skysight-inc/HackerNews huggingface dataset:
At least one benefit of doing something like this isn't necessarily that you automatically gain better security by removing stuff you don't need, but you instead remove security scanning positives tripped by finding CVEs in packages you're not using. Not having your developers slog through justifying all of them to see if they're false positives or not to release to production means they can get back to doing their actual jobs.

And, it's important to remember that when an attacker does gain a foothold, often the very first thing they're going to do is run a scan of every single binary on your system to see if there is anything they can use to escalate privilege, so having these around does present a true risk even if your program never calls out to any of them.
What are some algorithms involved in building a project like this?
Likely Slavic⸺

• WHOIS points to a "Denis Petrov" in Prague

• Share menu has buttons for Reddit, VKontakte, Twitter, Pinboard, and Livejournal. Eyebrow raising. VK is Russian, and so is LJ nowadays. Pinboard (notable as successor of del.icio.us) is American, coincidentally founded by a Polish immigrant.

• With a sizable dose of confirmation bias, the mistakes in the English of the site and blog do feel appropriately Slavic

It's stated to be privately funded with costs around US$4000/month, began accepting donations in 2016 (https://wiki.archiveteam.org/index.php/Archive.today#Vital_S...)
For those who are interested and may not know; Bill Watterson also ghost-drew a few strips for the comic Pearls Before Swine (part of an arc beginning on the 2nd of June 2014[0] and continuing till the 8th). There are a couple of neat references to who it is behind the better art (anyone who's read Watterson's complaints on shrinking panel space in print media will be familiar with the guest character's comments) and I recall an old blog post by the artist of Pearls describing what it was like to work with Bill (terrifying; the thought of the postal worker just chucking these, the only comics anyone had gotten out of Watterson in years, onto his porch in the rain was horrible), but I can't find it.

[0]: https://www.gocomics.com/pearlsbeforeswine/2014/06/02

EDIT: Nevermind, found it! https://stephanpastis.wordpress.com/2014/06/07/ever-wished-t...
runinga vm linux distro with a wallet that connects to internet would probably make it less or the same degree of trustlessness while being more practical
I think it's ok to cash out once your career is over. It's bad to do while creating, because the money people will inevitably influence your works. But, if you're not creating anymore, then there's no great harm in it.
And you sound like you are part of the reason why we still have exploitable null-pointer bugs in 2022. Imagine a structural engineer that would say "all that static and dynamic analysis is dumb overhead 90% of the time, so I am going to skip it". Imagine an electrical engineer who would go like "all these wire gauge calculations are exhausting, 90% of the time my installations don't catch fire"

Seriously, I sometimes wonder what is wrong with the whole field of software development.
That article is about problems with transporting almonds with ships (oceanic carriers ... make twice as many annual round trips by sending empty containers back to Asia to pick up more goods for export instead of ... almonds)? That's for another discussion ... one where I would talk about Alascan-Siberian bridge and trains, but ... let it wait for another time.

And sorry, but california farms are not forests. A monoculture from horizon to horizon is bad practice not only for the grains, but for the trees also.

For example, if done right they wouldn't need to water / deplete ground water reservoirs and hoard bees from around the country every year.

https://www.atlasobscura.com/articles/what-is-permaculture-f...

https://agendagotsch.com/en/what-is-syntropic-farming/

https://agendagotsch.com/en/multi-story-tree-lines/
Just like with QUIC, I'm not a big fan of introducing features and protocols that only serve a few huge companies. The attack surface of such a system would be raised enormously and only CDNs profit from this new authentication system, really. For everyone else the web just becomes even more complex.

I like the idea of OPAQUE password exchange, but I'd much rather see a move towards FIDO2/WebAuthn instead of going for another round of passwords. Browsers aren't going to support this new TLS standard any time soon and hopefully by the time they start working on it, they don't need to.

Furthermore, with QUIC becoming the next HTTP standard because Google asked nicely, I don't see the point of adding to TLS 1.3 when the crypto scheme seems to be moving towards another protocol anyway. At best the addition is worthless, at worst we'll end up having to choose between http/2 over TCP for feature x or http/3 over QUIC for feature y.
> Even so, a bricklayer who was the son of an Austrian village policeman and had a bloodline tainted by a bastard great-grandfather -- was able to marry into the Kennedy family. Why? Because Arnold Schwarzenegger became a successful multi-millionaire.

For context, Schwarzenegger met Maria Shriver after he had gotten the Golden Globe Award for New Star of the Year – Actor for Stay Hungry(1976) while in an open relationship with another woman and married around a decade later after his big breakout in Conan and Terminator.

He was by then already a successful bodybuilder, she didn't really marry a bricklayer, and anyway it's not like you can't find similar example in European nobility.
I like the idea of that, though Im curious if an EL approach is the right way to go especially at scale where queries might get all blocked run out of mem in OctoSQL.
Having swapped from my beloved 15” 2013 MBP to a slightly tarted up M1 14”, I have to say how impressed I’ve been with just about everything. Most of my work can be done from native Apple silicon apps which feel refreshingly snappy and result in just incredible battery life, and even when I’m running x86 apps in rosetta, it feels faster than my old i7 machine.

The thing is still build like a tank, the screen is amazing, the speakers sound great when I use it for music in various hotel rooms, I really do love it as a tool.

I was similarly impressed with the M2 air I’ve bought my partner. Its fast, weighs nothing, and feels really solid. The minor imperfections with the notch and such fade into the background when using it, same as they do on my pro.

If I had any issues, its that running a Windows VM feels like a dodgy trick when I need to, as they still don’t license it legitimately. For Apple’s part, they seem to have made a very solid machine for people who just want a good computer to do work on.

Of course, if you depend on Windows software, it’s not going to be for you, and I feel like the world lost its best windows laptop when bootcamp died, but thats only my opinion. I hope one day the Dells and HPs of the world can make machines that feel as solid as the Macs, but over the years I’ve always regretted buying XPSs and Omens because they just didn’t quite make the bar.
S looks like 5 if you squint. not hard to remember
In China a million-word novel got censored before it was even shared
> Comical in the wrong sense, as in it's so bad it's funny.

Not really, comical in the funny sense, like I find it entertaining.

> You realize that anime is a genre in itself that can be as serious as anything else out there?

I didn't say that it can't be serious, many cartoons are serious, but even if it's serious that doesn't mean it's like how normal people talk. You do know that Japanese people don't talk like people in anime?

> I think you like cartoons. And you like the warped version of what cowboy bebop was not intended to be. Or is this really true? The ending was serious. Was the ending still cartoony to you?

The serious parts of Cowboy Bebop came off as serious in the dub for me.

> The bar doesn't lower for me just because it's an animation, but I guess it does for you.

I think I just have different tastes to you, which you seem to find confusing or difficult to accept. I guess you would prefer a global hegemony of boring humans that have identical opinions to you, but that's not how it is.

I've watched a reasonable amount of anime, and I almost always prefer the dub, be it Cowboy Bebop, Welcome to the NHK, Neon Genesis Evangelion, Pokemon, even Steins;Gate

I like the Japanese cartoons as much as American ones, but I prefer the English dubs
Except that HarmonyOS (for smartphones) is actually bog standard Linux/Android?

While in this case, they are rewriting the kernel (but I agree that it looks like it'll remain normal Android for the upper layers)
I'm really sorry, but I can never quite understand what the deal is with these tools are. I understand that virtual environments are important, but how are these tools any better than

python3 -m venv .venv --prompt="foobar"
. .venv/bin/activate
pip install -r requirements.txt

?

Whenever I see all these other tools I just get the feeling like there's some big elephant in the room that everyone is battling against, but I've never come across it as a python dev, and the moment I try to user/understand these tools I feel like they're against the "keep it simple, stupid" vibe that python gives me.

There's auto-venv for the truly lazy (like me) but other than that I don't rely on any of these Env/requirement wrappers or tools in any of my projects (virtualenv-wrapper for work but that was in their setup guide).

Is it a legacy thing?
Ask HN: Best non-commercial source-available license?
I created a moderately successful documentation tooling project in my 20s when I had more time and enthusiasm. It has been 13 years and the code base needs some love.

I don't have the enthusiasm that I used to and additionally some large (multi-million dollar) companies are using it and I don't know how to go about getting it properly funded. I'm only interested in doing the hard work to improve the code base and execution performance if it is funded.

I have created an Open Collective but lack the understanding of how to go about getting companies to contribute to it.

My current thought it to fork off and do the work in a non-commercial, source-available licensed code base with an optional paid commercial usage approach but I feel like that isn't generally a well recognised option and I'm not sure why.

I love and respect open source in many ways but my attitudes to it have changed and I wish it was much more standard for maintainers to be funded but I struggle to know the best way forward.

Does anyone have recommendations on the non-commercial, source-available approach?
Grammar is not the most important thing, but it's hard to exemplify tone and voice without having the common language to talk about them and grammar is that language. I'm guessing the article starts with it because tone and voice is the most universal aspect, not because it's the most important aspect to technical writing. The rest are very hands-on details but that might not apply to everyone.

The two-axis diagram on diataxis is a great way to categorize documentation and all of them have different needs and indeed call for different voices. I have seen a number of projects where the only documentation produced is tutorials or itch-scratching posts for this one thing, and then when a feature changes somewhere you have a mountain of out-of-date information because everything was hard-wired to this combination of dependencies, versions and circumstances (whereas a manual could have been updated quickly and that would be that). And on the flip side, plenty of projects where there is a dense compendium for every detail and it's hard amid all the implementation details of the clustering gossip protocol versioning to find the little list of items you want to know to set the thing up to begin with - linked to the particular sections to read more about installation, configuration, backup, etc.
They want you to buy more cloud services/storage.
You mean Dave Cutler?
If you're willing to accept that an individual MOSFET won't be bugged, build your own hardware from individual transistors to do all the necessary cryptographic steps. Run it on a battery supply to avoid power line information leakage[0]. Run the hardware inside a Faraday cage to avoid RF information leakage.

[0]: using a lead acid battery so you can disassemble it and verify it isn't bugged.
as is stated initially, that goes back to how bitnami is building its Docker images, basing on a set of debian packages (minideb) - there's also a shell library/framework embedded that does useful things, but that makes you read more code when you go check how the sausage is made. That minideb is the basis for the higher CVE count compared to scratch or alpine images.

> it’s a well-kept secret that no one wants to talk about

the maintainer side most casual docker image users aren't aware of I'd rephrase, but bitnami at least documents the issue

https://github.com/bitnami/minideb#security

https://docs.bitnami.com/kubernetes/open-cve-policy/
This seems like a legacy of the way the app store used to work. Today if you delete an app with an active subscription you are prompted to unsubscribe.
Structure from motion
What do you mean by switching packaging managers? Ruby uses Rubygems and Bundler to manage packages.

Are you referring to Ruby version managers that manages different versions of Ruby (rbenv, rvm, asdf, etc.)?
Gazette – Build platforms that flexibly mix SQL, batch, and stream processing
What is the advantage of EA over the existing client authentication with client certs?
Stop subsidizing the things that hurt the planet. Everything. Oil and meat/milk alike.

When for production of 1000kJ of food you need 120m2 of land to produce beef vs. 1m2 of land to produce beans/peas, the unsubsidized market would take care of the problem. Let the capitalism work for us for once ;)
You don't need every person in the household to work remotely, just enough to be able to collectively handle the housework. You're more likely to cross that threshold with six adults than with two.
While it certainly sounds more honest and less commercialised, it also means that high level sports is mostly a rich-people's game. Poor people often can't afford to say no to money.
There are several possibilities.

* There are people with generally higher energy levels, personally I suspect it's mostly about the dopamin/noradrenalin system.
* People can choose different strategies how to approach their work. Some are very good at controlling the amount of attention they put into tasks. They might spend lower amounts of energy per task compared with other people, thus having more overall energy to spend.
* The types of task you do. I can sit in meetings all day. Draining but not exhausting. However, difficult programming and data analysis, writing acamedic texts, having actually creative thoughts? 4-6 hours per day, tops.
* Stimulants. Lots of them. Again, mostly about dopamin/noradrenalin. Amphetamines, modafinil, nicotine, caffeine, .... There's a plethora to choose from, especially if you live in the US.
To be honest, when I looked at this title, I thought Comcast made a tool and publicized the tool to simulate suboptimal network...
You can use casino grade dice which are translucent specifically for this reason. And on top of that you can also test them yourself to verify.
I'm not sure if you're being falsely naive or not, but i'll assume the best and try to sum it up in a couple lines. But don't quote me on it, it's obviously gonna be butchered, this is a field of study and i'm very much not an expert at all. So first, we're not talking about poverty here, we're talking about relationships. "the problem" i'm talking about is the fact that most resources in say, african territories, are being exploited (in the technical sense) by foreign companies (oil, minerals, wood), which obviously pay some "local market price", but are inherently tied and beneficial to third-parties. This schema can be historically linked back to the classic european colonies. The states and institutions likewise. This link is done by studying the history of these institutions, the political forces and philosophical schools behind them (in this case liberal philosophy: supremacy of rationality, private property, kant, smith, the lumières). In this sense "the (global) economy" is not a somehow "natural" concept, it's only hegemonic. It has roots, was developed over some time period and acknowledging that you can then start to look into the lesser visible phenomenon (since it's hegemonic): who was doing something else, who adopted it late, what were the oppositions or where it has been externally forced upon (somewhat as a weapon, but i don't want a negative meaning, i'd rather call it "a tool of power"). In this sense, yes, tons of the big historical problems in the global south can be linked to a historically dominating relationship with the liberal school of thought (which has its epicenter/brain in the western world and which is thus inherently tied with their interests). You can also try to map it out not only geographically but also sociologically, but i'm gonna stop here because i'm mostly writing for myself rn i guess.

I mean we're not gonna have the debate on globalization here. At least acknowledge the pov. It is a coherent political view that you ought to know well the architecture of, if you're serious about thinking politics: it's the basis of all debate to have some level of understanding of the opposing positions and what kind of structures have been defending it (and what kind have not).
I doubt it will get better. Mosy likely the developers will start releasing native M builds
Would it be possible to use this to target specific domains rather than IP blocks? I have been looking for a way to break my instant gratification browsing habits (twitter, reddit etc.) by introducing random delays into those websites, essentially making them barely usable, which works a lot better than blocking them outright. There are some existing browser extensions with a similar idea, but they usually only delay the initial load, so once you get through that barrier you are allowed to browse freely.

I could manually do a DNS lookup and plug the IP address in, but I don't know enough about internet protocols to know whether that would work with Cloudflare etc.
So Sunday?
Kind of. Making a quip that he should do something still makes his position somewhat unclear.
> you learn on the job by getting your hands burnt.

That's how it works in new fields where there's no good theorical foundations yet. I think OP is asking if we already know how to avoid getting hands burnt in the first place, as in many other fields of engineering where you don't just learn on the job and get yourself burnt a few times.
I've seen people with interesting and valuable YouTube channels suddenly pimp Raid Shadow Legends, which definitely cheapened their channel to me and made me lose some respect. I do understand it, but I'm not happy about it.
cement is the binder, usually made of lime, which is mined from limestone.

concrete is cement plus other materials such as gravel.

stones are naturally forming solids made from minerals.

this should help get you started. wikipedia is your friend.
No, i mean like this https://archive.org/details/AK47AKMTechnicalDrawingsRussian/... ;)

I'm joking a bit, but really, i'm not talking about teaching arithmetic and giving away pencils (which again, is something which is progressive, but at the same time it's not hard), i'm talking about giving strategic knowledge that gives you negotiation power (not weapons particularly btw). Building up strategic independence for these territories.
I’ve had my self-whatever vacuum and mop for awhile now and I still look at it proudly as it mops the house.

I do feel a sort of spirit in the machine for these new AI gadgets, even though I am aware of the reality of it.
Could you please explain in more detail what you mean (I'm not sure what you mean with "EL approach")?

OctoSQL isn't really meant to be used "at scale", as it's not distributed. It's not trying to compete with Spark, Flink, or BigQuery. You should be good to use it with data up to the order of Gigabytes / Tens of Gigabytes, locally.

OctoSQL never loads the whole table into memory if it doesn't need to. Processing happens record by record, and if predicates allow it, only part of the underlying table will ever be read (by pushing down predicates to a SQL DB you're reading from for example).
I can't fathom optional parenthesis. In this code it makes it very hard to know if today is an attribute or a method without knowing the context, meaning I can't scan the code, I have to read it carefully.
China Crushed Hong Kong
Climate-wrecking AC units aren’t the only way to survive a heatwave
How is the maturity/stability of Poetry these days? I despise Pipenv, and was hoping to push for a switch to Poetry at my place of work a couple years ago, but I ran into blocking bugs across multiple versions (latest N versions affected by bug A, prior M versions affected by bug B). Had to chock it up to "not yet mature enough" and resign myself to the absurd lock times and countless terrible behaviors of Pipenv.
Arcan Display Server 0.6.2 – It’s all connected
The article states "There is no catch"... but if I'm not mistaken I'll need to run Apple's operating system, is that right?

As much as I like the salacious hardware, that would be a reasonably sized "catch" in my book :-(

Or am I wrong; is there an official way to run GNU/Linux as the main operating system?
I agree and you've summarised what I wanted to say.

One addition: social mobility is possible in almost any class based society. So using one such example does not prove that class in USA==wealth.
I'm not the one here who is refusing to believe something that gets reported on a regular basis. I'm assuming you haven't had any negative experience with police because your skin color places you in the majority

It seems weird to me how there's a group a people who seem to think the police can do no wrong and are infallible yet shit keeps happening. The police are definitely racist and its more common than you would apparently like to admit

https://knock-la.com/lasd-gangs-little-devils-wayside-whitie...
I've looked this stuff up on Wikipedia before asking. There's too much information. A bit like your answer: Detail without explanation. It's like wading through descriptions of gear mechanisms before learning what a wristwatch is.

This article got the closest to answering my question: https://www.thespruce.com/difference-between-cement-concrete...

The summary is that cement is a constituent of mortar and concrete, which is never used on its own, but is only used to make the latter two. Mortar is used to "glue" bricks together. Concrete is a substance which can be made into lots of different shapes before hardening. Where is the summary misleading?

[edit: Changed the word "cement" in the 2nd last sentence to "concrete". That was an accident.]
No, when someone uses the term "propaganda", she is convinced that the promoted idea is false.
The optional parenthesis kills it for me. It makes scanning the code impossible: you have to understand each line context.
I don't believe I said it is unattainable, only that the deck is stacked against them. As we speak, the 20 million millionaires are just 6% of the population of the states. Being a millionaire alone doesn't really make you "upper class".

I know that regardless of how much I make, in my heart I will always be a prole, and that will never change because I lack the mannerisms and the connections said people. I grew up in a different world, and even if I were to spend every waking hour with them, things wouldn't change, and frankly I am not interested in it either.
He loves Apple for sure, but he's definitely honest and calls out the problems as he sees them. E.g., he trashed the camera of the Studio Display.

And Gruber's attention to the little details is unrivaled. What other reviewer is going to notice and call out Apple's keyboard for getting shiny over time because of the particular kind of plastic they use?