skysight-inc/HackerNews huggingface dataset:
The war in Ukraine has majorly affected the prices of natural gas.

Due to the european energy policy attempting to rely as much as possible on renewable energy, gas is absolutely essential for electricity production. It's the only energy source which is reliable and can be turned on and off quickly in situations where the renewable energy sources are not producing energy, due to lack of sun, water or wind.

Furthermore natural gas is an essential ingredient in the production of artificial fertilizer. It's estimated that without artificial fertilizer, global agricultural production will only be able to feed approximately 4 billion people.
It depends on your requirements. It's not about small vs large scale.
An Analog Experiment: Week 1 Report
Moved here two years ago. Spent three months in Zurich (more local, smaller shops were worse) and now live in Baden, Aargau.
Real World Stats for Bootstrapping
I haven't heard of Mull before, but this seems to be a rebuttal to the claim in the title, if you look at the quoted section of the reddit post and click through to the context where the trackers shown being removed are the ones Mull was accused of having.

I think this makes the title on this HN post quite misleading.
I have to ask, what value is this adding business-wise to store so much?
Hahaha. That “concern” is only for you guys in the US. I live in a state which has conflicting interests with the US.
Services are the foundation of every ASP.NET Core application and are used through dependency injection. As an application grows, managing services becomes more complex and time-consuming. The following approach uses .NET Reflection to automatically register and decorate services...
Also a nice peek at the Rwandese community.
Nowhere near that, the largest problem will be when the misinformation will be manufactured on an unprecedented scale by these LLM. In the US alone some 300 000 people died from homemade artisan anti vaxx propaganda, it's very scary to think what will happen when GPT switches that to industrial scale. Doctorow called them "plausible sentence generators" and that's indeed what they are and it being plausible will make it deadly.

https://www.npr.org/2022/05/16/1099290062/how-many-of-americ...

> As the U.S. marks one million people dead from COVID-19, scientists suggest that nearly one third of those deaths could have been prevented if more people had chosen to be vaccinated.
zipline has wings
Yeah, but what is 'infrastructure as code'? For anyone not already in the know, this phrase doesn't mean "managing and provisioning data centers through machine-readable definition files, rather than physical hardware configuration or interactive configuration tools." (quote from Wikipedia), it just means nothing at all.
In almost every large company the incentive structure is such that hiring is a "win" for everyone involved. It's a win for the HR team doing the hiring, often they have quotas. It's a win for the manager getting more headcount under their umbrella, adds perceived value and status which leads to promotions. It's a win all the way up the ladder, because it adds perceived growth (remember how many VCs used to tell startups to hire and spend fast?).

The decision maker at the top is usually too disconnected from the rank and file to see the bloat. And the ones that aren't tend to be ruthless about headcount.
All this tells me is that preventing directory traversals can only be done by checking absolute file paths are within a bounded range, and nothing else.
The core problem here is that web application developers don't understand or use database transactions. I've seen this myself at almost every web shop I've ever worked at - queries / updates would be made to the database in series - "fetch this, then update that, then update this other thing". Your code works fine locally, but when multiple sessions interact with that data all at the same time, who knows what will happen.

I hadn't thought of using these race conditions to trigger security vulnerabilities. That makes all sorts of sense, and I'm going to use this work to justify my persnicketyness in future projects.

It doesn't help that popular ORMs either don't expose transactions at all or they consider transaction handling to be an advanced feature. It looks like mongodb only (finally) added transactions in mongo 4.2.

The general rule for how to avoid this problems isn't locking. Its using a database transaction per HTTP request, or "operation" - however you define that. Transactions are perfect because if any part of the request fails you can rollback the entire transaction. And if you really need to, you can emulate something similar yourself by having a "last modified" nonce on your record (a random number will do). If you ever do a read-write cycle - say from a web frontend - then the read should include reading the nonce, and the write should fail on the server if the nonce has changed since whatever value you previously read. (And you can quietly fix this by simply retrying the entire operation).

From a security point of view, this is a fantastic find. I anticipate a massive amount of code out there is at best buggy, and at worst vulnerable to these sort of attacks.
It's viewed that sexual and emotional dependency is normal. You want people who are forming family groups to need each other emotionally. Or if you don't want it, then you at least accept it's the natural 'cost' of coupling up and expecting people to raise children together.

Financial and physical security can be outsourced, and the wealthier people have always outsourced that to someone outside of their partners.

For example, one could expect the Queen of England didn't really need her husband to protect her, nor give her money. However, she might still naturally like to live with the man more than other people (emotional dependency), and have children with him (sexual dependency).

If you remove sexual/emotional aspects of a relationship then all you're left with is the transactional, and that seems inhumane.
> even of a relatively impoverished department like statistics

It's not a statement you would read in 2023 :)
More aspirational… call it Mars
Looks like a fun project, is it abstracted from the Discord API? How easy would it be to port it to other chat services like Matrix, Telegram, etc?
Rolex earns billions every year. Where does the money go?
I took it as it was written, word by word.
I imagine people felt the same way when cars were popularised, but we‘ll get used to the convenience
Beware a programming language which uses camel-case variables.
Which is better, hard-coded functionality or magic? I don't believe it's badly designed, since every design decision is deliberate; bad design would be accidental.
I guess there are countless applications that would break even with a formal redirect from twitter.com to x.com. There are a lot of third party apps and other connectors that probably would need to be updated. I guess they will still keep the domain for a long time.

The name change does seem to be quite a questionable policy decision though, not only because of the technical difficulties. It is like Coca Cola renaming itself to Flopsi.
Your length-prefixed message frames represent a distinct serialization scheme that provides external framing for embedded messages; it’s a standalone format, and you can use whatever frame header you want without worrying about collision.

The only issue is if you were to ship a “protobuf” library that emits/consumes your (very much not protobuf) framing format.

Also, a 64 bit frame length would only be 8 bytes, not 64 :-)
> Your argument is that murdering people is ok, as long as you're not killing more people this year than you did last year?

No.

The base rate is "The killing of non-activists".

Have you ever actually done any sort of controlled study? Read any sort of clinical trial?

"This medicine cured 10 people" is not acceptable as any indication of that medications efficacy. There's always "the non-medicated group had $X cures per person and the medicated group had $Y cures per person".

IOW, the only time you see a statistic without a baseline is when the person handing you that statistic is trying to mislead you.
Where I live we can get deliveries by starships https://www.starship.xyz/. The vehicles are kind of cute when you see them in action.
The problem isn't HTTP/2. HTTP/1.1 is also vulnerable to these attacks; they're just harder to find, reproduce and ultimately fix.
Can you substantiate that or is this just flaming?
I am contemplating this exact topic for my project at this moment. It would be great if you can briefly explain what, as per your understanding, stream vs queue semantic are. I am studying it and got somewhat confusing discussions on the internet and in person forums.
I didn't mean that production "has to" be able to run on localhost.

I meant that enabling/promoting localhost (or assumed shared, small, inconsequential dev/demo environments)-based development for sorting/trying/demoing out things, sometimes ludicrous ones, is a must when you want to favour innovation in your org.

It goes totally against IT security and silo'd orgs (especially in large ones), so it does not happen without a clear understanding/enablement of the benefits of this from very high up in the chain of management.
Are you aware who these people are?
If it behaves like that it is not a closure.
Folks, if you send raw PB over the wire in a protocol without framing, it _needs_ to be length prefixed somehow. This type of "bug" isn't an unreasonable thing to do, nor uncommon even. If I had a gripe, it's that I hate varints. Lots of wasted cycles to save not that many bytes in the grand scheme of things, especially when you consider other forms of compression layered on top, MTU, etc.
I wonder if we’ll ever replace letterboxes with package chimneys to accommodate aerial delivery
Meteor Lake represent biggest shift Intel SoC architecture in 40 years
Next generation Intel Core Ultra mobile processors codenamed Meteor Lake's disaggregated design combines separate compute, SoC, graphics, and I/O tiles on a single substrate using Foveros advanced 3D packaging technology. Its 3D Performance Hybrid Architecture leverages new low-power E-cores located in the SoC tile. The processor’s CPU, GPU, and new NPU resources can be used to optimally execute an array of different AI workloads.
What are OpenTofu's plans around CDKTF? Will that only work with HashiCorp TF going forward? Or will that be forked as well?

Terraform is a better foundational layer than CloudFormation, but CDK is by far the better level of abstraction, I believe. AWS CDK is decent, but it is of course limited to AWS. CDKTF was one of the more interesting initiatives in this space.
Yes, that part doesn't add up. The time from sending SYN to receiving SYN+ACK would be six milliseconds assuming lightspeed between the source and a destination 500 miles away.

That said: I know the ending, and by now the details about SunOS and sendmail aren't too interesting, but the "This is the chairman of statistics" line always gets me laughing out loud.
This is the way

Also pylsp warns you about this
In relative terms, co2 emissions have gone up >50% since Kyoto; in absolute terms, we have emitted more co2 since Kyoto than in all of history before.

I'd argue your "in a few years" was like 2018 or 2019 or so.
AFAIK Oracle bought it.
Can't wait for my cameras to output jpgxl files natively!

It's probably at least 5 years away though...
The Go team never shoved anything into the language without good reason, and they will not allow the community to shove anything into the language; that's how we got half baked classes in Javascript and half baked functional programming in Java, or the overall trend of languages taking features from other languages because community members say "this language would be better if it had features from this other language" often enough.
I can understand why 3.5% might sound high.

But cross border payments are expensive to facilitate.
And this is the best rate we've been able to figure out currently.

Btw, In the US, Most ATMs are charging 3-5$ extra each time I withdraw cash.
Plus the currency conversion charges.

Our prices are definitely better.
I don't think anyone is puzzled by the Go snippet being wrong.

The bigger problem in Go is the for with range loop:

pointersToV := make([]*val, len(values))
for i, v := range values {
go func() { fmt.Printf("num: %v\n", v) } () //race condition
pointersToV[i] = &v //will contain len(values) copies of a pointer to the last item in values
}

This is the one they are changing.

Edit: it looks like they're actually changing both of these, which is more unexpected to me. I think the C# behavior makes more sense, where only the foreach loop has a new binding of the variable in each iteration, but the normal for loop has a single lifetime.
Is a test?. The app was offered only targeting Spanish children and riding the current wave of moral panic. The more transgressive it seems, the more attractive will be seen by children craving to be targeted as "malote" by their peers. So yep.

Hey boy, try this "free" app and create fake nudes of your friendenemies with the chain of selfies that they drop all the time. Lots of lols guaranteed.

Soon in your own children's room with a 150% probability. This is just a preheating (IMAO).
I've recently gone "cold turkey" off of Reddit and I've noticed a big boost in my general mood. Also, it's always nice to see someone I know on the HN front page. Hi Toto! :waves:
I agree that $ is more common and causes less visual friction, but what I like about \{} is that on my keyboard they are three keys adjacent to each other.
Why NPM's download stats droped 75% this week?
Do you know why all libraries which I checked drop theirs stats?

lib | stats 2023-09-06 TO 2023-09-12 | stats 2023-09-13 TO 2023-09-19
--------------|--------------------------------|-------------------------------
exceljs | 1 032 595 | 222 168
@mui/material | 3 080 353 | 731 930
react | 21 046 051 | 5 391 227
xlsx-renderer | 777 | 186
jszip | 6 682 435 | 1 588 528
typescript | 43 885 983 | 10 822 859

have you got any your own observations?
Yeah, they were actually kind of practical, at least for some products and geographies:

https://en.wikipedia.org/wiki/Pneumatic_tube#Historical_use

I remember seeing a big one of these built at the CCC Congress. It had some bugs but people were able to use it to send capsules all over the convention center. It was a cool steampunk alternate future kind of experience.
I agree that 4 byte overhead in a single item is not a big deal even when the item itself is short. But if you have multiple heterogeneous items, it becomes worthwhile to set an upper bound for the relative ratio of overhead over data. (SQLite, for example, makes extensive use of varints for this reason [1].) I personally think a single byte overhead is worthy for sub-100-byte data, while larger ones should use a fixed size prefix because the overhead is no longer significant.

[1] https://www.sqlite.org/fileformat.html#record_format
It’s absolutely an unreasonable thing to do.

You don’t conflate framing with payload by emitting invalid non-standard framed data from a “protobuf” encoder. They’re separate concerns and need to remain that way.
And soon enough you get what Javascript ended up with, a half-baked implementation of classes and OOP.

Go has structs and functions that work on those structs, good enough for me.
I got similar improvements when porting hashicorp/golang-lru[1]

name old time/op new time/op delta
2Q_Rand-16 1.22µs ±10% 0.52µs ± 8% -57.69% (p=0.000 n=20+19)
2Q_Freq-16 1.03µs ±10% 0.44µs ±12% -57.42% (p=0.000 n=18+20)
ARC_Rand-16 1.51µs ± 9% 0.70µs ±15% -53.63% (p=0.000 n=20+20)
ARC_Freq-16 1.22µs ±12% 0.54µs ± 7% -56.20% (p=0.000 n=20+20)
LRU_Rand-16 401ns ± 9% 215ns ± 6% -46.46% (p=0.000 n=20+20)
LRU_Freq-16 376ns ±13% 194ns ± 7% -48.51% (p=0.000 n=19+20)

[1]: https://github.com/hashicorp/golang-lru/pull/111
This time it's different because we know where it might lead to.
https://www.gnu.org/fun/jokes/c+-.en.html

Enjoy!
That's fine if you are saying both sides were equally "dishonest" but the implication seemed to be from the original post that only Leave lied.
> is taken from a specific religion.

It hasn't been only "discovered" there, definitely not... and even if so, religion or whatever is the truth and noone dare to use it differently ( what OP even not said), bad cultural appropriation or what?
Ask HN: Why use double quotes in find command?
What problems I might encounter if I don't double quote the filename in find command?

Say I want to use this command

`find ~ -name test*`

in a directory. In what kind of presence of files in this directory will conflicting "shell expansion" occur?

My points:
- When There is space in file name. Captain obvious!

I can't think of any other cases. Please explain.
And subjective too, which is convenient.
So... if you're referring to a challenge that did that during one of the DDTEK years of DEFCON-CTF, that was one of mine.

The expectation wasn't to buy time in an adjacent cloud, but to use out of order ip fragmentation or tcp segments, having the servers network stack reassemble the packets such that the read was coherent in one go.

My goal was to teach competitors to model real world challenges of exploitation.
They do show that: https://www.flyzipline.com/technology (scroll down, it first shows the thing that it drops, rather than the drone itself.)

Lots of CGI and notices about "simulated" though. The videos that appear to maybe be real show something that does have wings, but looks too small/light/thin to carry much around.
What about python arrays? Been a while since I poked around python internals but surely lookups in a list isn't worst case O(n), no?
Retrieval Augmented Generation in the Browser
> The dismantling of HashiCorp because they tried to save themselves from Amazon swallowing them is sad.

save themselves from others building a less shit version of terraform cloud.
That assumes that you managed to ask the previous owner to log into iCloud on another phone and "free" the previous one for repairs. I guess you could do that if he's buying a new iPhone from you, but still... it is similar to the Macs that are stuck on the previous owner's enterprise account.
Why would it? It's perfectly correct code, it's just not doing what you'd expect.

It might complain about the race condition, to be fair, but the same issue can be reproduced without goroutines and it would be completely correct code per the semantics.
Afghanistan is open for tourism. What is it like to vacation under the Taliban?
Feels a bit like dot.com
Religions have a history of making up bullshit reasons why suffering and being unhappy is the righteous path. Christianity promises you a happy afterlife for suffering in real life, Hinduism tells you that you're getting karmic credit points for your next life, etc. "facing your suffering" is just another iteration of this.

A more rational take on these teachings is that historically they were a tool of pacifying the masses to accept their abject poverty and squalor without revolting and imploding the social hierarchy. They make no sense in a post-scarcity world.

This is what I mean by religious bullcrap.
Or low-paid worker on a moped, which is very common around the world, though maybe less desirable in America's suburbia.

Also low-paid worker sounds strictly better for employment than autonomous drone.
He tasks me... He tasks me and I shall have him!
[1] Everyone gets asked to implement backdoors in this game. This includes games companies like [2] Riot Games and the popularly recognized cases of apps like [3] TikTok and [4] Snapchat. It's also worth noting, people assume (wrongly) that only China wants access to this data, the Feds are more than happy to strong arm people via [5] NSA letters (or other means as in [3]).

[1] https://www.youtube.com/watch?v=wwRYyWn7BEo

[2] https://www.wsj.com/articles/if-you-play-videogames-china-ma...

[3] https://gizmodo.com/tiktok-cfius-draft-agreement-shows-spyin...

[4] https://www.cnn.com/2019/12/30/politics/army-tiktok-banned/i...

[5] https://www.theguardian.com/world/2014/mar/19/us-tech-giants...
Clang 17 Released
Wny OpenTransform?
Farmer cooperatives for distribution are quite common.

But ye consolidation will make things worse for the farmers.

I don't understand how anyone who not inherit a farm would ever consider fighting the interest rate buying one. The amount of work per dollar is insane compared to other sectors.
We don't actually know it's hard to do because the base rate of fraud is unknown.
When I was in the city, I'd order delivery from the restaurants on our street. The waiter would just walk up, and hand the food to me.

Delivery apps just made people get food from a larger variety of places. Before them, you'd order from the pizzaria that's on the route home, and pick up up before jumping back on the subway. Or you'd eat at the diner on your block.
> I don't think you can represent arbitrary data in a pdf AND have pdf viewers actually render it.

You can have both in parallel, and have the editing software regenerate the rendered form from the source data form when anything changes. It’s not completely uncommon to use PDFs as a data carrier that way.
I know, yet another thing that makes Go unusable for typical corporations.
This is the direction multiple languages are moving in. Go and Rust both have something like this. (In Rust they're called "editions"). I think its inevitable that compilers get larger over time. I hope most of the time they aren't too onerous to maintain - there aren't that many spec breaking changes between versions. But if need be, I could also imagine the compiler eventually deprecating old versions if it becomes too much of an issue.

Arguably C & C++ compilers do the same thing via -std=c99 and similar flags at compile time.

Anyway, nothing about this is special or different with python. I bet the transition to python 3 would have been much smoother if scripts could have opted in (or opted out) of the new syntax without breaking compatibility.
https://www.starship.xyz/
Same, and it feels good. Although I miss engaging in some niche communities from time to time.

Other tips I have: on Android, you can hide certain apps from the app overview and block notifications.

For example, sometimes I want to go on Instagram to look something up (event info for example), but to do so I have to go to settings, list of all apps, find Instagram, click 'open'. This prevents me successfully from mindlessly opening it and getting stuck on the feed for at least half an hour.
Just use a custom template processor
I can imagine a piece of tofu with robotic arms terraforming stuff. Pretty easy.

Or a globe with a tofu on top. Make the tofu evil/insane and create a story it wants to transform every plant in tofu.
Some people struggle with multitasking more than others, but nobody is actually good at it: https://www.apa.org/topics/research/multitasking

That being said, some easy/mindless tasks (such as doodling in this example) can actually improve focus, which might be mistaken for multitasking: https://university-relations.umn.edu/blog/2021/07/16/doodlin...

I can imagine that background noise, like a podcast, might not hinder some people's focus; it may even improve it. However, if they are not focusing closely on both the podcast AND on the other task they are performing, I would not call that multitasking. For example, I listen to the radio when I drive long distances because it stops me from feeling bored or fatigued, but I don't consider it multitasking because the driving itself is mindless in this scenario. As soon as I need to focus more actively on driving, I stop paying attention to the radio.
I didn't mention any of that stuff though.

Facing your suffering is the only way to understand truly how to solve it.

You can keep running from it if you want but it will just catch up to you.