skysight-inc/HackerNews huggingface dataset:
JELOS on the Anbernics can run the official Raspberry Pi version of PICO-8 fine. Agree with the reimplementations not being as good.
My colleagues put out an electric school bus market study and buyer's guide [0]. There are some examples of charging infrastructure costs on page 14 - looks like the high powered DCFC could range from ~$5k to ~$90k total. This isn't helpful for this Maryland instance, but you can see page 7 for an annotated map of where electric school buses are in the US right now, which includes Montgomery County, Maryland.

[0] https://www.wri.org/research/electric-school-bus-us-market-s...
EICAR is not supposed to trigger like this, but if you have access to the virustotal search API you can find some even smaller signatures that do trigger in this manner.
How Android Earthquake Alerts System Works
Having just registered a substack in ~25 seconds just to see how long it takes, I struggle to imagine that such people, doubtless numerous in the general population, have the capacity to produce Twitter threads or articles that add particularly valuable insight on any topic of interest (to me, anyway). I genuinely don't know how it can be any simpler to do. Signing up for an email account is far more complicated.
we talked about having val as well in java but it just wasn't that interesting. if for some reason you think you need final you can use final var.
> But that was after having tried several other solutions,

I should clarify that I didn't mean concurrent or consecutive here, but across several different projects. Different preconditions can sink a strategy. It's hard to get any signal when you apply multiple unsuccessful strategies to the same 'experiment'.
Is there also a lot of custom rebuilding of pipes or nails, either the exact same ones or in a new shiny material?
Off-topic, but the item ID of your comment is 33333333.

https://news.ycombinator.com/item?id=33333333
How often is bundling happening relative to loading the bundle that 5 seconds of savings is pertinent?

There's this fairly recent notion that speed rules everything. Perhaps maintainability and releasing non-alpha quality software could have a day or two in the sun as well?
I also stopped using soap several years ago. I shower ~3 times a week, and still scrub areas like my armpits but only using water. As confirmed by friends and family, I don't smell. Granted, I've never had much body odor - I can't confirm this would work well if I naturally smelled more after heavy exercise.

I find it plausible that cleaning too much (or with chemicals that alter the microbiome) could be harmful and as such it doesn't seem worth it - following the precautionary principle - unless there were a specific indication to use soap for treating a disease or illness.
DocSend advanced video analytics: power smarter business decisions
>It's just fine and posts like this read like oldheads struggling to adapt.

Call me old, fine. If that's the line that needs to be drawn, go for it.

I guess I just prefer reading long-form things without the visual distraction of an avatar every few lines, a forced 'page-gap' that has nothing to do with the reality of paper pages, page margins and view space that are entirely dynamic to the device and uncontrolled by the author, moving status notifications in the corners, unrelated authors speaking in the middle of the 'cohesive' thread, etc.

Here's a new definition for 'oldhead' that just struck me : "Those that have witnessed better."
Windows doesn't ship Python out of the box at all, so there's no "system-level Python" there. The closest you can get to that is installing it from the app Store, but each major Python version gets a separate package there.
The local school busing companies here don't yet use electric, but every one I see is running on natural gas and have been for many years.
Are there any active communities playing multiplayer doom? (Preferably with a version compatible with Mac). I've looked but been unable to find any.
> Being a "master shipbuilder" in those days was apparently a tough gig.

I heard Boeing's hiring. Maybe they can set him up with a nice software defined pitch corrector too.
As much fun as it is seeing everybody reiterate the "SPAs are stupid and we should all go back to native apps" argument for the thousandth time with exactly the same arguments again...

It's all a moot point, because you can reproduce this particular attach using nothing but 2001-era DHTML. Start with a page that has a hidden iframe, a link that targets it, and a timer that polls the contents of the iframe. When the page first loads, use JS to click the link to add a new item to the back stack. If clicking the link with JavaScript doesn't add a back stack item, make the link visible, but also attach an onclick event handler to it so that the link can simultaneously do what you want and also do what the victim wants.

After you've poisoned the back stack, you can detect that the user clicked "back" when the iframe gets reset back to its initial page. Once this is done, use `document.body.innerHTML = whatever` to set up your fake SERP.
I think it's a given that idiomatic Rust code has less memory bugs than run-of-the-mill C code but IMO, this debate boils down to this question:

"Do static analyzers like cppcheck, Frama-C, Coverity or NASA's ikos catch more bugs (including memory bugs) than idiomatic Rust code?"

We have to consider the added complexity of the Rust language and the massive man-hours required to re-write old C code-bases. It's a trade-off.
why don't they unionize?
This is like a poorly written mission statement like "Win the enterprise market". Of course we want to win the enterprise market and hire the best engineers. Any statement whose converse would be an absurd business tactic should be treated as not particularly useful. "Hire the worst engineers!" This is like a college football coach saying "Recruit every 5-star player in the U.S."

We all want to hire the best engineers from day one. The execution of that strategy requires a combination of early wins, interesting problems, technology stack, compensation, leadership, culture, vision and geography to attract top talent. Faire may be able to check most of the boxes, yet some rock star is going the find the business model boring and the leadership uninspiring and go work for an org that is more aligned to their values and ambition.

Hiring the best engineers is table stakes for a company centered around a love and deep appreciation for building and shipping magical software.

Even from day one, no competent founder says "I should deliberately not hire the best engineer I can find based on the comp I can offer". You may not be able to get them, but that shouldn't change your hiring strategy.
I think this site is specifically keying in on the "Programming Language :: Python :: 3.11" PyPI classifier... While many packages haven't been updated to include this classifier, if you were to run all of the unit tests for all of the "Top 360" libraries on 3.11, I'd be willing to bet 350+ would pass without failure.
I doubt your predictions about AI generated art automating away entire sectors of „the design industry“. What industries are you thinking of in particular? Even extremely dull and uncreative things like wire removal or rotoscoping is still mostly done manually these days. 3d characters are carefully sculpted by hand, CAD models too- machine learning wont replace that anytime soon. UX design, layout, typeface design- these art very human centric fields, no AI on the horizon to do that. ML sure has potential filling in some gaps, adding a final touch of realism or rendering efficiency but its not much more than a powerful filter. Filters don’t kill artists.
Thanks so much, yeah its a lot broader than we initially thought it would be, but we love backend programming a lot so its a joy to work on it, (most of the time).

For the security concerns, at a policy level we're currently going through getting SOC II compliance. In the future we will be progressing for fedramp complaince as well, but we haven't started on that.

Regarding read access risks, the client has complete control in their account for giving us exactly what access they want/are able to via IAM. Additionally, right now our application is multi-tennant behind the scenes, however early on Matt and I saw that we will need to offer single tennant solution for increased data privacy, so we've designed the system with that in mind and its not a major lift for us to provide a single tenant and isolated environment within any region which data needs to reside in. It just hasn't come up as a concern for us yet.

As an aside, we had some background working with government agencies where this was a major concern for them and single tenant region localized storage was frequently table stakes for deals.

For GDPR, we don't store or process PII. Which sounds kind of insane saying it out loud but its true. We integrate with end payment providers like Stripe and AWS marketplace, where all we're reporting with is a UUID which is associated in their platform to the end customer's billing info, which we never need to see or touch.

Now it is possible that someone could manually enter client PII into the platform in which case we would need to deal with that, but it has yet to come up. If it did, we have API endpoints which can delete all data pertaining to specific clients by request.

I suspect in the future that this will change (we may start persisting PII), and we will need to have a more cohesive strategy for dealing with right to be forgotten, but in the near term it hasn't come up.
The first purpose of SSL Certificates
A simplistic analogy to understand what certificates represent (and why SSL is not a good term to describe them)
It's the console equivalent of a musical groovebox. Selling the idea that you just need to buy this device and you can make music/games too! It'll be a lot harder but it'll be more "fun" because you're limited creatively.
Why do you care so much about a language you have no interest in? Just ignore it and move on, there's plenty of programming languages under the sky to have fun with and which probably fit your idea of a good programming language much better than Zig.
I think that can still be gamed by forcing nonsense interactions that seem meaningful on the user.

This is a really tricky one to solve because the protection that is intended to guard against it ("The user is aware the current domain they are accessing doesn't match the site they expect it to match") isn't working. I think that aspect is the larger problem... IRL, people know if they're standing in a Target vs. a used car dealership, but they rarely know if they're at target.com instead of target.used-car-dealership.com.

It's possible the browser's framing should be changed to make it harder to be confused about that (color-and-texture-hash the TLD and apply it to the URL bar as a background, so there's a major visual difference if I'm on the wrong site?).
It's often better to specify alt="" than not at all, because screen readers may use the filename instead if there's no alt attribute.
Is nextjs the modern rails?
To add to this I had a specific scenario in mind. At @current_job they bolted on a immutable struct library and wrote validations. We are responsible for sending out renewal notices and we get the renewal price from another system. In certain scenarios we were getting back a null price and our validations dutifully caught the null and threw an exception.

Theoretically everything worked. However, the end result is (1) the customer didn't get their renewal notice and (2) we got a validation error instead of (maybe) a NPE somewhere. So what exactly are we accomplishing here is my broader point.
Take a listen to https://securitycryptographywhatever.buzzsprout.com/1822302/... the Q&A helped explain a lot
Is this impacting MS Teams? Been having screen sharing issues all day
You can think of the value of a stock being the value of all the future profits. So if I know that a company will make $100m in it's lifetime, I can say that company should be worth $100m. But we have to discount that - because money in the future is generally worth less than money today. If I give you a dollar today, you have a dollar, you put it in the bank and collect interest and next year you'll have $1.02 (2% interest). If I give you a dollar next year, you have a dollar. So the dollar today is clearly more valuable than the dollar next year. So what we have to do is look at when the company will make that money, and discount what that money in the future back to what it's value is now. "This is the net present value of future cash flows"[1]. So as interest rates go up, we apply bigger discounts, so companies whose profits won't come for a long time get heavily penalized by this in their valuation.

[1]https://www.investopedia.com/terms/n/npv.asp
Let‘s hope that Python in itself does not become a Kerr singularity. I don’t want to become an observer of this. And thinking of the image of a snake that eats its tail (forming a ring) makes me even fearful that there is some hidden message in this part of the release notes…
It's not true that researchers always do a minimal PoC. I've seen soo many people release fully weaponized attack toolkits, ostentibly for red teams etc., that then end up being abused by actual attackers. These are not just PoCs, but ready-to-reuse, universal toolkits.

OTOH, sometimes a harmless PoC isn't enough to induce action, and a proper attack PoC does. I think this may be such a case.
Yeah, I agree completely. I'd host the thing on YouTube (where content belongs) and promo it on TikTok, Twitter, Insta, etc (where promos, hot takes and bitchfests belong). So it is with written article of some length/substance, only instead of YouTube you can substitute any number of platforms, or even a self-hosted website.
>If they’re all treating you like an employee, then all of them

But, they aren't. Any traditional employment situation would forbid working multiple jobs at the exact same hours of the day. Any traditional "hourly" employment situation it would be completely impossible to even perform 2+ jobs at the same hours of the day.

But with gig work it's not only possible, but common. I would expect that if these drivers transition from contractors to employees they will be required to sign employment contracts which will forbid them from doing other gig work during their "shift." It remains to be seen if this would be a net positive for drivers.

Ultimately I think there needs to be another category of labor for gig workers. Dependent contractors.
Edge is automatically AI-upscaling some images
JS name was based on Java. Pure marketing name.

Launched by Netscape with Sun approval (they used to own the trademark, now it is Oracle) in 95.

Netscape had money and marketshare.

It was adopted by competing browsers (IE in 96, Opera end of 97) and removed alternatives (perl, tcl, python in browsers (eg https://www.foo.be/docs/tpj/issues/vol2_3/tpj0203-0004.html ))
Interesting! I like managing poetry at the user level with pipx, so my usual incantation is

pyenv local 3.11.0
poetry init
poetry env use $(pyenv which python)
poetry install
All of these comments are more true than the article itself, but I find one thing missing: Twitter threads drive a certain style of writing.

You write punch-lines of 280 characters because of the platform's constraints, while you'd certainly not do so in a blog.

Also, don't give me the proverbial "constraints drive creativity", please.
Yes! That's why I adore the way plan 9 has the whole source tree in /sys/src. Everything is there.

To a smaller extent, netbsd has pkgsrc, and most BSD friends have something like that too.
Why does it use Apple specific terms like "Touch ID" or "Face ID" or is this now the standard way to talk about fingerprint sensors and face recognition?
Adhering to international norms isn't "coddling".

I'm going to stop feeding the trolls now.
I was the first backend engineer hired at Faire joining 2 of the cofounders in early 2018. I can assure you I wasn't getting paid anywhere close to $200k when I started, and neither were my extremely talented colleagues.
Why can't the server inherit the clipboard from the program being shut down?

(unless the program crashes, it should go through the "official motions" and one of them should be notifying the server which then can request the clipboard. this should be done early in the shutdown process, of course)
Gaming the algorithm is a noble goal, so I guess I understand it more.
There's a nice "you did it wrong" pre-built into "hire the best engineers."

What? That didn't work? Well, they weren't the best.
Thankfully twitter doesn't have to hijack a browser to show ads, because instead the ads are baked right into your timeline and you can barely tell them apart from real tweets at a glance. So much better!
Do you really expect twitter employees to be out here divulging the inner workings of the twitter algorithm?

If you've used twitter for any length of time, it's plain to see.

My most recent blog post[1] has been pinned to the top of my twitter profile for almost a year. It's technically detailed and very "on-brand" for my audience (it's about rooting a smart TV)

It has 341 "likes" and 93,543 impressions (unfortunately I can't tell you how many hits the actual blog post got, I don't keep logs - but it's probably a smaller number)

Yesterday I tweeted a ~280 character idle thought midway through my morning coffee[2]. It lacks technical depth and is largely unsurprising. It has 1356 "likes" and 147K impressions already.

Whether twitter explicitly has code to downrank external links is irrelevant - the effects are obvious and quantifiable[3]. It's probably just a second-order effect of boosting posts that generate further in-app engagement - but that doesn't really matter either way.

[1] https://twitter.com/David3141593/status/1475670055627247619

[2] https://twitter.com/David3141593/status/1584462389977939968

[3] https://blog.hootsuite.com/linkless-tweets-experiment/
Netflix had a good interface when they had no vested interest. Now they just want to jam their own mostly terrible content down your throat because they don't have to pay as much to show it and it helps their own ratings.
That was obvious to me at least, and I appreciate that you shared it. Thanks!
Uber whistleblower calls on Europe to tackle ‘undemocratic’ power
I was hoping someone would mention "Learning How To Learn" as I was immediately reminded of this as well. The process described in this article aligns completely with portions of Barbara's research and teaching.
Yeah, I usually move on from these recruiters.

"Can you send it to me as a Word file?"-style recruiters have always been correlated with a poor experience for me.
Yeah, genuinely curious for how many people in their 90s that are “put in a home”, does that change end up being the right move for them. Kind of wish the question was studied so people could make more informed decisions.
How do other browsers handle this behavior? The author mentioned Chrome specifically.
It's highly dependent on school. The Ivies, including "public Ivies" will teach you proper comp sci. A lot of other big schools will do you well also. When it comes to smaller regional universities or junior colleges and community colleges, then it's hit or miss. Your intro CS course may be great if you manage to get an instructor who knows it well themselves and wants their students to know it, or you may get someone who teaches students how to do Microsoft Office without a shred of programming.
Not very hard as long as you don't care about drawing window frames.
Another thing to consider: the Python community is historically really bad at updating to the "latest and greatest". This [1] resource suggests that 80% of Python versions in the wild are Python 3.6-3.8!!

[1] https://w3techs.com/technologies/history_details/pl-python/3
> Half a year later the dreams look nightmarish. Demand for silicon appears to be falling as quickly as it had risen during the pandemic.

The article is remarkably ignorant of history. Nightmarish is a absurd exaggeration. With the semiconductor industry, you must invest heavily during any downturn to properly reap the rewards during the inevitable good years. Rinse and repeat across decades.

> So far this year more than $1.5trn has been wiped from the combined market value of American-listed semiconductor companies

Which has only somewhat to do with the semiconductor industry and everything to do with the hyper overvaluation in nearly all asset classes thanks to the Fed's prior, prolonged, low rate program. Just ask the cloud stocks (smashed), or eg Microsoft (which all by itself is missing ~$720 billion off its market cap high). Tesla has been slashed in half, it's missing nearly $700 billion all by itself too. The examples of market cap destruction in the stock market are plentiful.

> In late September Micron, an Idaho-based maker of memory chips, reported a 20% year-on-year fall in quarterly sales.

Oh no, what ever will Micron do. It's a true nightmare. /s They have been around for 44 years and are doing quite well. Micron understands market swings, they have lived through many of them. So have AMD and Intel.

This article is one big click-bait, scaremongering nothingburger.

The only thing worth considering at this moment for the US semiconductor industry, is how much more should be invested than has already been allocated. The US Government should probably put tens of billions of dollars more into the pot for advancing semiconductor R&D, training labor, partnerships with universities, et al.

> It is enough to keep you awake in terror at night.

No.

You can be certain that this article is a particularly wonderful indicator of the exact opposite as to what is going to actually happen. ~6-10 years from now the US semiconductor industry will be stronger than ever and will still tower over China's badly flailing efforts at forcing a semi industry into existence.
Yeah, when I read this my thought was that is probably the act of coughing somewhat uncontrollably after surgery probably doesn't help things heal properly. I wonder if the results would hold if they limited it to people who consume edibles exclusively.