skysight-inc/HackerNews huggingface dataset:
This particular bug has manifested in many places now, and in all those cases I find it plausible that it was a confluence of several independent teams (as in, not even working on the same code) adding features until, whoops, it turns out the combination is catastrophic. You find it obvious after the fact, but I don't think it is always obvious at the time.

It's really easy for someone to see a feature like "interpolate strings better than ever" in their string library, and say to themselves, "Hey, that sounds good, let's turn it on!" without realizing that "better than ever" means "with arbitrary lookup from a string into a class of some sort", and then chain a few things together and hey presto you've got an arbitrary code execution vulnerability.

I personally think allowing arbitrary string -> class lookup for all classes in the runtime is automatically a security code smell at best if not outright antipattern, but I don't think this is at all well understood yet. (While the general pattern is hard to avoid, you should have to register all classes/structs/values/whatever you want to automatically load from somehow. This prevents things like "I can use the OS object to execute arbitrary shell code" from automatically and unexpectedly creeping in.) Dynamic languages are all but based on such a capability, with their "eval" support. It's probably still going to be decades before this is generally understood "programmer wisdom", partially because the particular confluence of features that enables this bug is not common. It's just that when it does happen, it's catastrophic. But it's not actually that common.
Yes, the Dominican Republic has much better medical infrastructure. As of 2021-06-24 (translated from Spanish):

> According to official data, the country has applied 7.402.235 doses and already 2.655.737 people are fully vaccinated

https://cnnespanol.cnn.com/2021/06/24/republica-dominicana-o...

The first rounds of vaccination were AstraZeneca, and as noted in that link at that point in time:

> In total, the caribbean country has bought around 31 million dosis of covid-19 vaccine. Of those, 10,768,000 are Sinovac, 9,999,990 Pfizer, and another 10 million are AstraZeneca.

Meanwhile, as per the article which is dated 2021-05-14:

> When COVAX, a program run by the World Health Organization, offered Haiti AstraZeneca vaccines, the government declined the offer.
> And they should have never did this publicly.

"Contemplate the twelfth figure of the Tarot-Keys, remember the grand symbol of Prometheus, and be silent. All those Magi who divulged their works died violently, and many were driven to suicide." -Éliphas Lévi
Assuming the question is serious: Owners of land near the US west coast.

Not near the east coast. US property is measured from a line of reference points near the east coast, so if you use the wrong foot there, your property boundaries will be less than 1mm wrong, and you and your neighbour are unlikely to notice. But near the west coast you may be building your house/fence/whatever 0.5m into your neighbour's land.
about 123/1234 of a football field.
Historically, it feels more like a class thing. A proper, civilized person would keep their mouth closed.

As for the current mouth vs nose and belly vs chest breathing, it really feels like a fad/cult. There seem to be a constant stream of very small "studies" with questionable methodologies with just enough results to warrant further investigation.
I Coded a Video Editor (and it kind of sucks) [video]
It’s actually the other way around. Going through chicken pox as a kid increases the chance to have a shingles as it is caused by the same virus being dormant in your body.

When infected the first time you can have chicken pox as an adult.

Amoxicillin is an antibiotic and can be given for the risk of opportunistic infections but it doesn’t treat a viral disease by itself.
I keep notebooks. I feel like manually writing them down is the best way to strengthen the memory of the idea.

Plus information flows from my brain more easily with pen and paper than with computer typing or even talking into a recorder. Sometime about the extra brain cycles needed to speak aloud or type, it distorts my idea expression.

But I sometimes have ideas so fast that a new one will come in before I finish writing down the current one.
Love it! Have you tried to create a k8s operator in Crystal?
Do you think the distribution of ages between Haiti and US under 50 is the same? And that the methodology and reporting are similar? Those numbers seem to be in a similar ballpark without accounting for obvious possible differences.
Nuclear-powered data centers are on the horizon
The following characters do not encode correctly when sent via fetch in Safari
https://libretaxi.org/
A Lamborghini can be exchanged for a Toyota plus some extra change. I don't think you will find many people to do the opposite exchange.
I feel the same. It's also just very mentally taxing to learn on the fly. Because usually, I'm trying to develop a feature and I feel the pressure of delivering on time. I find it difficult to learn even on the best days, and if I'm stressed, it makes it much harder to concentrate.
Worth a read even for people (like yours truly) who are not intending to ever go on another first date: it is a list of non-sensitive questions, like "do you like the taste of beer?" that have high predictive power (according to OKCupid data) for questions that are not so easy to bring up, like "will my date have sex on the first date?".
Completely useless. This is just imagined hype based on a lack of understanding of the field.
OOOH. Here is my killer solution.

It's called "Blitzmail" on Android. I'm sure there's an Apple version, I don't know what it's called.

Absurdly simple. It's a send-only, to only one address, email client. Pops open a texting type box, you hit send. That's it.

This has replaced so many apps/things for me. Notes, calendaring, bookmarks, etc. A really good "GTD Inbox" thing if you're familiar.
Ski gear can be quite an investment. But as anything seasonal, ski gear goes through quite considerable price changes throughout the year, which means that you could land pretty sweet deals if your timing is right.
The US foot has always been defined by the meter. Originally, Thomas Jefferson set the foot to be exactly .3 meter. The science of surveying and measurement weren't great in the late 18th and early 19th c, so the definition of the meter changed; by then, the US surveys were too far along to change.

My family has been involved with surveying on-and-off for ~100 years. I hated grabbing measuring tapes as a kid, because the "foot" or the "inch" was always sone batshit crazy thing. Like: decimal foot based on a 30cm foot; the "inch" is 3cm.
I send myself a text or write myself a slack.
Ruby was the exception I had in mind when I used the word “nearly”.
The idea of a compile-to-regex language is a neat one, that immediately makes it a lot easier to use in existing projects.

If there's any interest in other takes on "better regexps", the Rosie Pattern Language has some neat ideas:

[0] https://rosie-lang.org/index.html

[1] https://www.youtube.com/watch?v=MkTiYDrb0zg&list=PLcGKfGEEON...
https://www.youtube.com/watch?v=D9iF4k16be0
IdeaPad 3 (AMD Ryzen 5 5500U) on Alpine Linux 3.17 here.
I’m pretty sure the GPS tool can be switched to meters by a toggle in the settings.
A great introduction is the book Starting Forth [0].

It has the most charming illustrations I've ever seen in a text book.

[0] https://www.forth.com/starting-forth/
Please cite where the FBI failed to follow the law in this case. The FBI is a law enforcement agency. If you have an issue with the law, that's separate. In this case it appears the law is the issue:

> For most of the country’s history, civil forfeiture was an obscure backwater. At the time of the Founding, civil forfeiture was limited to confiscating ships and cargo that ran afoul of customs duties. But now civil forfeiture has become wildly popular across law enforcement, precisely because it doesn’t require a criminal conviction, or even an indictment, to confiscate someone’s property.

Empty talking points from conspiracy videos you saw on Youtube aren't helpful.
Why I'm still using Python
I love this! Focusing on one thing at a time feels like a super-power, and this forces me to:

* think about what that is

* get a visual reminder of the one thing
For the Rite In The Rain notebooks, I recommend a pen that takes a Fisher Space Pen cartridge.
Didn't she already recuse herself on that basis?
The six realms of existence, hungry ghosts (pretas), siddhi, sacca-kiriya, the cosmic buddhas, the Pure Lands...
Whatever the opposite of web dev blog spam is, Josh is the poster child for it. He could easily not add the interactive elements and his content would still be well written and informative, but instead he goes all in on everything he does. I really hope he is making a full time career of of this, because if anyone deserves to it's him. I am grateful for how much I've learned from his blog and course.
The more I learn about new and less new languages (Zig, Jai, C#) the more I like C and its true simplicity.

The language has a few irritating historical artefacts and the stdlib API is completely outdated and full of bad design, but there it is still versatile enough for my needs.
That would be communism.

I've actually seen an old ex-NASA engineer claim that.

He was not joking.
> part of its purpose is to be back-end agnostic

Low-level languages can be backend agnostic. For example C or Rust allows to write low-level code that is back-end agnostic, and doesn't cause cause vendor or technology lock-in.

What I like to have is guarantees similar to what a RTOS (real-time operating system) has. Maybe using hints, or something like that. This could be standardized. Languages like C or Rust have such guarantees naturally: statements have some kind of guaranteed time constraints (that's why RTOSes can be mostly written in C). Sure, loops can be endless, but loops, e.g. in Rust, can't become 1 million times slower suddenly because the backend changed.
ownership is a concept in dire need of revision
If I understand right, adding "link=comments" to any hnrss URL should do the trick.

Docs: https://hnrss.github.io/#link-parameter
31 Hours Inside SpaceX Mission Control
GPT Takes the Bar Exam
If you build rails, you'll get a free good-enough conductor for getting power from the other side, even before you think about putting anything onto those rails.
Sounds like it would be interesting reading material. Have you ever written a blog or book about your process?
In court papers, Nelson’s attorneys claim provisions of his Amazon employment contract, inked in 2012 when he became the second member of the AWS real estate team, include broad allowances for outside work. They say the Justice Department has seized money he made independently of Amazon, and have taken Amy Nelson’s earnings as well.

Carl Nelson has filed his own suit against Amazon, alleging that the company has run afoul of Washington state’s new law restricting non-competition agreements. His attorneys also claim Amazon has violated his contract by suing him in federal court in Virginia rather than in Washington state court, the venue set in the agreement.

As evidence of Amazon endorsing outside business activities, and of company executives making liberal use of the contract provisions, Nelson’s attorneys point in part to Jassy’s investment in the ownership group behind the new Seattle Kraken NHL franchise, and Amazon’s subsequent purchase of naming rights for the team’s arena.
I want to return it. I do not want to keep it, but that decision is up to Amazon.
I would like to just put a warning out to others to avoid nvidia+laptop+linux. I got an X1E several years ago with the idea it would be my daily driver and thought problems would eventually get ironed out, but that was wrong.

Issues include lack of nightlight on wayland, random boot/cpu lockups where OS won't load probably 30% of the time, obsidian(electron?) has weird issues typing where keystrokes undo and then re-do, lack of thunderbolt dock support for wired ether-net. That's all I can recall for the moment, there are others.
You can never have empirical evidence for any nontrivial counterfactual. That’s perhaps one of the simplest refutations of empiricism as an epistemology (although there are others).
So that's who's been buying all the Rasperry Pi boards!
Nuclear is probably most practical for long term generalization, for now I think the approach all crewed landers have proposed to use is to place panels as high up as they can to maximize sunlight duration.

At the poles this could enable some permanent power generation by getting the panels high enough to access permanent sunlight.
I pretend to explain what I just cooked up in my head to someone in very simple terms. I can't explain something I don't understand, so this helps solidify the idea in my noggin'. Then I pretend to explain it again to myself on the walk back.

But I do this out loud, speaking out loud seems to be the key. Like those japanese guys that point. I can "remember" my voice.
Well, it's scientific in the same way that an accused witch and a duck look the same weight on the scale then. Besides, after a few minutes sous vide, I wouldn't be able to pull with all my usual strength, would you?
Not it's more you use body part names that sound funny as unit of measurement.

Like it sound backward to say stuff like "I'm 5 feet tall, but I can see as far as 20 inches! Maybe I can also count up to twenty teeth but I have only 5 toenails of time remaining".

Ok I exagerated a bit, but to the rest of the world that's how silly this all sound lol

Isnt it weird we all measure prices in USD between non US people when we need to compare price across countries, but the US cant use the meter, a unit so old and basic they re the one country left without it...
Mathematically, both are fractions of whole numbers (or decimals - the notation makes no difference). The problem is that they're different - which is a problem if you confuse them.
Sure, that’s fair. You’re not wrong. But PRQL is meant to substitute for SQL, my argument here is keyword familiarity outweighs absolute linguistic precision.
Support contract:

1. For the given amount of $5000 for the period 2023-01-01 to 2023-12-31 you are entitled to

2. Create a feature or bug request on our support system

3. Have a first response back in 96h

4. No warranties explicit or implicit that we'll be able to solve your problem blah blah blah etc
Is there a faster MVP stack than this plus next js and maybe something like supabase for the db?
3D NAND, which basically underpins all of our SSD tech, is hard enough to make at 40nm. They basically have to fill a tiny hole really precisely with layers of five different materials to create a vertical stack that works. It's really hard to go down node sizes plus once you hit 28nm the price of transistors stops decreasing and starts increasing instead with 22nm and smaller.
Let’s be clear. It was discovered that her husband worked for a company that had served FTX. Not serving them directly. This is not something that would be easily immediately discoverable. She refused herself. Everything here seems timely and proper.
I’ve been using this library extensively, and I highly recommend it. The switch from next-auth to authjs-core is a great move to make it framework agnostic.

That said a lot of the documentation is outdated and clearly react focused. I’ve encountered a lot of behavior that’s unexplained unless you dive deep into the code or GitHub issues. For anyone using this with SvelteKit, or just in general definitely contribute to the documentation if you can! It would help a lot!
My own spreadsheet, with mass to orbit (linear and log), mass per flight, booster flights, and reflight time. Best viewed landscape.

https://docs.google.com/spreadsheets/d/e/2PACX-1vQ4zCmVceLNd...

60% growth year on year still going strong.

Raw sheet, if someone wants to clone: https://docs.google.com/spreadsheets/d/11wy9u3hKQjgdmC1N3Clg...
I accidentally turned this on once, IIRC, and discovered the issue after some shell scripting went off the rails. It was pretty irritating.

Still, it led me to a deeper read of the configuration and I ended up enjoying nano more after that. It's come a long way in recent years too.
Thank you for your insightful answer.

As I understand, Stripe grew so huge first via its great API (I distinctly remember comparing it against its competitors back in the early 2010s, and even though Stripe was more expensive, the developer ease was worth it) and then by being the go-to default. As you say, now other products have long caught up w.r.t. API niceness, and Stripe is simply riding momentum.

Of course, Stripe has also expanded into tons of other categories. I wonder how much of their revenue comes from those other new products. If they are successfully growing those products, I still think Stripe has good fundamentals... but I don't actually know how well those products are doing and how much revenue (and revenue growth) comes from them.
Why are we still using foot (US or international) as a unit of measurement?
Wait till someone makes ChatGPT clone with Meta`s OPT-175b. Eleuther can do it.
Would use the next js for the api as well
This is needlessly pessimistic. The US has been, ahem, inching its way towards metrication for decades. It's not a particularly sexy or urgent topic, and it's staunchly opposed by a certain vocal segment of the populace, but industry, academia, and the government (including the military) have been making metric the default (and sometimes the only option) in more and more places. Previously the big win was in requiring consumer packaging to label in both customary and metric; nowadays the big win is that goods themselves are increasingly sold in nice round metric numbers with a customary conversion rather than the other way around. Give it another generation or so and we'll be in no worse a position than Canada or the UK is today.
The C language and the C stdlib are not the same things. You can use C without the stdlib.

You simply have to build or use a different framework offering similar or better APIs.
If we're just throwing accusations of logical fallacies back and forth now, than I'd point out we've reached the point in the conversation where we're having a literal tone argument. I don't find this to be a pedantic tone (my read is that they're adding detail rather than making a pedantic correction), if you do I don't see how I can convince you or be convinced by you, so I think we'll have to agree to disagree.

(To clarify, I don't mean to suggest these rules should be held to the standard of formal logic; maybe a better way to explain my criticism would be to say, if you leave a noisy complaint in response to a comment, you are responsible for your actions, not the commenter you're responding to. I can choose to leave a noisy comment in response to any post, no matter how careful someone is with their tone or how well they follow the guidelines; if I did so, it would be no one's responsibility but my own. I can't use my reaction to justify my reaction. Similarly, we can't criticize this comment as resulting in us defining a tangent; you and I made that choice.)
There has been a social stigma against breathing through your mouth in the UK for as long as I can remember, with it being associated with negative qualities like being undisciplined, unathletic, dimwitted, along with it being considered an impolite thing to do.

I doubt this was part of the curriculum, but in fitness classes at school we were told that breathing through your nose with your tongue pressed against the roof of your mouth helps develop your face/jaw and that breathing through your nose moistens the air and helps filter it. We were also told that it's not necessary to breath through your mouth when you're out of breath as you won't get or don't need more oxygen and that you risk hyperventilating this way, instead we were told that you should breath using your diaphragm to help mix the air in the lungs and that you should hold the breath for about as long as you inhale/exhale if you can help it. This sort of breathing exercise seems pretty common in any fitness/exercise related guide I've seen too.

As far as other countries/cultures go, any country that has a strong yoga/meditative culture likely considers breathing through your mouth to be bad too, but this is just speculation on my part. Pranayama is thousands of years old for instance and is primarily concerned with controlling and reducing your breathing, which is hard to do if you're not breathing through the nose.
> 1. We will learn that one or more traditional banks have taken on cryptocurrency exposure and will need to be bailed out to prevent another financial crisis.

Don't know if this will pan out, but if it does it will probably be Deutsche Bank right?
Hetzner has some attractively priced dedicated servers - for some heavier workloads that might be nice. Do they use a very different management API? (They have a cancellation period of "30 days to the end of the month", which would complicate matters.)
Merry Christmas Jay
You don't really need the full Aho Corasick algorithm to determine set membership of a string.

A simple Trie structure made of the set of strings would suffice.
Or https://reason.com/2022/02/18/fbi-seized-almost-1-million-fr...
GopherCon UK 2021: Alex Ellis – Zero to OpenFaas in 60 Months
Had to look up details of what was going on.

"After the first FBI visit, Amazon filed a civil lawsuit in the Eastern District Court of Virginia and the Nelsons could finally see what was alleged. Carl's former job had involved scouting land for Amazon to buy and build data centers on — or putting together deals with commercial real estate developers to do all that for AWS — and then he'd present the best option to decision makers. The lawsuit, which was fleshed out in July, alleged a massive fraud and kickback scheme involving a number of defendants, including Carl. It claims they inflated the lease prices and land purchase transactions for AWS to gain illicit profits that were distributed through a web of shell entities, including Carl's real estate startup he'd founded on the side. It added up to a lot — violating the federal RICO statute (The Racketeer Influenced and Corrupt Organizations Act) and engaging in wire fraud, honest services fraud, money laundering, and breach of contract, among other things. Amazon is seeking to recover "tens of millions of dollars" in unjust enrichment along with damages.

Carl agrees that the transactions took place, but argues they were completely legal and standard, all vetted by his lawyer and allowed per his employment contract..."

Source: https://www.entrepreneur.com/leadership/founder-amy-nelson-w...
I got a used Precision 5540 (equivalent to XPS 15) after someone recommended it here on Hacker News and I've been pretty pleased with it. Newer versions (Precision 5560/70 etc) should be good as well.
Persistence programming: are we doing this right?
Are there any plans to support passkeys/WebAuthN? I feel like that should be a fairly straightforward thing to support since all browsers support it.
You can make an UI in Canvas or SVG, and there are frameworks for such. It's just kinda janky.

At some point you might as well drop down to OS widgets and go native.
> > share negative comments?

How is Tesla not dominating the auto industry a negative comment?

It can only be if your expectations are so high that make it so that you read it as negative.

Cars are 150 year old inventions, it's like saying somebody won't dominate the wheel industry or the bronze industry. Duh!

Somehow the everything bubble and shameless promotion made it a controversial point of view, and the diehard zelots will argue both on here and in the author substack about how it's in fact possible to dominate the wheel industry or the bronze industry and that Tesla will do just that once is done dominating the auto industry
I must be the only person who solves things just fine outside this shower.