skysight-inc/HackerNews huggingface dataset:
These all seem to be ls bugs. It's a common pattern when outputting data to format it such that the receiver can unambiguously separate the data from the formatting. If you use CR/LF in your output formatting, then those characters need to be escaped in the data. If your attacker can deceive you into printing fake output by crafting their filename as :

"\n -rw-r--r-- 1 user group 12 Dec 15:55 mostly_harmless_planet"

...then you have already lost.

Violating this pattern always leads to problems like format string vulnerabilities, SQL or executable injections etc. As the long history of fighting against these problems shows, "banning weird characters" without fixing the bugs will always lead to problems, some apparently harmless characters find devious uses etc. You can't unscramble eggs.

The only real solutions are properly escaping the payload so that it can be unambiguously interpreted. And you can't claim that the authors of 'ls' don't expect their output to be consumed by other programs.
Imagine that the NSA realizes that capability based security might make their jobs much more difficult once they get a good look at the Burroughs B5000 in 1961. They decide to squelch it through a number of covert channels, resulting in the stupid checkbox to enable location services we have to day being called "capabilities" instead of the real deal.

Or the Atomic Energy Agency decides that Thorium based nuclear reactors would make proliferation free nuclear energy too cheap to meter, for real, and that would cut into the profits of the energy sector.

Or that Tesla had a means to tap into the Terawatt of energy stored in the ionosphere from the charge of solar winds, and JP Morgan was interested in selling copper wire instead.

There are many, MANY different ways things could be different, some of them actually plausible.
Summary:
>Although these findings indicate that the omicron variant shows an unprecedented degree of neutralizing antibody escape, they also suggest that boosting and promoting affinity maturation of antibodies in persons who have previously been infected or vaccinated with the use of existing Wuhan-hu-1–based vaccine immunogens, will provide additional protection against infection with the omicron variant and subsequent disease

>For those who had received two doses of an mRNA vaccine approximately 6 months earlier and then received a third dose of an mRNA vaccine approximately 1 month before sampling, the NT50 values after the booster dose were 26 times greater for Wuhan-hu-1, 35 times greater for PMS20, and 38 times greater for omicron
Ask HN: How did you move on from past experiences?
I recently put an end to a drawn-out and stressful chapter of my life. It lasted many years and I'd like to get a sense of closure. Yet I can't seem to fully rekindle the same energy of my younger self. I've bought a couple of books to celebrate, but I haven't opened them yet because I don't want to taint them with past memories, if it makes sense.

How did you close the previous chapters of your life? It may sound strange but I almost feel I have to ask for permission to move on. Like it's not real unless I share it with someone else.
Do you have any arguments to make against the points made in the linked post, or just personal attacks on the author?
You might be right and I’m open to seeing the evidence.

To me it’s quite simple: does the risk of side effects outweigh the risk of serious disease?

For adults, no way, take the vax it’s safe and effective.

For kids: they are at much lower risk of severe disease so I would like public health authorities to show me the numbers please.
In the grand view of things, you really want folks to have the ability to get the precise meaning of the words. It is the difference between "take this medicine every few hours" and "Take 4 times a day, at least x hours apart". You'll get to the first thing by following the second, but might not follow the second by doing the first. In other words, approximates are great until they aren't.

Skimming is a skill that can be taught as well - in fact, I remember learning different skimming techniques in school. It isn't as useful without being able to parse out exacts when needed, though.
I don’t have airpods and don’t want them, but that doesn’t match my experiences being around them. They’re usually quite good at not letting out any sound unless they’re at the maximum volume and you’re listening to really loud music.
Has ADHD been prevalent throughout the history and have I've just been blind or is it a new-ish development (in the past ~100 years)?
> Someone suggested it is because they have invested heavily in ETH mining.

VCs own ETH from the presale not from investing in mining.
Indeed! That's been my route out of trouble on multiple occasions.

The setup for the first time takes some effort to get it working and that first fail-over event is both panic inducing and wonderful to see when that replica becomes a primary.

Like every disaster recovery plan, the secret is to regularly test it - do not wait until it is needed as that will be when you discover some small, but critical, element has been left out and things will not work either as expected or as needed. I've also been there and done that, unfortunately more than once - some lessons need learned more than once to get through.
The Consular services have been extremely poor throughout the pandemic. A lot of people have been waiting months, if not years at this point, beyond regular processing times for things that were basically formalities in the past.
Japan Is Working on a Covid-19 Vaccine That Offers Lifelong Immunity
A person should be able to email security@domain without legal ramifications. They should encourage these good guys with bounties as well. Edit: I would guess its much cheaper in the long run, although i dont have a source.
> That is not going to make you feel any better if it is your kid who is one of these "negligible" deaths.

Why not ban cars then as well?
The question was about corporations. Whether they depend on strong government. I think that is not true, they merely depend on societally enforced notion of property. Libertarians might find a way for property to work without government, but that does not automatically make corporations obsolete.
I also run a small business and I agree with this. I think it becomes more notable when you have to change the heading on a large company and all its bureaucracy.
- synchronized vaccination drive

- WHO

- measure the spread, hospitalizations and deaths before and after, though, absent a control (see: global) there will of course always be people that will argue that it wasn't the vaccines that did it.
> Hippies cause climate change

And don't make me talk about flappers...
ls -Q

--quoting-style=xxx

?
Your note on misuse of VAERS data caught my attention: "deaths happening shortly after vaccinations, but not necessarily connected to it". Apparently the same kind of sleigh of hand is widespread practice in mainstream epidemiological data collection, according to recent comments by none other than Dr. Fauci.

> "But the other important thing is that if you look at the children who are hospitalized, many of them are hospitalized with COVID as opposed to because of COVID," Fauci continued. "And what we mean by that — if a child goes in the hospital, they automatically get tested for COVID. And they get counted as a COVID-hospitalized individual. When in fact, they may go in for a broken leg or appendicitis or something like that. So it’s overcounting the number of children who are, quote, 'hospitalized with COVID,' as opposed to because of COVID."

https://www.washingtonexaminer.com/policy/healthcare/broken-...
So you just add a tax on land ownership and do nothing about wealth concentration - and thus power concentration - and think it will magically work out? Those rich powerful folks are now just going to stop attempting to bend the rules in their favour? Those taxes would be gone within a year and all that's left is a Propertarian neo-feudalism.

You also skipped the answering the main part, a "Great Reset" that surely must be a logical first step to avoid undue advantage jumping over from the flawed past?
If you've been following crypto currencies' history, you'll be aware that weakly decentralized (read: centralized) attempts always fall prey to decentralized protocols. The underlying principle is that a process controlled by nobody is more anti-fragile than one directly controlled by a few. Control is a liability.

Over the long term, protocols outcompete hosted services. E.g. Automated market makers will be much longer around than any centralized exchange like e.g. Coinbase.
VC funding is needed to raise funds for software engineers and provide access to mentorship and community, like every other software company that uses VC funding. You can raise funds through other means (bootstrapping, ICOs, etc) but these have their own sets of downsides.
Correction: Crypto has already hurt society. From inflating price of GPUs to spending enough energy to power Sweden, without any benefits.
You could use the "turnabout is fair play argument". If you publish a web page, and don't specifically block google, they scrape your content, and use it for their own purposes. And even use it for "rich snippets", products other than search, etc. You're basically doing the same to them...using their content for your own purposes until they specifically block you.
What I want to know is what can you do with this other than host Minecraft?
Webmail is a surprisingly popular service
One pedantic qualification: any byte except 0x2f (`/`) or 0x00.

This actually rules out nearly any non-UTF8 character set (besides ASCII.)

Quote from Linus, which reminds me of Henry Ford’s “you can have any color you want, so long as it’s black”:

> And that one true format is UTF-8. End of story. If you try to talk to the
kernel in UCS-2 or anything else, you _will_ fail.

https://lore.kernel.org/all/Pine.LNX.4.58.0402141827200.1402...
The issue here is not with the vaccine. We need better and cheaper test kits. I live in the USA and frankly the response has been a joke. If we had billions of these test kits that were effective and cheap, we would be able to reduce the spread with the latest developments.

The vaccine is tool. We need to pick the best tool for the job. Vaccines reduce severity and risk. Talking about Nations peaking, and only talking about the vaccine is like trying to build a house using nails and your bare hands. There is another tool that we need to be effective. It's called testing and I haven't seen 1 Western Country executes successfully on this.
This year I would really like I read more, I was diagnosed with Irlen syndrome (wether that is correct or not the glasses have helped)

And that makes reading really hard for me but I have gotten books as gifts and really want to read them.
There are bound to be duplicate phrases for translation over all the many Telegram users. Why not cache to avoid API calls. How many times do you have to use the API to translate "OK" or other commonly used words.
Definitely would love to learn more about your use case. Recently I started to use DeepL and it’s great if the language selection is enough for you.
The difference is PoW can still be distributed beyond what exists today if someone decides to get involved and take power away from the consensus.

With PoS the consensus chooses if they want to give up power and you can only gain decentralization if they choose to give it up.
> thread about sec

> OpenVPN
What was originally a Magic The Gathering Online Exchange became a massive crypto empire eventually toppled by greed and mismanagement.
Why are we flagging scientific articles on HN? What happened to having a normal civilized discussion and argument exchange?
I dont think unix was every truly about byte streams.

Make each program do one thing well. To do a new job, build afresh rather than complicate old programs by adding new "features".

Is the core point. Later editions went on to specify text as the preferred language for these programs to communicate in but I don't think that's key to upholding the unix philosophy. It was just the easiest to work with at the time

We just need to agree upon a common framework for these programs to communicate with. There will definitely be a lot of churn though
> for something that just works

No, it doesn’t, perhaps works better than the alternatives most of time, but definitely not all the time.
I'm not sure compatibility with other people stuff is something that apple would concern itself about, I think that might be true for anyone else, but apple supporting only apple ecosystem the best way it can, I think according to its history, is the preferred way, and I think next iteration might be like that, first they had to show what potential apple sound would be like, once people know its top of the top, they can restrict it to apple only, personally I've known a lot of apple users, and people with an iPhone or a mac, have also an iPhone, a Mac, and an iPad, and AirPods
I've been using a linux laptop for years. It just works and allows me to focus on my actual work without rigid proprietary systems getting in the way. I can't remember the last time I had to spend time "tuning" my computer.
Using Kubernetes? Shift Left with Otomi
"Don't use it" is a bad argument in general. Gaining an option is not necessarily positive value, since other people can now attempt to coerce you into using it. I don't want there to be a straightforward irreversible way to send money to foreign cybercriminals; I want this to be impossible so that they don't attempt to extort these payments.

Similar logic explains why selling your kidney is illegal and why voting systems are designed to make it impossible to prove who you voted for.
Yeah, and doing this client side, and with the code open sourced? "Achievement unlocked".
This can work with something like nushell, but obviously breaks the entire current universe of coreutils.

In the normal world we can solve this problem without breaking everything by adding --jsonout or similar to all the coreutils and then we can have sanity by piping to jq.
Same. Even if I don't like the defaults, I try as hard as humanly possible not to start fiddling with them. I learn to live with them, until the defaults become my preference.

Now any clean VM or freshly installed machine or borrowed computer at work is set up to my preference. Do I maximize my productivity or have everything exactly perfect? No. But I'd rather have my nails pulled out than tweaking things. If I have to edit a configuration textfile, the computer goes out the window. My OS isn't an important part of my workday. It should just start my IDE and get out of the way.
There's blatant evidence all over the place. Vaccinated people are sick for less time, that provides mitigation of transmission.
Yes, they are unstable at speed (but more stable when stationary or going slow in a straight line which is why lots of people like them).

We still have this bike, 6 years on and it's been a real champ, never a problem (though well maintained), it's done many thousands of KM per year and it still looks like the day it was made modulo some scratches on the wood paneling. Christiania, aluminum frame.

That's a nice bike!
This. Something I've come across is that most of my friends who have ended up in better insuring (and often paying) jobs are somewhat blind to the thievery happening in plain sight because the monthly premiums are conveniently out of sight.

As a thought experiment, congress should simply ban and outlaw employer provided healthcare and force everyone who desires to be insured to make contract directly with Kaiser, Blueshield etc. When you pay north of $2k / month (for a family of four) out of your own pocket for the pleasure of being able to make an appointment in hospital, that just might draw enough ire to effect change.

Of course that should also make employing someone equally cheaper, or allow for equally large salary increase.
What it essentially boils down to is him saying "this isn't useful for me, therefore it isn't useful for society, therefore it will hurt society because it has nonzero cost and no benefit". If I'm being too strict then we'll say he thinks the balance tips towards cost outweighing benefit.

But not everyone subscribes to this sort of extreme collectivist mindset.

You don't have to believe I derive value from it because I don't need you to believe it. It still works.

There is nothing to refute. I mostly just find it amusing that these people think we care. They're just talking to themselves.

It's a trap for people like me to even respond to this stuff, we could be out doing things instead of arguing the toss about whether sugar is tasty or not. Like yo, I like it and it works for me. I don't care whether the health service in aggregate likes me eating sugar.
What’s the Best Book of the Past 125 Years?
Do they make it easy to use multiple devices (one at a time) or to have one paired with each of two devices?

That's my only complaint with my £33 (vs. £109-£239 Apple AirPods) Anker 'Soundcore Life P2' wireless earbuds. Probably would pay a bit more for that to be easier, but not AirPods more, find it baffling how popular they are (or became/continue to be after the arrival of clones anyway) given the price.
Early Remdesivir to Prevent Progression to Severe Covid-19 in Outpatients
Aye, aye. Again "stupid people" just want to live their lives instead of fighting evil Google, evil Wall street, evil oil and car manufacturers lobby and evil <insert your pet peeve here>.
(Not trying to criticize, just curious)

Are the open source work and the business marketing part of/all of the “work” that you want to do less of? If so, what is your plan for balancing doing less of it while still trying to accomplish those goals?
If a government clerk brings you a stack of papers with SSNs on it and you read it and tell them, it's not your fault.

Just because the browser only renders certain parts of the returned document doesn't mean that the government site didn't send you the whole document
Can you give a plausible use case? Filenames can't be arbitrary bytes anyway, since they cannot contain '\0' and '/'. What's a realistic example where it's really useful to be able to stuff arbitrary bytes into a filename, just not '/' or '\0' and where C or URL escaping would somehow be onerous enough to justify all the other problems these pathological filenames create?

Do you really think disallowing pathological filenames (at least as a mount option) would be more expensive than the countless security exploits allowing them has already caused or massive tax nearly all software that tries to deal with filenames robustly needs to pay for it?

Forget shell scripting, almost no software can afford to just pretend filenames are arbitrary bytes.

They typically still somehow need to be displayed to and be editable by end users somewhere along the line, and this means (in unix-based systems) some conversion to-and-from utf-8. Which is going to cause problems[1].

And even if you don't directly need to handle this yourself (but you do, even for a simple shell script or command-line utility or a library that wants to provide an error message with a filename), there is now a whole lot of extra bloat and complexity and edge cases no one handles in practice. With weirdo types like special filename strings, which are neither bytes or proper unicode like python's unicode surrogate encoding (which effectively leaks into all text handling). And of course different languages and eco-systems solve it differently (e.g. whereas python bends its general unicode string for this, Rust has a OsString).

[1] Even the utf-8 compatible subset causes problems of course. E.g. if you have a terminal program that needs to display untrusted filenames to an end user, you now have to deal with problems like terminal escape injection via filenames.
I started with LastPass before I made the switch to MacOS ~10 years ago, and despite being all-in on Keychain, I still use LastPass as well (yes, there are times this causes pain).

The main reason for sticking with LP is that it is easier to find and display or copy a password in LP than in Keychain, which really isn’t organized for direct human use.

Typical use cases, just this week: 1) logging in to Quickbooks after a long time not using it; it is not integrated with either KPad or LP, so hunt and paste it is. 2) logging back in to Dazn on my Roku: I have the enter the password manually, unlike some services that allow me to authenticate via my mobile.

Overall, I prefer the near-seamless integration and ease of use of Keychain, but for the edge cases, LastPass has simply been easier to use. (Which is saying something itself, because LP has a poor UI 8-})
The keys and purse don’t represent the raw html, they represent the social security numbers that were visible in the raw html. The front door was wide open in that this information should have been kept in the backend, not the frontend.

It's a good analogy.
You can do a lot with EB for simplistic projects. But yes without that you are in for a world of pain using anything else
Eyeballing the numbers on Coingecko DEXs seem to have a lot more than 1% of the volume (and this has been steadily growing). Further, most of web3 isn't about payments and where people invest and trade in them has little to do with whether those projects have potential.
This is a great answer. Unfortunately the early narratives around bitcoin, blockchain, and cryptocurrency revolved around crushing and replacing the global financial system rather than upgrading or offering a sensible alternative. Critics then point to these early holy rollers and blanket label anyone interested in crypto a a religious zealot (or a criminal masquerading as a zealot).
Fascinating, like Taleb who has to invent his own private definition of value so he can claim that the value of BTC is 0, Diehl seems to have invented his own private list of real problems, which crypto isn't solving.
Great write up! Tip I learned this week when I migrated my VPS [1]: when dumping MySQL/MariaDB databases for disaster recovery, dump the grants (aka database user rights) with the pt-show-grants tool.

You don't want to import the mysql table itself on a fresh MySQL/MariaDB installation, it's a headache. So dump all your tables to SQL (raw data) and dump your user grants/rights with pt-show-grants (which in itself creates a small SQL file) that you easily import in MySQL/MariaDB.

[1] https://j11g.com/2021/12/28/migrating-a-lamp-vps/
I don’t know if ADHD has been diagnosed throughout history, but it seems to exist in a similar prevalence internationally regardless of culture, so my suspicion is that because the study of the human brain and behavior is pretty new then neurodevelopmental disorders diagnosis and discovery would be pretty new. It would be like dismissing germ theory because the prevalence of germ theory is about as new as ADHD.
That’s the theory, in practice the largest market wins, nfts are often urls to a particular service and opensea does things like this:

https://blockzeit.com/opensea-nft-marketplace-stops-hacker-f...

This is very much controlled by the intermediary (as well as the chain it uses).
> you end up with very large dependency trees similar to JS. And we know how that went.

The problem in the JS ecosystem is not the number of dependencies, but the number of entities you have to trust. There is no real difference between having one big crate in a repo managed by one entity or fifteen small crates in a repo managed by one entity.
For 2-3 payouts a year I'm sure why it would be difficult to handle them manually. I don't know Germany but it does not sound like a tax headache, either (I suspect it's like paying a lawyer or plumber bill)
Then don’t run a business with services you can’t afford?
Personally I have found DeepL to be more accurate in the languages they support than Google Translate. They used to support much less, but for the languages it did, it was pretty great. It supports way more now though!