skysight-inc/HackerNews huggingface dataset:
> It's the easiest thing in the world: Just use a library that never emits unescaped content by default

That doesn't make any sense? Escaping is a function of the consumer, not the producer. Hell, most of the problematic content doesn't come from a library to start with.

And if your Markdown -> HTML converter produces escaped content... it's not a Markdown -> HTML converter, because the result is not HTML.

More broadly, I think one of the core issues is this:

> Escape user input

User input is a broad and complicated category, and it's easy for user input to be "laundered" as it moves through an application.

And then escaping is an explicit action, which means it can be missed or forgotten, which is also a problem.

This means the solution is really that APIs should default to escaping most everything. Rather than having to mark "untrusted" content, it's trusted content which should be marked thus. "Escaping" is the wrong default.

But of course that doesn't solve all the issues. Like markdown, where you want the output of the Markdown converter to be trusted (otherwise the output won't be properly formatted on display), what you don't want trusted is the input, and that means you don't want the input to be laundered through the Markdown converter.

Which is an issue in most Markdown libraries, as they inherit the "trusted input" model from Gruber's original Markdown, where HTML passthrough was a feature.

In that sense one design I did enjoy is Jinja and Markupsafe in the Python ecosystem:

- Like most modern template libraries, Jinja escapes content by default.

- Also (though somewhat sadly) like most template libraries Jinja allows marking a value as safe at point-of-use, however that's dangerous as content can be mixed and it's easy for safe content to suddenly be swapped out for user input and become unsafe through seemingly unrelated changes.

- So a better method is to use `markupsafe.Markup` at the source, it's a string subclass which the library considers safe (because Jinja uses `markupsafe.escape` internally), the neat thing is any combination between a Markup instance and a non-Markup string will implicitly escape the non-Markup parameter(s).

This means you can mark safe content as safe at the source (where it's easy to prove it's safe because e.g. it's a literal), then most transformations will maintain the safety invariants. Though obviously it only works with content you know will ultimately be markup-injected.

And non-method APIs can't be overridden (e.g. re, or HTML/XML libraries) so they're not Markup-aware, they'll treat Markup objects as regular strings which that complicates processing pipelines if you want to conserve safety invariants. At the same time, those are laundering opportunities so care is useful.
I guess that there's something weird that trips the Linux kernel, but at least it's possible to boot third-party OSes.
Composer (PHP) also does this. There is a package lock file that directly binds to a specific git commit, and all "composer install" builds are guaranteed to be identical for the same lock file (unless someone pushes something else under the same sha1, but that's Git's problem).

Packages are downloaded directly from GitHub or whatever repo configured.
> I also tried Nix and really liked it, but my main issue was me having to google every time I wanted to make a change due to config file/package being awful to write/remember.

I just use it package-management-style with "nix-env" instead of using the whole configuration language. Pretty simple and easy to remember.
While I'm still not happy about this change (well, I do not like more entries on the list now that I've actually read it), I'm happy to hear there will be a actual human in the loop you can talk to before having the repository deleted. At least that is my tl;dr understanding of the second part of your answer.
I once won a backdoor contest by installing a systemd socket who launched /bin/sh as root. At this point, people don't question why systemd is being bound to some random ports.
50 TB+
> This essentially forces someone else to purchase the company, as the total license fees for a company like Google/Apple could outstrip the straight acquisition cost.

The value of fees paid by these companies is nowhere near the value of Arm.

> If there's no future in their IP then ARM is just a glorified patent troll

Seriously? Qualcomm wants to use IP that was 100% developed by Arm and is used in billions of smartphones and other devices around the world. You may not think that it has value but Qualcomm clearly does.
Hey in China market, there are much more stories like this, people say the noise is related with the flawed components within the computer, but its hard to say, some people manually changed the inner structure and things, this may reduce the noise. But yes, a lot of brands especially for gaming series laptops are more common to see this thing.
Qualcomm accusing someone of greedy anti-competitive use of intellectual property is quite amusing !
Much better, though most of it is Qualcomm paraphrasing what they say ARM said, and ARM is disputing the paraphrasing.
Every lisp (s-expressions really) fan would say most syntaxes/languages would be nicer if they were expressed in s-expressions instead of the c-like aberration most language copy, myself included. I guess McCarthy was simply the first to express that sentiment :)
Maybe not. Who burns that gas is irrelevant for the climate. No need to deny climate change.
Nitrux 2.5.0
Climate Change Requires Policy Changes Not Cash Grabs
"rock-solid".

Right now my mom is nagging me to fix her Ubuntu laptop, which doesn't shutdown anymore because some of the units got messed up. I'm at the verge of telling her to install windows.
> Git isn't a blockchain as it lacks a consensus mechanism.

Isn't for example for Linux technically Linus acting as the "consensus mechanism"? Or does it have to be automated?
I'm a bit biased here, but trying this kind of thing on a machine that is both completely new and designed to be a Windows development kit has somewhat predictable outcomes.

(I suspect it will eventually be a click-through process, but to flip the script I don't typically try to run Windows on my Raspberry Pis -- and have reasonable expectations of the outcomes if I do, even with WoR)

That said, I would _definitely_ buy one for myself if it was available in my country, to run WSL2 and do some ARM development (full disclosure: I'm an MS FTE who's primarily Linux and Mac-centric, _and_ writing at taoofmac.com for 20 years, so I try to have an even stance in these things).
> No, it's real easy. free speech is free speech.

It's difficult to say how fundamentally I disagree with this premise.
I use Todoist

https://todoist.com
To be successful in Germany, Mastodon needs to change his name first. It just sounds disgusting to my ears. Similar like the German word "Mastdarm".
SCNR
I think there’s an adage of urban planning that the median commute is always 30 minutes independent of how much transport infrastructure you build.
> journalctl is really great too

until you're forced to run a rescue system without systemd and try to read logs. And don't say that it doesn't happen, because that situation is 99%.
This in the front page's legend made me snicker:

"Only two remote holes in the default install, in a heck of a long time!"

Now, what does that remind me of? :)
Presumably with a version using two languages.
In a similar vein, Calendrical Calculations by Reingold and Dershowitz.
How are "labels" different from tags?
Behind ARM is an venture capitalist investment firm called SoftBank who's intent on making a huge windfall on the sale of ARM either from a takeover or an IPO.

Now that their plan for a sale to Nvidia has been foiled their looking for other ways to squeeze more money out of the pockets of their customers. Probably to increase the valuation of ARM before they take it public.

The only thing this will result in is an increase in the take-up of RISC-V, speeding ARM's demise.

Or maybe this is simply Softbank's plan: burn more brightly one last time before petering out.
Don’t AWS collect customer data to send unsolicited ads and sell to governments?
Motorsports are not unique in this regard. John Delamere pioneered the forward somersault long jump technique [0], which was then banned for fear that athletes might break their necks.

[0] https://vault.si.com/vault/1974/07/29/the-flip-that-led-to-a...
> andard to be a high ranking politicians like presidents, ministers, or CEOs. In the 20 years before 2017, they used not only have studied at the same school, the ENA, but where mostly from the same prom : 1978-1980, the (in)famous Promotion Voltaire.

For context, the ÉNA was a civil service school, i.e. it was for French civil service what West point is for the US Army.
Debatable:

https://www.heritage.org/international-economies/commentary/...

https://www.bloomberg.com/news/articles/2022-03-16/china-s-s...
> platforms take care of commenting (account management, moderation)

You can embed services such as discourse, and in this case (Nicheless) it appears responses are private anyway.
Will look into it.
Thanks!
Discrete cosine transform.
They already demand equal pay by gender.

Government involvement only grows. Did excise tax and annual inspections exist when cars were first introduced?
That is a really simple fix. Sounds like one of the units is hanging. This actually shouldn't prevent shutdown but may make it hang for like 2 minutes.
First the problem was that it's hyperbole and now that it's too obvious to be interesting? In any event, that statement was true and the fact remains that it is not only probably the most intense of the ongoing fifty or so armed conflicts -- which very much makes it stand out -- it is also among the most deadly in a long time, so I think pointing that out is pertinent, despite your stylistic reservations. Also, you can reach out to Paul Poast if you want further explanation about the conflict: https://www.paulpoast.com/bio-cv
> I'm not going to be so stupid as to say 8 cores should be enough for anyone (while attached to a machine with 128) but you have to wonder if the stable diffusion style apps running on your desktop are going to be mainstream, or isolated to the few who choose to _need_ them as a hobby or a smaller part of the public that uses them for commercial success. AKA, I can utilize just about every core i'm given with parallel compiles, or rendering a 4K video, but I'm pretty sure i'm the only one in my immediate family that needs that. My wife in the past might have done some simulation work, but these days the heaviest thing she runs on her PC is office products.

See GAN Theft Auto at https://www.youtube.com/watch?v=udPY5rQVoW0

Someone trained a neural network to convert controller input into video output that simulates the game Grand Theft Auto.

If technology keeps improving, I expect many future games will be such 'dreams' of neural networks.

You are right that running Word or Excel won't really benefit from more cores.
There's nothing new about this wording. It's been common and established for a very long time. To me it's clear and correct (barring shenanigans like those in the linked article). Here's a search for some instances from the 1800s: https://www.google.com/search?q=%22three+times+faster%22&biw...
Chessbase [1] and Reddit [2] show reporting to be all over the place, with completely contradictory quotes from Karpov's wife and from his daughter. Reddit's summary of events:

According to emergency service, the grandmaster was found unconscious at the State Duma this Saturday. Now he is in intensive care. Doctors diagnosed Karpov with a closed craniocerebral injury, a fracture of the left femur, as well as severe alcohol intoxication.

Chairman of the All-Russian Movement of Entrepreneurs Andrey Kovalev said that "Karpov was attacked at the exit from the State Duma. He is in a serious condition in the hospital."

Karpov's assistant Albert Stepanyan refuted Kovalev's words: "There was no attack. Everything is fine with Anatoly Evgenievich, there are no injuries."

However, Kovalev later wrote that "Karpov was put into induced coma."

Information about the coma was confirmed by Karpov's daughter, Sophia. According to her, the chess player "was injured as a result of a domestic injury, there was no attack."

The source of "RIA Novosti" noted that Karpov is in the department of neuro-intensive care of the Institute. Sklifosovsky. Previously, he was injured due to a fall.

Russian grandmaster Sergey Karjakin confirms the version about the fall: "He is in the hospital. Unsuccessfully fell. I am in touch with Anatoly Evgenievich's assistants. I know that everything is not as they say in the telegram channels."

Karpov's wife Natalia Bulanova unexpectedly denied the information about the hospitalization of the chess player: "There was no attack, nothing like that. He's at home, he's fine."

According to Izvestia, Karpov was connected to a ventilator. He was diagnosed with cerebral edema, fractures of the right parietal and right temporal bones, multiple head hematomas and traumatic subarachnoid hemorrhage. As well as a combined injury, a closed craniocerebral injury and a closed fracture of the neck of the left femur

[1] https://en.chessbase.com/post/breaking-news-anatoly-karpov-i...

[2] https://www.reddit.com/r/chess/comments/yj1mqm/karpov_summar...
I think you’re missing the point. I just said I don’t enjoy it.
This dicussion crops up every so often, eg. at https://news.ycombinator.com/item?id=29141800 . Here I repost a composite of my old comments https://news.ycombinator.com/item?id=14542595 https://news.ycombinator.com/item?id=14546682 from a previous occasion when this was discussed https://news.ycombinator.com/item?id=14537650 . Anyone who is serious about this stuff should probably start here.

> Well, since you ask, here's Hans Reiser's old stuff:

https://reiser4.wiki.kernel.org/index.php/Future_Vision

https://reiser4.wiki.kernel.org/index.php/V4

(and http://lwn.net/2001/1108/a/reiser4-transaction.php3 )

. And here's some emails etc. I wrote in response:

https://web.archive.org/web/20040728044342/http://www.st-and...

https://marc.info/?l=linux-kernel&m=111624697710426

https://www.mail-archive.com/reiserfs-list@namesys.com/msg09...

https://www.mail-archive.com/reiserfs-list@namesys.com/msg20...

https://www.mail-archive.com/reiserfs-list@namesys.com/msg20...

https://www.mail-archive.com/reiserfs-list@namesys.com/msg20...

https://www.mail-archive.com/reiserfs-list@namesys.com/msg20...

, plus some of the discussion threaded from those posts. (Sorry, my stuff needs rewriting and updating but I'm not in the position to do it at present. If there's anything you would like to ask about please do. https://news.ycombinator.com/item?id=9809041 and https://news.ycombinator.com/item?id=10548477 touch on things that are a bit further down the line, but related—in particular, to the handling of "internal metadata" and files with a compound internal structure.)
ARM is the Nokia of CPU architecture. Every ARM CPU has a different instruction set.
Each transistor uses less power?
How to Say “If” in Japanese
I know, but the full Tweet wouldn't fit within the HN character limit.
Never had this issue. Sounds like they need to recreate the symlink.
> If you're looking for a more generally useful and powerful SBC

I just want the "modern web" to work Okay (YouTube and alike websites feel slowww, I mean not the actual video playback but the page itself) while keepig it being a Raspberry Pi in all the rest of the aspects (except the price - thanks G-d I can afford it cost more).

For example Raspberry Pi comes with community-standard GPIO also usable for extension "hats", uniform format (so a whole chassis market emerged for it), free Mathematica, well-supported Kodi and Lakka packages, numerous alternative distributions treating it as a first-class target.

By the way, the latter seemes especially intriguing to me. I imagined (before the supply chain apparently broke) Raspberry Pi becoming a standard hardware platform for all sorts of alternative OSes, potentially letting projects like like Haiku, ReactOS, Serenity etc out of the virtual boxes.
Depends on definition of great code.

Is it fast and memory-efficient? You can recognize such code even if you can not read code.
Is it valuable code like Bitcoin? Same
I'm already seeing lots of take-up of RISC-V in the embedded controller space, mostly from Chinese firms.

MCU's that only cost a dime or less with the power of an ARM M0 or M4 are certainly welcome.
This is what, I believe, Nvidia wanted to do. It may be a dick move but they want to make a ton of money, damn it. Even if it drives many of their customers to risc-v
Rally is just going to be another example. As of this year, all the cars are econobox facades over space frames. No trickle-down innovation or 'win on Sunday sell on Monday'.
Awesome! zellij is a really cool terminal tool. I like it :)
You might be interested in Project TinyMiniMicro series that ServeTheHome has covered: https://www.servethehome.com/introducing-project-tinyminimic...

x86-based mini-PCs that are abundant on the used market, pack quite a punch, and generally use around 10-12W idling.

And with the current Raspberry Pi 4 pricing, they are actually a better deal.
Maybe you're joking but Apple has no reason to get off ARM, ever. They have a perpetual license. It's essentially their architecture.
Unrealistic and unfair expectations here. Microsoft isn’t doing anything to stop you from booting other OSes on this device. OpenBSD devs did the work, so OpenBSD boots on it. Linux devs now need to do the same if they want to support this dev kit. Not Microsoft’s problem.
It apparently needs specific tweaking for lxd: https://linuxcontainers.org/lxd/docs/master/howto/network_br...
Well, I personally would rather read your thoughts than those of the "important" people you mentioned. You aren't trying to sell me something or gain attention, you probably have no agenda other than sharing what you think. If I reply you might actually read my reply, consider my words and write back.
created an account just to flag this veiled right wing fake news anti vaccine cesspool.

I don't know how good these sites are for sweden news, but they are outright fake news for world news.
This is an excellent idea, I love the thought you have put into it.

A cap is also great, I've been a member of a wonderful social network that employs this stance, 10,000 all in, every year they open it up by deleting dead accounts. It keeps it running fine.

More power to us, through your project.
The Plan 9 UI is deeply arcane. It's heavily inspired by the Oberon UI, which itself is equally arcane, if not even more so.

I have a play with Inferno in a VM some years ago. (I can't even find an ISO of it now, which is something that needs fixing badly, alongside a ready-to-run version for Linux on x86-64.)

Oberon, and thus Plan 9, spring directly from the era of the original Xerox PARC Alto. Their design comes from before Apple standardised the GUI in the early 1980s, with standardised menu bars, standard window controls in the title bar, the idea of dialog boxes, plus ones that have standard buttons in standard places.

(You know -- all the sort of stuff GNOME is busily removing again now.)

Microsoft mimicked this design in Windows 1 and 2, DR aped it in GEM, IBM in OS/2 1.x, etc. All later GUIs are informed by LisaOS and MacOS 1.

Oberon was before that and it has none of that stuff. Plan 9 loosely mimics Oberon and so it doesn't, either.

Result: it's very weird if all you know are post-1990s GUIs.

Inferno modernised the Plan 9 UI and it's quite usable by comparison. But Inferno is even more obscure than Plan 9.

FWIW, The A2 OS modernised Oberon and it's much more usable, too. Both are still weird but they're vaguely recognisable and you can just start clicking on stuff.
X1 Carbon Gen 6, top of the line. The 3 button UX is still atrocious regardless of any way you try to defend it...
First of all: the licensing of RISC-V is much cheaper than ARM. I've seen Chinese RISC-V MCU's that only cost a dime or less. And these aren't itty-bitty 4-bit parts mind you, but comparable to ARM M0 or M4.

Secondly, there are numerous open-source RISC-V designs out there to give any company a head start and the freedom to modify it as they see fit.
I wonder how much of that flattening is because chips are now hovering just under the 5GHz/6Ghz wifi frequencies.

Yes we have techniques that help them avoid each other, but it seems like it would be enough of a tech and PR hassle that companies wouldn’t bother.
Lots of government services post on Facebook - often only on Facebook. You can't comment on that or read it elsewhere. There are no alternatives unless the poster picks it for you.
Oh great! How long until a new HTTP header is added to tell the browser that it shouldn’t try to OCR images.
This analogy, like most analogies, confuses more than it clarifies. It sounds plausible but it's disanalogous in ways that make the analogy more of a rhetorical device than something useful. You should just appeal to first principles and make the direct case that social media companies have too much power over speech and can be used by the US government to bypass the First Amendment, and they therefore need to be regulated. Which is a case that I would probably disagree with unless the specifics of what you wanted to do in response were fleshed out. The problem here is with the US government, not with social media companies.
I don't know if the original post was edited, but it says chromium, not chrome.
Just having one service ban you will screw up your life, such is the case of one programmer who uploaded a picture of his toddler to let the doctor check for infection - and got permanently banned by the AI, losing access to his Gmail and other Google tools registered to him.

And services rarely act alone, when they do decide to target someone, they usually act in unison to deplatform, whether justified or not.

In some ways big tech is far more powerful than governments.
Here’s a paper that explains how to derive that magic constant and others depending on what measure of error to minimize in the sqrt approximation.

http://www.lomont.org/Math/Papers/2003/InvSqrt.pdf
Ah, yes, It’s super freaky. I worked from a hotel room at the Yokohama Landmark Tower for a month, and I had some freak outs. Your balance feels off, even if you don’t feel the shakes.
I have a T14s Gen-2 AMD version. Excellent design, performance, battery life, no coil whine. Highly recommended with the 400 nit display. Got it after paying a fortune for a loaded 2021 X1 Yoga with Intel chip that was always slow, fan always on, and had terrible battery life.
It’s impossible to know people’s intentions, because we even can’t really explain 100% the things we do ourselves. So, it’s a bad starter for an argument…
It’s better to judge people for their actions, rather, because even if someone does something involuntarily they should be responsible for it.
If they're defacto governments, then they should be nationalised. If government is government, that extends to elected leaders or appointments by elected or responsible members of the executive. This of course entails the balkanisation of the internet, but it's the logical conclusion of your position.
This seems insane to me. If I were in this situation, I would simply not use Teams if I can't log into it. The only way to get situations like this resolved is for the pain to be felt by someone with the power to change it. Absorbing the pain yourself by working around it is just enabling these things.
How the NFL, Nickelodeon, and Everyone in Between Sugarcoats Football's Dangers
We need the RISC-V equivalent of the SID chip.
When watching the Next.js Keynote it really felt as if I were watching an Apple keynote..
You're right, I should have said home user support. This was before they had RHEL or Fedora. Maybe 2002 or 2003? It was very annoying at the time. I haven't trusted them since.