skysight-inc/HackerNews huggingface dataset:
If you remove any jurors with history of abuse, do you not remove all the people that have life experience that could be relevant?

With a jury of only lets say strong white males that have never been abused or abuse adjacent, but have had several experience where they felt woman didn't give them enough respect are we that would seem a lot worse to me. Obviously this sounds like an extreme example, but the reality is that such a large part of the population has been the victim in abuse situations that you are going to disqualify into a situation similar to this.
I think that you may have misunderstood me. The woman left the room to discuss the matter, returned to the court room in tears, and was called back again after the selection process was completed.

I hear hoofbeats and I don't think that it's zebras.
I still haven't seen a real analysis why college has become so f....ing expensive over the last decades. I find it hard to understand why this is being accepted.
I feel this case goes even further than the examples given. Not very familiar with US system, but suppose we had a case of a bar braul, would we ask anyone who has ever had a fight to leave?
What do you mean by revolt? As long as the attrition rate remains stable and not out of the ordinary, why should companies change this?
Amusing anecdote of my own:

My wife and I are daily cannabis users. My wife far more than me. She uses it for chronic neuropathy caused by a genetic condition and has a medical card.

We all caught COVID in February of 2021, before we were eligible for vaccination. I was the only one with any form of symptoms (loss my sense of smell) the rest were fully asymptomatic.

My wife and I joked that maybe cannabis could be protective.

Funny enough, I wasn't using much cannabis at all before the pandemic hit. I was 20 lbs heavier than I am now, and decided to start exercising rigorously to get as fit as possible with the expectation that a vaccine was 5 years out and we would all eventually contract the virus. I wanted to reduce my risk as much as possible. As part of my exercise habit, I would consume a 10mg THC/10mg CBD edible every night before going to the gym. I noticed it had bronchodilatory effects, and also made doing tons of cardio more fun on an emotional and mental level.

All of this is anecdotal, and I have zero idea if the weed helped me or not. But I can say with certainty it helped me achieve a level of fitness and reduced body fat that almost certainly mitigated my COVID infection, based on the science around fitness/obesity and it's impact on severity.
It depends on the context: having a college degree is stigmatized in some places.
It's much much much older than that, see: https://en.wikipedia.org/wiki/Yichud

It doesn't prevent abuse by a close family member though.
Google Cloud’s work with the U.S. Government
Even worse, they got AccessDenied when making that request and then extrapolated that they have access to $everything
Topping out compensation wise in your previous field did mean you thrived.
it seems like if this is OAuth2, the protocol is not giving an audience specifier? That would mean that any token is as good as any other, and say, authenticating to evilsite.com, the site could use the token its granted to itself log onto another ‘login with HN’ website as the victim. Thats the usual issue with OAuth as login
> solving DSA-style problems and building software are two different things

disagree. I'd say that both are needed skills for software. Software is made layers, like a cake. Maybe DSA style problems are like grounding the flour (or making the oven itself?) and the other building skills (which I agree, seem like different skillsets) are about decorating the cake and mixing the dough or something.

So in practice nobody is grinding their own flour; the flour is being bough already processed (in programming this'd correspond to importing the algorithms from a lib)
Second alien moon identified is much like the first: big and strange
Now you are simply describing advertising. I do not find it unethical, maybe unpleasant at most. It is the engine of commerce and driving progress. It is a sign of abundance of choice. And let's not forget a company still has to create a compelling product - no ads can override my free will.
To me that sounds more like canonicalization than sanitation. Depending on your requirements it might be fine to convert the input to a canonical form before processing. If you do this, be certain to do it before validation so that you don't accidentally "canonicalize" validated input into something which wouldn't pass the validation checks.

A key aspect of canonicalization compared to sanitation is that the result should be something that the user would consider equivalent to their original input. The most common offender in my experience is the abuse of case normalization, especially for data like email addresses which are not defined as case-insensitive (at least for the mailbox name) even if many servers treat them that way. If you don't preserve the original case (and other parts such as "+" labels whose meaning is defined by the mail server) the address may not work at all, or may result in sending messages to the wrong user.

Names, as an intimate part of the user's identity, are another area where case normalization can sometimes prove annoying or even offensive. If some legacy system requires names to be entered as all-caps US-ASCII characters, fine, but at least don't turn "O'Conner" or "MacDouglas" into "O'conner" or "Macdouglas" in some misguided attempt to ensure that just the first letter is capitalized. (And in some situations the first letter shouldn't be capitalized, e.g. the "dos Santos" in "Giovani dos Santos Ramírez"[0]—which is a single surname, not two names.)

[0] https://en.wikipedia.org/wiki/Giovani_dos_Santos
Please read this to avoid bias: https://www.linkedin.com/posts/lizryan_the-dumbest-part-of-e...
The details matter - 7 years is medical school and some residencies for example.

To not take into account the age is silly. And the entire point of the original post is arguing about earnings, so…
$2799 for integrated Intel graphics? I'd rather just put a real gaming laptop in a backpack and use a better headset.
Because the main part of the article is about sending a mail with python and the actual method to send an SMS is just send a mail to a specific mail address.

So put that on top and you can ignore the remaining 90% of the article.

It doesn't even mention that this method could lead to costs for the recipient.

For instance in germany you have to activate that feature for t-mobile numbers and they charge you for received emails per SMS
I would've preferred submitting the article by netzpolitik.org [1] where I first encountered these news but as far as I am aware HN submission are required to be in english.

[1]: https://netzpolitik.org/2022/urheberrecht-musikindustrie-ver...
I'm doing something similar with my service https://aytwit.com/thoughter

There is a trick to busting the cache but I almost don't want to say it in case they fix it lol. Feel free to contact me directly.
Humans don't just generate language out of the void. The use of language is grounded by various other inputs (senses, previous knowledge/understanding). So when a human is constructing sentences those sentences aren't just using earlier elements of the conversation to generate the next sentence (as language models do) but rather a vast wealth of resources previously accumulated.

AI that wants to actually generate language with human-like intelligence needs more inputs than just language to its model. Sure that information can also be overfit, but the lack of other inputs goes beyond just the computer model overfitting it's data.
They seem to be talking about fresh inexperienced junior devs applying to their first job or two.
And to put it another way, the job of a juror is to convict or exonerate the person on trial, not to convict or exonerate their own abusers by proxy.

Vulcans might not have a problem with this, but humans so obviously do that pretending otherwise is impractical.
I'll talk with George about introducing a refund policy. In fact I'm pretty sure we had it in the original drafts for the webshop, but since we moved to Kickstarter funding we haven't thought about that yet.
This is the correct answer. There's precily nothing to gain from looking at the data from a small website.
As an English-native speaker living in a German-speaking state, I can assure you that the need for translation and interpretation can often be matter of daily survival.

But it is always delightful to see the 'fringe of language' right on the edge, where the other side collide with our nonsense, too.

It is especially beautiful to see this feathery discord, where borrowed words are lobbed like thieved apples and think "ach, du, ge' ma' hin, mir ist wurscht"..
Ask HN: How many paid apps do you use?
I'm looking at upgrading my phone and considering declaring app store bankruptcy. Either by switching to Android or creating a new apple id. I swiped though my apps and couldn't find one that I remember paying for in the app store. Some use subscriptions or paid accounts, but those aren't tied to my apple id. How many paid apps do you use / depend on? Anything else I should be concerned with before starting over?
"I never let my schooling interfere with my education." -Mark Twain

My biggest gripe is the astronomical cost and debt burden that has vastly outpaced inflation. The university system in the U.S. has been taken hostage by greedy interests that push all kinds of bullshit costs on to students and have lost sight of exactly why the university exists in the first place - to educate. Not to house, not to entertain, not to keep fit, but to educate those that want to learn. If universities would stop with the non-sense "campus life" and focus more on a their core mission (like universities in Germany, for example) they might not have ended up in this predictable mess.

This level of enrollment decline only means one thing for universities: Layoffs and shrinking budgets. You can't squeeze any more blood out of these students.
I would also add a build system to that list, a tarpit many engineers have fallen into.

> not sure that there is a difference to compiler as stated in the article

It's hugely different.

If you're building a compiler for an existing language, you inadvertently signed yourself up for implementing and supporting the entire language, which is a pretty large engineering task.

But if you design a new language, you signed up for not just implementing the language, but also:

- Actually designing it, which is a very difficult task with hard trade-offs all over the place.

- Documenting it so that others can actually learn it. Technical writing is another hard task that takes years to master.

- Syntax highlighting and editor support so that it's as easy to work with as other languages. You will discover that users in the wild apparently use thousands of different editors, all of which you are expected to support.

- Static analysis tooling so that code navigation, automated refactoring, linting, etc. all work. Users today expect a rich IDE experience for every language they use. Also, you'll discover the hard way that the architecture of an interactive static analyzer is very different from your batch mode compiler, so now you're likely writing two front ends.

- Thousands of answers on StackOverflow, blog posts, introductory videos, etc. Users learn in many different ways and they expect to find education material in the form they prefer.
SQL seems pretty straightforward to people who done a fair bit of coding. Totally opaque (possibly terrifyingly so) to people with no coding experience.

There is a reason why no-code data wrangling tools are a multi-billion dollar industry.
Good. The entire college infrastructure is junk. It probably has its place but no in its current iteration.

The onus for training needs to be put on the businesses themselves. This is better for everyone including the businesses themselves. Putting in training requirements and a probationary period where new hires have to meet a certain threshold or be let go. The individual can then decide how best to learn.
Yup, I didn't look at your source only what information you posted. The "(2018 dollars)" on only one line implied to me the other numbers were unadjusted.
I look at the GitHub profile of anyone who puts it on their resume before I talk to them. (I might eliminate someone before looking at their GitHub, but I don’t think I’ve ever talked to someone with a profile on their resume without looking first.)

Not having one isn’t a negative (too many devs have none or almost none to use it as a signal), but having a good one can be a positive.
Rarely. I have my macOS installation since the first Intel Mac, then I’ve always cloned the drive, and now -surprise for me- I’ve used Migration Assistant for the ARM Mac and it worked perfectly.

5/6 years ago Migration Assistant was barely usable compared to now!
Wouldn't it make more sense to store a blob containing the username, signed by loginwithhn in the profile. Something like HMAC(secret_kept_by_loginwithhn, username). Upon authorization, check if the blob is properly signed and matches the requested username. That way you'd only have to place it once and copying it between profiles isn't possible. I'm probably overlooking something.
A comment doesn't necessarily need to be accurate to reach the top, it could merely confirm the biases of enough people so they think "yeah, sounds right to me!"
Actually, looks like you are on a malware blacklist.
It’s interesting to see another South Korean company in the creative Youtube space succeed like Gangnam Style. Had no idea Baby Shark was from South Korean company Pinkfong. South Korea is clearly super creative even on Netflix shows like Squid Games.

https://en.wikipedia.org/wiki/Pinkfong

https://www.youtube.com/watch?v=9bZkp7q19f0
https://twitter.com/colmmacc/status/1481682859324760070

More detail from Colm here.
I don’t understand the pixel per degree calculations. Quest 2 sits at 20.58 PPD in the table, which makes sense, as that’s 1832px/89deg. How do you arrive at a 35.5 PPD for the Simula VR with 2448px for 100 deg fov? It links to a [2] in the table, but there’s no [2] I the references.
> So roughly 5% (<5 of 84) of the control group were discovered to have themselves been abused and needed to be dropped from the study.

I hope this is accidental bias, or a statistical anomaly. It could be for example that this is overrepresented from the pooled community. I think it would also be important to somehow scale/categorize the level of abuse (physical vs non-physical, penetrative vs non-penetrative, etc).

If it really is 5% (1 in 20 girls) then this would outrank something like COVID in terms of importance.

> The comparison sample (n = 82) was recruited via advertisements in community newspapers and posters in welfare, daycare, and community facilities in the same neighborhoods in which the abused participants lived. Comparison families contacted study personnel and were screened for eligibility, which included having no prior contact with protective service agencies and being demographically similar to a same-aged abused participant. At the time of study entry, comparison families were not informed that the study involved sexually abused females; rather, they were told that the study was of “female growth and development.”

I wonder whether this still ended up being a self-selecting group. I can imagine a scenario where a young girl has an awful experience growing up, wants to see change in the upbringing of females and becomes somewhat engaged in related activities.

> He actually said: You better build some more prisons before you start testing babies for this.

I don't think a lack of facilities to deal with a problem is a good reason for not addressing it. At the very least we need to understand the scale of the problem, even if the problem remains unaddressed for the time being.
Any idea if amount of cannabinoids produced by our own body is high enough?
The so-called "Minitel Rose" (all the erotica chat services) services were a cash cow for France Telecom, bringing in billions every year.

Xavier Niel (https://en.wikipedia.org/wiki/Xavier_Niel) started his empire with a sex oriented chat service.
Just out of curiosity, what do you think standards are meant to address?

In my experience they are meant to mitigate risk. Now maybe that risk is not credible on a particular project which means that standard doesn't apply. But in all other cases, not adhering to standards means you are incurring additional risk, by definition.

Now maybe you're just saying, "Yeah, but those are acceptable risks" in which case I don't really think we're saying anything different. My experience working on safety-critical code uses standards that explicitly state what risk is acceptable so there isn't much wiggle room for wishy-washy statements like "good enough". They aren't esoteric, abstract standards of practice (and maybe that's where our personal experience diverges). It becomes relatively clear, with a good testing plan to maps to said standards, whether that risk threshold was met.

It's easier to illustrate with hardware, but the same principles apply. Say there's a standard that states each critical component must have a specified reliability level. You could either install a single component that meets that reliability level or design redundancy so the overall reliability meets the standard requirement. What you can't do is install a lower-reliability component and claim it's "good enough" unless you change the definition of critical. And that's what sometimes happens in practice; people get through a design/build and realize they didn't meet the pre-defined/agreed upon standard and so they perform mental gymnastics to convince themselves and others that the component isn't reaaalllllly critical as originally defined. And that discussion shouldn't be based on subjective judgement. As the sign above my old quality manager's office said "In God we trust, but all others must bring data."

>I'll take a defect free clunky code base that solves a stable problem over an elegant rewrite that adheres to the latest coding standards any day.

This might be part of where our opinions diverge. My experience in hearing "good enough" seems different than yours. It sounds like you're using it as "it solves the problem, so it's good enough". My usual experience is more along the lines of "it doesn't meet the standard, but it's good enough." The issue in the latter case is that I think there's some hubris that one fully understands the problem. If you do, then you should have no problem bringing data to support that claim and we'd have no qualms. But if you can't, one thing standards are good at is helping to make you pause to consider all the aspects of the problem you didn't think of. Part of that hubris is the assumption that it's a stable problem. Standards capture the lessons learned when people realized it's not so stable. So clunky code may good enough to solve your conception of the problem, but that still may not be good enough if your conception of the problem diverges from reality (see: 737MAX MCAS, uber, CST-100, etc. as already brought up).
This is wrong. If I leave a comment `'; DROP TABLE users; --` You should display it back in the app as exactly that. If you put it into an HTML attribute you escape the `'` and if you stick it in SQL you use parametrized statements.

There is nothing "wrong" with that initial input. What is wrong is pasting it into an SQL string, HTML element, HTML attribute, URL parameter or anywhere else without properly encoding it.

This is the main reason you can't "sanitize" input. You need to know what the output format is to properly encode it. There are different requirements if you are pasting it into a sed replacement command vs HTML attribute vs HTML element body. You can strip everything except a-zA-Z and cross your fingers but even that isn't necessarily sufficient for all output formats.
Illegal Amazon gold seeps into supply chains
And in UK we had Prestel, also ahead of its time but run by a telco and disrupted by the PC. I woz there, said the old Geezer
Possibly enterprise development. In my experience they are a lot more credentials driven then startups and boutique development firms. There are outliers like Microsoft, Netflix, Google. But you have a to be a truly outstanding developer without a degree rather than a pretty good one with a degree.
Next post of this type is "execute any arbitrary binary with one line of bash"
Ask HN: Only for weed users. How much weed do you consume when you consume
Curious to know how much weed do people consume recreationally (or for other purposes). This is one of those taboo topics and is hardly discussed (I think)
It turns out Howe invented a machine to make pins. In 1841 he submitted this patent model, now at the Smithsonian. It's a turret machine, with a bunch of bevel gears, and apparently still turns when cranked by hand. Astounding!

https://www.si.edu/object/howes-patent-model-pin-making-mach...
A little too much of 3615 ZAZA perhaps?
Games as "work" is a fickle thing. Digital items beforehand (CS:GO skins, MMO items, etc.) garnered real-life value because they represented a certain amount of progress or luck required to attain the item. Third-party markets were a weird, but effective workaround for representing these items with real cash.

The issue as I see it though, is that you need more than artificial scarcity to build an economy. The reason people spent crazy amounts of real-life money on a Black Lotus card or an AWP Dragon Lore was because they loved their respective games. When I look at Axie Infinity, I have to ask; do people actually love this game? As far as I can tell, the majority of people are playing it because they want to make money. Even the "whales" appear to be in it for the cash too, since once you have enough resources in the game you can "sponsor" poorer players and take a cut of their earnings.

The whole thing reeks. I was never that into rare game items as a concept, but this strikes me as outright stupid, NFTs and blockchain aside.
> Our research team believes, given the data found on the host (including credentials and data involving internal endpoints), that an attacker could abuse this vulnerability to bypass tenant boundaries, giving them privileged access to any resource in AWS.

This is bullshit and their own report indicates the opposite. Hugely irresponsible of Orca to include this kind of unfounded speculation in their report. But also this is what AWS gets for having a "if there's no customer impact, there's no disclosure" security policy, it leaves the door open for this kind of shit.
Each country gets to say what monopolistic behavior is in their own country. They don't have to consider global market share.
Too much to read dude, should I get stoned now or not?
Its really no risk at all as they were going to leave for a better offer anyway. the absolute worst case is that management says best of luck and they take a higher paying job. I have gotten a job offer before that included a 15% raise, told my current employer that the new company offered me a 30% raise becuase I really did not want to stay and figured small risk of them offering a match. My current employer unexpectedly matched the made up 30% and I stayed another year. If they did not think I was worth the 30% bump they would not have matched. Then I got an offer for a 55% raise from another company, current employer could not match that one and wished me well. No harm no foul. If the business was doing poorly management would absolutely cut heads, that is the reality of the US based at will employment system. Companies (not managers) have no real loyalty to employees so why have loyalty to them. No need to be aggressive or mean, just taking care of the best interests of one's self and family.
Pretty sure that would be a Perl script.
And a willingness to retake every shot hundreds of times until it reaches an acceptable level of perfection.
CVE-2021-31166: MS HTTP Protocol Stack Remote Code Execution Vulnerability