skysight-inc/HackerNews huggingface dataset:
The "rules for the government to follow" are the laws, and these aren't being made up, but rather pre-exist (safe harbour laws) with some pretty strong backers (goog et al)
That could work if you are just going to store things as base64.

It accomplishes nothing if you are going to decode the base64 on the backend and then use the original value as-is. If anything it's worse than nothing, because now mod_secure will just see the base64 content and might fail to detect certain attacks.
In my experience, "Research universities" are a joke for undergrad students. All it means for most of them is that their classes will be taught by graduate students because the "professors" are too busy doing research to be bothered with such trivial work.

You need to be pretty lucky in your final years or actually going for masters or PHD to really be exposed to the research side of things.

It's a steal alright, but I cant say I agree with who is coming out ahead.
> Plus the amount and quality of alternative learning resources is very high, at least in some fields

Out of interest, what are other fields besides IT?
I also have the same approach for new projects

I appologise in advance for the fact I will repeat questions to people and get it wrong initially, it's part of the learning process
At that distance, depending of the frequency of those buses, it could have some distortion and some latency due to being a transmission line. If this happened, the team that made that CPU would add some kind buffers at the receiving side to get the data at a correct time, and that could be most of the induced lag.

Adding that to the fact that the three cores have a shared common bus, and there are gone to be some kind of signalling about who is using it (that we don't know), this could be reasonable.

The Xbox 360 CPUs works at 3.2 GHz, that's 0.3125 ns per cycle, and four cycles make those 1.25 ns. I won't be surprised if those who made the CPU designed to have 4 cycles of delay to cores 1 and 2 to be sure there isn't any kind of glitch reading the data from the port.
You can get more than 2 if you hit two in quick succession. I think the max is 5 (tested with blind double-clicks until I hit two in a row).
> There are very, very few, and are outside of the use of students in the middle class trap.

Granted I grew up poor, so perhaps middle class students are trapped. I assumed that college educated, middle class parents would otherwise step in where means testing kicks in.
Spot on. Only thing I would add is

11. Invoice frequently, on schedule, like clockwork. Drop anyone who doesn't pay on time.

12. If you are doing them any "favours" for any reason (discounts, work you might do but don't charge for), put it on the invoice.
Can you recommend a physical board?
I think the domain models are different. "parse-don't-validate" is great when your users are internal and trusted (e.g. a library that does codegen - the operators of the parser are already in the codebase). When your users are potentially hostile, you should at some level have a separate validate and eject strategy.
Comparing this:
https://sf.gov/data/covid-19-cases-and-deaths
...to this:
https://usafacts.org/visualizations/coronavirus-covid-19-spr...
...does not suggest that SF is doing anything extraordinary.
Comparing to the national average involves comparing to places like NYC, that got hammered early when the death rate was at its highest.
Recently I added my YT API key on a Kodi box at work and it "poisoned" all of my recommendations I see on my YT homepage. I look at it as a feature and not a bug, as it has curbed my ability to go to the home page and be entertained. Compared to the other plugins/add-ons that change the thumbnail or hide all the recommendations this seems to be a preferable alternative.
It's not that I don't appreciate it. It's that I _don't care_. I've only got 16gb of ram, and much of that is used by things I actually care about, like airsonic, a Linux VM, fb2k, etc (yes, my PC is my home sever). Even if I were to dump all this, there's a limited number of electron apps I'm willing to use, and none of them are things I leave open all the time. Authy particularly annoys me, since I have no choice if I wish to use their authenticator (humble bundle doesn't support totp, only Authy 2fa)
IMO what cut Apple deserves is the wrong question. A democratic society can in principle decide that the public would be better served if Apple had to allow alternative app stores, and enact legislation accordingly. Whether Apple deserves to establish itself as the sole gatekeeper and take a cut whenever they can manage isn't really a concern. I think using anthropomorphic language like "deserves" for a company isn't even conducive to thinking about this.

I'd ask this instead. Would it be beneficial for society as a whole if iOS had to allow alternative app stores?
This is well made! Easy to understand, challenging, and a hint of variable reward.
A side effect of this is most jobs people find will be toxic, because those are the ones people are leaving and the ones with openings. I suppose that is already the case.
2 minutes before the HN post the lobste.rs comment was updated that no remote setting service is used.
It's hard to tell what will happen; surely most American companies will leave a main headquarters in the U.S which will probably be hybrid. Than they will have lower cost centers (that will be either remote or hybrid as well).
Overall probably this will push down wages in SV and move it up in places like Germany or Ukraine. But I don't think it will be that dramatic. Salaries will still be very generous in SV.
You also get credit for going into public service as well.
I turned Copilot back on see what it would do...

I gave it the input

> Let's play chess! I'll go first.

> 1.e4 c5

Here's the first 7 turns of the game it generated https://lichess.org/bzaWuFNg

I think this is a normal Sicilian opening?

At turn 8 it starts not generating full turns anymore.

Update: I tried to play a full game against a Level 1 Stockfish bot vs GitHub Copilot. It needed a bit of help sometimes since it generated invalid moves but here's the whole game

https://lichess.org/6asVFqwv

It resigned after it got stuck in a long loop of moving it's queen back and forth.
Necessity, though. People (in the US) "need" cars due to the way we've built our cities over the past 70 or 80 years (in particular). Even if they don't want electric cars, they'll end up buying them. Just as people who didn't want cars that "have a computer in them" (versus older, almost purely electromechanical, cars) still buy cars today. Maintenance just got outsourced instead of being a weekend activity a few times a year. That trend will continue.

Again, the only exceptions (that I see) will be: better public transportation (light rail to bring in residents in the suburbs, buses for inside the city), more on-demand services (I can't get an Uber or Lyft to bring me home, let alone pick me up, and my suburb has something like 20-30k people in it, but 5 miles past where those services will go), automated vehicles (related to on-demand), or movement back towards urban living (which can be served by the preceding + walking/biking more easily). That last one is highly unlikely due to costs, though, at least for a mass migration.
I work in Angular, and yeah it's worth noting that Angular can be kind of exhausting to keep up with. While they haven't done as major of a breaking change as the jump from AngularJS to Angular 2 since then (I honestly don't even know why they have the same name, other than cause people knew the name), their release cycle is pretty fast, and there's entire websites dedicated to giving you bullet-point checklists of all the things to change/check as you upgrade from version to version.

I'm only a tad familiar with Vue, but it seems like you wouldn't have as many curve balls thrown at you by committing to that framework. Which makes sense with it being essentially 1 guy's project, rather than a giant like Google (who famously is not one to care for backwards compatibility)
Pretty much. We don't have codified up-or-out rules. I don't see many truly terminal Senior Devs, but have seen people "hang out" in that role for many years. Same thing for Lead Dev, which is one title more senior.

Assoc to Senior or Lead - being successful at normal tasks over time gets you there without much active career management.

Senior to Principal - you'll have to seek out interesting work, prove capable of working across product/business or technical boundaries, and start interacting with leaders outside you team.

Senior Principal - all of above, plus interacting regularly with VP, leaders in Product Management group, capable of high level design/analysis, trusted by peers and leaders across your organization. High level of ability mentoring and leading.
I've consulted at so many places that just wrote stored procedures/functions and put them in the DB but never put those in source control and managed them like code. Can't tell you how many times they'd split the SQL box onto two separate machines to support different clients and growth and then forget to update one copy of procs on one of the machines causing all sorts of hell.

I found it a lot in small to medium sized business which were transitioning from the couple of people who wrote all their software to a team needing to do things properly and consistently. But I also found it at 50 person dev teams, which was weird and the worst.

I've generally always managed it as code, just easier that way.
I’m attending a state school in the US, and my degree costs about $13k/year + books + housing.
I didn't realize n + 1 was still around. I don't much agree with their politics, but it's nice to see an indie print magazine hold its own these days.
Then how do they make money? Everything is a subscription service? Cable TV 2.0? Can you use the internet normally by avoiding these services? No Google, no YouTube, no Windows, no Android etc.

Right now we basically get the products of the internet for free. If you kill advertising as monetization you don't have those free services anymore. And if you have to pay for everything then you'll leave even more of a trail on what you did. It just might not be accessible to corporations, but it'll still exist.
Pill-shaped buttons were part of the Aqua theme in the original release of OS X. For a long time after that, UIs aped Aqua with pinstripes and jelly-shaded pills and while the pinstripes and jelly have gone, I think the pills are here to stay for some styles.
VS Code Extension – AI Doc Writer for JavaScript and TypeScript
Rich folks can be as naive as anyone else, and they certainly must attract different predators... Not that I would know. ^_^

> marriages that should end in divorce for the benefit of both parties don't due to financial hardships.

The Sunken Cost Fallacy. It's a cruel -- and common -- steady-state among married people.

It makes no sense to gamble that ten years from now two people will be the same and want the same things. People change. You might reach the SCF steady-state, but you might also be stuck with a wretch or a lunatic.

Having children gives the SCF steady-state even more inertia.
Unfortunately that wouldn't help with a whole lot. The danger with input is that it could be used to e.g. escape a SQL query and delete your database. Which is why we now have parameterised queries and such to help alleviate those worries.

If you think about it the process you're describing already happens: the browser sends the user's input as (usually) UTF8 string data, then the server decodes it. Changing that process to base64 wouldn't change much.
They're showing inhibition at 100 ug/ml, but it looks like high doses result in serum CBDA concentrations in the low 100s of ng/ml [1].

[1] https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7498943/
I’ve been recruiting for US startups since 2008, probably recruited over 100 folks from engineers to C-level.

I have never considered a candidate’s college or if they even attended one. The only thing I evaluated is what they accomplished in the last 1-2 years. That meant hiring some brilliant engineers straight out of high school.

Most of these candidates were early stage hires for dozens of companies that went on to become billion dollar public companies or get acquired for 8-10 figures.

As far as a springboard for a career, I haven’t seen colleges come close to worth the price of admission.

Almost your entire career value is dependent on how well you can self-learn and self-motivate. The one important piece that school might teach or give you exposure to is how to collaborate effectively with others.
Ask HN: I want to get started with Speech-to-Text. Where do I begin?
I am a novice when it comes to Machine Learning, but I think that having a subject to study, Speech-to-Text, will keep focused.

I recently started looking at CMUSphinx, Kaldi and DeepSpeech.

Do you have any tips for me?
A $50,000 loan with a high interest rate is not good AT ALL.
Abolition of Time Zones
(IANAL) GPL/non-GPL isn't good enough; there are other copyleft licenses. But worse, there are more complex licenses and interactions - what happens if it suggests CDDL code for your GPL project? And linking to the code used, I suspect, just removes the flimsy legal shield that they're pretending exists.
I always attritbuted this style to one music video director whose career started in the 90s and who had perfected the washed saturation and goth look. She was the originator of Marylin Manson's video aethetic in the 90s, and after she landed David Bowie's "little wonders," that's when I think the style really took off:

https://etcanada.com/photos/171117/14-music-videos-directed-...

While I don't know if she knew the Watchowskis then, the original Matrix movie was absolutely a stylistic homage to her videos, and that they would have been familiar with her work via Bowie and Manson videos, makes it more plausible. If you look up Floria Signismondi's work, it's so distinct and often emmulated or copied, and once you've seen it, you can't unsee it.
> It's not just telling you the criteria for membership, it's telling you who's in it

Pedantic comment of the day, and on HN that's quite a contest. There's no functional difference between those two things.

> You're arguing about something entirely different here

No, I'm arguing the same point you were originally, until you were conclusively proven wrong and moved the goalposts.
If change needs to be made, why not start making it now? One thing that always amazes me is human creativity. Given constraints, people always seem to make the most of them.
I'll attest that info sometimes I need to do a boring but slightly involved task such as putting together a vision chart where most of the thinking has been doing, but there is a lot of little fiddly arranging boxes and pulling lines that is annoying and tedious but requires some degree of attention.

The only way to make that bearable for me is to either solve the meta problem which often isn't feasible, or turn on some mindless show that I've already seen and don't have to pay attention to enjoy. I find in particular The Simpsons seems to often hit that sweet spot between funny enough to be entertaining and mindless enough to not be distracting.

Whereas if I try and listen to a podcast or audiobook it requires too much focus and I miss the book or can't pay attention to that task I am working on, liking filling in a years worth of time sheets at the end of December.
Many now make room and board mandatory and when you factor that in with tuition, books, etc you can get to $25k total cost even with in-state tuition. I don’t know how common this is exactly but Ohio State does this for freshman and sophomores now.
The bill infront of me isnt lying. The amount of student loans is not enough to cover the costs, therefore requiring private loans or someone else to pay it. So either all these parents are paying it, or they're taking out private loans. Or, more likely, the stats are collected poorly as they typically are. Same as how unis are allowed to lie about job placement rates.
It seems possible to click when the circle intersects the shape, but still lose. I guess it's based on the centre of the circle, but feels a little frustrating to me.
Note that they are talking about CBGa and CBDa. While these are present in whole flower and some concentrates, heating it up for vaporization or combustion leads to decarboxylation meaning you’ll be ingesting CBD and CBG.

Can’t wait for more research. Anyone wanting to act on this should go for non baked edibles such as tinctures.

Since 2018, a lot of these products are actually legally available online in most of the States.

Check the Certificate of Authenticity to see the tested levels of CBDa and CBGa.
Basically yes. Of course, they do think differently to some degree, but my intuition is that the end result is likely not nearly as impressive as they perceive it to be - post-hoc rationalization (and its various siblings) is a powerful force with substantial cloaking abilities, and while many intelligent people have abstract/academic knowledge of this, really "knowing" it does not come naturally - in fact, the opposite seems to be the case...such is the nature of the evolved human mind.
This solution doesn't match the problem. Even the SQL injection example shows him sanitizing the input, which is at odds with the title of the post. Log4J is a more recent example of it being too late/useless to escape the output.
I've read one report from CBC said that this is caused by using some kind of detergent, or sanitizer.
How is PCP any better? It would allow malware to open ports just the same.
Now South Park makes sense.
Was that an executive or a middle manager? It sounds like the latter. But you're absolutely right that it's weird that the people who's job it is to enable engineers, get paid more than the engineers who do the actual work.
I listened to a few Rogan podcasts years ago on road trips. I didn’t find him to be a great interviewer, but you can’t deny that he’s good at getting impressive guests on his show (including John Carmack)

But someone shared some recent clips of his podcast and it’s stunningly terrible. The last clip I heard, he was implying that monoclonal antibodies were being kept artificially scarce so “they” could push the vaccine on people. That’s the kind of nonsense that doesn’t survive 15 seconds of Googling, but it’s apparently what goes for the average conversation on his show now. Even the Rogan subreddit is full of people groaning about how awful it has become.
There are many people on the timeline of human history that believe that child slave labor, trafficking, robbery and murder are all harmless. These are all things that have been commonplace at various points in history.

If you are in an area with any population density you are sat within a few miles of more people that have committed or are currently committing those acts, with no regret at all, than there are CEO's of companies that do data acquisition for targeted ads.
Amazon has always had a different culture than other bigtech cos. I have plenty of friends at Google, Microsoft, Snap, and Facebook who work 36 hours at week, don't stress at all about their jobs, and are paid really well.
Study of this topic is critical, but designs of this sort are useless without biometric controls (for example, twin or family or genomewide marker controls).
I have multiple google accounts and have tabs up for each of them (thanks to multi-account containers in Firefox). For each account, I have tried to to focus on sets of specific interests - always being careful to switch to the proper tab when I subscribe or search. The recommendations engine only shows me something good on a ~1:20 ratio. It seems like it would be so easy to improve it:

1. Show me new videos from my subscriptions! It does this rarely and, when it does, it shows me the same video over and over and over.

2. If it shows me a video >4 times - stop showing me the damn video!

3. Have a robust tagging system and use that for new discovery.

4. Use my subscribed channels for topical relevance REGARDLESS of what I have been watching lately!

5. Youtube is begging to be disrupted by anyone providing good curation.
I think "parse, don't validate" is an improvement on what the author of this article recommends:

« So in cases where you do need to “echo” raw user input, carefully filter input based on a restrictive whitelist, and store the result in the database. When you come to output it, output it as stored without escaping. »

I think the "parse, don't validate" approach comes out as follows:

- take the list of things you would have included on your whitelist

- add nodes for them to your internal representation for parsed markdown

- extend your markdown parser to convert html-like input into those nodes

- implement output for those nodes in a similar way to normal markdown

This way, given the "escape output" they recommend, it's harder for any variant of the input that you hadn't considered to have harmful effects.
Many years ago I was a self-employed consultant that did work for a lot of small/medium sized clients.

I would never want to do that again. The size of the client determines how much money they have to pay you before you owe them your first born child.

Level 1 - Home Users. If they pay you $100, you better answer their calls within 30 seconds on a Sunday.

Level 2 - Up to 10 employees. $1,000.

Level 3 - 11 to 500 employees. $10,000.

Level 4 - 500 to 1,000 employees. $50,000.

Level 5 - 1,001+ employees. They just don't care. They can pay you $500,000 or even millions and if it blows up in their face they'll chalk it up as a "learning lesson".
Thanks for the insight, I really appreciate it but it'd be nice for others if you don't give unexpected spoilers :)
1. pay as you go (much more likely than a larger client to actually not have the money even though they thought they would, or to go out of business entirely with little notice)
2. they don't have as much experience with how tech projects go, so you need to manage expectations more
Thank you. This is really my point. People share these rumors of a small minority making huge sums and normalize it as what anyone can do, which just does harm to the industry and to individuals. People actually in the sector/area know it’s not true yet there are those just sharing things they heard like facts.
If you happen to live near a decent community college, this isn’t a bad idea. But I know a lot of people who did 2 years at community college, and then got screwed over by transfer credits enough that they ended up doing 3 years at a normal college. So the savings isn’t quite ideal. I actually went to community college instead of a senior year at high school, and think you should really inspect the quality of the programs at your community college before trying this. For instance, my community college only had a couple of token CS classes, and they basically taught C++ in a C-style (all declarations at the top of the file, no object orientation) as the only style of programming. Not a great way to get a head start on a CS degree. But the math, humanities, science, and social science programs could probably give you a very cheap head start on those degrees.

For the truly frugal student, I would probably recommend something like what I did: take community college or AP classes aplenty in your senior year. Go straight to a college that has the best program for your interests (keeping in mind your interests may change). Graduating in three years is easy enough if you have a semester’s worth of transfer credits for gen eds, and classes like calculus and linear algebra in particular are really easy to cover before you go to college. Administration will probably try to make graduating early as hard as possible, but they really won’t be able to stop you if you have the credits already.
Exactly. This was 2000 and ESRs speech.

The example he brought up in his speech was some boring banking middle layer which he had with him on a cd-rom.