skysight-inc/HackerNews huggingface dataset:
Perfect way to shoot yourself in the foot
Compile Python to WebAssembly (WASM)
Unless you are very careful not to, you probably do store copyrighted material, and there's a nontrivial chance that some of it is technically infringing. Copyright is much broader than most people realize, and the continued existence of the information economy largely relies on big copyright holders being reasonable and choosing their battles.
I think these days security testing is just glorified QA. The secret sauce is developing your own methodology, which at the end of the days is a mega comprehensive checklist.
Yikes. Please don’t co-sleep. Sure, you might get to sleep but one of you may not make it through the night.
If only the Social Credit Party was still around to see it.
> If Im not feelin it, and the wife isn't feeling it. I'm not going to force it

That is a good approach. I'm just saying that my "feeling it" is daily+, and I've been married to the same woman for over 10 years now. Libido varies.

This isn't a judgement on your frequency, just contributing to the conversation so people have an accurate idea of sexuality distribution.
there’s also one called hack this site. that’s more focused on sql injection and the like.
They usually work where jpg and png images work too, most importantly in most places where you render Markdown. No matter how more efficient a real video file would be, often a short gif right there in the README.md is the perfect way to convey a piece of information.
He objectively lied more than other politicians by a huge margin. This is clearly verifiable.
It actually is, because I'm focused on the slipping into toddlerdom part. Toddlers don't care about liability, but we do. Some mildly overprotective liability doctrine (won't someone think of the children?!) isn't enough to form the slippery slope that is being implied here.
Maybe you meant from 1 user to more than 1? I mean, unless is building dust on a shelf, anything running in a computer has at least 1 user.
As someone who abandoned hacking two decades ago, I was really taken aback by that usage of a local web server to transfer shell scripts. What happened to the plain old copy and pasting of scripts through your existing ssh connection, for crying out loud? ;)

Also, you would have been labeled a script kiddie and laughed at for this kind of mostly automated hack in the late 90s.

Gosh, I miss those times when hacking was mostly for fun and challenge. Now it seems to be only for work, money or malice.
Nat Slipstreaming hack tricks firewalls and routers
I bought one of these a few months ago (nearly, the "old" mini, not the mini2) and though it isn't one of the 8th wonders of the world, it does the little things I bought it for.

It is actually very (possibly even too) small, and using the virtual keyboard is an issue due to the minimal size of keys, but otherwise it's not too bad.
I don't get it though. As other comments said, they are swimming in cash, to the point they can afford to be horribly inefficient. Where is that pressure coming from?
How would that work? If I want to store "apple", "apply", "apron" the bytes in memory would be "appleyron". How would I know where the second word ends?
Could someone help me to understand why these moves are justified, but similar moves were not justified during the protests of 2020/2021? Because it really kind of seems like blatant political bias, like I'm allowed to protest but you aren't. I'm not too familiar with the details of these Canada protests so maybe there's some major catalyst that I'm overlooking here.
No you can’t change the battery at all anymore with modern laptops.
CPython appears to use a PEG parser for its implementation: https://github.com/python/cpython/blob/b77158b4da449ec5b8f68...
> But you also missed the reference to how deeply and tragically confused

I couldn’t find this reference in your little essays here. Where is it?
Yes, the message was you could write asynchronous code as if you were writing synchronous code but that really isn't the case. It is easier but it isn't a panacea.
(biscuit author here) I like how that post points a crucial issue in authorization systems: how powerful and flexible should we make them?

If you go towards flexibility, you get more complexity and possibly unexpected results. And they become hard to audit and explain.

You can choose simple, single purpose systems, like a RBAC only authz backed by a SQL database. You write tight, easy to understand policies. But systems always grow beyond the bounds of those rules, and you end up with a lot of ad hoc rules, or role explosion.

Datalog was a good tradeoff for Biscuit (https://www.biscuitsec.org): powerful enough to cover a lot of use cases, simple enough to be implemented the same way in multiple languages
Maybe they figured that market isn't big enough for the cost it would take to produce the smaller model.
I agree with you completely, especially on the last paragraph.
No pain - no gain.
Does anyone know of a HN client that supports keyboard blocking? I really don’t understand HN’s obsession with this game.
Given that the reason for the forced delay is historical abuse by ads, I'm wondering if back in the days this didn't lead to an arms race between browsers and ads (I wouldn't know because I always use an ad-blocker). For example, after canvas was introduced ads could use those instead.
Facebooks Time Card is a good starting point if you want to start looking into how higher end timing devices are built: https://github.com/opencomputeproject/Time-Appliance-Project...

Afaik its not currently available for purchase, so it is more of a diy route. If you want a standalone unit, it probably wouldn't be too big of hassle to ducktape that Time Card to e.g. Raspberry Pi CM4 or similar module with pcie and drive a display (or whatev) that way. Or that FPGA on the Time Card probably has enough spare capacity to do it directly too, for a simplified architecture (and maybe better hard realtime control).
Some of the stuff I’ve read about with this protest crosses a line where I don’t care who they are. They could be pro-pedophilia protestors and it wouldn’t matter. Arbitrarily depriving people of core services like banking without due process is not okay, especially since fighting it costs money. This is why abolishing debtors prison was a huge issue in the American revolution and public defenders are a required part of a fair judicial system.

The author obviously has their biases and compares it to social network deplatforming. I don’t think those are comparable at all. Being “debanked” is a whole different level. That’s something I consider a line. It has nothing to do with who is being targeted. Today it might be right wingers but tomorrow it could be black activists or people trying to unionize.

We have had stuff like this in the US applied piecemeal in the area of civil asset forfeiture, usually related to suspicion of drug crimes. That’s been a civil liberties tire fire for decades. Now imagine it being done on a mass scale. That is truly scary.
That is the one I give for students who want to get started with ML.

Has links to relevant papers for the implementations.
So, five years and a pandemic. Not too shabby of a prediction, that!
How a Book Is Made – Ink, Paper and a 200k-Pound Printer
Canada is not the US. AFAIK this is harder to do in the US and that is a good thing.
Brain-DUMP-2022-02-20T11:00:32-05:00
The Flash authoring tools still exist, they’ve just been renamed Animate, and they export to HTML5.
Can you even ship highly concenterated (>50%) hydrogen peroxide? I'd imagine what you get in the mail will be less than what you ordered due to natural decomposition. In any case, it's not a good example, highly concentrated hydrogen peroxide needs to be treated with respect and restricting/tracking its sales isn't going to make us into toddlers.
That's true, but it's still quite rare to see.
This is what pentesting is, looking for service misconfigurations and credentials, some companies actually prefer testing for initial footholds only.
I'm just not a fan of half-measures. Especially ones that stick in people's minds as an acceptable way of doing things as opposed to rapid prototyping kind of deal.
> People talking about how NATO "shouldn't expand" (why not, if the nations involved want to join a voluntary pact?)

Ok, I have no "pro-Russia" bent at all, I think they are to blame in this whole story as their concerns could've been addressed by diplomacy like most European leaders have been trying to say... but do you really not know why Russia doesn't want NATO to expand to Ukraine and how it might think war is a justifiable way to stop that from happening? And if that's the case, how it might be prudent of NATO to avoid expanding or insinuating it might do so, to avoid making things even worse than they've already been (with Krimea and Eastern Ukraine in a war situation for several years)?

It's hard to do so, but try to imagine yourself being a decision maker on the Russian side. Seeing an extremely important, historically aligned neighbour that has a very large, geographically un-obstructed border with you, and who can block your access to extremely important maritime routes, trying to join a military alliance who sees you as one of their main enemies.

While I may not agree with the Russians, I can absolutely understand why they think war is justifiable and I can totally see how NATO nations should do everything it can to avoid this war, they have nothing to lose, while Russia has a lot at stake... sometimes, it's a wise move to back off your expansion to avoid loss of life and making the situation much, much worse (imagine a world with Russian-occupied Ukraine for years to come)... when it all could've been avoided by a mostly symbolic back off as the Russians demand (symbolic because there was very little hope for Ukraine to actually join NATO in the near future, to my knowledge).

I highly recommend the Caspian Report channel on YT and its series on this conflict to understand the motivations on each side: https://www.youtube.com/watch?v=UNIU6TRsRzk
> is a very effective way

Is it? I think this an overstatement.
I find the serverless frontend to be way more tedious than a monolith approach.
>I opened the firefox debugger, and it went blank O_o

No problems here?
> So why invent a new protocol, when an open, standardised protocol already exists.

Because despite being a dinosaur, it still only has middling adoption. It exists in a particular niche of a particular niche of computing.

HTTP, in contrast, is English to MQTT's German. One is just infinitely more common and accessible to the majority of the world. So, if you're serious, use it.
He's trading possible accent issues for me (and a lot of people) refusing to watch the video.

If your video has a robotic voice I assume it's spam, worse the voice is so annoying that I won't stay around long enough to find out otherwise.
How to use a custom token in Drupal and save your day
How about win 11?
It works the same way. Nine times the clocks, three times smaller standard deviation for both the mean and the median of their readings. In a normal (and any symmetric) distribution these two are the same anyway, so their difference will tend to zero as you increase the number of clocks and the measurements from a single reading of all the clocks look more and more like a bell curve. This is asymptotic behavior so the "rejects the outliers better" aspect does not come into play, and I do not know whether it is useful in this situation or not.
This link goes to an error page
> pitching bitter, high price, high cocoa bars

You are missing a wide range in between. I hate buttery fakeolat, I also am not interested in eating raw cacao beans (ie pure chocolate). Both are idiotic assaults on the tastebuds.

Never realized how good I had it in the Netherlands. The fakeolat is pretty rare (cheap, bottom of the barrel kid chocolat that no sane adult goes near) and the cacao purist I simply ignore.
> If this was a view layer working entirely in a sandboxed runtime, maybe, but it's not - you're still editing the underlying application and can run arbitrary code.

Right, but can you give me an example of a dynamic content management system that fully sandboxes its _plugins_? I can't think of one.

I tend towards telling people that adding a plugin or theme to their site is the same as adding its developer to their project. You have to decide where your risks are. But the flip side of this is that adding third party services to a static site generally involves significant GDPR exposure at this point. There is a choice to be made.

> MVC may be more difficult to grasp, yes

It's not that MVC is more difficult to grasp; I've been building PHP apps like that for 16 years (and before that Rails and Perl). I've never had any difficulty teaching it to other developers.

It's that MVC isn't actually appropriate for the generation of static CMS content at all. It ultimately locks you into a very specific pattern of layouts (with all sorts of ugly solutions to break out of the box).

It may not be a popular opinion but the hooks-and-actions approach to WP is a much, much more appropriate system for the generation of code for a content management system.

It gives you a "nudging the asteroid" approach to plugins, where hooking into one function at the right point in the page life cycle gets you what you want. That is more difficult with MVC -- you inevitably run into much greater design complexity. As I've said elsewhere, Magento has attempted this, and they have to offer several different methods (involving dependency injection, method rewriting etc.) that WordPress does not need, because its page rendering has a simpler functional flow.
I suggest that "barrier to entry" also includes getting started programming in general. Too much to choose from, large leap in skill level required from text in a terminal to graphics on the screen, etc.
It hurts everyone really bad.

The child is screaming 12-16 hours a day, for in our case 9 months on end. It nearly resulted in divorce of a couple that had been through a lot with strength. It's hard on the child but it's also genuine torture to scream at someone 12-16 hours a day from the bottom of your lungs, in fact I'd call it domestic violence to torture others in this manner. Unless you've experienced this for 6+ months at a time, nothing but insane screaming every waking hour of the worst possible character (a child that sounds like they're dying it is so loud and painful), it's hard to convey the deep desire to just give up and leave the country or something. It's not he days that are hard but MONTHS of unending insane and constant screaming. Being tortured is not something that you can just get over just because the torturer is also feeling bad.

Yes we had doctors check it out. No there is no known exact cure for colic, we tried everything in the book (changing milks, diets, motion, burping, everything). Some forms of colic are simply incurable by any means. Our child was born RIGHT after covid broke out, so everyone (including medical workers) were scared shitless to be around us, there were no offers of relief from family or anyone. Pure hell.

On plus side, it magically went away when she was almost one.
I see it quite often but anyone against Ubi for reasons... usually stops responding when it does actually come up because it's an actual solution that might work and they don't want to even entertain the thought that it could be done... it they're rent seekers and would be hurt by it themselves...
Feel like this comment, and similar, if were made about drinking alcohol we would not take them as lightly

For example I like beer and wine a lot but I can go many weeks without drinking them. Coffee I drink everyday, because I want to of course
Logging into an online account on a computer you don't normally use when you don't have your phone. This can range from "had to jump through a bunch of extra hoops" to impossible if you haven't saved backup codes ahead of time (Google).

My wife lost her phone when we were on vacation and it was literally impossible for us to login into her Google account in order to use find my Android.

We were trying to login on a relative's PC to use find my phone, but it was a catch 22 because we need a phone to login to Google on a relative's PC.

I pity the fool who loses their phone in the age of 2FA.
Oh please. Social credit systems are literally built into humanity.
Civic Information API
I thought the general process was to post on twitter/reddit/HN and wait until someone with "I work for Google but not on that product" disclaimer in their post reaches out to you...
> * Privacy online

Privacy is a lost cause, the younger generations don't care.

I remember when people were warned about sharing their real information online. over 50% of people I knew were just nicknames on the internet. I had zero clue about their gender, where they lived or what they did for a living. Didn't affect our conversations the least bit.

Now everyone is plastering their faces everywhere they go. Every picture they take has their face next to it. Usually along with their name, the location and the exact time they were in there and who they were with.
Essential Perl (2002)
HP spun its software out in HP Software Division and sold the whole thing to everyones favorite legacy software company: Micro Focus.
> hard to admit your own country is run by a power hungry dictator

That is not hard. What is hard, is to realize that sometimes politics transcends particulars of the power structure and the character of the ruler, when it looks more and more like a nation has to do what it must, given the circumstances (no matter how they got there).
Please don't fulminate, use HN for political or ideological battle, post in the flamewar style (including nationalistic flamewar, god help us), or take threads on generic tangents, especially generic ideological ones. (Oh, and one more thing: or use allcaps for emphasis).

All this is in the site guidelines—would you mind reviewing them, and sticking to the rules when posting here? We'd appreciate it. The idea on HN is curious conversation. Comments like the one you posted one, and the others you posted to this thread, nuke that.

https://news.ycombinator.com/newsguidelines.html
I have to wonder: if one compiled the Lua VM into WASM, would it by any chance run code at speed comparable to JS? Seeing as plain Lua is crazy fast for a dynamic language.

That's assuming that WASM itself works with minimal delays.
Aftermarket batteries are a crap shoot, but I think you run into counterfeits as well.

One thing to do particularly on Windows is to use Vantage to set the maximum battery charge - if you never charge past 85-90% lifespan should be longer with little enough capacity reduction that you won't notice it.

The 10 minute one probably has a bad cell.
> The number of times I've been bitten by the very specific semantics around async/await in JavaScript makes me wonder if I've hit some kind of a ceiling in trying to grok it.

Got any examples? I've mucked around a fair bit with JS's async and never felt like it got in the way. (Other than the whole function coloring ordeal)
No they aren’t. Personal interaction at local scale is entirely different from an algorithm classifying you as untouchable because you match a filter. These are not the same thing at all.
> If you look at what the people in Crimea voted for, they voted to be part of Russia. If what people in a region want is paramount as you seem to say then eastern Ukrainian regions seem to want to break from Ukraine and align with Russia.

So, I presume you're talking about this referendum: https://en.wikipedia.org/wiki/2014_Crimean_status_referendum

In general, I tend not to respect referendums that are preceded by invasion of military forces (who I believe were not Russian, according to the Russian government of the time?). But yes, you are correct, the people of Crimea did vote for this.

However, this is massively, massively different from both the original Treaty between the UK and Ireland in 1920, as all UK troops had withdrawn before this occurred. Additionally, the 1998 referendums took place in an environment where most of the violence had stopped for a number of years, which is definitely not the case in Ukraine.

> Russia has not done anything in the Ukraine which England has not done or is not doing in Ireland, to your apparent approval.

So, you'd be fine if the Russians wiped out the native language of the Ukrainian people, cut down their forests and watched as multiple millions of them died? Clearly you wouldn't be (I hope) and only someone with absolutely no context on Irish/UK history would make such a ludicrous claim. Additionally, it was the United Kingdom that this did, not England (which only exists as a nation in sports).

> The Dáil vote was all ireland, the 1998 was two separate votes, on the whole island for the same issue. Any how the result from the second Dáil and the 1998 vote were on the same principle affirmed, the right of the people of Ireland to the ownership of Ireland and to the unfettered control of Irish destinies.

I feel like you may have mistaken the 1916 proclamation of independence with the 1998 referendum, which I think speaks to your lack of understanding of the issues (and I cheerfully admit that I know very little about the history of Russia/Crimea/Ukraine). From a Republic of Ireland point of view, the 1998 referendum was actually about giving up a territorial claim on the six counties of Northern ireland, which is very different from what happened in Crimea.

> Your original comment has modern Ireland as unmolested by the British military,

I just cant even, with this statement. Like, every weekend when I was growing up, there were violent deaths in the North of ireland (and Britain) on behalf of terrorists/freedom fighters (delete as appropriate). There was definitely a bunch of terrible things done during this period, but the vast majority was driven by people living on the island of Ireland, not the British government. The British government didn't make it any better, but they didn't mass 130k troops around the North at any point.

> I also mentioned India

I'm going to assume that you have no answer to my question then.

On that note, I'll bow out of this conversation as I'm not sure it's productive for either of us. Hope you have a great morning/afternoon/evening.
We've banned this account for repeatedly posting unsubstantive comments, flamebait comments, and this sort of comment.

https://news.ycombinator.com/newsguidelines.html
El Salvador’s GDP grew double digits for the first time in its history in 2021
TAI is a weighted average of the clocks. The lower the estimated uncertainty of a clock, the more it contributes to the average. This is given in the second to last column in the first table of Circular T [1]. For example, in the last reporting period, Germany's PTB reported the lowest uncertainty, and therefore contributed most. Probably both their cesium fountains were running well. So a single much better clock would immediately improve the quality of TAI.

[1] https://webtai.bipm.org/ftp/pub/tai/Circular-T/cirt/cirt.409
Deaths of youths on antidepressants were more often falsely recorded as "accidents" or "overdoses" when they were really suicides. Local organizations are incentivized not to raise turmoil by accusing mental health professionals of gross incompetence.

Once antidepressants got a suicide warning label, the negative pressure to misreport suicides for people prescribed antidepressants decreased.
A Return To Fundamentals
CGNAT will be here for the forseeable future and I wouldn't be surprised if ISPs end up deploying some version of CGNAT on IPv6, assuming they're somehow forced to use IPv6 in the future.
One of the best illustrations of how JS equality works: https://www.codewiz.org/wiki/pictures/jokes/computers/js-tri...