skysight-inc/HackerNews huggingface dataset:
Actually, I blame WordPress even for most plugins’ security vulnerabilities, because its chosen architecture makes them much more exploitable than they should generally be.

There’s also the problem that WordPress builds upon and relies heavily on being able to modify its own code. Although this does allow you to reliably do things like unattended automatic updates, which would probably be net good (normally improving things, though occasionally harming), it also means that even the slightest security vulnerability tends to become immediate total server takeover. This is why I blame WordPress core architecture more than individual plugins: in most ecosystems, most security bugs apparent in plugins wouldn’t be so exploitable. This design decision is probably responsible for most WordPress site hijackings (… which are very common). Taking all things into consideration, I suspect that going read-only file system and not supporting installing/updating/removing any code via its web interface would probably be good for WordPress’s security, despite it meaning most sites would never be updated—but it would certainly harm its ease of use, and I can easily see why it’s basically a non-starter.

By contrast, choosing another PHP system as an example (since it’s one of the few popular languages that particularly supports this kind of self-modification), last time I dealt with Drupal (back in 5 and 6 days), it would actively complain if it could write to its own directory, urging you to make all but the directory it uploaded user files to read-only to the web server user account. Updates were then done out-of-band, using your user account on the machine which had write access to replace the files, rather than the web server’s account. (There were manual steps involving the web interface and local file operations, or tools like Drush to make it a single command.) Bad for ease-of-use, excellent for security.

I haven’t had much to do with WordPress, but I gather storing executable PHP code in the database is also fairly common, which is almost worse than having a writeable file system. My vague recollection of Drupal is that although it supported “PHP code” as a content type, you had to turn it on in the config file, where it warned you of the vulnerabilities this opened.

(My qualifications in this comment: I’ve helped recover several hijacked WordPress instances, mostly around 2015 and 2022; migrated one business off WordPress in 2022; done almost nothing else ever with WordPress; worked fairly extensively with Drupal 5 and 6 on a few sites quite a few years ago; worked a fair bit with Django over the years, and some in other web frameworky things in Node.js and Rust; haven’t done anything serious with PHP for years now, preferring Python, JavaScript and Rust. Certainly don’t trust me for any insights into WordPress. I could easily have made errors in this comment.)
We've been married for five years and have been living together for ten. We have separate bank accounts and don't plan on changing that.
What about co-CTO?

You might not want or care for the label yourself, but the reality is having the label "CTO" in a successful tech company means something. And while that label is not occupied I suspect you'll find individuals will continue to push for it.

Just my opinion, but I think either you take the CTO role yourself (and the additional responsibilities) or you share it. I don't think leaving it hanging there is sustainable long-term even if you win this argument.

I'll also add that you seem very well intentioned – the fact you want everyone to be equal and no one to having the title of CTO is admirable. But if you're not careful your good nature will be exploited. From what you've said here I worry you may already be doing more than 20% of the heavy lifting, but you're not allowing yourself to take credit for your work because you like the idea of everyone feeling equal. Please be careful about being too wedded to that. There's nothing wrong with getting the credit you deserve – whether that's a label or equity.

It's inevitable that you're going to feel hard done by if you're bringing a disproportionate amount of value while not getting a fair share of the reward.
Casinos are required to display the current payout rate on any and all slot machines (EDIT: incorrect, see comment below). The way some machines become profitable is when there's a progressive jackpot that hasn't been hit. Imagine there's a high roller $100 slot machine with a 99% payout. That means each spin you have an expected value of losing $1. Now imagine there's a $100 jackpot that you have a 1% chance of hitting (to keep the math clean). That jackpot is now adding $1 of expected value to each spin, so now your expected value is $-1 + $1 = $0. As jackpots grow, all machines (which offer them) will eventually become +EV, or profitable, to play.

Casinos also regularly offer comps, bonuses, and other non-cash incentives to players who spend a lot of money, so it's pretty easy to end up with a +EV game. It's one of those scenarios where the casino gets to have their cake and eat it too. For instance, the way the jackpot may work is the casino takes $0.2 of each $1 of profit that high roller machine is yielding, and put it towards the jackpot. But when that jackpot gets high enough, the exponentially increased number of spins results in an overall profit gain for the casino, relative to just taking the whole $1 for themselves and having no jackpot.

---

Finally, as a slightly different segment of gaming there are some machines which are "technically" capable of being beaten with skill. For instance many casinos now offer Limit Texas Hold'em poker machines, where you are playing "real" poker against a machine. But limit hold'em is an incredibly technical and complex game which no human is ever going to be able to come out on top of against a strong machine now a days. But it's a lot more fun than playing e.g. chess against a computer because the optimal strategy for heads up limit hold'em makes you look pretty much like a maniac, to somebody who doesn't know much about the game.
I don’t think I can agree with that one. A successful marriage involves interlocking reliance on the other partner in many ways. I couldn’t have born my own child, for instance.
Funny you should mention that - they used to do that until the late sixties.

https://en.wikipedia.org/wiki/United_States_Postal_Savings_S...
Like anything, it's a balance. I've seen plenty of strong engineers leave because they want to spend their time solving hard technical problems rather than talking about career trajectory, writing and revising OKRs, and talking about how they're feeling and their last vacation.
These people say they’ll sell phones with either ios or android compatibility for $53 at quantity:

https://app.alibaba.com/product/1600371757914/cheap-i12pro-5...
Even if they could fire him, he'd already be 3/4 vested, and they'd have to go find someone else to handle the entire front end. It's possible that could make sense (if the front end is mostly built, and it would be more of a maintenance role), but it could also be very costly from an equity perspective.
Reminds me of the "Bitchin' Betty" (VWS) samples from Falcon 3 flight simulator.

https://en.wikipedia.org/wiki/Voice_warning_system
since you mentioned your open mind having difficulty, it sounds like you need to to improve the ability to tackle these issues more methodically and slowly plan out a strategy of attack instead of just trying things.
There are still real dice being thrown. Only the betting is handled electronically.
For other people moving to Mississippi now, they make fluoride mouthwash that you can use daily to help counteract a lack of fluorinated water.
People are more likely to comment when it worked and upvote comments that give them hope.
> You have a presumption that experts should be believed.

Yes, my guy, I happen to believe that people who know what they're talking about should be listened to. I suspect most won't find this controversial. The world is far too complex for anyone to be sufficiently competent in every field, and yes spending time working in a field gives you more expertise than an average rando you pull off the street.

Experts aren't always right, and the consensus isn't always right, which is why we have the scientific method. It's totally fair to question these folks but to blanket dismiss them is silly.

> All topics can be distilled into simplistic understanding.

Simply false.

> Once you speak in academic gobble-dee-gook you are done for.

lol.

This would be a good candidate for a Reddit-like 'flair' concept so I wouldn't waste my time responding to someone who doesn't believe in the concept of people who know what they're talking about. It's fine, I'll make a note of your screen name for next time.
Where I live, you can file a “declaration of domestic partnership” online to receive those rights: https://www.miamidade.gov/global/license.page?Mduid_license=...
Hmm, its been a while since I worked in the area of dental fluoride (was part of my PhD) but my understanding was systemic exposure pre-eruption was still beneficial. This (possibly biased source) agrees:

https://www.dentalcare.com/en-us/ce-courses/ce334/pre-erupti...

Excess exposure can cause fluorosis but nothing to do with the brain.
this feels like when your mom says you don't call enough so you make a voice mail that she can play every time she wants to hear you but for some reason she doesn't like it
Toxic positivity?
The link you provided states that the technical capability is there, but Nevada has a rule against changing the odds without notifying the player.

> "The conventional gaming device or client station must be in the idle mode with no errors or tilts, no play and no credits on the machine for at least 4 minutes. After this time, the conventional gaming device or client station must be disabled and rendered unplayable for at least 4 minutes. During the time the machine is disabled a message must be displayed on a video screen or other appropriate display device notifying the patron that the game configuration has been changed." — Technical Standards for Gaming Devices and On-line Slot Systems 1.140

https://wizardofodds.com/ask-the-wizard/slots/progressives/

In other states, there may or may not be such a rule.
Melbourne transport card readers wont accept credit cards or mobiles until 2025
@Christopher: I think your domain chrbutler.com is shadowbanned. I vouched for this post, but you have a lot of posts that are marked dead.
Looking at the first 3 causes they list, that's pretty much my wife and I.

I'm an immigrant to Asia, so got my life in reasonable order a bit later than most (picking up and moving across the world will do that). Early marriage in a culture I didn't fit in to yet, would have been a terrible idea. I hear lots of disaster stories in this domain!

We decided to ignore local cultural norms and share a residence before marriage. This was in hindsight a wise decision that let us build a life together in confidence.

I had my immigration paperwork properly in order before we met, but had not yet made any real money. We were both pretty broke, at the time. We held separate finances at the start, but shared expenses, which improved our financial security quite a bit.

Honestly, we would have continued this way and ignored pressure to get married... except that it's somewhat difficult for me to gain citizenship. Without citizenship, no land/home ownership or access to many financial instruments -- so it's optimal that I hand over 100% of any income. Marriage provides me with at least a few rights in this context (at least de jure), so we went for it.

It was simply the least suboptimal choice. I feel if it wasn't for the weird legal context of being an immigrant to a country that receives few immigrants (Vietnam), we may not have bothered getting married, social pressures be damned.
> Marriage is a complex and binding contract that for two high earners is a tax disadvantage.

You can file separately.
Hacking was great. RIP
Wonderfully put.

I met my (now) wife after a long relationship that'd ended somewhat messily. I made the conscious decision to go all-in on the new relationship because it could not possibly be what I wanted it to be if I didn't.

My wife and I were married about 5 months after meeting. My friends and family were worried that I was leaving myself vulnerable to being wiped out emotionally and financially if the marriage didn't work out. They were right, in a way. But sabotaging the relationship on order to stay safe seemed a far worse risk.

We're coming up on 18 years of marriage, so I'm glad I made that call. In an alternativee timeline where this relationship had failed, I'd like to think I'd still go all-in subsequently, but I can see how it would get harder and harder with each failed attempt.
WordPress is the best example imaginable of how a popular incumbent can prevent technological progress and create heightened risk for the whole internet. They should teach it in school as a cautionary tale. "Be careful what you create, it might end up a WordPress."
Genetics plays a huge roll. As does your daily dental hygiene routine. Based on you posting here means you probably have access to tooth brush, floss, tooth paste and somewhere to use them daily and effectively, this reduces the impact of water fluoridation variables.
>But the report did find a possible link to cognitive harm at approximately two times the current recommended water fluoridation level, records show.

This is more a report about consuming excess fluoride from other sources that water.

>Because many common foods and drinks contain fluoride, consuming them along with fluoridated water could amount to harmful exposure levels, these experts say.

I do wonder what the other common food and drinks could be
You didn't say short-term treasuries, you said treasuries, which anyone can put money into at treasurydirect. Again, nobody has lost their FDIC insured deposits in 100 years. Sweep accounts provide cover for $5.5+

Personally I think individuals should just be able to open an account at the Fed.
i will make one called dinner date where me and my date can list places to go for our date and it will pick one that matches in both lists. If she asks where to go I will tell her to make a list of places and type it on the website and the website will tell her where we will go
> Framing this as a de facto book ban is definitely "editorializing" though.

I don't know what else you'd call the use of state authority to restrict access to books, without painful euphemisms.

And note: the use of "book ban" to describe partisan curtailments of reading materials is not itself partisan[1]. You can find similar uses of the phrase in any partisan or non-partisan news source.

> Do you disagree that these are topics favored by left-wingers? Do they have collections promoting "Nuclear Energy", "Classics", "Freedom", "Family Values", "Meritocracy", or even "Personal Responsibility"?

There was a classics topic in our library. I think it would behoove you to think one step beyond this and observe that topical selections in libraries reflect three pressures:

1. What the audience (i.e., students in this case) actually wants to read;

2. What the librarian thinks will induce reading among the audience;

3. The librarian's own biases.

You're focusing on (3), when the reality is that (1) and (2) matter more. Asking high schoolers to get excited about a library section on "personal responsibility" or "meritocracy" sounds like a bad joke.

[1]: https://www.foxnews.com/us/library-book-bans-united-states-s...
What confuses me here, is that you can read the RFID "MyKi" card with a phone. This strongly implies the sensor (and by extension) the emitter is entirely compatible.

How could a lead contractor impose constraints which delay enabling these devices a year or more? It feels like its an entirely confected problem because at scale the card handling side isn't the problem: its the transactional reconciliation which they have to do anyway, all the time. Every tram, train and bus already has sensors which are compatible, in this logic.

If I can read the card they read, then surely they can read the datastream I emit from my phone? The Antenna is the same!

(this has also happened in my home town of Brisbane except they did a trial run on two trainlines and for university students, so we all know that CC, phones and the "GoCard" reader are completely compatible. Deployment is delayed here too)

I suspect the underlying problem is the financials. Brisbane Transport holds $millions of stored-value card dollars and gets to use them, invest them, with passengers as the creditor. They make a LOT of money off this because at scale its investment of that money at market rates, against draw-down for use on the bus or train. Moving to CC they will lose the retention of this cash-cow. Earning 5-7% rates out of this pile, vs $zero because you hold nothing in advance is a big hit to the bottom line.
> Having children is a slight risk because custody is a bit more likely to be given to women than men, so men are a bit more likely to have to pay child support.

Having a child is also more than a slight risk to the woman whose body is put through drastic change with unpredictable consequences and are still expected to keep working the same as before.
Portacle
We managed to negotiate a couple of grand off (including waiving the first year of maintenance) when we needed another license a few weeks ago but yeah it's a bit scummy.
I'm a programmer that doesn't really understand anything about media streaming. What is a good use case for this project? I can't decipher it from the description. It can read and publish media streams. What does that do?
Whats the point of calcium fluoride in your toothpaste, the water solubility is very low I would suspect it to do almost nothing, could be wrong, never heard of this. Generally soluble salts like sodium or tin fluoride are used.
Whiskey is only very weakly acidic, likely having no impact compared to neutral unbuffered vodka.
It's a professional tool, they're probably just looking at the professional market for the claim (i.e. it would be from sales data so Kicad isn't going to even show up)
It was an extension of communist ideology. Opening up the means of production to everyone.
Company demos new service that allows you to have realistic audio conversations with NPCs.
In my experience it is the opposite. Americans give about 3x as much per capita to charity as Germans, for example. In continental Europe generally you will also see strong anti-immigrant and anti-minority sentiments expressed in casual, middle class society that I haven’t seen to anywhere near the same degree in the U.S.
> Casinos are required to display the current payout rate on any and all slot machines.

No, they aren’t, at least in Nevada. Some states make the whole casino disclose its average “return to player” metric though.
That’s completely different, if humans all started eating each other then your own existence is at risk, so a moral imperative arises.

This doesn’t apply to other animals.
If you're looking for something like a "typed Lua" I suggest checking out Nelua (nelua.io).

It's almost 100% regular Lua syntax and compiles to C, so you get the nice syntax plus speed, similar to Crystal/Ruby. It's not perfect but is interesting nonetheless.
Black Tea.
> What is perplexing is the government has not allowed a “narrow bank” that simply passes deposits into treasuries, which would be much safer.

The reasoning here is contentious but straightforward. Narrow banking is safer banks cannot over-leverage themselves in the same way and cause a financial crisis. This means the existence of a narrow bank will very quickly kill fractional reserve banking; why would you as an individual take the extra risk?

Why might that be a problem? Proponents of fractional reserve banking say that the higher volume of loans it enables collectively allows society to take larger risks that result in higher quality of life over time. Without that volume of loans you'd see less housing being built, less small business loans, etc. The argument goes that the crashes are worthwhile for the overall effect on the economy.

Whether fractional reserve banking is a net good over narrow banking is up to debate but the game theory behind why they cannot coexist is hard to argue with. Individuals will overwhelmingly take the choice of "less risk" and switch to narrow banking.
i think the thing that people have a really tough time with is the fact that they create money out of thin air. that's really what happens. they hand you made-up cash and create a negative bank account for you to pay back.

the opposite happens when you buy a government security or a corporate bond, except you had to get that cash from someone else, not create it on your own.

it gets really weird when you borrow money to buy more money.
Just gonna add to the Lua love. I was also introduced to it by LOVE2D and revisted it with Redbean. In terms of ergonomics, it is still my favorite programming language; I find it very easy to read and reason about, and I credit that to its minimalism.

[1] https://love2d.org/

[2] https://redbean.dev/
It's not made out of thin air, it's backed by your obligation to repay the debt that created it and the faith in the legal system to enforce said debt obligations.

Corporate debt is basically exactly what you described... and I assume by 'government security' you mean debt, in which case I have more bad news for you. It's all based on faith in the legal system to enforce debt obligations.
Agreed; 100%.

Being married has been awesome. Best decision I ever made.

Some days are hard, sure, but that's part of living with someone who is not you. We come out as better people in the end.
The Unicomp phenomenon was that IBM literally spun off their keyboards along with the printer stuff to Lexmark. Lexmark, in turn, begat Unicomp because they'd rather sell fiddly terrible $19 inkjet printers.

It does seem like it's getting harder to find a "tasteful" mouse at retail. I bought the new Intellimouse Pro for my work space a few years ago, but now the office supply chain basically only has Logitech products, and if you don't want them, you can go to Best Buy and spend $80 on something gamery that looks like Optimus Prime's RGB marital aid.

I could probably find something online, but peripherals are very much a comfort and feel angle where in-person experience helps.
> society as completely absolved women of all responsibilities as a wife

Please elaborate.
How is there a moral imperative? Could you explain it?
I have used MediaMTX to proxy IP camera feeds to custom web pages.

IP cameras generally stream through the Real time Streaming Protocol (RTSP). This cannot be directly played in the web and also requires authentication in most cases.

MediaMTX acts as a proxy to convert RTSP→WebRTC and take care of the authentication.
No, it's the fault of people who scoff at concern about fluoride in tap water without having researched it.
I’m gonna stick my neck out and say that a man getting divorced did not, in fact, do everything right.
I'm bothered by the characterization of "erasing" information. Black holes notwithstanding, you can't erase information.

If you rephrase it as transmitting information to your environment it makes far more sense (and becomes rather trivial).
If you placed a weightless empty box on your head and filled it with the average cars exhaust emissions for one year, the result 4.6 metric tons would crush you like a pancake.

If we're being charitable we could let you take a few breaths of what's in the full box just to ease your suffering.

There are 1.4 billion such cars currently operating in the world.
> Why commingle finances at all?

If you have children I'm not sure how you can avoid this. You have to share the care of the kids. One of you is going to take a hit in your earnings. Be that in extra sick days or for her the maternity leave. I don't think you can account for the work sharing evenly, so I don't think it's fair to try and account for the financial sharing.