skysight-inc/HackerNews huggingface dataset:
The headline is incorrect, this has NOT been "rejected".

This is what the initial response said:

> Thanks for the contribution. At this time we don't plan to address this in RHEL but we will keep it open for evaluation based on customer feedback.

Carl George followed up on /r/almalinux with this:

> The request is still open and has not been rejected. The CVE hasn't even gotten a severity rating yet. So maybe tap the breaks and see how it plays out. Just like in any other open source project, asking for contributions does not automatically guarantee that every contribution will be merged.

It is entirely possible that this will end up being merged within a week if it is judged a serious security issue, but until then it's just "a CVE that someone filed", which doesn't necessarily mean much.

Disclosure: I work for Red Hat.
Is it possible to configure SSH agent forwarding to only forward some specific private keys? Although I guess that wouldn't protect you from the root problem of a vulnerable OpenSSH client.
The NYT needs to make money to pay its Journalists.

After somebody who presumably works there posts a free link, you see the need to do this?
Yeah. I drew a cat and put in “Ogre” as the prompt. It drew an ogre facing the same direction as the cat.
The problem is not stealing the design, the problem is stealing the design, getting a patent based on it then suing you.
Even if its obviously a bogus patent the cost and time required to fight it off can kill your company.
The banks aren't the ones taking the loss for scams since their system doesn't have any faults, it's you or your computer that authorized the translation. I can see the reasoning for the push to more secure transactions. We constantly have people being scammed of their life savings due to sophisticated attacks beyond their understanding.

I assume an old person cares about not being left poor and helpless in retirement more than they care about free software and computing freedom.

I think it's probably likely that we will end up in a situation where some devices like phones and maybe laptops are considered "secure environments" where banking transactions and such can be safely executed, while alternative devices will be available for complete freedom and tinkering. You'll likely always be able to run any program you want on your laptop but those programs will be limited to their own sandbox rather than having free access to any other programs data.
I always wondered if there was a market for a "cool suit" with astronaut-style cold water tubes all over it you could hook a garden hose up to while working in the yard. Water the grass and cool yourself off at the same time.
Have you ever walked by a building under construction? It isn't uncommon to see foundation work going down >70 ft. The pilings themselves can be driven in even farther.
"The EMBO Journal wrote in a public post last week that it is reviewing the allegations regarding a 2008 paper about receptors within the brain for which Tessier-Lavigne is listed as the *third author of 11*"

11 authors? I thought the kickbacks of "I'll publish your name on my paper if you publish my name on yours" in Computer Science were bad...
Fuck Blizzard and their always online battle net bullshit.

I would rather spend $1000 on Indy games than give Blizzard a single cent.
Children are already excluded from those. And other forms of gambling. Society has managed.
Yes, genetic variability, which was largely set in prehistory, definitely "plays a heavy hand" in determining whether someone will enter the workforce in one of several occupations that cluster closely in terms of skill set, yet vary widely in terms of pay and prestige. This guy will probably be a journalist instead of, say, a private investigator, or a novelist, or a technical writer, or a marketer, because it's in his genes. /s
Reminds me of how I heard Vietnam is one of the biggest consumers of black market rhinoceros horn. Lots of people are making money there, but there are only so many legitimate ways to flaunt your wealth in that system.
That's a pandemic, not comparable to a dictatorship. If you don't understand this, I hope you don't ever get some place where accountability is required.

Because if you tought like that in a company and putting in practice your careless behaviour and lack of maturity, the boss would fire you in the spot.
Then again, nowadays, what you read from /dev/sdd1 isn't necessarily the 1's and 0's stored on the memory cells, because many SSDs have encryption, and even if you haven't enabled the protection, there's still en/decryption keys on the controller.

https://www.trentonsystems.com/blog/self-encrypting-drives
Given that they were originally cranking episodes out in less than a week, yeah probably.

I remember being astonished when their Elian Gonzalez episode aired four days after the raid, directly referencing it.
"small diameter tunnels" + "autonomous cars" kind of sounds like a subway train.
> I'm pretty sure the author would say that what you end up with is a KeenWrite document.

Documents written in KeenWrite can be typeset using tools that already exist:

* https://pandoc.org/

* https://yihui.org/knitr/

* https://github.com/jfisteus/html2xhtml

I've kept compatibility with pandoc (CommonMark) and knitr a priority; I wrote KeenWrite to replace a shell script that was calling out to those software packages. My Typesetting Markdown blog posts dive into that script and programs:

https://dave.autonoma.ca/blog/2019/05/22/typesetting-markdow...

Further, KeenWrite only supports plain TeX, which means that the typesetting system can be any software that is TeX-compatible: LaTeX, ConTeXt, LuaTeX, ExTeX, KaTeX, etc.
Espressif has also capitalised on this trend with the ESP32, having cheap (~$10) official dev boards available at or before the launch of a new Esp32 model
Why even risk it? Just get the patent and license it for free.
> instead of trying to actually debate the points raised, which are absurd

https://en.m.wikipedia.org/wiki/Appeal_to_the_stone

“Appeal to the stone, also known as argumentum ad lapidem, is a logical fallacy that dismisses an argument as untrue or absurd. The dismissal is made by stating or reiterating that the argument is absurd, without providing further argumentation. This theory is closely tied to proof by assertion due to the lack of evidence behind the statement and its attempt to persuade without providing any evidence.

Appeal to the stone is a logical fallacy.”
I suspect if you talk to therapists dealing with abused kids you’d get a different take.
Mobile games seem to be by far the worst. Honestly the whole mobile ecosystem seems toxic.
They carried weight with the people trying to make this shit work, down in the trenches. It wasn't a perfect process, but it was a process - geeks trying to talk to each other, beyond bullshit corporate boundaries.

I don't think anyone really wants to talk to anyone anymore.
As does EA Origin.

EA with it then you can't play PvZ Garden Warfare.
You know that would actually be meta level genius if this is really an experiment in seeing if AI can generate a paper that will get accepted.
> If, as in casino games, there is hope for you to get your money back, and more, there is temptation to play just to cover your losses, which will eventually result in a downwards spiral. That is, you already can't pay the bills, so you take a loan to play more. After all, it was a bad losing streak, you will win the next one, that's for sure...

Plenty of retirees flock to casinos as soon as their Social Security check clears, then spend it all and go home without selling their grandchildren into sex trafficking. There is a difference between poor people and gambling addicts. A subset of all gamblers (addicts) struggle with rationality and will reach for someone else's wallet when theirs is empty-- and eventually find themselves encased in concrete at the bottom of what's left of Lake Mead. They would do this to obtain more heroin or meth just the same.

You're describing a worst-case scenario. Most gamblers are just poor people, who are poor because they make poor choices with money (like spending it at casinos). The type who trade in functional cars and finance a new truck every time they get a raise, or buy new appliances that cost exactly as much as their tax refund check. Money burns a hole in their pocket, but they don't become the neighborhood firebug. Ironically winning the lottery usually ruins the lives of them and everyone connected to them, since their spending scales linearly with available resources. They're just cows that consume until nothing is left, then they switch from pleasure-seeking to subsistence. They're not intelligent, but they are rational.

Kids don't have vaults full of money, and they have no equity worth loan-sharking for. Their rationality is up for debate, but there's no money to be made in kneecapping or drowning child debtors. What they do have is a surplus of attention. So you keep them engaged through all means available and milk them for quarters as long as you can. Dopamine derived from playing the game is the payout children get. Casino "games" are fucking lame beyond all comprehension, so casinos have to give adults some incentive to play the push-this-button-and-leave-nothing-to-your-children game.

To me, I don't see the situation being any different than traditional arcade machines (some games had owner-adjustable difficulty settings, and I swear some games outright cheated), and yet the current state of things feels more exploitative. Maybe it's the RNG-dependence and not skill...at least you could earn extended time and rewards if you were good at the game. Everything is gacha-crap these days.

I've always been amused that the Spice channel and the like were 100% scrambled by default. Seems like they could have done way better showing the non-explicit parts of movies/shows as a "free sample," then only scrambling the signal with a quick-activation hotline overlay the second the sexy parts start.
To be fair, I went down the RFK Jr rabbit hole before he went on the All-in podcast - so thought leader? It’s no secret I am a huge fan of him, not so much the rich VC schmucks tho.
Markdown "supports" embedded HTML but that does not mean that your chosen implementation must support it. Personally, I think it's a misfeature and wouldn't want to touch any markdown lib that tried to put too much emphasis on something like validating or sanitizing HTML and Javascript. That's a project with too much scope creep.
Some jewels in that thread, my favourite: How Doctors Die https://billmei.github.io/cdn/dist/how-doctors-die.pdf
> their ad products don't work.

It works for them.

They might need to make it work a tad more for their customers if they had to, but right now they apparently don't.
Yep. The author is making a big leap by falling into the "Angular slow" meme. In my experience it isn't, and it provides ease of use thanks to its bi-directional binding, as oposed to React's unidirectional binding. It is not the champion of speed though, might be even the slower out of the box, but still fast enough.
sunlight, the internet, rainfall, aging, and idiots who think that their immediate surroundings are the entire world
That sounds so valuable. Even for other fields, like the parent commenter said.

I’m in engineering, but I have a growing interest in journalism. I’ve already graduated and here in Norway we don’t really do double degrees or minors anyway.

My main interest will remain engineering, but if I want to scratch that journalism itch some day, I wonder if I should go for a part-time degree, or just try amateur journalism. I think I’d favour the former.
At the risk of sounding silly, the move to systemd and the headaches encountered, such as you describe, are the very reason I left my brand new system which could work well for Linux, including the graphics card, as a single boot windows machine.

It just wasn't worth the headache on top of having to keep windows for work (many programs don't have a Linux option nor do they work properly in wine etc, and vm isn't reasonable for gpu intensive operations like video editing).

IMHO, systemd really messed up the ecosystem and the "Trust" value that Linux in general had built with me.
Can also try:

https://farside.link/https://twitter.com/TimMLatimer/status/...

to use a random (functional) Nitter instance. Helps spread traffic around a little more evenly.
(From 2011, talking about 1997.)

"… built for complete portability. Its compiler produces source code in a platform-independent bytecode. The bytecode is then translated at runtime into native machine code for the given platform. Rating: 9"

Doesn't that sound exactly like Smalltalk?

But instead:

"Because it is not standardized and vendors have created several different de facto standards, Smalltalk has poor portability characteristics, in general."

----

Complexity management (architecture support)

Java does not provide any additional support for managing very large software components, such as subsystems. Rating: 7

However, [Smalltalk] provides no mechanism for managing very large software components, such as subsystems. Rating: 6

So Smalltalk was rated one less when being the same as Java :-)

----

Sometimes the remarks seem aimed at library functionality rather than the languages as such.
There are 10 types of front-end frameworks in this world; those that are htmx, and those that aren't.
If at all possible for such stuff I would use an FPGA and not software.
The older I get the more I realize it's being around people I don't like that I feel draining.
FWIW it's a strange anecdote to me, as I remember the opposite being the case - svelte app being significantly smaller than React.

Svelte's whole shtick is using ASTs from the compiler to stuff at compile time where possible, to reduce bundle size and complexity.
When you imagine these scenarios, spend some time picturing yourself and your family as the climate refugees rather than the benevolently receptive natives.

It's just so very clear that your "we" is safe in your scenario. Certainly it's coming first and hardest for other parts of the world and people poorer than yourself. But there have already been surprises and there will continue to be.
I (and others before and after me) filed complaints that my advisor at UT Austin was falsifying data. University ignored me and gave him tenure. It is commonplace and admin doesn't care as long as it doesn't affect the endowment.
Comparing absolute numbers for income is a bit of a fool's errands, even when you use PPP.

The philosopher John Rawls has a famous thought experiment of choosing a form of social and economic organization without knowing where you personally might end up on whatever heirarchy it generates or contains. Rawls' point was that in such circumstances, most even semi-rational people will choose the one that makes it the most likely that they will not end up in a non-disadvantaged position, which is the fundamental concept behind an egalitarian to oppurtunity and inequality.

Given that, faced with a choice between:

1) a society that carries out substantive income/wealth redistribution so that few people (if anyone) has issues with a broad set of "basic" needs

2) a society that offers limited substantive income/wealth redistribution in the name of "high rewards for high achievement" or something similar

most people in Rawls thought experiment will choose the former.

You only choose (2) when you have reason to believe you will be a high achiever, which in a truly meritocratic society, you cannot know in advance.

So, the US is a society in which median (PPP) income is highest, but low income redistribution ensures that large numbers of people struggle to enjoy the things that US society considers "normal". By contrast, social democratic societies in Europe have lower median (PPP) income, but higher income redistribution means that far fewer people face such struggles.

Rawls would maintain that a rational person with a belief in justice would always pick (1), and that only irrationality or some (unfounded) conviction of one's own certainty of outsize success would lead someone to pick (2).
The whole HTML is likely static, and it has only one <script>, at the very end, that attaches some async update handler to the existing DOM. No wonder it renders instantly.

Modern computers are obnoxiously fast, and so are modern browsers. But modern websites overload them with a sickening amount of processing and network latencies before displaying the content.
11KW is fairly massive though, I'm at about that and I've had to beef up quite a bit of the installation to be able to do this in a responsible way.
PageSpeed Insights tests on a slow internet connection and an underpowered device
At the point where you reach the stage you need to start worrying about stash space in Path of Exile you are going to be many, many hours into the game. And once you purchase the enhanced storage space it is a permanent addition to your account. Personally I don't mind this form of monetization. As far as predatory strategies goes it is on the low end.

I played Genshin Impact earlier this year I was enjoying the game until it sank in just how predatory the whole thing felt - they had timegates baked into the game to encourage you to spend money - there was a limit to how much of the in-game currency you could earn each day (it was also a very low maximum cap). You needed to spend this currency to level up items and characters etc so it placed a deliberate block on how quickly you could progress and of course you could spend money to bypass this block. Not only that but because of how little of the currency you could carry it created a massive FOMO loop where you needed to be logging in everyday to spend your allotted quota ro you would miss out on making progress on your account.
> To overcome the shortcomings of the default change detection paradigm, the Angular team is working on a new approach called Signals. Conceptually, signals are similar to Svelte stores (which we’ll get to later), and fundamentally, they solve the change detection problem the same way as React; the framework is taking control over the application’s state so that changes can be easily monitored and re-renders can be as efficient as possible.

I radically disagree with this statement. Angular Signals (and signals in general, as in SolidJS) could not be more different from React's change detection model, and they are not particularly similar to Svelte stores either.

In React, your component function is a render function, which reruns. React diffs the state object when `setState` is called, determining which part of the DOM to update.

Signals-based solutions are generally much more fine-grained: the framework knows which portion of the DOM was affected by the signal, and does not need to diff the entire state object. This "surgical" approach requires more explicit state management on the part of the developer, through the use of Signals to wrap the application state. However, DOM nodes can be updated without doing a large, expensive diff. (As a corollary, the component function is typically a create function, not a render function.)

The developer experience is quite different as a result.
This looks interesting. I created and maintain a library for INI parsing that got surprisingly popular -- it's tiny, so is good for embedded systems. This API has a very similar feel to mine, including the callback for every key/value pair with a void* userdata. https://github.com/benhoyt/inih
Travis Kalanick #001|Relentless Podcast
Just published the first episode of my new podcast studying relentless founders.

Let me know what you think
It’s bad because government is much more efficient at this using taxation than relying on the benevolence of rich people. Harvard educated far fewer students than U.C. Berkeley and Berkeley has 1/5 the endowment. The budgets are probably more or less in line with each other but that excess endowment amount speaks to a major inefficiency in terms of allocation of resources.
99% of what people do day to day is repetitive/unoriginal so it is not too surprising that this is happening, but I wonder if we are really any closer to an AI that can develop a novel and important scientific theory or mathematical result for instance? When can we expect AI to resolve the quantum gravity issue? If it can't do that, but eventually humans do, what does that say about AI I wonder?
The React code in the article has a bug. If you click "Increment later", then immediately click "Decrement", the counter will go from 0, to -1, then erroneously to 1. To fix this, the code for the "Increment later" button should be `setTimeout(() => setCount(count => count + 1), 1000)`.

I don't believe any of the other frameworks have this specific problem.
"Only" 1 is so important, in the author's opinion, it has a whole other webpage dedicated to it: https://fonts.google.com/knowledge/choosing_type/emotive_con...
You want a furry cooling vest https://www.thedailybeast.com/how-a-cooling-vest-invented-by...
> My youngest son got hooked into a game called Mech Arena. By the time I realized he had spent 200 dollars (my fault 100%). Games like this should be forbidden or made forbidden for people under 18 years old.

I actually think the opposite. Spending $200 as a kid and having nothing to show for it is a lesson you won't forget in a hurry, but not life altering. We should let kids experience the risks and consequences of gambling while they still have a safety net, rather than setting them loose at 18 when it's for real.
This sort of rationale would seem to suggest that you also cannot take examples of bits and pieces of the USA and compare them with the country as a whole.
Theo Baker was interviewed on the Longform Podcast recently:

https://longform.org/player/polk-award-winners-theo-baker
Component isolation.

* State management is merely a sum of few parts: a state artifact (a big object), a means to update that artifact, a place where that artifact is saved, and finally a function to apply state on page reload. Its an isolated system. If anything wishes to update state it just calls a function.

* GUI: A window system (a big function and a bunch of supporting functions for events), content, and events specific to types of content.

* File system: A call to the file system library from a user interaction, a library to recursively walk the file system on the back end, a messaging payload to communicate the requested file system details, a function to populate the file system data into DOM artifacts for user interaction.

And so on.

I prefer to work without frameworks because they execute far more slowly, get in the way of solving real problems (complexity), and they slow me down in writing/testing code. Writing applications isn't about how to write code. It's about organization, flow control, and just connecting the dots between a problem and a solution. Its the difference between repeating minimum literacy and writing an original inspiring novel. Why would I think some giant abstraction would save me time or improve my code?
I'm pretty OK not being open to the possibility that COVID-19 was deliberately developed as a weapon against certain races, in the same way that I'm OK not being open to the possibility that the world is flat.

We don't actually have to give all possible opinions even footing.
It's not meant for people who are planning an acting career. There's only like 10,000 or so people in the entire guild who have an acting career (using SAG-AFTRA's figures), the rest only do it occasionally. And of those, barely 3,000 actually make any real money.

Acting is not really a viable job career in general, except for those few who get lucky.

> This is why unions exist.

I know, they exist to keep their members in jobs. But the world is changing, and their jobs are changing.
And now you're blocking the event loop.
Nope. It's straight out of PL/I, which is a highly underrated compiler language.
I think part of this is the ego component: it's much more fun to make a relatively big contribution to something new than it is to fix a small part of something much larger.
This website is blatant spam