skysight-inc/HackerNews huggingface dataset:
> The worst are symbols that are used inconsistently within the same function, like a parameter which is passed in as a long and then used as a pointer to a struct or even as a function.

Split into new variable. Sounds like ghidra has trouble telling whether it is a reused stoarge location or actually the same variable.

Best guess = something that looks approxinately fitting for the relevant assembly

fuzzing = tweaking the source code to get what it compiles to closer to the actual assembly.

as in, generate a function, see how close its compilation resembles the assembly, tweak until you find a match
I use SafeDNS which filters adult content (plus many more categories), without forcing YouTube Restricted Mode. But, you can opt into YouTube Restricted Mode if you choose.
Perhaps it should be called the alchemist network since it proposes to turn lead to gold.
> I just had to remember that the board thickness needs to be 0.8mm for this to work.

Clicking through to https://github.com/Pinuct/Eagle_PCB_USB_connectors, it seems like it actually needs to be 0.6mm?
> Do you not have to enter email on register?

Yes, I have omitted this from both workflows.

> Where is the email confirm step for password signup?

Good point, most websites will want to confirm the email address. I didn't include that.

> Finding the tab you just opened and dragging it... really?

Yes, I like to keep my tabs organized. I'm not even a tree-sytle-tabs user but at least want to get the right window. The point is that magic links disrupt my in-browser workflow with switching between apps and opening links in new tabs.

> is a magic link really so difficult to use twice a year?

No, but it is still more difficult than a password multiple times a year. Neither of these have a yearly cost so it doesn't really matter how often you do them. I wouldn't use "only twice a year" to justify that people can come to our office in person to authenticate over a magic link.
Delphi (and freepascal) have good support in the language for visual components.
You can usually pick what domain you want to show up there when you buy an ad. It's common so you can use obnoxious chains of tracking links redirecting into each other and not show up as emjcd.com
Let's not forget the dangers of dihydrogen monoxide. Used as an industrial solvent, its vapours can cause severe burns, yet they put it in food.
You completely ignored the existence of the law. It is tiresome to have to repeat myself.
So DR had a dumb policy and were not great negotiators. Gates knew exactly what had fallen into his lap.
The internet is full of these dark patterns. It really should be illegal to use tricky language to get people to opt into things they’re not really interested in. In this case auto renewal but often it’s sharing contact info or tracking without explicit consent.
Famous people who donate their stuff to archives often disallow access— even to the archivists themselves— for multiple-decades. Dead folks’ possession could have serious privacy implications. PII aside, people might have letters discussing quietly miscarried children, other people’s non-public embarrassing financial mistakes, or any number of other things that would be unethical to expose any other people while it could be consequential. It’s not like everybody they interacted with is dead, too.
Profits or profit margins? Because a change in profits commensurate with price and wage changes is pretty logical.
Number me in the coalition of the willing.
I'm not optimistic about our future because no official will say the obvious, the $14 trillion injected into the US economy is driving this inflation. To put this in scale, US GDP is $23 trillion. This is helicopter money on a scale we've never seen in the US, much of it going to large banks and corporations. What did people think was going to happen? Raising rates marginally isn't going to soak up all this money, and even when it does and inflation eventually goes back to 1-3%, we'll still see the higher cost of living that has accumulated over the last few years. That means the typical American will be at least 10% poorer. But at least they got those checks for a few thousand dollars a few years ago.

https://www.covidmoneytracker.org/
Ya but it hasn't made sense for years. Which is why you can't time it. You just got lucky. Tesla didn't make sense when it was $250/share prior to the stock split. Look where shorting got you.
The big question there is whether or not their government allows businesses to operate outside of their control. I doubt many Turks would risk jail time by using a system which provides their government with a full transaction history, especially given the volatility - if you converted lira into Bitcoin a year ago, you’d be about even with not doing anything. If you bought 6 months ago, you’d have 50% losses.
> Inflation rose 9.1% in June, even more than expected

No, prices rose 9.1% over the year ending in June, not 9.1% in June—why is all inflation coverage (or, at least, headlines) so bad, even in outlets that are notionally business/finance focussed either reporting annualized monthly or quarterly inflation as being the actual inflation in the month/quarter or reporting annual inflation through a month as being actual inflation in the month?
Reading the spec, that's definitely not what 204 is meant for.

https://httpwg.org/specs/rfc7231.html#rfc.section.6.3.5

> The 204 (No Content) status code indicates that the server has successfully fulfilled the request and that there is no additional content to send in the response payload body.

I don't see how that could be intepreted to mean "You have requested a resource which does not exist". It's intended for use cases like "Your request to save the file has been received, no further content will be sent".

Or am I misreading the spec?
Whats so hard about anti csrf tokens?
The behavior described in the chain of comments you're responding to. Or literally the thread you're in. Making a public ass of himself on a consistent basis. Acting like a child.
There’s only one truth you need to know about capitalist economics, the bigger the boom the bigger the bust.

Hold onto your diapers because it has only just started.
Um. It is Debian.

This is a preconfigured build of Debian Bullseye, with LXDE, with some drastic trimming and cutting to keep the memory footprint small, preconfigured with a nice desktop layout and a bunch of apps.

I assessed it up against Debian and Devuan on the same hardware; RasPi OS uses about half the RAM of plain vanilla Devuan with Xfce Even installing Xfce onto RasPi OS results in it using about 150MB more RAM.
TL;DR: Medium is a content farm with delusions of grandeur; the content is neither rare nor well-done.
IDA Pro and Binary Ninja listed here is proprietary and require expensive licenses to run.
Yeah, The Times (UK) does this, you cannot unsub unless you call a help-line that is firewalled by Rube-Goldberg UI contraption that takes rubix cube levels of motivation to get through.
Everyone who is responding "well, the author just doesn't really understand REST", is pretty much correct, but I feel like they're ignoring the broader point of practicality. I absolutely have seen the problem the author describes, not to mention other issues that come from the fact that using response codes in REST doesn't really separate "technical" problems from "business/domain" problems.

Just another reason I'm a big fan of GraphQL - error handling is much more clearly defined, with responses returning a 200 and the body defining the error.
Introducing the Azure Developer CLI: A faster way to build apps for the cloud
gold and crypto protect against inflation? gold i kinda understand, but crypto? how?
Yeah, not saying it's a simple camera, but the AF system is simpler.
What the article misses is that medium "failed" to improve the quality of web by making it much worse.

95% of what people want to say on Medium is "Me too".
Reminds me of Amazon Prime where many movies have an extra paywall ("rent?") even if you own a subscription. So annoying.
Thanks for that answer. So for me the big question is how we can satisfy the people who enjoy working in an office, while still providing the benefits of remote work for people who want or need it, and while not treating the remote workers as second-class. I'm particularly concerned about this because I believe remote work is more inclusive, particularly for disabled people. But working in an office also has undeniable advantages for some people.
Isn't that enough that there are originalists for constitution, do we now have to have "what did the founding fathers^H^H^H^H^H creators of HTTP mean"-people? That was 30 years ago. Web has evolved since then. What was a good solution then may not be one now. How people work with HTTP now and then is completely different.
Who keeps 600k in the bank? I could have it in stocks and be making around $16k/year in dividends right now (that's just me picking a stock at its current price and dividend, I'm sure it would have been over time otherwise), while riding out the recession.
I think you are not correct on this.
Social media networks aren't in the business of protecting LGBTQ users, or anybody else. They're in the business of exposing people to advertisements. This is reason enough to boycott all social media.
> It's the difference between "There is nothing handling this route at all" and "there is something handling this route but the object isn't found."

'Nothing handling this route' has no meaning, because routes have no meaning in a hypertext application. Clients should not generally be constructing URLs by hand; they should be receiving them from the servers they communicate with.

In the example in the article, an application dealing with employees should not be constructing URLs by appending employee IDs to strings; rather, every reference to an employee in the application should be to a URL rather than an ID. So when it requests a list of employees, it receives the equivalent of {/api/v1/employees/1, /api/v1/employees/2 … /api/v1/employees/N} rather than {1, 2 … N}.

> I also very much don't like playing the "if you expose your app over HTTP you should assimilate HTTP semantics and do a fuzzy lossy map of your application to HTTP verbs and HTTP status codes."

If you are building a hypertext application, then you should build a hypertext application. It's completely possible. Off the top of my head, protocols such as ACME (used by Let's Encrypt) are good examples to follow.
To me it is not smart to use that. You make the code complicated that it will be unreadable. Normally the code should speak for itself. This is the key strong point of python.

Also, then you need annotation and tests to validate your annotations!
Then again, weakness of that argument is that all people in the study qualify as talented.
It's still 6% inflation even if you take out food and energy: https://www.bls.gov/charts/consumer-price-index/consumer-pri...

Obviously Russia is making it worse, but I think it's naïve and simplistic to say monetary policy has nothing to do with it. I would still argue monetary policy must comprise a slight majority of the blame.
You can still buy Microsoft Office without any subscription.
Yes, true. But this a custom config of Debian, and it plainly says Debian all over the installer, and the GRUB menu, and in other places.

It is Debian but smaller, lighter, easier to install and pre-configured with useful stuff.
Honestly the description of the horrors you provide could apply to any 50 year period of us history. So if it's all the same, how about we don't fucking steal from the poor to give to the rich?

> Oh, and by the way, inflation helps nearly anyone with debt such a college loans, car loans, or mortgages, because it lowers effective payments

Only if you are getting pay raises. We know the workers return on productivity has stagnated since 1970. Why do you love stealing from the poor?

Lowering the cost to borrow by volume mostly helps finance: big corporate bonds, and financial instruments like shorts and options.

Think about that for a bit.
Monthly is harder to measure because consumer preferences and behavior change from month to month, based on eg weather and holidays
Payment channels were originally suggested by Satoshi. https://en.bitcoin.it/wiki/Payment_channels
Progressives did eventually arrive, 60 years after OPs view.
> But what if it doesn't work? What if the rate hikes keep coming fast and furious and the CPI keeps rising even faster?

The beatings will continue until CPI improves.
I'd like to see more languages with built-in, language level support for unit tests. Pyret (https://www.pyret.org/) does this but is considered a "learning language". I'm aware that to many people co-locating units tests with the functions they're testing is "bad" but I find it to be quite the opposite. The two are so tightly coupled that having the unit tests in a separate file, sometimes in a separate source tree, is counterintuitive to me.
Lack of credit, capacity constraints.
I don't want to be too hard on author here but this article is really misguided. Status codes are a very useful tool for observability and error handling and abusing HTTP 200 is a quick path to making your life difficult. Response bodies should disambiguate some of the different cases for the error (this path is wrong vs this employee doesn't exist)

In general, applications using REST should follow these semantics.

2XX - Request was understood and we found what you were looking for

4XX - Something was wrong with the request on the client side. The client should take some action before retrying.

5XX - Something was wrong with the server and you can retry this request sometime later and it may work.
Ask HN: How are you protecting your emergency fund from inflation?
I’d like to see the same stat for LinkedIn premium…
I feel like there's room to innovate on monetizing gaming hobby projects without ads. And that Kickstarter and Early Access have polluted the well by asking for a one-time payment for an unknown final quality.

I'd be more inclined for something more of Patreon subscription model, with a game loop that had a very overt 'Hey if you enjoyed this latest update, consider becoming a supporter. If I get xxx supporters this month I'll keep making more cool stuff' with a clear connection to what would come. Regular monthly updates so long as monthly supporters exceeded a certain number.
So, what should the average retail investor do about it?
Any website/domain created for the sole purpose of smearing another peaceful individual gets an instant Ctrl+W from me. TM is a bit outrageous with their pricing model, but it's just mantra meditation with a paid instructor. No, I don't work for TM and I've never paid for a TM class. I just know TM has done a lot of good for the world despite their flaws. But everyone has flaws. I'd rather focus on the positive.
You can't be seriously arguing that Elon just started making an ass of himself between April and June.
Proximity-induced superconductivity in topological-insulator nanowires
The homelab has nothing to do with those things, it's the other pages on the site, wherein the author discusses things like why they've eschewed Signal for XMPP due to Signal's author's feelings on crypto.
I agree that it's not a good term. Also, you're confusing your posters - "abstraction now leaks" was introduced by someone opposing the optimization (dymk), not the OP (londons_explore, who used "insufficient abstraction"). And when I used it I intentionally paraquoted as "claimed abstraction leakage", due to the leaky terminology.
Of course. Every time I signed up for a new publication it was to be able to read one article I cared about. I didn't need the subscription after that until the next article... Which doesn't happen often.
Pyret has interesting contract functionality.

Lua is based around tables, which, aren’t quite graphs but seem relatively close enough. What is a graph if not a collection of points associated with their edges?

As far as semantic function relations, I could swear Ada has something like this, but it’s been more than a decade since I’ve touched any.
Similar yeah. It'll be mostly lactobaccilus that's already present on the vegetables. Probably will pick up some other stuff from the environment and your skin but the dominant strains will be from the product itself.

Similarly with sourdough, the main yeast and bacteria strains are already present in the flour when you start and grow from there. Some surely get introduced from the air as well but they aren't that significant compared to the ones that "come with."
Isn't that what the "problem" is? Tight labor market => higher wages => people have more money to spend => higher prices. Wages are absolutely keeping up with inflation or even surpassing it, I'm seeing it in jobs I'm hiring for. All my employees received a minimum 10% pay increase over the last 12 months. If your pay only went up 1% this year you need to find work elsewhere. With a tight labor market that shouldn't be hard.
The US economy sets the tone for the rest of the world. It’s absolutely huge and a lot of the evonomic systems evolved around serving it.
The Onyx Boox Mira Pro – A Review
Thanks! Yes, it is for runtime checking only
"Practically though, APIs are a wild west, and almost no-one implements status codes right."

This is the conclusion I've come to. What the RFCs say the status codes mean doesn't matter anymore. There isn't anywhere near enough consensus on what they mean or how to treat them to base a system off of in the abstract.

What can specifically matter is how systems in the concrete will react to them. Do you have something that needs to be CDN'd? Then you'd better return status codes that make that work. Is it going to be proxied? Then you'd better return status codes that make that work. Is it never going to be either of those things and only directly accessed by internal users? Then use status codes in a way that works for them. Do you have a monitoring system? Use status codes in a way that works for those systems.

Do you have conflicting requirements as a result of those things? Bummer. Sucks to be you. Best get to figuring out what to do about that, but one thing I can tell you is that carefully consulting the RFCs about what status codes "mean" won't be much of a help in such a situation. Maybe a little. But not much.

To the extent you want to reply with a "but what about...", I said, if it works, use it. While it is the wild west, there are certainly some patterns. 200 vs. "a non 200" response certainly has patterns of meaning to it, and if playing into those patterns works for you, great! Do it. But if I encounter a case where it doesn't, I cry precisely zero tears and do what does work.

The time to moralistic and prissy about what status codes "really mean", if it ever really existed (to be honest, all there really ever was was "return one of the 5 or 6 codes the browsers understand when appropriate, and the search engines will follow the broswers"), is long gone. You can be wistful about how nice it could theoretically be if we just all agreed on what they all mean, but that's just not going to happen in a world where I can barely get people to agree that numbers shouldn't be strings in JSON, let alone precise details about what exactly a hundred error codes mean across such a diversity of systems and users.

I could even argue they are a failed element of the protocol. Such an argument would center around the futility of trying to represent such a rich variety of possibilities, along with such a rapidly changing variety of possibilities, into a single number. It's hopeless. You can't enumerate all the possible successes and failures of such a broad protocol like this, and it didn't help to try. It's just another instance of the "shared ontologies are fundamentally unscalable" problem.
What Future Processors Will Look Like
I've said it once before, but I fully expect Musk at some point in the lawsuit to suggest that he had a psychological condition and that it excuses his behavior.
> Email is the master key to most of your accounts.

I’ve been mulling over ideas for this in my head for a while, about fully standardizing the magic-link-to-login approach as a full single-sign-on implementation.

Sites could craft an email with a specific header scheme that denotes what it’s trying to do, for what website, and what the magic link key is. The body of the email would still look like a regular magic link email as it does today, as a graceful fallback behavior.

The website login screen could detect if the user agent supported magic links (best way to do this detection is TBD…), the requirements being be that (a) The OS has an email account configured for the user (like via Mail.app or similar), and (b) the OS can broker the security information of the magic links to the browser so that it doesn’t need “full” access to your email, just a standardized API for the browser to get the magic link header info.

If everything checks out, the UX for the login page would be:

- User: enters email address to log in with, hits submit

- Webpage: renders a quick loading spinner

- Website: Sends a magic link email to the email address

- OS: Sees the special magic link email and notices that the browser is in focus on the same origin (using an origin policy that requires the magic link’s headers matches the same origin as the page)

- Browser: Gets magic link/token from the OS

- Browser: Submits token to website

- User sees the login succeed.

- (Optional:) The mail client puts the email itself in a trash folder or some other place so the user doesn’t even notice it (although they should be able to dig it up if they want.)

The graceful fallback if the browser/OS setup is not supported would be that the website just renders the same “check your email for a link” page it would have normally sent.

Apple has enough integration to easily implement this on iOS and macOS, it would be great to see this happen. They already implement autofill for security codes sent to SMS or email, so they already have a similar level of integration, it just needs to be made seamless and not even require user input. It could also be a totally open standard so that any OS/desktop environment/etc could implement it.
I hope this is a disaster and BMW is forced to rethink. Although I'm not a BMW buyer so wouldn't directly affect me but horrible overall idea.
this is an alternative i have come across: https://cleanup.pictures/
Well, if that's the case, I'll gladly publish my work :)

Me and couple of my friends made a marketing tool called Market Roadie. It's meant to help startups and new businesses to spread the word about their businesses. I don't want to get all "markety", you can just check it out over here, and give us some feedback :). https://marketroadie.com/

And yeah, there is a free version, and you don't need to put info about your credit card.

Good luck with our businesses (yeah, I'm wishing myself some luck :)
Reminds me about a comment on graphql couple days ago: https://news.ycombinator.com/item?id=32037909
AIUI this happens to everyone using VSCode on Linux.

VSCode is one of the most popular editors around now:

https://www.techtarget.com/searchsoftwarequality/news/252496...

It's Microsoft's fault, not Raspbian or the RasPi Foundation. Everyone loves VSCode for some reason. So RPF provided it.

You don't get anything much for free from Microsoft without strings attached.
This is a common feature of most hierarchical structures (and also democracies)...
Theoretically, Bitcoin is a deflationary asset, it’s supply is limited.

In practice, crypto is very prone to hype cycles.
The biggest thing European countries have done is make fossil fuels prices higher by increasing taxes. A solution that is not politically palatable to the vast majority of the US, due to the sacrifices in quality of life it would entail.