skysight-inc/HackerNews huggingface dataset:
There's nothing in the protocol, but in general, you should not assume non-2xx status codes have parseable payloads (more specifically, you should not assume the format of a non-200 status code).

Reason being that any intermediary step in the chain of resolving your request can return the response. If your load balancer has fallen over? You'll get a 500 with a plaintext body. Don't parse that as JSON.

(Technically, any intermediary step might also return you a 2xx with a non-parseable body, but that scenario is far, far more rare... Mostly see it in completely misconfigured servers where instead of getting the service you're trying to talk to you get the general "Set up your site" landing page).
I think you mean bias, not conspiracy.
I'd really like to see the 402 method implemented with Lightning on a machine learning model site for authentication and use of the model. This way, other models could make calls on behalf of the queries they receive to their networks.

https://github.com/lightninglabs/aperture

https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/402
Enpress Pioneer[0] with a pleated paper pre-filter. My influent water has - according to my water supplier - 1.8 ppt of PFOA/PFAS, so this drops it down to 90 ppq. Still sadly almost two orders of magnitude above the new recommended limit, but I'll take what I can get.

[0] https://www.enpress.com/site/project/pioneer-filtration/
> A serious take on a contract-based language

In Shen, the contract rules applied on each function are themselves a Turing complete language::

https://thestrangeloop.com/2014/shen-a-sufficiently-advanced...

https://shenlanguage.org

"static type checking based on sequent calculus"

"one of the most powerful systems for typing in functional programming"
Of course, no one ever expects renters to do well in the long run economically in a capitalist system, regardless of what the inflation rate is. And same is true for people living on the street. Those groups don't do that well in any economic cycle, that's why the conventional wisdom has always been try to own a home. I am talking about middle class mortgage holders, people who do own homes. For the first time ever it seems like they are the ones coming out on top in this economic "crisis" but they seem to be the ones complaining about it the loudest.
It does, just hold the buttons you would hold to turn the phone off, not the button you would use to trigger Siri.

On FaceID phones that means holding both the Lock and Volume Up buttons.
> vast majority of emergency debt created to combat economic shocks from COVID was embezzled by corporations and fraudsters

I would at least expect that to be less inflationary than that same amount of money ending up in consumers’ hands and being rapidly spent without an offsetting increase in production.

When the government opens up the feeding trough, it should expect pigs to show up. I agree that it probably can’t be blocked up front, but fraud needs to be prosecuted aggressively after the fact.
Unfortunately some apps[0] are already resistant to DNS-based blocking, which is why I'm creating SocialsDetox (DoH & VPN). It allows blocking of social media (+others, e.g. Gambling) across all your devices with a single click, scheduled and/or API call.

[0] https://www.tigerdroppings.com/rant/tech/facebook-app-and-un...
I haven't used it beyond playing with the tutorial, so I don't know how well it works in practice, but Svelte does this with JavaScript: https://svelte.dev/tutorial/reactive-declarations
It's likely that there are a multitude of causes each contributing a bit.

Many many different areas are experiencing "perfect storms" to cause huge disruptions and shortages:

https://www.bloomberg.com/news/articles/2022-07-11/thirteen-...
Seven Years of BookStack · BookStack
For decades?
This is a super cool resource! I wonder if there would ever be space for free resources around soft-skills.

For example, guides on how to set healthy workplace boundaries, identify red flags in developer work, and how to grow communication skills.
How am I getting 9% growth on my savings account? I'm not.
Nah, this guy is wrong. The reason that he's wrong is that URLs represent resources, such as, in his example API, employee data. If you submit a request for a resource that doesn't exist, then 404 is the correct response. His problem is in thinking that HTTP is just a transport layer for arbitrary applications to use for whatever they want. It's not; it's a framework for particular types of applications, using REST and HATEOAS. He's trying to write some kind of RPC application using REST syntax, but ignoring REST semantics.
Aperture is a HTTP 402 reverse proxy
The endpoint you called doesn’t exist. 404.

If you want to do something the author suggests, just abandon REST pathing and do a service call like api/v1/getemployee?id=100

Then the endpoint api/v1/getemployee exists, there’s just no results for your query.
The closest examples I can thing of to these, in sequence:

- Idris (dependent types rather than contracts, but squint and the UX is the same)
- Python's decorators enable some of this, but Aspect oriented programming may also be what they are looking for. Boomerang is totally different but also an exploration in this space.
- Io, or even JavaScript fit this description
- there's a calculator like this I am forgetting the name of at the moment
- this looks like Dependent typing to me, see Idris above
The naming of this project clashes horribly with https://github.com/hyperhype/hyperscript. It's not like it's in a different ecosystem or something. It is a web project that is guaranteed to cause confusion.
> I don't think there's a correct answer

I think there is a correct answer: use the 404 to indicate that a requested resource does not exist, and use a 200 to return a requested resource that does exist; and use URLs to represent resources.

In other words, follow the HTTP RFCs.

And never, ever, ever EVER use a 200-series status code to return an error.
My primary point was that the extra demand caused by FAANG driven monopoly money suddenly sloshing into these other markets could easily cause prices to increase far beyond what the dollar values and number of people would make you think because supply for all sorts of things is not elastic enough over a short enough time period.
I know it's read literally, that's why I explained what it actually means
Something I don’t see a lot is the postponement of Student Loan debt. It’s $1.6 trillion, and people that owe the money (me included) are living lives like they aren’t ever going to pay it back. That’s a huge monetary injection into the economy, and will probably have major shocks when the payments continue.
I would say the Apollo or space shuttle software was bloody expensive per byte, even discounting the “box” it was installed in. Anything made to that standard probably runs on multiple duplicated systems and “just can’t fail”. I’m not sure anything gets built to that standard today…. Maybe banking or investing?
archive: https://archive.ph/T4y0M

I'm one of the co-workers who don't want to hear about the struggles of working parents. I had to raise my younger brothers instead of getting to be a kid myself because my parents were workaholics and fucking useless at home, so I haven't bothered to have children of my own because I've done my time. I'm not going to defer my vacation or take on extra work because of parents who try and fail miserably to "have it all". If that means the management doesn't have enough hands on deck, boo fuckin' hoo. Push me hard enough and I won't come back from my vacation; I'll just ghost your asses and get a better job elsewhere.

If it ain't my kid, it ain't my problem.
On Android you can have Firefox with uBlock origin
One address should be enough for everyone? Bill Gates just reached zen.
Re the "everything is a graph" idea, Mathematica has been building primitives for some time toward this idea where literally everything is a graph: https://www.wolframphysics.org/
Without auto renew half the SaaS tech landscape wouldn't exist. Many tech companies operate primarily a gym without knowing it.

Easy to subscribe, hard to remove, and 0 costs to keep up accounts of people that don't use it, that sounds like a gym subscription to me.
>If the API that the author is building is a REST API then the response for a non-existing resource is 404.

The problem is that this error then overlaps with server path routing issues, DNS problems, and general network issues. Even if it's logically correct it makes dealing with your API annoying.

>Nobody is stoppping anyone to add response body to a 404 to indicate which nested resource is invalid.

But then we've lost standardization which is the whole point of the error codes to begin with.
Thanks for sharing your experience with us!

I'm not a professional musician, but I've played and performed in different settings for about 15 years.

Until reading your comment, I didn't realize that many people don't get songs stuck in their head. I often get very long and complex songs stuck in my head for hours to days. Sometimes it's just portions, but sometimes it can be the full song.

I don't quite know how to describe my recollection of music, but it seems to be somewhat akin to eiditic memory, but for sounds. After looking into things, the term eichoic memory seems to come up, but I'm not sure it quite encapsulates what I'm trying to express.

Out of curiousity, do you have aphantasia? I do, and often wonder if the strength of my music recollection comes from a lack of visual recollection in my mind.

Sometimes it takes a few listens to fully memorize a song, but I can revisit music many years later and still have perfect recollection of the piece despite the complexity of the music I tend towards.

For example, my favorite band is Between the Buried and Me (a progressive metal band) and their compositions tend to use a ton of complex and mixed meter, as well as non-repetitive rhythmic patterns. Despite all that, I have perfect recollection of their music—even for songs over 17 minutes long.

Sorry for the long response—your comment just triggered some things I've been thinking about for a while and I wanted to process them and share.
Pluto.jl[1] works like this. It’s a reactive notebook. It’s a really neat project.

[1]https://github.com/fonsp/Pluto.jl
I stopped listening out of guilt bc I didn't want to use it.
Bullshit, the turn started years ago with the Pedo-calling fiasco.
I've got to second checking out Computer Chronicles for anyone at all interested in the history of computers or people just looking for a little nostalgia.

The YouTube algorithm suggested it to me a few months back and I've been watching episodes whenever I get a little downtime. Watching John Dvorak teardown a brand new IBM PS/2 literally and figuratively was pretty fun.
Refinery capacity has shrunk in the US, so even with more crude, we would likely still have price increases.
I'd say Dart[0] fits the description.

[0]https://dart.dev/
I'll take "People who really need to understand the principle of of Chesterton's fence" for $200, Alex...
> > Do you not have to enter email on register?

> Yes, I have omitted this from both workflows.

You specifically complained about having to enter your email on the magic link flow:

> 1. My email address never auto-fills so I need to click the field and select the completion suggestion. This is even worse if I am using a per-site email address.

> > is a magic link really so difficult to use twice a year?

> No, but it is still more difficult than a password multiple times a year. Neither of these have a yearly cost so it doesn't really matter how often you do them. I wouldn't use "only twice a year" to justify that people can come to our office in person to authenticate over a magic link.

Yearly costs to who? The user? I guess there isn't really a cost to them other than storing/keeping the password but there is absolutely a cost to the developer and I'm not talking about the cost of storing a hashed/salted password in the DB itself. There is a cost to build and maintain a password-based system. It means implementing and maintaining a number of things like your salt, password complexity requirements, password reset flow, and more like you going to use something like HaveIBeenPwned's hash list to make sure people aren't using known passwords?

Passwords are not zero-cost and have ongoing concerns. I'm not saying magic links are always or even often the best choice, just that they do have a perfectly valid use-case.
>I found issues in several libraries, specifically around entropy, and even one library with modulo bias

This is exactly what the other people in this thread mean when they say "learn by breaking other crypto", assuming you didn't write those libraries.
> I wish people would stop acting like the world is fine aside from gasoline.

The reason why is there an (appropriate in my opinion) focus on gasoline and other crude-oil products is that other commodities and services relies on this commodity. We're not yet in a state where we can use other resources as substitute for it (either because green energy is not that scaled-up or because crude oil directly contains what is needed - for example fertilizers and plastics).
I really wish I weren't years into a major Unity project, because I'd love to make the leap. Every single time I see Unity in the news these days, I simply think "oh god, not again."
Would you prefer the movies you can rent were not there at all?
Do you pick the lesser of 3 evils, or are there solutions to these cracks?
> Why would that be a measure of "monetary inflation”

The price of money is contained in the interest rate. There are loads of models for turning credit spreads and duration curves into a Fed-neutral level, but I have my doubts.

We have no metric for the part of inflation caused by monetary policy. If we did, central banking would be solved. Instead, we have various measures that include some confounding variables and exclude others. Core PCE excludes most volatile, non-monetary contributors to prices. If core PCE spikes, it’s hard to argue the cause isn’t systemic and widespread, i.e. monetary or something with similar breadth. CPI spiking, on the other hand, has more explanations which must be rejected before we can conclude monetary origins.
As far as I can tell it's entirely untrue. Gates's mother wasn't a lawyer at all, and neither of them ever worked for IBM.
> I see tons of openings for shit jobs (low wage and/or bad environment).

This is evidence of a strong job market.
What's the service, if you don't mind saying? I'd like to avoid them if I can help it.
> Unity tried to become not-sure-what but way more than "just a game engine", and that's the problem

IIRC most of their revenue comes from Unity Ads, so they'd be dead if it wasn't for this weird pivot. From the business POV, not being "just a game engine" probably saved them.
2010: All this pump is fake. Sell!

2014: All this pump is fake. Sell!

2018: All this pump is fake. Sell!

2022: All this pump is fake. Sell! See, you can time the market.
There are different forms of secondary liability for copyright infringement: https://matthewminer.name/law/outlines/3L/1st+Semester/LAW+6...

Particularly, inducement liability could be a real issue here.

In MGM v. Grokster, the Supreme Court unanimously said, "[O]ne who distributes a device with the object of promoting its use to infringe copyright, as shown by clear expression or other affirmative steps taken to foster infringement, is liable for the resulting acts of infringement by third parties."
That's likely true, too. I'm hopeful that we will, indeed, see some drop in the price of gas (though frankly, I'm also expecting to see prices rise again before winter...which is going to be rough in some places).

But from what I understand, gas prices also rose much faster in proportion to the price of oil than they have in past oil price spikes. And while I haven't seen any numbers specifically for oil/gas companies, we've definitely been seeing record profits alongside the rising prices in various places these past few months.

I can't claim that it's the whole of the current inflation, but there's definitely some opportunistic price gouging going on.
Sure (I mean that is shady but whatever) but at least it would seem logical to verify the redirect chain ends up on that domain or better yet (since the redirects could change later) only allow the domain if ownership has been verified though DNS or similar.

I simply don't see why I should be able to buy ad that shows "google.com".
So add a step that requires "knowledge transfer" between the login device and confirmation device. Microsoft does this in their authenticator app showing essentially three confirmation buttons with different numbers on them, and requiring you to press the one being shown on the login screen. Worst case you now have one-in-three-clicks account compromise rater than one-click. And hopefully this also causes the user to ask why they are being required to log in if the app is not displaying the confirmation data.
35,000 new trees in Nova Scotia
Here's how Apple describes their design of the Secure Enclave. I'd figure that Qualcomm, NXP, AMD, etc have a similar design.

> The Secure Enclave Processor provides the main computing power for the Secure Enclave. To provide the strongest isolation, the Secure Enclave Processor is dedicated solely for Secure Enclave use. This helps prevent side-channel attacks that depend on malicious software sharing the same execution core as the target software under attack.

> The Secure Enclave Processor runs an Apple-customized version of the L4 microkernel. It’s designed to operate efficiently at a lower clock speed that helps to protect it against clock and power attacks. The Secure Enclave Processor, starting with the A11 and S4, includes a memory-protected engine and encrypted memory with anti-replay capabilities, secure boot, a dedicated random number generator, and its own AES engine.
This is one of those tricky philosophical points on web admin, because there are two sources of 404s:

- random clients on the Internet poking around at stuff, which you have no control over and causes no harm so should not alert

- an error in the links or code of the pages you ship to clients, which will cause a consistent degraded user experience and you should be notified about.

In practice, the best way to solve this I'm aware of is not via observation of server-emitted 404s at all... It's via a back-channel for clients to report errors (possibly authenticated, so randos on the web can't fudge your stats) and then tie alerting to that back channel. So you don't track 404s to /foo, but you do alert on your clients screaming at you that they got a 404 trying to access /foooo.

Of course, this solution requires your end-users to enable JavaScript.
I’m OK-ish with OK-ish with this. Most of the things safesearch filters are illegal in Iran, and of limited civic value.
Exactly the point I bring up to not do this. However, a viable (but often difficult or unsupported) way to solve this would be changing the HTTP Message so it's clearer the intent of the error. Most frameworks like Django hardcode the response messages.
Show HN: A JWST/Hubble deepfield comparison on a zoomable/pannable map interface
How does Caribbean fire coral thrive as others vanish? – Science – AAAS
> it would be reasonable to only treat the eventual on-chain withdraw as a taxable event

wouldn't that be an easy way to bypass taxes ? make all your transactions off-chain and just withdraw once a year ?
Stop mandates. Double/triple/quadruple mask yourself until you feel safe enough.
Multiplayer games can get way more revenue (like 10x) from in-app purchases than ads, and ads are actually surprisingly maintenance-heavy.
crypto was sold as a deflationary investment, because supply of some crypto currencies is limited, i.e. no more than 21 million bitcoins are planned to be mined in total.
raises hand Proud bullion owner.

The published CPI might not be that important - any small trader who cares about gold probably doesn't care too much about inflation. It isn't like the amount of money printing is a secret, when I care to check I measure the gold price vs the monetary aggregates.

And any big trader probably has better data available than the government statistics.
What I really hate is that there doesn't seem to be some sort of Netflix-type subscription thing (or if there is I'm not aware of it and the subscribe now! banners blasted over everything never seem to suggest them).

If there's an interesting story in, say, the Austin local newspaper and I live in Idaho or wherever I am not bothering to subscribe to Austin's local newspaper just to see if the rest of the article is actually interesting. And sure sometimes you get three articles or whatever but even then it's insanity to subscribe.
Not wrong, though my experience is that most of them _do_ know it. At least the finance people do, if they're paying any attention at all.
This seemed eyebrow raising at least:
https://bugs.launchpad.net/calibre/+bug/1714107
Ask HN: What is blocking referer headers?
I posted something to Show HN earlier today and my analytics dashboard (Simple Analytics) tells me that ⅔ of the visits are direct / no referrer.

At first I though they must be running in Incognito/Private mode, but I tested Chrome/Firefox/Safari and they all still send the referer in the request header even in Incognito/Private mode, which seems odd to me as that would be an easy thing to hide.

So what would cause this? Ad blockers? Corporate firewalls and proxies? Or are ⅔ of you copying and pasting the links on HN instead of just clicking?
I also made a 1:1 implementation of the spec. The finite field math did cause a bit of head-scratching, but in the end I mostly made sense of things:

https://github.com/DavidBuchanan314/aes-playground/blob/mast...

(I left comments quoting the spec as much as possible, so it should be possible to map it back onto the spec, for anyone interested)
That’s called supply and demand - global refined product demand is at/above pre-Covid levels, global refining capacity has been reduced (partly due to Russian war/covid/feedstock conversions). That’s why you see historically high crack spreads.
Principle of least surprise would have you follow the spec. How much easier is it when you have to explain to everyone who uses your API that you have your own interpretation of how status codes are supposed to work?
Batteries have a lot more flexibility outside of lithium. LFP batteries don't have nickel and work well enough for cars.
> They can’t buy “all” the housing and make money off that. You can simply defeat them by building more housing.

And yet, in the very most-constrained markets, they are still NOT doing that, after DECADES of pressure to do so.
The new generation air to surface mouse: AirPoint Mouse
AirPoint Mouse functions as a desktop mouse and a finger-wearable mouse for a 2-in-1 design. Lightweight and ergonomic, the AirPoint Mouse functions as a desktop mouse, air mouse and a presentation clicker. The device is programmed with intelligent gesture controls for various actions. Supports Windows, Mac, iOS and Andriod operating systems. The rechargeable AirPoint Mouse eliminates the use of separate devices for 2D and 3D and brings it all to a single device. The product is available exclusively on Kickstarter.
Yep. The Unix security model feels out of date these days. Who cares about privilege escalation attacks when all my most sensitive data (ssh keys, browser cookies and saved passwords, code repositories, etc) is already readable by every program I run in my user account?

Desktop computing needs application sandboxing like phones have. I find it remarkable that nobody in the opensource world seems to care about this problem.
Aahah this thread is so entertaining! Definitely a good reminder to wear gloves when handling hot peppers.
I don't know if it's still true, but back in the day returning 204 would mean the browser page won't refresh. It was one of the way to send data to server without page reloading.

Sending 204 with body definitely break the spec.