skysight-inc/HackerNews huggingface dataset:
As long as you surject it whenever you inject it you'll be fine.
Python Tackles SQL Injection – PEP 675 – Arbitrary Literal String Type
Upvote because Martha Nussbaum is IMHO the #1 living philosopher working toward real-world real-life improvements for billions of people. Her work on capability ethics helps guide entire countries in their policies, and helps guide the United Nations as well.

Here is her list of the ten most-important capabilities and a brief description of each:

https://daily-philosophy.com/martha-nussbaum-and-the-capabil...
This supports the thesis that cancer can be a byproduct of your microbiome
He failed at seeing it coming. Once it came, he did really well at damage control. That's not as good as preventing the crisis in the first place, but it's far more than nothing.
That is really cool. Reminds of this paper:

Swimming bacteria promote dispersal of non-motile staphylococcal species
https://pubmed.ncbi.nlm.nih.gov/28398350/
Yes, leason learnt.

I will make these changes and get rid of ambiguity all together in future. Thanks!
You’re going to need to make a few aggressive WAF Rules, pepper in some whitelisting rules and if you can, add rate limiting.

1. Block all unverified bots with a bot score of 1. This will still allow popular web crawlers but could be strict enough to block a curl request.

2. Use Manage Challenge for unverified bots with a bot score less than 30. This will silence most of the trouble making bots and provides a JavaScript (not necessarily Captcha) solution for users who are incorrectly scored.

3. Add rate limiting. Figure out a realistic access rate, double it and use that as a hard limit that will block traffic for an hour or day depending on your needs.

4. Add more sensitive rate limits and play with manage challenge rules. Use the simulate option before enabling any rate limits. You can add challenges here if you feel a limit might be affecting users too. Simulate for a few days before enabling

5. Review rate limits and firewall reports regularly and adjust. With any Managed Challenge rules make sure to check the percentage completed to see if you’re trapping real users. This number should be as close to 0 as possible. Repeat step 4.

You’ll want to get around your own blocking rules with some complimentary whitelisting rules.

Although it’s advised to lock down your origin server to prevent non Cloudflare traffic hitting your server you might not be able to do so easily, if you’ve got load balancers and other infra in your way that can’t be touched. Just make sure your root domain isn’t leaking your www IP address. You can use CNAME flattening and you should be alright.

The difficulty in these solutions is managing all the rules you can make. Things can quickly become too complicated to make changes easily. Keep it simple, have a few basic but aggressive blocking rules and revise your whitelist and rate limits regularly. Good luck
so funny that emojis + black text have become the new norm in logo design.

Cool product though. Would love to see even more accessibility-as-a-service type things. When I was in college I watched a visually-impaired friend try to use Ableton (at the time one of the only DAW's with a screen reader) and it was predictably painful.
HackerNews, where people talk about things they know nothing about with the authority of an expert.

You can "message" anyone you want, except that if you aren't friends it will almost always fall in some weird secret hidden bucket that most people never look at, and is hard to find even if you try.
If you share a direct connection it might go through, but in my experience not always.
There comes a point where you have to stop blaming colonialism for the corruption of your own people. Pakistan has been an independent country for 75 years.
As always, ‘Any headline that ends in a question mark can be answered by the word no‘
Does the tuning of one string affect the others on guitars with hard tails, or is this mostly a tremolo induced issue?
https://news.ycombinator.com/item?id=33131885
By others do you mean the people whose code/models I'm using?
A Brief History of Hackerdom
Full title:

> Are central banks going bankrupt?

> No, but there are some interesting issues surrounding their QE P&L

Love seeing Betteridge validated so quickly.
Is also worth noting that Cahokia was abandoned 150 years before Columbus landed in North America. That by itself goes a long way and explaining why explorers didn't find such massive cities
not to mention that watching a video with subtitles means glancing at the text when a new line comes up, while watching a video with a signing translator means having to glance at the signer for every single word, right?
I mean it also could probably solved by just having a slider that allowed you to change your head position (like an offset). I think his problem is that his head is just way back compared to his body (offset backwards)
Amazon launching dedicated hub for affordable shopping with SNAP EBT and Layaway
This would have been great for that one time I found a html+css copy-paste script for styled multiple underlined text. Doing it in LaTeX/tikz directly would have taken me hours.

The html+css looked fine, but to get it to a vector image as required by the journal was a pain: print to PDF, find out the lines aren't reproduced correctly, manually find a PDF printer with the right settings, convert to eps
A great use of VR without full-body controls was "Sir, You're Being Hunted". They changed nothing about the game when they added VR support, except that instead of being able to press ALT or whatever to free-look your head around, you could just... look around. All other controls and whatnot remained the same.

Funny aside about that game, the initial development had promised multiplayer, and then the dev team went incommunicado for like 2 years, during which time everyone assumed the game had died. Then 'Surprise!' multiplayer release. Another year of radio silence and boom, VR support. Mind you, VR headsets were not yet widely available, as in maybe you could see one at some sort of tech fair, but there was no chance you could just go into a store and buy one.
You're wrong on a number of points:

1.) While the UAE and Qatar were initially in the Saudi camp at the start of the war, they have both since left the field - Qatar because their plan was a token response from the start, and the UAE because of significant casualties (and a petition from the mother of a slain soldier).

2.) Iran is currently beating up and killing their own population for protesting. Syria used chemical gas against their own population for protesting. Lebanon is basically Iran's little Mediterranean bitch. You would like us to unsanction these regimes??

3.) Saudi Arabia hasn't been occupying Bahrain - KSA and the UAE "monitor" it on behalf of the Emir of Bahrain. A better way to rephrase this would be: force the Emir out and let the people of Bahrain decide for themselves.

4.) Yes, the West should embargo the Saudis on weapon sales. Not that it would affect them much since they'll just buy from Russia and China, but that is the moral path.

5.) Ask the Houthis for safe naval and air passage in Yemen. They're the ones causing disruptions in the area.

6.) Any humanitarian aid to Yemen somehow ends up with the Houthis.

7.) Houthis don't have any "grievances". Yemen has been divided between a Sunni half and a Shia half since the start of Islam. For the most part historically, Yemen was largely Sunni-dominated. It's only recently that the Houthis are able to put up a fight, and that's largely due to Iranian support and funding.

9.) Leaving the Houthis alone will only let Iran's theocracy impose their own puppet in the area. That is not something the world needs.

10.) Sure, sue MBS, but that's just opening a whole other can of worms.

Like it or not, Iran is just as bad as Saudi Arabia. Both countries rely on a modus operandi of training terrorists and spreading them abroad to cause chaos and fear, and ultimately acquiescence. On that front, Saudi Arabia is still a better ally, since most of the Gulf monarchies have come to the realization that supporting religious fundamentalists abroad has been a retarded thing to do because they'll return to fuck up their monarchical systems later on.
Sounds like a job for our American Silicon Valley douchebag overlords!
Weird. I've never had this problem.

Firefox on Mac user for a very very long time, multiple machines, multiple profiles, multiple containers.

Any chance it's a side effect of an extension you add habitually?
One plausible (to me) explanation is that the received scancodes are added to a bit vector (a "set"), discarding their original order. Some time later, the bit vector is iterated in numerical order.
Nice! lstein is the SD fork that I ended up using, and I'm delighted to see it evolve into InvokeAI and keep getting better.
Yup, that’s it exactly. There’s a good chance that you would be alone in one city or the other. And in theory you could both treat the second room as a guest room. With consent, etc.
I use Firefox on Mac and can't say I've seen this behavior.
It's a country that committed genocide against its own people.

"3,000,000 people were killed during the genocide, making it the largest genocide since the Holocaust during World War II"
https://en.wikipedia.org/wiki/1971_Bangladesh_genocide.
>My question is, what happens to the books at the library sale that are unsold there?

The same thing that happens to literally tons of other paper with ink/toner on it. It gets pulped or whatever. I'm not sure how books could have a particular conduit from random item that someone really would prize to that person.
First off, thats not really in the spirit of account deletion in my opinion. Because you're making me pinpoint myself to another person that I want it deleted. Maybe I don't want a human browsing my stuff reading it wondering why I'm asking for it to be deleted. Even less privacy in my opinion.

But beyond that, it won't delete your messages. I guess they just own my words forever now.
That’s fine but maybe don’t complain about how booting takes time then.
That is not really what's going on here. If you replaced the interface in the OP's example with the actual type being returned, the nil comparison would work as expected. It isn't that the interface is allowing a comparison that would otherwise cause a build error — the interface is creating an error that wouldn't exist otherwise.
Yeah, I’ve tried posting on housing swap web sites. But it seems they’re more geared towards full swaps which are shorter.
if one FLOP is one parameter we do have the capacity with modern day supercomputers? bottleneck then probably becomes data unless overparameterization holds?
One thing is that invoke-ai can be run via CLI or possibly programatically. I haven't found a good way to do that with the automatic GUI. Personally, I've also found features in automatic to be buggy. For example, batching seems to always break the UI for me personally. With the invoke-ai fork, I can run the CLI and produce images all night if I want to.

The bees knees would be being able to use automatic as a CLI or with some programmatic interface, because it is more feature rich. But I haven't seen anything that allows me to do that yet, so I'm stuck to its clunky UI or to use invoke-ai.
To expand on this, it's commonly believed that sign languages are simplified versions of the local spoken language. Indeed, it wasn't until ~1960[0] that these languages were seriously studied as "real" languages.

At least part of the reason a Deaf person might have poor grammar in a spoken language is because said spoken language is almost always at least their second language.

[0] https://en.wikipedia.org/wiki/William_Stokoe#Sign_language_r...
You can very easily use a large TV (or multiple monitors) if they cover a good amount of your vision plus any standard webcam and do "VR" without a headset. It just basically tracks your head movement and moves the view the monitor produces. Which is the entire point of VR.......

Also the headset does not transfer hand movements at all? Are you talking about the handsets like the two controllers that come with the Vive?
I think this is a good question, because I had always thought of American Sign Language (ASL) as a transcription of English.

But I learned that ASL is a language all of its own, grammar and syntax are not always the same.

In college, I learned a bit of a sign language- "C Sign" - that is actually an adaptation of English. At the time, C Sign was the thing that hearing, native English speakers were taught as a way to interact with non-hearing ASL signers. That was thirty years ago, so things might well be different now.

I don't have any direct experience, but some of my extended family are native speakers of Apache or Navajo. These are different languages, but "mutually intelligible" - speaking one can be understood if you know the other. And I traveled in Finland and Estonia - mutually intelligible (utterly impossible for me to use either of them).

I think C Sign might be more of a "pidgin": a simplification of English and ESL that is not used natively, but can be used to communicate.

So, yeah -- it's not wrong to wonder if ASL signers are using English, or are able to read it. I believe the answers to these questions are "not really" and "yes, fluently".

(Perhaps the question was posed in a blunt manner. But that's written, online communication for you -- it's an approximation of spoken interaction, and often lacking in body language or tone. So it's often taken in a way that wasn't exactly the intention... :-) Yay, Language!)
Maybe China should stop kneecapping their own tech by injecting backdoors, layering hidden circuitry into motherboards, and harvesting US and EU user data for whateverthefuck their end goal is.

I mean, I get it, "poor put-upon China!", but let's be honest here: China needs to stop fucking around, lest they find out.
Students are the ones benefiting from their own work AND the work of the teacher.
What do you use for adblocking on safari macOS?
Low contrast default color scheme = non-starter
It's a scheme that (1) provides a busywork/proof-of-work barrier to entry to FAANG companies, and (2) fools engineers into believing that they are Robert Tarjan when in fact they can't wipe their own asses.
I mean, getting deplatformed from the everything app is gonna really suck.
Openness to new things? Variety is the spice of life, how spicy are they?
Putting aside your underlying assumption that people are stupid (not like us), given how badly some of these people have been treated it can actually make perfect sense to vote for a candidate like Trump.

You achieve a couple of things, firstly you hopefully introduce some pain and unhappiness to the lives of all the right people. The smug, complacent people that have been benefiting from the current status quo and sneering at others that are not doing so well. Any discomfort you can bring into these peoples lives is well-deserved and the right thing to do.

Secondly, whilst voting for any of the traditional parties is obviously wasted given the history leading to that point (they demonstrably don't give a shit), voting for an outsider at least sends a message that might just be heard for the first time in a long time.

I realise that Hacker News comments section is made up largely of what Brett Stephens describes as the "protected class" so the points I'm making are not going to be appreciated but I'm just saying...

https://www.nytimes.com/2022/07/21/opinion/bret-stephens-tru...
Why not dvorak one-handed (both right and left)? I've tried it when I've injured one hand badly, and it's optimized for one-handed typing.
I worked at a startup once and we had early access to the Vive before release. We did a whole VR horror that was set in one hotel room. Imagine something between The Ring and PT. It was unfortunately never released but we never found someone who could make it all the way through without needing to take the headset off.
You can use https://diffusionui.com/b/automatic1111 once the automatic1111 webui is running:

- better inpainting

- a gallery to easily compare generations and easily regenerate images with small modifications

- responsive design --> works great on mobile, swipe left/right to switch between pictures in same generation and up/down to switch to another generation to compare

Here is the repo: https://github.com/leszekhanusz/diffusion-ui

Also if you don't have the hardware, you can also get images for free using the Stable Horde (https://stablehorde.net), a cluster of backends provided for free by volunteers.

You can test it here: https://diffusionui.com/b/stable_horde
Most people don't care much about democracy either until the secret police shows up. By then it's too late.
The RCE here doesn't come from Sawyer `exec`ing anything. Sawyer builds objects from a hashmap, where the hashmap's properties can be accessed as method calls, recursively.

The vulnerability here arises from the fact that you can override built-in methods like `to_s`, which in combination with the way that the Redis gem builds raw commands, can be used to send arbitrary commands to Redis.
Given that the alternative was immediate recession (or worse, immediate collapse), a recession 14 years later is a win.

And, aggravated? You think the recession now is worse than what we would have had in 2008? I'm pretty sure you don't remember 2008 very accurately. Bernanke short-circuited a hurricane then, and you're complaining that it spawned a tornado 14 years later. Yes, the tornado is damaging. No, it's nothing like the hurricane.
Yeah full text search, saving an archived text based version of the page behind the link and local storage (export) would make it interesting for me.

That way, you could also feed the info from all those pages into software, let alone an AI for instance.
It's such a cool concept. I hope they figure out how to handle these issues. There is a lot of potential for bots of this kind, in a lot of different contexts, assuming they can work out how to navigate the early days of UGC (AIGC?) content products.
I think you misunderstand the author's context. They are well of the various spin/pause/sleep strategies, and they have a specific one they need to apply to their allocator. They're just changing what OS interface to one that better matches the desired behaviour. While they are writing the article for readers who might not be as familiar with these issues, so they're doing a lot of explaining, the actual work they did, particularly exploring the semantics of os_unfair_lock_with_options (as opposed to os_unfair_lock), would potentially be informative to authors of those libraries (though likely not useful as they'd no doubt have requirements not to use private APIs that might keep an application from being made available in Apple's App Store).

But the problem they're working on here isn't the calibration problem. It's about getting the spin/sleep/context switch semantics they want out of the OS.
But in this instance, Python's dumb evaluation evaluation strategy for default expressions makes your code unnecessary, because you could just have:

def frobnicate(bar = object()): # object() evaluated once, at definition time

Python behaves as if by a transformation to:

__hidden_global_42 = object(); # evaluation at definition time

def frobnicate(bar = __hidden_global_42):

which is exactly what you have done manually.
This feels like being a passenger in a speeding car while the driver appears to be starting to lose control.
Chris from https://www.seguintax.com/ does an excellent job. Have been working with him (for tax purposes) for quite some time. His office is in NC as well.
just use ai!
Motion sickness is mainly caused by framerate and given that VR is extremely taxing compared just displaying on a monitor is often the issue. It is hard to drive two screens at once at 120 or higher FPS
You think the recession now is bigger than what we would have had in 2008, without intervention at that time? I suspect that your memory fails you as to what 2008 was like.
If running an SQL query is too large a burden for you to bear, then you'd have already crumpled at the first bug in your codebase.
I Was a Bank Robber Until I Read Kant (2018)
Most areas don't have co-ops because not many people are willing to do a ton of work and not get any benefits from it. This is why capitalism works so well... Entrepreneurs take a ton of risk and do a ton of work and sometimes get windfall profits from it.
I actually think there is. It's a bit like getting someone else to write your college application essay. The details from the pitch deck reflect the founders and it helps the investors understand the personalities of the person with whom they're dealing. For me, I even think there's information contained in the font choices.

To me, if the pitch deck looks too good, that's a red flag.
Some of what looks challenging here is handling fonts. SVG would be so much better if there was a way to do font embedding. Even a minimal set of fonts would be amazing. Or if operating systems or libraries for SVG support could all commit to supporting a common set of fonts, like browsers did for web safe fonts. Think of how clunky the web would have been without those.
In the 90's, when it was discovered that NSA was filtering Internet traffic for specific keywords, people creatively did things like write network drivers that padded packets with words from the trigger list.

I'm a fan of this kind of activism, because it hurts no one but those who are filtering your words as if you are pre-guilty of something you probably have never thought about, just because you used a word from their list.

Semi-related story: in the early Y2Ks I started to write a Netscape plugin called Cookie Toss that would treat tracking cookies in a similar way - trade the tracking cookies on your system for other random ones that other people have traded from. That way the tracking continues, but the results are utterly meaningless to the ones doing the tracking. The more often the tracking cookies got swapped with random people around the globe, the less useful they become.

I got a stern speaking-to from a legal agency that really amounted to "You're going to go broke fighting us if you release this project, and it affects our client in any way" (and it totally would have) so I never did.

The idea is still out there for anyone who has more funds to take it on than I have.
As a practical matter, I fear that your thoughts on this are at odds with the actual history of the US, the historical views of people here, and even with what a lot of folks think currently.
Can we please change this insanely misleading headline to include the remainder?
You can do VR with a large screen and a webcam and it generally works great. A small room with a 360* circular screen would be even better. You would not even need to generate your own avatar or legs or whatever since you could simply look down and see yourself.
Is this reply sarcasm?
New name for powerpoint presentation, it would seem.
Under "how to save a file" [1] it tries to use window.showSaveFilePicker (which has poor browser support) and falls back on creating an invisible link and clicking on it.

It seems a bit much, versus just having a download link, possibly styling it as a button. What do you get for that?

[1] https://web.dev/patterns/files/
Write code, a lot of it, even if it is useless :)
To quote some relevant comments on other threads here:

> If you could grab a profile of the problem with the Firefox profiler and file a bug it would be greatly appreciated. From the sounds of it it's probably an edge-case we're not aware of where Firefox performs very poorly. The problem with this kind of things in Mozilla is that we're often blind until someone brings up the issue and notifies us.

https://news.ycombinator.com/item?id=33156379

> Here are instructions of using the profiler with just a few clicks: https://profiler.firefox.com/

https://news.ycombinator.com/item?id=33156317
Are you sure? You sat there in that courtroom decades ago and heard all the testimony and viewed all the evidence? Or are you going off of a blog post written decades later?