skysight-inc/HackerNews huggingface dataset:
> there are so many techniques that I simply can't do with it.

But that's the point of what I'm getting at, concerning limitations and maximalism.

We've got into a mindset where we seek to push the edges of the kit we have -- we are urged to shoot faster lenses, shallower depth of field, lower and lower light.

But it doesn't get you a higher rate of good photos. A good photo is a good photo regardless of kit, and it's possible to flounder creatively when you have more scope.

As a photographer I think we should be able to creatively progress with whatever photographic tool we have in our hands. See a creative angle, refine it, improve on it, etc. Finding a way to be creative within a set of limitations is all that matters, and therefore starting with a serious set of restrictions is good practice.

FWIW I am a fairly good portraitist, a long-standing small-venue gig photographer, and I'm pretty technically-minded. But thinking back to the first DSLR I owned (a secondhand Fuji S2 Pro), I can think of precisely one photographic limitation I'd run into regularly even now: its high ISO performance was not that good. Otherwise I'd have that camera back to shoot with, even now, especially in the studio. Though I might rage at the maximum card capacity.

I'm regularly surprised to hear people talking of hitting the photographic limits of the kit they use; it suggests to me very specific niches or unusually rubbish kit lenses (I've owned one of those, and even then I got some results I liked).

Because I can't think of a popular DSLR made after about 2005 that is bad; certainly not after 2008. I can think of only a couple of entry-level DSLR or mirrorless cameras with limitations that would trouble me (the lack of a depth of field preview being the main one, aside from glasses-unfriendly viewfinders).

I still shoot with digital kit I bought 13 years ago, and got some of my best results in the last few years with the oldest of those cameras that is now so cheap I'm better off not selling it. I've only bought secondhand, old-model equipment since 2011. I probably won't ever buy new again -- except maybe a Cambo Actus.

The same is true of lenses. I'm currently doing a bit of work with an early 1980s Vivitar wide-to-standard zoom that cost me £30. Crap in the corners, gorgeous otherwise. I don't plan to buy a new lens ever again.

I'd always recommend going back to your former kit (buy it again, cheap on eBay) and testing those beliefs about limits in retrospect.
> Except there is no such thing as "actual parametrized queries" [...] as supported by any of the major RDBMS vendors.

That would surprise me... I thought that when I send a parameterized query to PostgreSQL or MS SQL Server, most (or even all) of the query plan gets created without looking at any parameter values. And if that is true, then I think your "no such thing" claim cannot be true. If the query plan has already been created based on the unparameterized SQL string, then parameter values cannot cause it to do something crazy like drop an unrelated table.

(But I haven't read the source code to either of those RDBMS, so maybe I am about to be surprised.)
I have people on the ground, I trust them more than social media.
this question gets asked very often.

in a sarcastic tone, most answers boil down to:

- why pay more (US level) when you can pay just slightly more than the rest.

- a culture of viewing makers/engineering as something lower level, to make it you got to be a 'Manager' or 'Director' of something, doesn't matter what. director of mopping, regional director of moving crates, international director in charge of that small sub-section of the website no one know exists or uses...

- more money motivated people not constrained by personal circumstances just move out to where the money is.
> I legitimately don't understand where all these "Ukraine is obviously winning" takes are coming from.

Because it appears to be doing far better than expected. That doesn't mean they'll win, but it at least allows for a sliver of hope. Personally, I'm guessing they'll eventually lose a lot of territory without direct Western military intervention, but maybe there will still be Ukrainian rump state left in the West after this, which will still be an achievement if not a "win."

> If Ukraine was doing well, it wouldn't be giving out weapons to civilians [0]...

Ukraine might be doing as well as it is, because of things like that. That's not proof that it's doing well or poorly, but rather it's putting all its resources into an existential fight.

> If Ukraine was doing well, they wouldn't need to make up a story about the Ghosts of Kyiv.

You're being waaay too hard on them. They're ten days into the literal fight for their lives, and if some social media rumor gives them a bit more morale amidst the fog of war, who cares?

> Are we just being setup to be told this is a Pyrrhic victory for the Russians?

That's a bit too conspiratorial. That's a likely outcome, because even after "unprecedented" action Ukraine's allies are unwilling to do enough to clearly tip the scales, but I doubt there's some plan to "setup to be told [that]."
Bagoid?
There is one extant copy in Ceawlin Thynn's library, so you may need to ask him.
at the day job i see quite a few fresh potential SQL injection vulns when i do code review or when reading through existing code. many of our colleagues in the industry are junior and haven't had to learn this yet or have deep expertise in some areas but dont have deep experience in writing production code, then end up in teams writing production code.

i didn't realise SQL injection was a thing to watch out for until i'd already been working professionally for 5 years -- that maybe sounds bad, but for the first 5 years i didn't work on any projects that integrated with databases.
You can know most things do to chemistry and then there are places you can test the theory. For example night-shade vegetables contain solanine which people believed caused inflammation and increased arthritis pain. Some people do get pain from eating night shades and those people just avoid them. It just isn't a universal truth.

https://www.arthritis.org/health-wellness/healthy-living/nut...
Yeah, I was more meaning that it’s not just a GE thing.
The Key System - "Wheels of Progress" (1945-1948)[1]

[1] https://archive.org/details/MarchofP1945
So you're suggesting they were peacefully protesting, not blockading an entry point? To what extent can a protest go before the public has the right to force it to stop? Does blaring so many horns continuously so that residential apartments are subjected to 100dB indoors count as peaceful? How bad does it get before the police are allowed to take whatever steps necessary to stop it?

And before you say anything about BLM, recall than many thousands of people were arrested last year during those protests, and there were plenty of rubber bullets, tear gas, and beatings.

I'm always amazed at the extent people will go to absolve their own tribe from responsibility while accusing the other side of doing the same thing.

Personally I abhorred the violence in downtown Portland last year and I'm glad they finally stopped. I think the police need to dial it back a little in many cases, but I want them to be able to put a lid on the ability of protesters to destroy the lives of innocent people. And I think January 6 was an insurrection, but of course it was. I find all of y'all kinda annoying :).
Those who do not learn from history, are doomed to repeat it. (or however that saying goes)
I think that the developer deserves more credit. Being an open source maintainer is difficult and when the maintainer of discord.py initially quit they cited being busy elsewhere in life as part of the decision. I don't think a maintainer should be pressured to work on something just so that the ecosystem is more centralized, although it would have helped to have nominated someone to continue the project instead of archiving it. Open source software has no guarantee of stability and it is largely discord's fault that SDKs must continuously be maintained by the community in this fashion.
I love RQ. Nothing but good experiences using it several times over the past ~6 years.

However if you are doin mission critical work in your queue that cannot be replayed Celery is still the best python flavored option IMO
Many big companies have what is basically a MITM attack on SSL. They resign everything between you and the network endpoint using an enterprise certificate. It's still encrypted but at some point it's decrypted, inspected, and then re-encrypted. It's mostly seamless but sometimes you have to get a copy of the certificate to add it to things like pip.
...and I thought I was clever to cut my bagel in 3rds to eat "low carb".
> If you have any render-blocking CSS or synchronous JS hosted on third party domains, go and bring it onto your own infrastructure right now.

Another aspect to this is if the user blocks Javascript from various third-party domains, your stuff doesn't execute.
Not necessarily, it could be like CPU microcode, always present, the buggy version is the default, but you can update it to fix bugs, either on every boot or permanently in flash.
They were being polite, as all service workers have to be. Tell me you've never worked s service industry job without telling me you've never worked a service industry job....

There are numerous safety interlocks in gas furnaces ranging from flame presence sensors to (usually) several heat limit switches, often which are wired directly in line between the gas solenoid and the furnace controller. The controller's logic has a lot of "expect this condition by this amount of time" rules, too.

The furnace's controller is usually separate from the system controller (the box that talks to thermostats, valves/dampers, pumps, etc.)

On forced hot air systems that are new enough, the furnace and system controller monitor outlet air temperature and shut down if it's too hot.

Gas furnaces are incredibly safe.

Also, the quote to install the system specified what thermostats they were going to install. It's on you to read the quote, not to get uppity at service personnel and lecture them people haxx0ring your furnace.
appreciate both of you turning this question into practical app! https://news.ycombinator.com/item?id=30569209
Paramount Plus is still figuring out Paramount Plus
Have you ever dealt with actually dangerous, wicked people who see others as prey and laws as obstacles on their way? Borders is what protects us from them. Those who want open borders should spend a couple months in the camps with the wannabe immigrants just outside the border, and see for themselves who they want to admit. Also, you should lead by example: it's just more efficient to win support this way. Ask CBP to pick a random small group who's just crossed the border and offer them to live at your place until they find some housing. When picking a group, don't limit your choice to families with kids - that's an unfair bias we want to avoid (borders should be open to everyone, right?)
I assume the market is extremely bimodal. Either you are satisfied with a phone camera, or you want to go all out and have all the benefits of a DSLR. There are very, very few people who want a stand-alone camera that offers less than a DSLR.
Tai Lopez NFT Just Hacked
That's why SB8 was so stupid. Criminalizing what women can do with their bodies only incentivizes them to go elsewhere that doesn't criminalize them while making Texas look backwoods to the rest of the world.

I'm just disappointed that companies didn't protest as strongly as they did with NC's bathroom bill.
Very common I think for like 10+ years and very annoying that companies can just buy up some keywords for competitors trademarked names..never could figure out how to get Google adwords to stop it or whatever and mostly just hope it doesn't happen /not worth the expense to competition when they can be spending on ads for their more targetted products and services etc
Max Miller has a series about making historical foods, and references this book regularly:

https://www.youtube.com/c/TastingHistory
Sounds like as long as you're mandating one or the other you're making the right decision. Being able to know how to handle food is important.
Here the district heating is substantially cheaper than a gas furnace, at least in operation.
I believe you have to buy the infrastructure and pay for the pipe that goes from the nearest joint to your building, though.

We don't do per-apartment heat exchangers, but rather one per building, typically with shared hot water radiators across all units in the building.
Heat consumption is either estimated by a air/radiator temperature difference integrator on the radiator, or an electronic flow meter+temperature differential sensors on the unit's connection to the central hot water loop.
Seeing these sort of posts that implicitly suggest that Russians somehow are unaware of the war in Ukraine is ridiculous.

Everyone in Russia knows. People in Russia have been in a state of panic since the day the invasion began. They know what's going on. The government isn't really hiding it.

If anything, Westerners have been more propagandized about the conflict than Russians. Sure, there is a significant segment of Russia that has fully bought into Putin's propaganda -- But nearly every westerner has bought into the West's propaganda.

If you can't place Ukraine on a map, you do not have an informed opinion. If you haven't heard "Donbass" earlier than a week ago, you are not informed. If you weren't aware of the 2014 coup in Ukraine, you are not informed.

Please stop pretending to be enlightened. If someone wholeheartedly believes Putin, your little banner won't change their mind.

Side-note: the Russian text is awful. It roughly translates to:

> The continuous war against your Ukrainian brothers has carried away many victims.

> The truth is being obscured from you your government (yes, the grammar is wrong)

> Please, spread information

What is your goal here?
That may be a finite limit. Some years ago a couple I know married and decided to pick a neutral last name, 'X'. The powers that be would not allow it. So their last name became 'Ecks'.
Because we can’t exercise their agency for them. Strategically it’s more useful to ask what would they do if we did such. Asking why can’t they just be peaceful isn’t that useful at this stage.
Tiny House Laws and Building Codes Florida data sheet
Just a tip, check haveibeenpwned
The same treatment should apply to the US or any other great/middle power. You’re responsible for predictable consequences. Especially when nuclear weapons enter the equation.

There is no sense or satisfaction in ascribing the “blame” to Putin when the ICBMs are in the air. Some even explicitly extend your logic to those ludicrous ends, though I don’t presume to know your own thoughts.

Moral considerations of course matter, but there is no such thing as “morally” doing something that leads to an innocent people being invaded for “just” reasons, when perfectly reasonable alternatives exist. Never mind that no major power reaches the level of minimal moral integrity.

And to be clear, NATO is not guilty of war crimes (for Ukraine), but the Russian government is — not that Ukrainians will feel the difference of my moral ranking either way. It’s clear who deserves more moral consternation. But I have zero influence over Putin. I have almost, but not exactly zero influence over NATO. I have no responsibility for Russian actions, and some for NATO’s. And the comment I was replying to was advocating for what I think is the diametric opposite of what NATO should do. Those policy choices are the kinds of actions that will have a material effect on peace or war in Ukraine.
While I think Bush's corn ethanol policy was stupid [2], I've come around to thinking there might be a silver lining. [South] Korea was supposed to be getting 300,000mt of corn from Ukraine. They went on the open market and couldn't find replacement corn for delivery in the April-May period: https://www.agricensus.com/Article/S-Korean-feed-makers-mull...

[2] https://news.ycombinator.com/item?id=20061802

From my earlier comment [0]:

> Our modern Civilization is more vulnerable to an average once-a-millennium volcanic eruption than it's ever been, on account of our numbers and our dependency on supply chains for our sustenance.

> From the linked article: "In fact, the U.N. Food and Agriculture Organization estimated the 2012 worldwide food storage to last for 74 days." (pg. 9)

> Grains are useful because they store well. Storage is not economical, but it is essential for reducing the suffering which would result from an 1816-like scenario in our modern world.

[0] https://news.ycombinator.com/item?id=28595353

/methinks it's much better to have a 7-year supply of grain than a 74-day supply.

Wars also cause tremendous disruption to supply chains. The conflict in Ukraine is going to cause massive problems for food distribution.

What do you do with your corn surplus, when it's just not needed? What do you do with stored grains after they're 7 years old, or if they become moldy? Ethanol seems logical.

If we hit an oh-shit moment (loss of growing seasons due to a volcanic winter/war/etc), we can turn off the ethanol plants and use the corn to supply calories for people.

tl/dr: essential to turn off the ethanol plants until we have 7 years of grains stored up.
Still waiting for an android release that doesn't use ~7G ram and crash consistently on desktop (14G ram, then dies, or most recently, instantly segfaults)

As usual, delusions of grandeur and horrifically over confidence in the abilities of a 45 million dollar funded gang of "developers" that have produced basically nothing in 8 years, when unfunded students have produced a discord clone in about 6 months
The United States recently elected a leader that lives in $100M gilded 3 story penthouse atop a skyscraper in downtown Manhattan. This leader made amongst the most enemies of any living person I can name and was ostracised from popular society upon exiting the presidency. One of the ways he pitched himself as a worthy leader was boasting of all the Resplendent Wizard Towers across the world with his name on them.

Here is an article where both a CNN columnist and one of Trumps former underlings warn of his dark magic:
https://www.cnn.com/2021/03/09/opinions/trump-lindsay-graham...
i really appreciate seeing the context here.
Cool. Defense in depth. But how many vendors/products are now on the table? What will always matter is the most external firewall because once inside that line each subsiquent internal firewall will have a harder time viewing good traffic from bad. And the most inner firewalls between devices inside the home network will have so many holes punched in them to barely be useful. Defense in depth isnt about having multiple layers that repeat the same protections. Defense in depth is about having other layers of non-firewall products to catch the stuff the firewalls miss. If your outside wall is 8' adding more and more 8' walls behind the first does nothing if the army has 9' ladders. You need something different than another wall.
I could imagine a university town or the Russian style nuclear cities developing. You go there for a certain industry and a mini culture develops, people understand the trade offs.

It doesn’t have to be a negative thing but I do understand that getting pushed out of all urban areas in a hostile NIMBY culture we’ve developed could very well limit the field in many ways.
These monkeys showed higher nocturnal locomotion and reduced sleep, which was further exacerbated by a constant light regimen.

This sounds like borderline torture
I'm using it to make to describe the history in less morally direct and potentially forum-inflammatory terms. The fairly recent history of urban and transit planning in the US is, in reality, full of decisions and outcomes of highly dubious morality. This is a pretty vanilla mainstream interpretation rather than some just-so story promulgated by 'progressives' as the GP appears to suggest.
This is a California-centric view, but if I'm going to hire someone then I very much want them in a similar timezone so that I can actually talk to them during work hours.

Someone outside of say, +/- 4 hours, is just harder to work with.
In the specific context of government work? Do you have evidence either way?
If you don't want your team members to participate, just don't invite them to the meeting. I get what you're saying, but you also need to understand that people do things and don't catch themselves. Like men talking over women in meetings. Do the ladies just need to let the big strong men pull those heavy weights? Or do the men let everyone participate. People in general need to let space fill itself and give others room to speak.
Best to name her Ed.
Drivers are not qualified to assess the safety of a self-driving system. These cars should simply not be allowed on the road unless manufacturers take liability.
> Moreover, my wife, who is a nurse, has never heard of "bagel injury."

Well, if we go by the numbers in the article...

> Americans ate an estimated 3 billion bagels at home in 2011, an average of about 11 per person (this doesn’t include bagels eaten at work). And in the course of slicing up all those bagels, almost 2,000 people cut their fingers so badly that they ended up in an emergency room.

You have roughly (very roughly) a 0.24% chance of being one of those people injured, each day, across the entirety of the nation. I'd say the chances are low enough that some nurses will have heard of it, and some won't have, depending on distribution of bagel eaters.
The scenario I had in mind is Firewall A and Firewall B are in series and they're different products from two vendors. Firewall B is found to contain a vulnerability triggered by a specially crafted IPv6 TCP packet (that firewall A is happy to pass to firewall B), giving the attacker a level of control over Firewall B that allows them to then access the centralised authentication/authorisation system that would have otherwise been off limits to the attacker. The attacker communicates with firewall B using the same accepted protocol that firewall A and firewall B are configured to allow the attacker to access. Firewall B communicates to the authentication/authorisation system using the accepted protocol for doing so. Nothing suspicious appears to be going on unless you look at the patterns of traffic (throughput, duration of connections, number of connections in interval, etc) particularly to the authentication/authorisation system.

I don't think in-band attacks on routers, switches, firewalls doing simple ACL checks are a risk worth spending much concern on because parsing IPv4/IPv6/TCP/UDP headers is not hard to securely implement. Riskier architecture would be intrusion detection systems that perform deep packet inspection in-band (e.g. not out-of-band via a beam splitter to a standalone IDS) where there is 1,000,000's of lines of potentially buggy code exposed to attackers.

I agree with your point too that a complex network is harder to secure because you need more skill and expertise spread across more people. In such a scenario, it is easier for human mistakes to occur because of the difficulty in communicating, and difficulty in seeing the broader implication of what may appear to be a simple configuration change.
Covid has killed an order of magnitude more people than atomic weapons. We got to learn the hard way how destructive viruses can be. People clutching pearls over the potential to mislead are missing the point. There should be a frank and critical discussion about the risks of viral research, especially near populated areas. But entertaining the possibility of a catastrophic accident is now considered conspiratorial thinking
Nice eu countries already taking them.