skysight-inc/HackerNews huggingface dataset:
It's 2023, surely this is not yet another bug related to memory unsafety that could be avoided if we'd stop writing critical code that deals with extremely complex untrusted input (media codecs) in memory unsafe languages?

Yep, of course it is: https://github.com/webmproject/libwebp/commit/902bc919033134...

I guess libwebp could be excused as it was started when there were no alternatives, but even for new projects today we're still committing the same mistake[1][2][3].

[1] -- https://code.videolan.org/videolan/dav1d

[2] -- https://github.com/AOMediaCodec/libavif

[3] -- https://github.com/AOMediaCodec/libiamf

Yep. Keep writing these in C; surely nothing will go wrong.
I'm the opposite, I always go for the inbox driver and recommend my clients do the same (I develop print management software).

Having said that the main problems I encountered with 3rd part drivers were the additional "utilities" they include. Often the core driver was fine and in some cases you can extract that from the original software and install it directly from the .inf file.
To ensure that we don’t do the same.
p2p does not necessarily imply the limitation you describe.

I don't know how Quiet uses IPFS but a truly decentralised storage system such as the design of Safe Network can hold data locally (eg using CRDTs) and/or in a decentralised, always accessible p2p network of nodes.

Chunking and redundancy ensures data is always available without the need to centralise.
https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zer...

> Last week, while checking the device of an individual employed by a Washington DC-based civil society organization with international offices, Citizen Lab found an actively exploited zero-click vulnerability being used to deliver NSO Group’s Pegasus mercenary spyware.

And since the initial bug appears to be in Google's webp library other programs are also vulnerable.
If you want to set this standard in a very strict way, then this will lead to progress with AI only being done by the largest corporations who can out spend to gain access to data. Maybe this protects some people's feelings (what is the point?) but at the expense of some hugely skewed control over advanced AI in he hands of a small number of people. Let small companies or independent people have access to data to decentralize the future of AI.
Time dilation! Time is relative. For an outside observer, over 1000 years pass, but aboard the ship, much less time passes. There are calculators for this, e.g. at [0]. If you constantly accelerate at 1g, flip around at the halfway point and accelerate in the opposite direction for the rest of the journey, roughly 13 years would pass from the traveler's perspective.

This site also has a "Newton's universe" mode, which pretends that relativity doesn't exist. Interestingly, in that case you would take over 44 years!

[0]: https://www.omnicalculator.com/physics/space-travel?c=EUR&v=...
I'm not asking why vulnerabilities should be published, but rather why they should be published before an update is in place. Even the page you linked now explained the importance of waiting 30 days after a fix is in place and even allow a 14 days extension in the case of update cycles.

In the case of the Chrome update, the fix is rolling out during the coming "days/weeks" and you originally complained about the vulnerability not being public. Which raised my question.
Divisive politics to the point of violence or even self destruction. Some pests you try to exterminate.
It's not high if you don't know how to measure your blood pressure. Your BP increases a lot if you're moving around, and not properly rested.

When you're at the GP's office, you might have been rushing to get there, you do a minute of small talk and then they strap on a cuff and tell you "oh my, it's very high", this is the reason. And it happens so often it even has a name: https://en.wikipedia.org/wiki/White_coat_hypertension

I have seen dozen of times, because of effort, anxiety, whatever, my BP being 160/110, which drops to 130/85 after 15+ minutes of complete relaxation. Many amateurs (which apparently includes most GPs) simply do not let the BP settle. The medical value of tracking BP is to know its baseline at rest, otherwise it's a meaningless number.
> worse than I thought it would be, bordering on useless.

I'm all ears! Will revise it later today

Not sure about you, but I really do hate Babel, Prettify, tsc, uglify and all that. I think it's awesome that they are integrated in Deno and Bun, and starting to get integrated into Node.

We all know that Node has a massive ecosystem, job opportunities and all that, do I really need to list that as features? I don't think any company would read this and think "Woah, let's ditch node!"

Should I list "better compatibility with existing Node modules" as a feature for Bun?
> In recent weeks, we’ve seen a slew of gadgets embracing the new Qi2 standard, which purports to wirelessly charge devices both faster and more reliably. Accessory makers, big and small, are beginning to sell pads, stands, and other gizmos that wirelessly charge multiple devices at a time

Wait till FCC finds out about them. /s
Fastmail allows to reuse the email when an account is closed. Just before looking this up I tended to be very strongly pro fastmail. Have been using them for years as well. Now I'm not so sure anymore. Because reusing email addresses is quite sketchy :/

> Once an account has been deleted, the username and any addresses on the account can be re-used.

https://www.fastmail.help/hc/en-us/articles/1500000277342-Ca...
That says more about shitty trend of using labels as a config than anything else.

12 factor app did untold damage to the industry convincing smart-but-inexperienced developers that key-value-only systems are somehow good way to configure anything more complex than "this app needs server, password and user"
Study identifies genes, pathways altered during relaxation response (2013)
OTOH, if the two threads on the first core end up priming each other's instruction and data caches, the might as well speed up both tasks, because each will see only a subset of what would be their cache misses, where the one running alone will encounter all its cache misses because no other task primed the caches for them.
It does, see [0]. Fun fact: Signal desktop, which uses Electron under the hood, is running without sandbox on Linux [1][2].

[0] https://github.com/electron/electron/pull/39824

[1] https://github.com/signalapp/Signal-Desktop/issues/5195

[2] https://github.com/signalapp/Signal-Desktop/pull/4381
They use the new magic keyboard and that is what I said in the post. The magic keyboard is still not the same as the old scissors keyboard. Magic Keyboard has a key travel of 1mm, while old scissors has 1.3mm.
No objections to relevancy. I argued against emotive exaggerated statements forming the conclusions of fact-finding.

Another one: "Dangerous algorithms". Can an algorithm be dangerous? Too late to debate, the fact-finding says they are. Any posts that counter the facts should be blocked right?

These horrendous crimes are a human problem, not an algorithm problem. Five years on from the atrocities, no member of the Myanmar security forces has
yet been prosecuted for their crimes, according to amnesty. So not just a human problem, a legal problem too.
It turns out to be not that hard to just compute the language of the regex, if it is finite, and otherwise note that it is infinite:

import Prelude hiding (null)
import Data.Set (Set, toList, fromList, empty, singleton, isSubsetOf, unions, null)

data Regex = Class [Char] -- character class
| Seq [Regex] -- sequence, ABC
| Choice [Regex] -- choice, A|B|C
| Star Regex -- zero or more, A*
deriving (Show)

-- The language of a regex is either finite or infinite.
-- We only care about the finite case.
data Lang = Finite (Set String) | Infinite deriving (Show, Eq)

zero = Finite empty
one = Finite (singleton "")

isEmpty (Finite s) = null s
isEmpty Infinite = False

cat :: Lang -> Lang -> Lang
cat x y | isEmpty x || isEmpty y = zero
cat (Finite s) (Finite t) = Finite $ fromList [x ++ y | x <- toList s, y <- toList t]
cat _ _ = Infinite

subsingleton :: Lang -> Bool
subsingleton Infinite = False
subsingleton (Finite s) = isSubsetOf s (fromList [""])

eval :: Regex -> Lang
eval (Class chars) = Finite $ fromList [[c] | c <- chars]
eval (Seq rs) = foldr cat one $ map eval rs
eval (Choice rs) | any (== Infinite) langs = Infinite
| otherwise = Finite $ unions [s | Finite s <- langs]
where langs = map eval rs
eval (Star r) | subsingleton (eval r) = one
| otherwise = Infinite
Battery packs have a lot of innovation in them, its not just a load of batteries lashed together. There's monitoring systems, cooling, balancing. And squeezing more efficiency out of them is very important. So standardisation of EV battery packs is about as likely as having standardised swappable petrol engines.
Well if you never build anything that does gigabits of traffic yeah, doesn't matter how slow it is
This is a cool project. I'm learning French and am always on the lookout for sources of books -- and especially audio -- at the right level.

To others questioning the need for rewriting: language changes over the course of a century! It's no problem for me, as a native English speaker, to read English from around the turn of the 20th Century. However, it increases the degree of difficulty for me to try to read French or Spanish from the same time period. Also, to get through an old book I have to learn a bunch of useless words that have fallen into disuse; it's much more effective for me to learn the version of the language that is relevant in today's world.

It looks like the French TTS isn't working properly yet? At least on the couple of titles I tried. The selection of titles you have listed looks great.
FDA approves and authorizes updated COVID boosters for everyone 6 months and up
Enterprise Java Beans, apparently now called Jakarta Enterprise Beans
I worried about this before setting up email on my domain, but in the end, it hasn't been a problem yet. And if it ever is, I can just use my gmail account for that thing only. I've already got it forwarding to my new email anyhow, so it doesn't make much difference in the long run.

I've been slowly converting accounts over to the new email for about a year now I think.
If you just need that you don't really need reverse proxy in the first place...
For corporate use, only choose an email provider that has real people at a manned help desk. Google's abysmally opaque support is much too risky for serious business operations.

It is a right blighter if you lose your personal YouTube account with all its carefully curated meme playlists, but at least you aren't missing out on vital business communications.
What an oddly written article. ChatGPT? SEO bot? High-schooler?

These sentences don't seem to have a very strong connection with each other:

> Getting black currants banned has been deemed minimally effective for disease prevention. Therefore, some states start reversing the federal ban on this berry. However, Europe still remains the producer of 99% of the world’s black currants stock.

"It is not so bad"?

> Today, these plants are successfully grown in New York, Connecticut, Oregon, and Vermont. Yet, the majority of Americans can only enjoy processed or dried berries. It’s not so bad considering the benefits of eating dry fruits.
Apple’s Two-Pronged Annual iPhone Strategy
Downvoted by the temporarily embarrassed, soon-to-be-multi-millionaire developers on Hacker News.
How many people would you need for such an elaborate, multi-step heist? Especially wondering because, given your reputation, I’m assuming you would need a to be more of a puppet master than an active participant.
It should be like that but in practice sometimes other team just too busy to implement required feature. I can say my PM that we have to wait for a month but in reality I will have to implement it myself.
There's very little free lithium in lithium-ion batteries - it's usually largely bound (via intercalation) to either the kathode or the anode.

The stuff that starts the fire is the electrolyte - ethylene carbonate.
Services like Fastmail provide clear step-by-step instructions on what you need to configure. Typically you need to add some DNS records (MX, SPF, DMARC, DKIM), and that's it. It sounds way worse than it is and it takes 10 minutes tops if you've never done it before, less if you know what you're doing.

Getting out of blacklists is you email provider's problem, not yours. I've never heard of any domain owner who is not hosting their own server run into this. I can see it happening if you use the same domain for your servers, one of them gets compromised and starts sending lots of spam. So you should probably avoid using your personal domains for your servers, and definitely skip crappy TLDs like .xyz, and you'll be fine:

https://www.spamhaus.org/statistics/tlds/
David Agans' book "Debugging" has a chapter called "Quit Thinking and Look". It is quite old by IT standards, but I cannot recommend it enough.
The thing I am missing the most is some kind of HTTP-01 by proxy,
like https://github.com/acmesh-official/acme.sh/wiki/Stateless-Mo...

If DNS-01 is not an option or to complicated, this saves you from exposing a host to the internet for no good reason.
Ask HN: What phone model do you currently own?
The other day, a video [0] from YouTuber SuperSaf popped up into my YT feed that reveals what phones popular YouTubers are actually using, which triggered my curiosity to see what is it like to be in the HN community.

So, what phone model do you currently use and why? What was your previous model? If you plan to upgrade, what should be your next phone?

For me, I was using an S20+ then I switched to an iPhone XS Max (just to try the Apple experience). My next phone is a blur, moving target but probably will try to experience either the Z Fold 5 or wait for the Pixel 8 Pro.

______________

0. https://youtu.be/skO3U2sAOTU?si=OIASJ-sZU4minQhV
Diagonal Difference is easy-level Python problem that requires basic knowledge of Array. In this post, we will provide a Python solution for Diagonal Difference.

Problem Statement and Explanation
Given a square matrix, calculate the absolute difference between the sums of its diagonals. Suppose, we have the following matrix arr:

https://codeperfectplus.com/diagonal-difference-problem-solv...
Likewise with "IMHO".

https://www.eng-tips.com/viewthread.cfm?qid=90305
https://archive.is/OJjVc
> VB(.NET) is terrible for large or complex systems.

C# and VB.net are semantically 100% identical. Only difference is surface syntax, like begin end instead of curly braces. It scales exactly as well as C#.
Bro. You are not addressing the dichotomy. Why is it in some instances you need stats and huge sample sizes and in other instances you need only one witness to convict someone for murder?

All your doing is regurgitating the same bs everyone knows about the nature of science, statistics and sample sizes that are all blindingly obvious to anyone.

I am presenting to you a valid dilemma that your big brain is skipping over because of your blind loyalty to science. You do not need a scientific study to tell you the sky is blue. A court doesn't need a thousand witnesses to convict a murder. Have you ever wondered why?

Do you need me to give you 1000 IQ questions to verify that you are an intelligent being? Do you need to give your mother or father those same tests to verify their intelligence? You have common sense right? You can talk to your mom and basically bypass science to verify her intelligence right?

Why the hell all of a sudden do you need a rigorous scientific study to verify the intellectual abilities of chatGPT? Your so smart that you can know your mother is intelligent without assessing her with 5000 iq questions but for chatGPT you suddenly need the raw power of scientific rigor to come to any conclusion? You can't just talk to it yourself and make your own conclusion?

Bro. You're irrational. chatGPT beat 17 doctors in seconds and it doesn't even phase you. But your mom who has likely never taken an IQ test doesn't need one test to verify her intelligence.

Go above the level of scientific rigor. Einstein didn't need sample sizes and statistics to speculate about black holes and general relativity. The verification came later, but the math and nature of reality was formulated and judged correct through common sense I described above. This was way before anything Einstein proposed was verified by "stats".

Do you not have the ability to bypass statistical data and formulate conclusions without it? Looks like no.
Review decision with image:

https://fingfx.thomsonreuters.com/gfx/legaldocs/byprrqkqxpe/...
Appeals Court Rules White House Overstepped First Amendment on Social Media
Well, apart from the labels, I'm also happy I got rid of that middleware stuff that I still don't fully understand.

I mean, I want https, and I want it in front of my standard docker container that listens on some random port. Caddy requires me to enter only exactly what I need, no more (container name and port and required function (rev-proxy), 2 lines, boom).
Pines and black currants both grow here in (Northern) Europe. How come the fungus isn't a problem here?
Racist might be wrong but it's definitely now used for people who are intolerant of other people, usually for identity-politics reasons.

These days you can be bigoted against black or Muslim or gay or transgender people, but not really about Greek statuary or rap music or electric cars or PHP, no matter how strong your opinions on those.
https://archive.is/soCP9
It's funny isn't it. Win32 is the moat that keeps people on Windows but at the same time it's a huge anchor that they have to drag behind them.
The mass isn't directly correlated to the gravity (~5-6G assuming rocky planet density in this case) and the amount of atmosphere also isn't guaranteed. It might have an atmosphere that merely doesn't extend as far into space. Basically an anti-Venus since it has similar mass to earth but a much thicker atmosphere.
My heart rate doesn't increase with AMPH. It makes me calmer, which is literally why we're prescribed them.
I actively use Prolog for data analysis. There is an initial phase in which you have to force yourself to do everything you can in Prolog mostly to understand how to convert a question into a symbolic problem because Prolog has terrible support for scientific computing and string manipulation. Thereafter Prolog solutions are often more elegant than the next best thing.

It is also a logical paradigm and it is worth spending the time understanding how [proof by negation] + [unification] = [logical programming]. For me it is without doubt the most mind expanding programming language I've ever learned.
>And while 10% of Israelis saying he's a hero is 10% too many

10% is definitely enough to presume that anybody who throws out an accusation of anti-semitism in defense of Israel is racist by default.

10% is enough to presume that the illegalization of Boycott, Divestment and Sanctions in America is an explicitly pro-racist law.

It is possible to make an accusation of anti-semitism that isn't motivated by racism. It's just much rarer than it should be.
> Alright go ahead, downvote me to negative-billion. I can handle it.

I tried, but HN seems to implement some kind of rate limiting. D'Oh
We all know that’s The Price Of Freedom. As they say, “give me exploitable trivial memory safety bugs or give me authoritarian dystopia” (https://news.ycombinator.com/item?id=27638940).
1. 4G/5G share 90% of same spectrum in all regions. Region locking and specific spectrum usage was only a thing in 2G/3G era.

2. 5G will last for another 10-15 years as it is not even fully rolled out. That is long enough for a Laptop to get supported. The extreme speed transition of 3G-4G to 5G was because of Smartphone revolution. We are ( arguably ) at peak Smartphone already.
Even sending over a probe at 30% the speed of light would take 400 years, plus another 120 to hear back from it. No matter how interesting, for our human society it would be really hard to raise significant funds for a project that will only pay off in over 500 years, if at all. If they have similar lifespans, such a project might be similarly hard to get off the ground for their society.

That leaves radio communication, but the latest intel they have on us left earth around 1900. At that point we wouldn't have been able to receive anything from them. It's probably questionable if we would have picked something up had they sent a radio signal our way a week ago. Right now SETI might have a radio antenna pointed their way, but that won't last indefinitely, and these events are a bit hard to time from 120 lightyears away.
Sample size: 2

We're at 100% here people.

Seriously though, I come across people now and then who "don't like sunshine" and i feel like an explorer who's just encountered a strange new civilization; this attitude is completely alien to me and my instinct is that there's something wrong with them. I used to wonder if I was just imagining things and over-selling it because I live in a pretty rainy place (Vancouver), but then I worked in California for a couple of years, and nope, it really makes a huge difference to my energy levels and general outlook. Going back to looking for jobs in sunny places again soon.
Please don't dissect an aphorism by a standup comedian like it was a Ph.D. thesis.
And if you think about it... 100-200 years of progress can be pretty significant. Just look at human civilization.
Didn't burn the everything around with it

weak bait.
Would you be open to the nationalization of email services? Curious if your very HN-friendly sentiment also implies agreement with this very HN-unfriendly extension.
Unfortunately I cant use any Tablet and only a Phone is allowed.
I'll tell you, PWAs were my "gateway drug". Once I realized that practically every app worth using was installable as PWA, I began to question why I would even need Windows anymore as an OS layer.

Since PWAs run in the browser of choice, they are definitely native, especially if you choose Edge, which is approaching dominance on the platform.

PWAs grant automatic cross-platform ability. I can install and run PWA in Windows, Android, ChromeOS, you name it.

Also it is super minimum hassle. Windows never bothers me about the Store, or signing, or updating any PWA; it's simply transparent.
Well, english is not my first language. What I meant probably got lost in translation :)
https://archive.is/h407X
I'm not too sure I agree that the spec itself is buggy, certainly the implementations vary wildly from Sony almost doing their own thing to Chinese off the shelf copy pasting whatever makes a noise.

That said I have worked extensively with Bluetooth within Ericsson and while there is a learning curve, I never found the spec to be lacking.

Latest example :
https://www.bluetooth.org/DocMan/handlers/DownloadDoc.ashx?d...
In the 00’s there was a lot of hype around “smart” textiles being the next big thing. A lot of sports companies were trying to make something happen with it but aside from some niche projects, seems to have fizzled.

In the 90’s, mini discs were hot for a year and then just vanished.
You can do this with most smartphones (e.g. by installing VLC). Folks just stopped buying dedicated devices in any sustainable amounts outside of audiophile markets.
Definitely reads like AI. Short declarative statements. No coherent narrative.

(I see what I did there (o;)
I was specifically told, by my doctor, to take my BP first thing I wake up and have sat down for a while.

My Withings BPM Connect takes 3 measurements automatically at intervals and takes the average of those + saves them to Apple Health.

Before I was taking my BP when I was feeling "weird" and of course it was through the roof, by taking it in the mornings my BP is still a bit high, but not Hypertension Level 2 high.
> Some varieties of European and Asian pines have this innate resistance because they evolved alongside the fungus. However, American trees met this threat too late to develop a workable defense.