by (and necessary for) the Bill of Rights; the reasoning ultimately comes from Griswold v Connecticut (https://en.wikipedia.org/wiki/Griswold_v._Connecticut), which held that married people have a right to use contraceptives if they wish.
California public teachers don’t have Social Security. They people into their retirement system pension plan instead.
> On Android, the potential downside (companies stealing your app under alternate names, bundling adware/malware, and even issuing fraudulent takedowns) outweigh the upsides.

I don't have/use Android, so no dog in this fight, but I can say these things happen in pretty much every other non-niche platform: iOS, Windows, Mac. I've even had people cloning a VS Code extension I did.
In a way, it is a kind of divide, but in a good way. States have always been divided in a variety of ways, not just geographically. State sovereignty was always the original ideal of the U.S. Ideally, the smaller the entity in question, the more sovereign the entity should be. From least to most sovereign:

Federal > State > Municipality > Family > Individual

In the case of the article and the Texas law, it's Federal vs State, and State should trump the former. This is good because it encourages competition between states and doesn't cause lock-in for families and individuals - much in the same way that any business competes.

If Texas laws and values don't jibe with me, I can live in and support another state that does. Same goes for municipality, family, and individual - you can live in a different village, you can sever familial relations and form new ones, you can change your habits, actions, place of employment, etc.
The problem is not in Open Source itself but in the environment it lives in.

So many big corporations benefit from FOSS without giving anything in return?
Well, then tax them. I mean lightly, say take .01% of the biggest 100 annual profit, then distribute part of it to the 100 more important FOSS projects and part to other FOSS projects whose developers are either unemployed or in financial difficulties, important projects with too few or no maintainers, that is, where it is necessary. It doesn't seem that hard to me, but I'm sure neither FAANG nor any other giants would take this step if it doesn't become law somehow.
To become law, however, it may need some changes in our definition of healthy capitalism, which to me is the hardest part.
What's decred? What's special about it and is it one of the bigger cryptos?
Here is a disassembly of TP3 for CP/M-Z80, which seems well commented (I've just checked the compiler): https://web.archive.org/web/20131119042246/http://www.cirsov...

And here is a disassembly for the versions 1,2,3 apparently: https://www.memotech.franken.de/CPM80/
> UWP is dead.

Why do you think UWP is dead? Please post links.
Hmmm...so you are an anarchist (so don't want government) but also think profit seeking is unethical?

I'm genuinely curious what mechanism you would like society to function under? Like why would people...do stuff if not for value in exchange?

Honestly the only thing I came up with is basically if you forcibly modified humans in one generation, making people want to help each other for no benefit to themselves. Then, abolish the government I'm the next generation so this group of modified-humans runs with no profit motive or government. So it's like super dark and authoritarian, but only for a little bit?

Anyway, this was a fun thought exercise for me so thanks!
I don't know what motivates me and I find that strange. It's something I think about a lot. How do people know what they want? I can come up with (and I do that) a dense net of interests I somewhat have and how they would interconnect and what could come out of it. But at the end of the day, nothing really ever comes to life. It's obvious that one can not rationally construct such thing, but it feels real. I’m serious about what I think, but it seems to not work. I can’t remember the last time I persued an interest that in itself kept me going (other than video games). Something seems to not work and I'm currently in search for a therapist, because all of this has led me to a place that makes life not worth living. But that said, I'm as well curious (as the other commenter) what makes other people drive.
It is still very strict. For example, here is what the document you link has to say about cookie lifetimes for shopping carts:

"A cookie that is exempted from consent should have a lifespan that is in direct relation to the
purpose it is used for, and must be set to expire once it is not needed, taking into account the
reasonable expectations of the average user or subscriber. This suggests that cookies that
match CRITERION A and B will likely be cookies that are set to expire when the browser
session ends or even earlier. However, this is not always the case. For example, in the
shopping basket scenario presented in the following section, a merchant could set the cookie
either to persist past the end of the browser session or for a couple of hours in the future to
take into account the fact that the user may accidentally close his browser and could have a
reasonable expectation to recover the contents of his shopping basket when he returns to the
merchant’s website in the following minutes."
Yes, it sucks, but it's not much different from any other platform.

This is essentially why Electron has won, despite its obvious downsides.
It will be interesting to see what happens.

I think California may face a more difficult argument since 2nd Amendment rights are in the Constitution, but Roe v. Wade is just court precedent.

That said, it depends on how the law they propose to inact will work. The right to own a firearm is not the same as the right to manufacture or sell a firearm. They might drive firearm manufacturing and sales out of state, but not be able to prohibit someone buying a firearm out of state and bringing it home.
You certainly can. You can charge for the software, and release its source under a free license. The user can choose to download the source and build it themselves, or pay for the built software (or the service).
Beware of all of the advice in this article, which boils down to:

- take on debt

- consume

For when inflation reverses course, as it likely will, those debts will become hard as a rock and you'll be paying back in a currency that relentlessly appreciates. All that stuff you bought but didn't need will fall in price. This is a good way to go bankrupt.

The US Treasury market, the gold market, the trade weighted dollar index, and eurodollar futures are all signaling lower inflation and growth ahead. Before bracing for Weimar, be sure you're ready for USA 1980.
With PoS it’s even more liquid as you can dump your tokens and buy them on a new network to stake their. Assuming the tokens are worth anything.
Wow, i didn't know that Window 11 is forcing grouping of windows. This is pretty my biggest problem with Mac OS which is why i always stayed with Windows. No reason to do so any more i guess.
Twitter, but for Insights
They are the worst of any collection of sites I regularly use. They take up a quarter of the screen, refuse to remember your opt out choices from day to day, regardless of whether you are signed in or not, and don't respect your choice when you go between different StackExchange communities.
And besides all that, most people use the same public IP address anyway…
>including the pronunciation marks

It was likely copied.

> very uncommon in daily use. I can imagine that it is a quote from the Quran

They are common in religious texts.
No idea about payments, as that can heavily depend on locality (Stripe might be an option as they expand to more countries, though).

For Authentication, I'd say go with Keycloak. Yes, it's a reasonably big java program. But it also covers a lot of authentication stuff transparently for you - your application can just use whatever OIDC client library you have, and you can centralize everything in keycloak server, including integrations with external authentication providers (Google, FB, random OIDC, client's internal systems for B2B SaaS, etc.) and you have low chances of waking up and finding out you're going to rebuild your authentication stack because you coded yourself into a corner.

Authorization is a trickier case, but so long as you make it so that you can get "role" or similar attribute out of keycloak into your applications, you can start with hardcoded role names (possibly with extra attribute describing organization etc.) all the way to something complex like Open Policy Agent or even Zanzibar.

I'd probably stick to reasonable written docker containers and vendor-provided SQL database as backing store + graphql interface (I do not use GraphQL myself, but I recall that at least for postgres there appear to be reasonable options?). Use what you know to reduce rewrites.

With docker container, you can go from crappy VPS with docker compose (not recommended, but it does work, it's just crap - been there done that), through ECS (personally I dislike it, but you're already working with it, maybe AWS tax won't hurt you too much?) to kubernetes deployment (most complex to begin with, but scales developer resources well thanks to good abstractions, might be of interest if you find a need for deployment flexibility or find yourself in need of extreme cost efficiencies in hosting). If your code runs well with such setup you can probably also just run on Heroku if the economics fit.

Standardize on observability stack, whether paying for hosted one like honeycomb, to setting up prometheus+loki+grafana.

You're already reasonably successful under my metrics ;) but remember that while setting up some of it might take more time than just hacking it up, handling it well has compounding interest result on later development.

Check carefully what will be your budgetary effect for "buy vs. build", both in terms of coding from scratch vs. deploying existing OSS product, and in terms of hosted vs. self-deployed. I have no idea about your budgets, but I do not joke about AWS tax lightly :)
That's not true. The miners have a large capital investment in mining equipment which can be used for other purposes (or they rent, in which case the same reasoning holds). Proof of stake participants have their capital in the system's currency. The PoW are less sensitive to price because they lose less capital for the same change in price as compare to PoS participants.
I'm not OP, so interpreting: I don't think OP is asking for an up-front install of every package under the sun that might ever be needed for any kind of development. He's just asking that, out of the box, the build tools can build software with no dependencies into an executable without having to hit the Internet. And, if he has particular dependencies he needs, allow him to download them (ONCE) onto that machine, and again, he can build software into an executable without having to hit the Internet again. This doesn't seem that unreasonable a request. Every other compiler I've ever used has had this feature. It wasn't even a feature. It's just the way software has always worked.

I should be able to take my computer to a remote cabin with no Internet, and use all the software on it. The only software I'd expect to not work is software whose purpose is to access data stored on the Internet, like web browsers. I don't think this is such a crazy user expectation.
Local judges are voted in. Should the supreme court be voted in? Perhaps.. the system now controls those can even try for those positions.

Different branches of government have different powers. The supreme courts gets to decide if this is a federal or state issue. There would be no body who could resolve a conflict if this court didn't exist.
One of the points in the article was to borrow lower than inflation when you can, which is definitely relevant and possible in the (see the best mortgage rates and brokerage margin rates).
Is it commonplace in such areas for workplaces to have plans for such an event? Tornado shelters?