skysight-inc/HackerNews huggingface dataset:
Yes, it has essentially lost all meaning as most vulns are exploited before ever being reported. And even those who responsibly report them call them “0-days”, which is sort of true on the day they report them, but only if the company didn’t receive any other reports, and why would they divulge that information unless they had to, like to give someone else the bug bounty? “Sorry, it’s actually a 14-day, we’re working on the fix.” Right.

So again, it’s lost any useful meaning I think.
They were and are still to an extent institutional investors no? Aren't those public funds?
There's a button in the settings to disable it if you don't like it. I've never used it, so far it's the best browser I've used.
How are you so certain I wasn't place on Earth for a reason? I was caused, right? Sure, by my parents, but there is a regression to this causality.

If we keep ourselves within the physical domain, experimentally there is the documentation of a beginning to physical causes that we can observe, and an ordering to such causality which demonstrates its continuum in movement to this present position where I am overwhelmingly purposeful, because I am able to reason my ends which are to give people greater limits of happiness - which begins with making efforts at providing security to families so they can form their own purposeful lives.

Unless you are to claim that reasoning, such as mathematically, is a mistake? But how can that be true?
In case anyone else is wondering what causes the different models for different markets

>First, Qualcomm can't produce enough processor to fit in all of the Samsung's phones. Second, snapdragon is too expensive, especially if you buy it in other countries. So, Samsung only uses snapdragon in countries where Qualcomm sells them cheaper.

As well as wanting to be exposed into more markets

https://www.quora.com/Why-does-Samsung-use-Exynos
direnv is nice but it really makes me uneasy if it catches on for modern collaborative development.

You are giving people a _ton_ of trust when cloning a repo or pull request that has a .envrc which will be automatically executed by direnv. This file could do anything from steal your SSH keys to delete your entire home directory or worse. And the only thing preventing that from happening is the suggestion of "oh be sure to eyeball the .envrc file and make sure it looks ok, then run this command to enable it". People will just google for the first "how to I unblock .envrc file" and blindly run the command, then oops. Or a determined attacker will just obfuscate what they're doing so the .envrc looks fine but you failed to realize some esoteric bash-isms were actually invoking an obfuscated script and... oops. It's just begging for a supply chain disaster on a similar scale as npm's infamous issues.

VS code and some vim extensions have similar issues with automatic project-specific configurations that allow arbitrary code execution too, and neither have a good solution beyond 'just read all the code and understand it to make sure it's not going to hurt you'. It's not really a unique thing to direnv.

We really need a better model for collaboration and consistent dev environments. I think containers and docker/chroot/etc. environments with explicit opt in of your local resources, configs, files, etc. are a much more sane and security conscious path towards it. A script executing to setup my python environment for a project should never, ever have access or even know about my personal password store database for example (unless I explicitly decide it should).
The moment at which it seemed like the RISC people were really on to something important was the moment when the size and complexity of the x86 frontend was really quite large compared to the rest of the core. Now you can't even find the x86 decoder on a die shot, because it's irrelevant. The 512x512b FMA unit is like the size of Alaska and the decoder is the size of Monaco. So the advantages of RISC were overtaken by semiconductor physics for the most part.
What are the practical effects likely to be, anyway?

I'm wary of Musk because he comes from the same "memelord shitposter" tradition that has served the right wing so well in the past few years, but I don't think he's angling for the return of Trump?
The government is elected to represent the interests of the people. They bear the overwhelming responsibility for any corrupt deals made with "people making ridiculous amounts of money." It sounds like you're to assign blame to a business person for buying influence, instead of blaming the politician for selling it in the first place! If politicians stop selling influence, there is nothing to buy.
Is that why it's down all the time? bazing I'll show myself out.
> That does not mean that we should always specify every type in program explicitly, like Java does. Unspecified types are great for interactive exploration, or a quick hack.

It's also helpful to consider whether they constitute unnecessary requirements[1]. Most mainstream JS code is rife with problems like this—including rampant mis-/over-use of triple equals. (I call this "going out of your way to do the wrong thing".)

1. https://www.teamten.com/lawrence/programming/dont-invent-unn...
Well, childish or patronizing - can it be both? I am a millennial, so perhaps it's childish. Anyways, if summarizing an extremely complex economic situation with a ~10 word meme is childish, I'm okay with that.
It certainly looks interesting. I sincerely hope the plan is for eventual cross platform functionality if it's aimed and development teams. So many more devs seem to be using native linux these days.
but 9% seems very expensive way to do that, I think most likely he just likes it and has benefited greatly by the platform.

the question, is it worth investment?
Has it occurred to you that social media tilts left because lefty people are more likely to use the internet?

Internet and social media use use track closely with education level, which correlate to position on the political spectrum.

If that's true, then an attempt to make social media more "neutral" would in fact be giving rightists an unfair advantage.
Ask HN: What open source visual workflow library do you use for your web app?
I’m a backend developer and am looking for a frontend visual workflow library to use for my web app. This library would be used to create the visual workflow to define actions by the user.

For example, customer.io has a drag & drop web workflow to define actions. Pictured at https://customer.io/wp-content/uploads/2021/06/use-case-upsell.svg

Does anyone know of a frontend library I can use to embed into my web app the drag & drop functionality to define workflow actions so that I can tie it into my backend?

Thanks in advance.
It would have helped if they had made it more prominent that you're supposed to scroll down. I was watching the first video, expecting to see a second one for comparison or something. I already closed the tab again and only later saw a coworker browsing HN who clicked on the same link and saw him scroll :)
Tim Apple has made it really clear he doesn't care about his customers, his shareholders, or anyone else at all. The only way to fix this issue is to help every Apple user in your life transition away from such a user-hostile company.

Also, any company that implements a Social Credit Score should be immediately overthrown, as it is too dangerous to exist. Fascism must be destroyed, permanently.
I wish you the best, this does look really cool. The collaboration aspects especially are pretty great; with remote work becoming the norm, terminal sharing without having to go through grainy zoom video shares is going to be amazing. And the workflows look super useful as well.

Just my thoughts on this: I wouldn't consider using it personally, but would advocate for using it in companies where e.g. there are engineers that work closely with support, teaching them how to debug etc. If it was OSS, I do think it would increase adoption by a lot.
Wanted to give it a shot but got disappointed when I launched it and the following happened:

- Outgoing request to googleapis.com

- Outgoing request to segment.io

- Outgoing request to sentry.io

- Requires sign up (only via Github, mind you)

I understand the first request is probably to get some dynamic configuration, even though I'd rather my terminal ship with static configuration. But then you have segment and sentry: not interested in sending telemetry from my terminal. Finally having user accounts for a terminal is such as strange concept.

I really wanted to like it, too. The screenshots look great
Plenty of things are public but are unethical to broadcast, and can range from benign to extremely creepy or harassment.
> what has he lied about?

"Funding secured"
I think in retrospect you can say what you said. But think about your stereotypical grandfather whose big ambition was to be a company man, to work his way through life and be rewarded with a modest pension and a reasonably comfortable retirement. Think also about the fact that while in the US this is less of a dream now, in Japan this sentiment seems alive and well.
That makes sense. But it's easy to confuse a prose ellipsis with the C++ notation for indicating the wildcard exception acceptance pattern.
It doesn't, this is a side effect of requesting the chrome.tabs permission which we use to manage which tab is currently being highlighted. Chrome includes this note because the chrome.tabs permission set is very broad and includes an onUpdated hook that could allow the extension to capture history as you are browsing. Unfortunately, Chrome doesn't offer more narrow scoped permissions (e.g. tabs.query and not just generically tabs). This has been a known 'problem' for years unfortunately:

https://stackoverflow.com/questions/64063754/chrome-extensio...
Or because Google deciding the direction of browser development is better.
iOS Developer Interview Questions and Answers with Sample Code [video]
Good question! We did an initial benchmark of scrolling back in July against Terminal, iTerm, Hyper, Kitty, and Alacritty, if you’re interested: https://www.warp.dev/blog/how-warp-works.

We started by forking Alacritty's model and parser and because we have a similar architecture (Rust-based, rendered on the GPU) we should generally be at, or near, the performance of Alacritty.
Right but the point of the comparison is that you can get gas at any time for the same price. So you need to account for either the median price or the highest price when comparing to an EV.

It will be dictated a lot on how you use your vehicle. If you have a very consistent drive to work/home schedule then EVs are great. If you start doing other things mixed in - it gets more nebulous unless you have a very high range one.

The peak rates on there make me cringe. 60c/kwh. Insane.
Subscription + ads is basically the cable model. It's a slippery slope to how things are today.. plus once ads are in the mix, there is more competition. The only thing that makes awful shows bearable on netflix is that there are no ads
American Family Insurance used to offer an app for this called DreamVault (https://appadvice.com/app/dreamvault/536354802). They discontinued it in 2016 shortly after I put my whole house inventory into it of course. It had enough features to make it useful but wasn't very impressive overall. There may be some perverse incentives in NOT having this service for home insurers. If you don't have a good home inventory, they can pay a reduce reimbursement amount.
Open discussion isn’t an ideology. It’s all ideologies.
> "How do I get the subtitle selector up?", "Does left/right skip forward 10/15/30/60sec or does it start RR/FF?"

Streaming apps (with some exceptions) on Apple TV (the device) actually use the same video player, so this is the same everywhere. Even navigation throughout the library is quite standardized.

Exceptions here are Youtube app, which has a custom video player implementation, and it's just terrible to use, and Netflix app, which has terrible custom navigation.
What’s good for the goose is good for the gander.

That’s why free speech policies shouldn’t be dictated by partisan concerns. You never know who will be in control of your social media platform in the future.
> Does Pharo even have a notion of source file?

Same as other Smalltalk implementations — VM + .image file & .sources file & .changes file.

.image is a snapshot/cache

.changes is recovery log text of what has been done with the .image file

.sources is source code text for the .image smapshot
This is neat, but I'm not convinced it's going in the right direction.

It's not open source, and "maybe it will eventually be" is unacceptable for such a core component of an engineer's workflow. Most of the features on the front page are "coming soon," not actually available. There's no timeline for support for non-Mac OS systems, and it's built using Metal rather than any cross-platform API, so it will be at least moderately difficult to port. (Isn't the whole point collaboration?) It is "blazingly-fast" but has no benchmarks for latency or startup time.

The team raised money because "[b]uilding a terminal is hard," and the business model seems reasonable - build a terminal people like, and then get businesses to pay for it - but I'm hard-pressed to find a use case that would benefit from the upsides of this tool which isn't also utterly hamstrung by its shortcomings, at least currently.

Yeah, maybe you can justify it at an all-Mac dev shop, but at the last all-Mac place I worked we did everything this currently does with iTerm (free) and Tuple, and frankly I don't see this obviating the need for Tuple in that use case. (EDIT: Tuple also works fine on Linux, and of course there are myriad excellent terminals for Linux.)

Perhaps most importantly, though, this FAQ entry concerns me:

> Every session you work on your desktop can be backed by a secure web permalink. It opens into a browser tab that shows your terminal state and allows readers to scroll and interact with the read-only elements. You might use this for yourself: so you can view and run commands on it while you're away from your machine. Or you might share it with a coworker for debugging.

First of all, is this actually available at the moment? I think not, since "Web (WASM)" is still on the roadmap.

Second, "secure" is doing a lot of work here. What's the threat model Warp considers themselves secure against? How are these sessions allocated? Does every terminal start in a connected state, or is the connection only made once the user opts in? Are the terminal sessions E2EE? Are they exposed to Warp's internal systems? If so, what is stopping any attacker who makes it into Warp's network from remotely monitoring and controlling user machines? If Warp says it _is_ E2EE or otherwise secured in this manner, how can we trust them when it's not open source?

This seems too risky to be worth using seriously, and perhaps too risky to even try out.
Very interesting. Might want to consider adding some of your own colours to your tailwind config though, I can tell it's all taken from the Tailwind UI service.
Those poor Google engineers, being exploited with their $300k+ compensation and comprehensive benefits. How dare their employer try to incentivize returning to the office.
If I want a movie, I’ll generally wait for it to go on sale on iTunes, buy it there, and then strip the DRM so I can put it in Plex. That worked for everything except Dune; Apple improved their DRM for recent movies and nothing I’ve found can remove it. So, I pirated it. And I plan to do the same in the future (buy then pirate).

I’m happy to spend money, but no one is selling what I want: DRM-free digital movies/TV shows. We got there with music but now that streaming has taken over I doubt we’ll ever get there with video.
Gibson has a cameo in Wild Palms.

PAIGE: This is William Gibson, Harry.

HARRY: Oh, yeah... Neuromancer, right?

PAIGE: He invented the word "cyberspace."

GIBSON: And they'll never let me forget it.
With a shell script, you get to enjoy all the pains of building software and its dependencies from scratch. Even then, you wouldn't be even halfway done. You'd also need to go through the process of turning your ad-hoc procedures into a reproducible script only to find out that it broke months later.

Nix provides better abstractions and composability to make that experience far less painful. Note that in my previous example, I didn't need to specify how to build OpenSSL or Nginx. I was able to reuse the definition from Nixpkgs and apply my own customizations to it.
Yes, absolutely; reading the NYT or WSJ twice a week and never touching another news source will make you better informed than consuming the out[ut of a hundred YouTube channels and Twitter feeds you have chosen because you enjoy their opinions.

Diversifying your news sources is a poor form of hedging. What we should encourage people to do is trying to come up with methods to increase trust: can you think of a way to verify some snippet of news from first principle?
CTO @ Missive here, feel free to ask questions about our tech stack!
The UI controls is something I like to see. And possible support for mobile?
Most Americans aren't one traffic stop away from a huge legal bill AND medical bill (if you survive). For the rest of us, the returns diminish after a somewhat larger buffer.
> Because of the this the chance we get into serious trouble due to climate change is significantly reduced.

In which alternate reality?
Rockset Beats ClickHouse and Druid on the Star Schema Benchmark; Does It Matter?
When someone uses "re-imagined from the ground up" I expect that this terminal will not function like any other terminal I've seen before. Yet it looks exactly the same.
Is your framework well-integrated with accessibility tools on Mac OS? If so, will you continue to integrate with those tools on other platforms?
Are IT Degrees Still Relevant?
Well I did appreciate him until he paid Putin his buddy, to start a war with Ukraine just so Biden would look bad.

The crap economy is definitely all his fault. And gas prices, his fault. And he doesn’t even care about climate change.
Come on, you almost can't view any conservative candidate's picture in france without having to "view sensitive contents", it's ridiculous.
Talking about "the cult of SGI", and then using the new logo instead of the old cube logo, that's blasphemy! :-D
The Dolby Digital track is actually compressed, not uncompressed as the author speculates. Back then, "Dolby Digital" branding was still synonymous with the Dolby AC-3 codec, which offers lossy audio compression.
Bill Gates wrote about this startup and carbon removal in gerneral in his book "How To Avoid A Climate Disaster". If I remember it correctly, carbon removal is still super inefficient. Hopefully this investment will make the technology scalable and more efficient.
What would the alternative be if US banned all independent media sources (like Russia did)?
Thanks :-)

I'll add Cataloging the World, by Alex Wright and Paper Machines: About Cards & Catalogs, 1548-1929 by Markus Krajewski plus few relatively recent articles:

- Note Taking as an Art of Transmission http://doi.org/10.1086/427303

- From Note-Taking to Data Banks https://doi.org/10.1080/17496977.2010.492615

- Facing Interfaces: Paul Otlet's Visualizations of Data Integration https://www.mondotheque.be/wiki/images/e/e2/Heuvel_Rayward_F...

There are surely many others and following those we arrive to classic PIM publications, witch is "the system to organize personal digital information" in the end!
The amount of cynicism around fusion is stupid. It reminds me a lot of the learned helplessness that surrounded the idea of reusable spacecraft.

One of the easiest (laziest?) positions one can hold is simply to be dismissive of anything that hasn't happened yet, and which appears to be moderately difficult or harder. Fusion, AGI, etc... Just dismiss those things as ridiculous and you position yourself as wise, informed, erudite, whatever - to most people.
Everyone is political. But “woke” people are like the old Christian right. They’re willing to use their control of institutions to prosthelytize their ideology in a way that ordinary liberals or conservatives aren’t.
Japanophiles in the 80s were excessive. Scifi from the era has these undertones (Running Man, in 1986, has a bunch of execs being served sushi in post-apocalyptic california, by a geisha). Rising Sun in 1990 personified this fear that Japan would eclipse the US in tech, economy and culture, before they imploded with what we "now" consider an inevitable result of overheated economy.

Try flying through Minnesota, Wisconsin, the automaker capital states. Airports full of now-yellowed directions in Japanese for the consideration of what was frequent visitations by their competitors.

It was a no-brainer to bet on Japanese tech in next generation...even Gibson's dated "5MB of hot hitachi RAM" was far-sighted when he wrote it...just not far enough.
Strongly recommend the Laundry files. Note that they start rougher (hewing very close to the original concept of "grumpy sysadmin in weird circumenstances") but quickly mature into more.
I'm biased because I'm the maintainer, but canvas-datagrid is a, uh, canvas-based datagrid (https://github.com/TonyGermaneri/canvas-datagrid), which can easily handle millions of rows. It's FOSS, and although in need of improvement (and better type annotations), it's well-documented (https://canvas-datagrid.js.org/) and actively maintained.
While new acronyms are born every year for the productivity/organizational world, I personally believe it all is the same thing that is taught by the greats like Peter Drucker & Orison Swett Marden. You have people like Brian Tracy, David Allen, Kop Kopmeyer, Zig Ziglar, and many more that expose you to these success principles. Some through organizational method, some through mindset.

The most important principle? You find an expert who will take you by the hand and give you the success formulas. You can do that through reading in many cases in which you then add your own special tweaks to improve it. If you read a number of books in the topic of information organization, you'll realize that these people who are "experts" are really just in the same position as the people before them with their own special tweaks to improve the previous generation's work.
I am in the unusual situation that my family name is still available as a 4 letter .com. It's been that way as far as I can tell for many years and I imagine this is a rare situation in 2022.

I always liked the idea of owning it and passing it down for generations (assuming email will last that long)

The domain is parked by some small company / SEO agency but in theory seems to be available for sale. In the past they had a form similar to the one mentioned in this post, which only accepted offers above 10k$. I've been holding out on checking this domain for a while now since I expect every increase in traffic will affect the price but sometime in the last years they reduced it to a simple 'contact us' form without minimum price.

I hope being honest is my best approach here, since I do not expect to build a business with that name (not good for the english speaking world) any time soon.

It is meant purely for family email addresses and possibly one personal/family blog.

I also see this as a one-off chance where I either buy it now for an acceptable amount or I won't come back to the table for pretty much ever since we will have to make a decision soon and settle on some other domain/gmail instead. Noone moves email addresses for fun, for us the value of acquiring the domain decreases over time.

Can anyone here recommend to me how I should proceed with this?

Would a broker be a good fit here or should I open the communications on my own since I am not a business and don't want to appear as such?

At the same time I have no idea how to broker such a sale myself and wouldn't want to risk appearing an easy target for a scam.