skysight-inc/HackerNews huggingface dataset:
Microsoft’s Army Goggles Left US Soldiers with Nausea, Headaches in Test
Listen to me now and hear me later:

Static allocation doesn’t eliminate use-after-free bugs, it just reduces them.

If you have mutable data structures, it’s still always possible to refer to something that used to have one meaning and now means something else. That’s still a use-after-free bug.

I was going to say that it’s similar to how GC can still have memory leaks, but in fact it’s the exact same problem: reachability of data that is no longer relevant/correct.
> If your manager's manager has more than six (maybe up to 8) direct reports, that's a bad sign.

A bad sign of what? A bad sign that the company is too large to be innovating?
Meaning, of course, tragically.
> Notebook organization systems are serious business!

If that's what it takes to make someones system effective so be it.

If it's worth doing, it's worth doing well and all that.

What's a better alternative in your opinion?
In some areas, especially hard real-time/embedded or safety critical, dynamic memory allocation is strongly frowned upon, and for good reasons.

Even if your application does not have stringent safety/predictability requirement, following the principles of Data Oriented Design leads naturally to a radically different approach to memory management.

I am glad to see this kind of projects and design choices.
> take back control

Seeing this phrase used over and over after Brexit is so funny.
It can be a bit like black people using the N word, OK in context.

We are all getting older, we have elderly relatives who we love and aging is just an obvious part of life. In that context people won't take it personally and understand the nuance. I can bitch about boomers to my boomer parents without contradiction. And I don't get offended if the kids in my family call me an old person. It is funny because it is so universal.

Obviously that does not justify anything exactly and we should be respectful. But there is good sense in being generous and not taking offence.
The risk is the appearance that the company was deliberately ripping off employees. When the employer has created their own labor tracking software, it's easier for mistakes to look deliberate.
I always use https://regex101.com when I write regex. The interface is great and provides instant feedback so you can dial in your expressions quickly. But to answer your question directly, no. I don’t really know it.
It's easier to convince others that it was a genuine mistake when you didn't personally profit from the mistake
Seems more like a dark age. Obsidian makes the fans on my 4 ghz laptop go crazy. And in some ways (integration with email and tasks) it has less functionality than One Note 2010. And Obsidian has a PDF view and PDF annotations, but you can’t search in it?

I’m using Org mode with emacs just so I can have cross references into PDFs and emails in my notes.
PPP payments are not "revenue" and they're not taxable income. Owners and shareholders can dividend this cash to themselves while still claiming operating losses.
This is the actual answer to the question OP asked. Most of these other answers are good generic advice, but for somebody wanting "workbook" resources with exercises and answers, Schaum's is the way to go.

The publisher of the "for Dummies" series also has workbook type books for many (most?) of the required math subjects here, that are pretty much just exercises and answers. Those and/or the Schaum's books should cover pretty much everything OP is asking about.
One way to learn would be to implement your own regex engine. (Or at least think about it implementing it.) You don't need to worry about finites and automatons and determinism at this point, a simple recursive descent approach is sufficient for learning.

https://www.cs.princeton.edu/courses/archive/spr09/cos333/be...
Okay two separate checks, I don't know why my mind couldn't come up with that wording.
Which online course is the best for learning front end web development?
Hey! Curious to get your thoughts on this. My girlfriend is interested in trying out more web programming; she's taken a couple of classes in C++ but no html/css/js yet. It's been a long time since I've looked at the state of online tutorials for learning to code, and I'm curious what the best resources are nowadays - since picking any one feels like a decent-sized commitment of a few dozen hours, I'd like to hear what people have to say.
I mean, it also creates a circular dependency, if you have an issue with your own product and trying to fix it then you can suddenly not communicate.
As a former obsessive 4channer, wooooow.

I’ve seen some wild stuff online but some of this just seems gratuitous. It’s not just for maladjusted kids on an Indonesian throat singing forum either, it’s being beamed to everyone’s phone.
1. Not really, since we don't have enough connections in the US to make relevant warm intros to the VC's.

2. Also, not really - we did the YC style one but had to explain a lot more in the slides, which means adding more pages and more tradeoffs in what's important/what's not. Also influences the design a lot, since you can't just do the "pretty minimal slides" presentation. If you are used to speaking at conferences/meetups/companies, this will probably throw you off guard since you have to completely switch-up your style.
yes you can still end up seeing stuff you hate because it's ragebait. so you may "hate it" but you also have a revealed preference that you lowkey like it bc it's something to hate on.
According to https://www.postgresql.org/support/versioning/ the "Final Release" (whatever that means) for v14 is November 2026, and for v15 is November 2024. I wonder if it's a typo or some LTS thing.
Grit or Quit? Tactical Advice for Founders Facing Tough Company Build Decisions
I pay for Obsidian sync largely to sync my work vault between my company provided laptop and my company provided tool as installing a general purpose sync tool apart from the company managed Google File Stream makes the IT security folks nervous of data exfiltration. Maybe even Google File Stream would work, but I will admit the lazy file downloading makes me nervous

For my personal non-work vaults between my personal devices, I used Syncthing without issue for months, only switching since I was paying for the sync license for work anyway.
Everyone knows Linux is actually written in GCC C, and Google has burned lots of dollars making it work with clang, if it was proper C, that wouldn't never been an issue.
Welcome back to the 70s! Jokes aside I think there are use cases for this style of memory allocation even today (embedded systems for example). I just have never felt its need in a DB (or rather, I have many more desiderata from a DB than "I don't have to worry about OOM").
Show HN: Metlo (YC S21) – An Open Source API Security Tool
Metlo - An Open Source API Security Tool

Hey folks! Excited to share what we’ve been working on for the last couple months. Metlo is a self hosted, open source first API security platform that inventories, tests and protects your API endpoints:

- We inventory your endpoints by scanning API traffic and detecting all your endpoints along with the sensitive data they contain.

- We generate information your security team may find useful like Open API Specs and risk scores for each endpoint.

- After this we discover vulnerabilities like unauthenticated endpoints returning sensitive data or missing HSTS headers.

- Finally Metlo detects any anomalous behavior on sensitive endpoints in real time so you can detect 0-day attacks as they're happening.

We have a demo environment to play around with here http://demo.metlo.com/. Also, Here's a demo video if you would like a quick walk through of the product :) https://www.loom.com/share/349c9e5f267741e9a0fcd2dfd1f9956f
I use a "large pizza", myself (3 toppings, if you wanna get specific.) It used to be ~$20, now it's ~$30.
I noticed the double-fork with PR_SET_CHILD_SUBREAPER to reparent the new workers, which is a nice reliability improvement for the edge-case where the middle-parent worker possibly crashes. It adds a Linux dependency (as noted), but that probably still covers most production use-cases where the extra reliability that comes with reparenting is most needed. This enhancement could probably be incorporated into Puma.

As for the concern about forking a process that may have live threads currently processing a request, this should already be solved in the Puma implementation. The worker shuts down and finishes serving all pending requests before reforking. There is also an `on_refork` hook for to trigger extra garbage-collection to maximize copy-on-write efficiency, or close any connections to remote servers (database, Redis, ...) that were opened while the server was running.
Kodak Is Hiring Film Technicians: ‘We Cannot Keep Up with Demand’
Some reasons would be:

* It takes work to get those 3 boxes unless you already have them - so a typical contractor from Infosys or EPAM won't have them. For H1B you just apply.
* H1B is cheaper (fixed fees vs 5-10k to prep O1 application)
* H1B is actually in many ways a better visa! It's 3 years with 3 years extension, O1s are shorter, so for 6 years you'd have to do more than one renewal. H1B allows you to switch companies rather easily, for O1 you'd have to apply again.

So for some people the strategy is do H1B and if that fails (lottery), do O1 instead.
I'm not necessarily disagreeing, but why is it bad if many people voluntarily follow someone?
It’s made from oats and other plants. How is that kinder to the planet than growing cocoa?

Especially considering that places that grow cocoa are usually not great for growing oats.
You're confusing free "products" that Google puts online with actual for-money items.

The vast majority of startups' products fail, especially in the hardware realm. I'd pick a Google hardware product to live a lot longer than a random startup's.
Yup.

The idea behind dogfooding is that you get more/better feedback and more internal pressure to fix problems.

But the product team should already be getting feedback from a diverse set of customers. And if they're not, that's what needs to be fixed.

Dogfooding can also result in overprioritizing only your own company's product needs, and at worst the ultra specific issues that one particularly vocal VP is having, to the detriment of the overall customer base. (I've seen it happen way too many times.)

Companies should use the best tools for the job, not necessarily the ones they make themselves. If those are the same, then great. If not, then also great.
And for all you know "grep -E" isn't supported on some system people use. This is not really a concern if you're just writing script for yourself (which are really >90% of scripts; portability often isn't really a concern), but knowing it will work on all systems – new and old – is pretty hard, and sometimes it does matter. Does it work on NetBSD? HP-UX? Solaris? Last year autoconf changed the `..` command substitution syntax to the "new" $(..) syntax and someone complained it broke on their ancient Solaris system.

So ... people will stick with what works, like "egrep".
I think they only care about "market share w/ decent profit margins" - I don't think they do the bare bones $500 laptop market at all
Corporate liability to customers and corporate liability to employees are two very different things.
Eero scrubs its cheapest subscription plan, moves customers to $10/month service
Mimi Erotic, the fugitive animal dealer rivaling the Tiger King
Pyffi – Use Python from Racket
> How many people are looking to use Obsidian purely for personal use?

The overwhelming majority, if the Obsidian message boards are anything to go by.

I wouldn't want to use a product that only now reached v1.0, for a business. It's not Figma, or a Google Docs type app where corporate use cases are very apparent. At best, Obsidian would be good for a knowledgebase, but there are better wiki tools out there for that.

Obsidian does personal knowledge management best, because of its customizability.
> Aw man, did the Star Wars hotel shut down already? I was hoping it would stick around until the check cleared for my kidney so I could take my family.

Nah, but you can book it for literally 2 days for now, which is somewhat unheard of for something like it, especially with the Disney and Star Wars name attached.
I am careful to use the term “Return to long commutes and work from the office” as “return to work” implies that working remotely is not “work”.

I believe you meant the former - this is my tiny PSA about the importance of framing and phrasing.

Similarly “quiet quitting” is a frame further normalizing employee exploitation. “Working within contractual obligations” defangs that one.
I'm not convinced that density is a major factor in covid mortality as outdoor transmission is minimal, and the virus was able to spread effectively throughout the population even in low density areas. (I could be convinced by good data, but I haven't seen any on this)

Also density measurement is hard. Does Utah count as "dense?" If you look at pop density by state it is near the bottom, but almost all of that population is crammed into a small area near Salt Lake City. Similar situation in Nevada.
First and foremost: This looks great! I like the APIs, its a very next like experience, and I think the way you are handling fetching data is better than getInitialProps or getServerSideProps simply because it seems less limiting in approach.

Next.js is really being held back by webpack IMO and they would do well to convert to rollup / vite I think. This, Hydrogen from Shopify et. al. are proving webpack doesn't have the best future I think.

All that said, there is one thing about community solutions like this I worry about:

I know as long as I'm paying money to Vercel, I have support with Next.js and it will (in all realistic likelihood) be that way for years.

With community backed frameworks, there is no way that, say, this won't become unmaintained.

For all the possible warts Vercel / Next.js may or may not have, I think as a business building on top of these things, its important to take this into consideration. I'd rather not switch my SSR framework out from under my feet in 18 months.
You can just save to a folder on your iOS device and push/pull changes with the app “working copy”, which is a full gift client. It costs a pretty penny though.
Xero is the same and it really pisses me off.

In Xero you've got something called a "Xero Network ID", which is an ID that you can give to other Xero users and they can link it to your contact record on their account, which means that invoices they raise are automatically posted in your Xero account without you having to lift a finger.

Now, you would have thought that Xero would do the same for their subscription invoices (i.e. automatically post them to your Xero account).

But no.....

Instead they send you one by email which you then have to post manually onto your Xero account. And they do that every ... single ... month.

If you ask them "why ?", you get an arrogant reply that along the lines of "we're too big to use Xero, so go away you silly little person".

But that doesn't answer the question. Xero is their dogfood. So even if they use Sage or whatever internally, surely it is not that difficult for them to build an integration so they can post their damn invoices to the customer's accounts.

Rant over. ;-)
This article comes at a welcome time for me. I've been building out a usage-based B2B product and have wracked my brain on how to properly implement billing (without having to pay large upfront fees or integrate a more complex gateway that I don't really need).

I'd never heard of Lago before but I think I'll give it a try.
Actually it turns out that, at least in debian 11, you were right on the money:

cat `which egrep`
#!/bin/sh
exec grep -E "$@"

But I agree that it would be cleaner and trivial to implement this behavior by depending on argv[0], GNU style guide be damned.
A course platform you say? For reasons, I am very familiar with this.

Aside from fonts and CDNs pointed out already in other comments, there is also actual content:

How will you serve videos for example? You should look for a GDPR compliant option for that as well. It may exist, or you can self-host videos up to some point. (It is possible, done that before and it worked well.)

Does your platform offer mentoring? How will course participants talk to mentors? Look for a GDPR compliant option here. Don't use services of Google, MS or others that just suck. Probably look for something like Jitsi Meet hosting, or get capable engineer to set that up on your own infrastructure.

How will people inside your company communicate? Look for options for that. Zulip is easy to self-host for example.

That social icon on your website? It better not be loaded directly from FB, insta and the like!

You want to know what visitors do on your website? Well, self-host a matomo or similar. Don't do the usual reach for Google Shnanalytics.

Don't employ dark patterns in your cookie consent popup. Remember: Rejecting tracking and cookies must not take any longer than accepting it. Highly suggestive colors of the buttons are also a no-go. Be honest.

In general, if anyone suggests using any Google services or MS services, look for other options to avoid trouble and pain later. If you cannot do so now, keep book about all the things you still need to fix, to become actually GDPR compliant.
Their point isn't correct. Neither one is meaningless, and just because a particular month is more inflated than another doesn't even mean that a year overall is inflated. The fact is, if one had let their currency sit in the bank since Jan 2022, at least 8% of the value of that currency is lost. Assuming that a fraction of a percent of inflation in a given month isn't that significant is a human failing of comprehending the long term. People shouldn't just be blowing their earnings every month. They should be at least saving some of it and maybe making some investments, in which case YoY inflation is a big deal. If one has $100,000 sitting in the bank for a year, that's around $80,000 that might as well have been set on fire because that $100,000 has less buying power.

My issue with the OP wasn't this exactly, but that they were implying that news outlets are being deceptive when reporting inflation. I'm not one to defend journalism, but these articles make it pretty clear that it's YoY inflation they're referring to.
They could use staging. Or the solution they have in place in case they have a video conference system outage while they are fixing their own outage.
Thank you so much! I would greatly appreciate it if you could refer me to any resources regarding this, just so I can use them to convince potential future employers to give me a shot.
This is the reason I ended up on Obsidian, it's data model is a "a folder of markdown files on your local filesystem", which was already my prior system when I used VS code as an editor for notes.
Hi HN! I'm a co-founder of Metlo. So excited to finally share this here.

@ashekhawat and I will be hanging out here for the next few hours to answer any questions you have! :)
> What are you trying to say? That the reason this person see this content is their fault?

You can control the feed by tapping on a clip you don't like and selecting 'Not interested'. Less successfully by immediately swiping to the next clip. In this way I have got rid of live streams, cats and girls doing dance or PoV trends.

But if you do in fact have a quick peak at the live streams, cats and girls doing dance or PoV trends, TikTok will keep showing them.
Wow. This isn't quantum- it's a mathematical representation of how we currently work with a limited type of quantum states in a limited part of quantum mechanics.

People who study quantum need to know how to set up an actual quantum experiment in the lab, and how to work with hamiltonians.
OpenBSD sure does - also a fan - and dogfooding can be a really good thing. But one has to approach it critically and sensibly.
There's links to lots of canvas libraries here: https://github.com/slaylines/canvas-engines-comparison
That said, this article cleared up a little bit of permission boundaries. It's now clearer to me that my organization is doing what the article speaks of, with cross-accounts and permission boundaries, and having the two-layer-admin clarified has not made my understanding worse. Good article.
Checkly now supports playwright/test
I'll try to get used to it.
That link is about the DPO at EU institutions and bodies. It doesn't apply to your one person startup unless you meet the criteria for needing a DPO.

The UK ICO describes when a company does and doesn't need a DPO, at least with the UK implementation of the GDPR:

https://ico.org.uk/for-organisations/guide-to-data-protectio...

The first question it addresses is "Do we need to appoint a Data Protection Officer?", for which the answer can be "no", depending on your activities and type of organisation.

Roughly, it's a no if you are not a government body and your PII handling is secondary (such as for HR in your startup) rather than a core activity at large scale (such as running a HR service or user-tracking service).

As a startup it is plausible that you are a "yes" if you handle PII as a core activity, for example if you are taking user's PII such as their names, addresses, locations, etc. But even than, you may not be doing so at large enough scale to require a DPO. If you are, though, it's time to hire one, and you're probably at a scale where you can afford to.

Broadly, you could think of a DPO as more like an auditor or independent overseer in a particular area, whose job is to check you are complying. Just like an auditor or security professional, you can hire an external one in to ensure your business is complying and show that you've done so. Larger companies doing large and more intrusive activities need it, the same way as those are the companies which need other forms of auditing and independent oversight.

It's a different function from the DPC (data protection controller), who is in charge of actually processing the PII you hold. See "What are 'controllers' and 'processors'?":

https://ico.org.uk/for-organisations/guide-to-data-protectio...

At a one person startup the DPC is almost certainly you, as you make the decisions on how to process PII, even if you delegate the actual processing sometimes. You have responsibilities as a DPC, but you can do it, and it'll just be one more, among the many duties you have as a director of a one person company. Imho, being a DPC isn't any more onerous than the other duties of a director.