skysight-inc/HackerNews huggingface dataset:
Putin/The Russians aren't insane, they're looking after oil/NG interests. That's the entire reason they captured Crimea in the first place. The Ukrainian government then stopped the flow of water to Crimea to make it basically unusable.

NATO backed oil/NG companies also are annoyed because, despite investing a lot in gas fields in the East and the West, they haven't been able to produce much of anything because the region is under constant military conflict, funded by both the US and Russia.

I agree with the parent comment. If Russia can finally and absolutely control gas fields in the East and have assured access to not only Crimea but water to run the region they'll be getting much more out of this situation than they had prior. They will be interested in stability as much as NATO backed energy companies. Given the conflict in the region, and the recent (2014) overthrow of a government friendly to them (coincidentally right after Shell and Chevron signed contracts to develop gas fields), Russia is, rightfully, as wary of promises from the West as we are of them.

For purely, selfish, greedy reasons Russia would want peace in the region as much as NATO backed oil/gas companies have been hoping for it. There are still gas fields in the West that are waiting to be exploited and already have their resources under contract. Once these resources can be split up in a way everyone can deal with, there won't be conflict until the gas dries up because both parties make tremendously more money with stability after that.
In his times there were no easy ways to organize masses of people due to lack of efficient decentralized means of communication.
Sounds like an abusive relationship. Just dump him (Discord).
That must have been a typo. From what I have read, sleep for more than 9hr is negatively correlated with good health:

https://www.webmd.com/sleep-disorders/physical-side-effects-...
My Mull builds for Android had this update out <6 hours after.
https://divestos.org/misc/ffa-dates.txt

Fennec F-Droid should be updated by Wednesday or so.
https://gitlab.com/fdroid/fdroiddata/-/merge_requests/10706
It’s also much more difficult to hold a camera at arms length to view the screen.

When you hold up a camera to your eye and use the viewfinder - it’s a third point of contact. You’re also using your face to stabilize it.

Trust me - they’d get rid of the damn viewfinder if it wasn’t often requested so much. Using the viewfinder is just a lot easier than the back of the screen in many situations. (Especially outdoors. Think about rain or whatever else going on getting on the screen)
>> You implied the Russian military could beat the US military. How?

If it goes nuclear both sides will defeat each other. Neither is known to have any viable defense against nuclear missiles. It seems really odd to have to make that point. It seems even more odd that putin is threatening it.
>The only use case of privacy coins is for illegitimate purposes only.

Excellent trolling. I have used monero for effectively anonymous online donations to legitimate non-profit institutions. Can you think of any other great alternatives for this online? You know it's not illegal to anonymously donate to someone, yes? Most of the non-privacy coins are much more susceptible to finding a KYC exposed starting point to find where the transaction comes from.

>f there weren’t any issues why are they not being accepted by more exchanges?

Kraken, one of the biggest and longest running KYC and AML compliant exchanges trades Monero in the US. Other exchanges may have simply made a business decision not to trade Monero, but there's clearly precedent that it can be done successfully at least in the US.
No, it's the exact same meaning as when it happens to a person. What vkou said.

https://twitter.com/ConallLaverty/status/1499414982429224974
Almost none of these companies left because of sanctions, they left voluntary. Companies could still get paid without swift access if they wanted to, that's not the issue. Doing business in Russia has become toxic. It's a race to get out.
The biggest issue is that Firefox on Android runs all websites in the same process.

https://bugzilla.mozilla.org/show_bug.cgi?id=1565196

Another example, third party Chromium builds like Vanadium or Mulch also go further and enable CFI on Android (still default disabled upstream last I checked).
The problem with putting the blame solely on China is that the US funded research at the Wuhan Institute of Virology.

If the lab leak hypothesis proves to be true US research funded by NIH may be the cause.
I implemented this for its Windows support and it's been great.
Indeed. Cameras are built to replicate human eyes. For instance, we’re more sensitive to green. Thus the Bayer filter.
> mysql_real_escape_string is still vulnerable when being used with some exotic character sets

Indeed -- mysql_real_escape_string "mostly" fixes this problem by requiring a db connection as one of its args. Since the driver is usually aware of the connection state, mysql_real_escape_string can check to see if one of those exotic charsets is in-use. The issue is that there are multiple ways to change the connection charset, some of which the driver is aware of (e.g. in PHP mysqli set_charset) but some it is not (running textual statements like SET NAMES or SET CHARACTER SET).

However, generally an attacker won't have the ability to set an arbitrary exotic character set for the connection anyway... unless they already have some other sql injection mechanism, in which case it's a moot point :)

Driver documentation also typically mentions this problem. For example, here's the doc for doing client-side param interpolation in the most popular MySQL driver for Golang: https://github.com/go-sql-driver/mysql#interpolateparams (see warning in italics)

It also explicitly detects if your initial connection settings attempt to use one of those charsets along with param interpolation, and throws an error if so: https://github.com/go-sql-driver/mysql/blob/21f789cd/dsn.go#...

> Couldn't one just save the extra round-trip with length-prefixed strings by sending the query together with the parameters in a single message?

AFAIK, no, not with the traditional MySQL binary protocol. The newer "X protocol" introduced in MySQL 5.7 does allow this, but it is not widely implemented in drivers.
What happened to rewriting the browser engine in Rust? Isn't the language supposed to prevent this sort of bugs?
All three of those are orders of magnitude harder to learn than web technologies, which have been backwards compatible for something like the past 2 or 3 decades and see little churn in the APIs. Not saying it’s better, but it is a lot easier to learn, so the vendors need to work a lot harder if they want to compete, which they don’t do, which is why Electron is so popular.
I didn't say whatever they want that's a strawman. I said self-determination which obviously includes administration of borders and immigration.

> I believe individual rights, including the right to mobility, override the right of a government to do whatever it wants. I'm surprised you've found a definition of authoritarian where it's individuals being authoritarian towards governments that want to tell them what they can do.

Another strawman. I'm saying you believing that other people must live under a society and system of laws that personally satisfy you, and that they are immoral if they feel differently, is authoritarian.

Just curious about your ideas of individual liberty. How do you feel about lockdowns, mask mandates, and vaccine passports, by the way?
I think you're right, but at some point, people have to ask why the West decided to do this at the same time as the Special Military Operation in Donbas. Then again, no one seems to think Putin bombed Russian cities and blamed it on Chechen rebels to gain power.
This guy is all through this thread posting the latest Russian propaganda lines (Zelensky fled, etc). There's a time for charity, and an account with no history spouting wartime propaganda isn't it.
> Chambers and his team were testing germanium in combination with a specialized thin crystalline film of lanthanum-strontium-zirconium-titanium-oxide (LSZTO). "We are reporting on a powerful tool for probing semiconductor structure and function," said Chambers. "Hard X-ray photoelectron spectroscopy revealed in this case that atoms of oxygen, an impurity in the germanium, dominate the properties of the material system when germanium is joined to a particular oxide material. This was a big surprise."

> "Our results were best interpreted in terms of oxygen impurities in the germanium being responsible for a very interesting effect," Chambers said. "The oxygen atoms near the interface donate electrons to the LSZTO film, creating holes, or the absence of electrons, in the germanium within a few atomic layers of the interface.
> In terms of personal communication with Discord, I can't exactly say that it has improved since I dropped development, rather communication suffered. After development ceased I did not speak to any Discord developer and they didn't speak to me. The only form of contact came from me contacting them to talk about the decommission.

I don't really know if this is a good thing. Going by his own account as quoted above, Danny's leave doesn't seem to have affected much at Discord. You'd think Discord would have reached out to him after he published his initial Gist and tried to work things out (including releasing a public apology). Especially since, as he said, the Discord.py library is one of the most popular libraries for Discord out there. I obviously don't have the numbers, but the amount of developers libraries such as Discord.py have brought to Discord must be in the high thousands. Why are Discord not treating this with the urgency it deserves?

Have I just come to expect too much of companies these days?
There was a case in Australia 10 or so years back, where MD5 sums were added to police speed camera photos. This was before MD5 vulnerabilities were well known.

The defence successfully argued that MD5 was not totally reliable -- even though the chance of it being faked was absolutely tiny.

The real irony was that without the MD5, the photos would probably have been accepted just on the police assertion of chain of custody.

(I've been looking for this news story but unfortunately I can't find it at the moment)

[edit- found it]
https://www.schneier.com/blog/archives/2005/08/the_md5_defen...

In fact the MD5 was known to be vulnerable - maybe. But it's still the case that adding MD5 made it less trustworthy!
His tip is to cut them in half so you don't waste half?. My tip is eat both halves so you don't waste half.
> It's been mind boggling to see anti 2A people in my social circle cheer for normal Ukrainian citizens arming themselves with "weapons of war" that "wouldn't do anything against a country with drones and nukes."

The only thing that will stop a bad guy with a Luftwaffe is a good guy with a Luftwaffe and a bunch of SAMs. A bunch of randos with AKs have little chance against the Russian-equivalent of Hellfire missiles IMHO. It's just that the Ukraine military seems to have been underestimated.

Further, Russian SEAD seems to suck:

* https://rusi.org/explore-our-research/publications/rusi-defe...

and their logistics, once they start getting far from their railheads, seems to deteriorate quite quickly:

* https://warontherocks.com/2021/11/feeding-the-bear-a-closer-...

If there is political will and logistical support, a mainstream army can keep an insurgency down as shown by the US in Iraq and Afghanistan. The main recourse coupe to wait out the patience of the 'occupier' (which is what the Taliban did).

Whether Russia/Putin has the will and/or resources is another question.

> I hope a silver lining of this conflict is remembering that protecting your life and your family's lives with firearms is an inalienable right.

Even with the threat of Russian invasion, especially after 2014 and Crimea, Ukraine seems to disagree, as licenses are still needed for gun ownership:

* https://en.wikipedia.org/wiki/Gun_law_in_Ukraine

Though UA has mandatory military service to an extent:

* https://en.wikipedia.org/wiki/Military_service#Ukraine
It's absolutely a moral failing, but an understandable one.

If you spend 10+ years as a proponent of something, become famous and well-compensated for your expertise in it, and are surrounded by colleagues and employees who also believe in it... it's very hard to say "We've become wrong. Let's do things differently."

It's the personal version of successful companies failing to adapt to innovation in their market.
That’s just ergonomics.

You are shooting with a long lens. Unless you have the camera on a tripod/monopod, it’s much more stable to have the camera braced against your body with the viewfinder up against your eye, versus trying to hold 5 pounds of very long lens at arm’s length.

(Nikon 200–500mm lens in this case. Trust me. Way easier to support that chonker when it’s held close to the body when running around to shoot rugby.)
> We just elected not to build new infrastructure in most places, and coast with what we had.

If you're talking about facilitating more automobiles, I am not sure what you are going to be able to do in the Bay Area, L.A., etc.

I don't think it's for lack of trying or resources, roads simply don't scale. Bad weather, one bad accident on the freeway, rush "hour" (ha ha).
Steroid use will result in fat loss. Having higher Test levels will always result in metabolising more fat for energy, along with boosting muscle growth. The more potent the steroid the more potent the effect. Trenbolone is an especially potent steroid, and is known for being especially effective at reducing body fat.
They're going down the same path as Twitter. The API is to be locked down so the company can't be out-innovated.
That’s all we’ll and good when it doesn’t have the equivalent of camouflaged knives sticking out at eye level. Yikes.
If the firmware lives only on the hardware, it is indistinguishable from hardware.
Old business proverb: "Never piss off your customers. They will go somewhere else and never come back."
I’m kind of shocked that there’s an extra round trip.

One would expect you can do the preparation lazily as there shouldn’t even be a hypothetical performance consideration for using prepared statements.

In other words you send an execute prepared statement request, you can provide the truly prepared statement OR the templated sql string. In the latter case the server would send you the results of preparing the statement before sending you the result of execution so that you can provide it on subsequent requests.

Or use an RPC system that supports promise pipelining so that you could send the prepare request and the execute is sent with the promise of the prepare request.
here's another anecdote you might find entertaining:

i invested in one company late last year based on an initial screen using this kind of extrapolation of historical financials, and a bit more reading through the company's annual reports to get a better feel of the business model. the business model seemed a little weird but the business' financials looked good, especially compared to the company's share price.

since then i've updated my expectations and expect to earn about -80% to -100% return on invested capital. i failed to read symptoms of possible accounting fraud that were signaled in public disclosures on the company website at the time i invested, and a few months later directors have resigned and been replaced, the company has been delisted for failing to file quarterly financials, and the company has released the results of an accounting probe that has explained how the former directors fabricated all of the company financials, starting off with dating sales before goods were delivered to customers, and ending with making payments to the company from their personal accounts and registering the payments as if they were sales from external customers.

part of operationalising this kind of valuation model into a profitable investment scheme also needs a supporting due diligence function, which in this instance i failed dismally at
>However, this is precisely the issue - what outlets do you really trust? Stuff that comes from BBC? CNN? New age "influencers" on YT/TikTok? This is the problem.

see: https://astralcodexten.substack.com/p/bounded-distrust

Or applying your comment to a domestic news event. Suppose fox news say there's a school shooting. How do you prove:

- This is true without actually going to the school to see the dead bodies

- The US government isn't hiring crisis actors and then telling the media that there's a shooting
The issue is that "annexing" has already a precise meaning in the current Russia-annexing-territories context!

[Your use may be acceptable. But Google finds no matches for "annexing into NATO" and only a few for "annexation into NATO".]
It’s only pointless if you don’t believe the iPhone is a revolutionary communication tool that changes how we interact with the Internet, which seems like a strange position to be held by someone on the iOS team.

It’s really some of the only documentation I’ve come across that can’t be read on mobile, and it’s all because of a sidebar which isn’t even a good reason.
The Soviet Union: Productive Efficiency
I try to stay with the default native apps and programs that comes with the OSes (currently Apple) as much as possible. I have begun to ponder upon and want to go linux once I retire from active work. I try to keep backups of the content in either open or universal formats to be able to move and decouple from Apple smoothly, if needed.

I continue to experiment and tinker with new tools but after using it, buying/pro/premium it, and I begin to realize I just need to learn a little more with the native apps and I can do that smoothly enough that my muscle memory kicks in. Well, I even subscribed to SetApp[1] and use less than 5 App there at most.

My approach these days is -- I need to be able to own and/or control the content but use any tools, and be able to walk of the tools when needed. I try to keep a note about it and will update that -- https://oinam.fyi/digital/apple/

1. https://setapp.com
Good heavens. A 36X lens from Apexel is all of $64. I love the 21st century.
man... couldnt agree more.
Just to tie everything up, if you have Dirichlet's theorem it's easy to show that {1^x: x not prime} is irregular through a "direct" proof by contradiction using the pumping lemma.

1. Assuming the language is regular, the pumping lemma tells us that it has a pumping length m, and all strings of length at least m can be divided into a prefix x, a suffix z, and a pumpable substring y, such that:

1a. |xz| < m

1b. |y| > 1

1c. The concatenation x y^n z remains in the language for all n. (In this case, this means that |xz| + n*|y| is nonprime for all nonnegative y.)

2. Consider the string c = 1^p², where p is a prime number greater than m[1].

3. The pumping lemma will divide c into substrings x y z as described above.

4. Observe that |xz| < m < p and |y| = p² - |xz|

5. Dirichlet's theorem tells us that the arithmetic sequence {a + nd} contains infinitely many primes as long as a and d are coprime. Pumping our string c will generate strings with lengths belonging to the arithmetic sequence {|xz| + n(p² - |xz|)}. It remains to be shown that |xz| and (p² - |xz|) are coprime.

6. Observe that any number which divides both (p² - |xz|) and |xz| will also divide [(p² - |xz|) + |xz|] = p².

7. Since p is prime, the only divisors of p² are 1, p, and p².

8. Since |xz| < p, we can see that gcd(|xz|, (p² - |xz|)) = 1.

This completes the proof; pumping c is guaranteed to produce not just one but infinitely many strings of prime length.

[1] Euclid tells us that there is no greatest prime number, so we can guarantee the existence of such a p.
Show HN: An SQL Builder in Rust
Hi guys. I just write an SQL builder. I want to know what you think.
Maine, Arizona and Vermont all prohibit hanging clothes outside to dry.

19 states prohibit prohibitions by municipalities, but most states leave it up to the municipality to decide.
> It was set up specifically to oppose Moscow.

Wrong. It was set up to oppose the Soviet Union. Not Russia. Putin himself was talking about joining NATO. Regardless of how serious he was, no country consider joining an organization if it’s hostile to them.

> It is an offensive alliance without question.

Good thing you mentioned Libya, because that’s the only campaign that NATO involved in an offensive role. Even putting aside the circumstances of that campaign, an offensive organization that exists for 73 years but has only waged a single war, does that make any sense?
The "china" leak has always been a red herring and hopefully people have noticed that the emphasis was always supposed to be gain of function research anyone can do anywhere. The finger pointing aspect is distracting when the real concern is the rapidly evolving underlying technology. The scientists disposition really doesn't matter.. it's not like physicists are responsible for all of the nuclear devices that have been detonated, thousands. Those (and these) scientist's owners will be deciding what their developments will ultimately be used for but in this I don't see that there are any entities capable of leveraging this next wave of "progress" that will be capable of amazing and horrific potentialities.
Considering 3-lens systems were being used in telescopes over 200 years ago, id bet it takes far less computation than a single pixel in a modern game.

https://en.m.wikipedia.org/wiki/Barlow_lens https://en.wikipedia.org/wiki/Achromatic_lens
> Apple and AMD will probably not be able to sell products for 1 year till they migrated to Intel or Samsung production in case TSMC fabs in Taiwan are not available for them any more.

Thanks for your assessment on this. Would you please share how you arrived at one year of a product sales gap?

Do you think it is possible for the US to bring 3nm process to the US while that is still relevant?
Answered in the article

> Mechanics fix suspension wrecked by the drive over the mountains from Chile; others move steering wheels from right to left.
> with airlines, the terms of service and what fees tacked on are constantly changing

I don't think those things are constantly changing. What constantly changes is the price of the base ticket, because airlines are always looking for ways to price discriminate--i.e., to charge more for the same flight to customers who are willing to pay more, but charge less to customers who can't afford to pay more, in order to keep the maximum number of seats filled on every flight. But what that price buys you, and what you're going to be charged for stuff that isn't included in that price, doesn't change very often.
The county next to where I live has banned vinyl siding for the entire county. It's not an HOA rule, it's a countywide government rule. Wouldn't be surprised to find out there are counties or towns that have their own clothesline ban.
>> Again, this is just like saying that a camera existing enables the government to hack it, so rear view cameras are part of forming a surveillance state.

>That might be the best example of a straw-man that I've ever seen.

I think that was the point.

Replace "rear view cameras" with "onboard tools to detect and deter/prevent impaired driving" and you have the same straw man.
That doesnt change any of the most salient points of this saga: Virology research community is coming across shady and untrustworthy. And thats a bigger problem.
Amazing how SQL injection is in the OWASP Top 10 for the last 20 years and then you see something like this. I understand it’s open source but I can’t fathom why the author would be ok with not having true parameterized queries.
Have you tried Atom though?
I have not been following too closely, but it came out from the EcoHealth docs that bat samples were also being sent from Laos to Wuhan.

Source (Nov 2021, not sure if my info is out of date): https://twitter.com/mattwridley/status/1462659372421718019

Which would mean that the article's argument stands, stronger.