skysight-inc/HackerNews huggingface dataset:
In general when something is actively exploited in the wild there is no embargo allowed.

But there is not much information available, probably due to researchers having their hands full. Or maybe its a private agreement with Apple
You do know you can move to the server without RSC? This misconception is exactly what I'm talking about.
You should check out Pop!_OS

I went from Windows to Pop!_OS, and was surprised how it just worked flawlessly on all my hardware right after installing, the UI is nice too.
It looks like their privacy policy backs this up. It’s also written in plain English, which I adore.

“Searches are anonymous and private to you. Kagi does not log and associate searches with an account.”

https://kagi.com/privacy
Nope, but it did have a huge jelly grip like that. It was a super heavy metal pencil, which gave it a feeling of gravitas.
Wonder how that would have shaken out, had MS bought GH in 2013 instead of 2018.
It’s downright criminal what they did. This should never ever have been allowed, the company should be dissolved. Also Musk should be jailed for his role in all of this, as a founder and the one pushing for results, resulting in all of this. Fucking hell.
Correct. Looking at the Windows side of things, most of the UWP APIs are designed to be async, meaning they will never block the UI thread.

The author is giving the OS a unfair rep here. All three major OS has solutions to this problem. It's more up to application makers to use the tools correctly.
But would a powerful calculator like that be allowed on the SAT?
At least in Swedish, I don't even think there is a generic word for "grandmother", you literally always in every case specify which one it is.
It is infuriating. I love the power of the node ecosystem but the total lack of critical thinking around it drives me bonkers.
I would expect most Harvard-bound high school seniors to be able to breeze through the math section. Geometry was a ninth grade subject for me so I probably would have forgotten some bits if I took this unprepared as a senior, but it wouldn't have taken much studying ro refresh on that. There may be some trick question I'm not noticing, but the Latin section seems extremely simple. Ancient Greek has certainly vanished from HS curriculums, but if Harvard was testing on it two years of Latin and two years of Greek would suffice to pass those sections.

I think overall a Harvard-bound student today would do better on this test than a Harvard student from 1869 would do on the SAT, but I'm not sure if that even means anything.
This resonates. Unfortunately, the CVE database(s) are too noisy to be useful. It could benefit from higher standards and more thorough vetting. (Maybe take some lessons from academia.)

A "security researcher" once filed a CVE for a regular bug in Caddy [0], making claims that were totally provably false. It was assigned 7.5... the same as Heartbleed [1] -- yes, the one that leaked almost all the private encryption keys on the Internet back in 2014. When I appealed to NVD for retraction (or whatever they do in this case), I never heard back, despite several emails / form submissions. It is not well-maintained. It is poorly managed. There is virtually no oversight. NVD is a trainwreck.

More recently I inadvertently discovered a 0-day RCE in acme.sh [2]. (ACME clients are security-sensitive contexts since they typically deal with private keys and download signed credentials.) Anyway, it was assigned a CVSS 3.x score of * 9.8 * [3] -- I imagine that should be like "cyber-nuclear meltdown" territory, but no, this was actually benign as far as we can tell. Probably deserves more like a 4 or 5 or something. So, again: There is virtually no oversight. NVD is a trainwreck.

Anyway, the whole system is broken, and I'm effectively ignoring CVEs now. But if someone just tells me to patch my <whatever>, I'll probably do it, and that's good enough for me.

[0]: https://github.com/caddyserver/caddy/issues/4775

[1]: https://nvd.nist.gov/vuln/detail/cve-2014-0160

[2]: https://matt.life/writing/the-acme-protocol-in-practice-and-...

[3]: https://nvd.nist.gov/vuln/detail/CVE-2023-38198
> Sure, lines of code doesn’t correlate to how much actual code is produced, but I feel like that’s just being pedantic.

It is actually the core of the entire understanding. There is no mapping whatsoever lines of code and instructions executed. A finite program that doesn't halt will result in infinite instructions. Less pedantically a sorting function that is far more efficient will result in the instructions corresponding to individual operations being called thousands of times less.

Basically everything from function calls to loops ruins any mapping between brevity and execution time.
I don't Work at Kagi either, but I can ready their Privacy Policy: https://kagi.com/privacy

> Searches are anonymous and private to you. Kagi does not log and associate searches with an account.

They also double down on this in their FAQ: https://help.kagi.com/kagi/company/faqs.html#i-am-still-worr...

I find their reasoning solid and choose to believe them (for now).
This is the only longer term scalable solution. High cardinality for TSDB's have to be dealt with by dropping. Or you run out of storage, write rate, memory, or network.

It's possible to smooth this loss out (by assuming a normal distribution of lost data) if it's noticed and limited. Though I do not think there's any commercial TSDB that does that automatically.
Interesting, how seeing the “g” logo created a feeling of it is Google for a moment
Fzf – The Command-Line Fuzzy Finder
> Nobody sane would have done that trade otherwise.

But my point is that there were people on the other side more than willing to take that person's money. If "no one sane" would do that trade, why let the other side be able to profit of it until suddenly it wasn't free money? Why shouldn't the other side carry any risk?
Nspawn.org: Repository of SystemD-Based Container Images
I was looking for the code and that "Star us on GitHub" link isn't great. I want to see the code, not star the repo; is that link going to star the repo?

(it doesn't, is just a link to the github repo)
Yes people are. And it’s the least technically literate people with “outdated” machines and bad connections that slug through the web like this. They don’t know what to trust and often fall prey to deceptive tactics.
If it were practical to mirror sci-hub and libgen, that would be one thing, but despite a lot of talk online I have yet to see a practical way to put my hands on such a thing.
The court language of Russia in the 1760s was French.

France was The European Superpower until the aftermath of Napoleon's empire.
It's the other side of Chesterton's Fence: When you do understand why the fence was put there, you can remove it.

Too often people turn Chesterton's Fence into Frost's Fence: "Good fences make good neighbors" and refuse to think beyond that.
That’s what I’ve been doing, and it’s worked nicely.
They just mailed me a new ID with the updated address in VA when I requested, was a lot less of a pain than having government documents that are wrong, imo.
Indeed. You can still find some of my blog articles which I had posted on Hacker News available on archive.org.

- https://web.archive.org/web/20220721100023/https://mullikine...

- https://web.archive.org/web/20220131121625/https://semiosis....

I'm repurposing Pen.el into a software Bible because I believe that more important than software transparency and software freedom is developing software to keep the Bible holy and set-apart for God's purpose. My Dad told me Pen.el sounds a bit like Peniel (which means 'Face of God'), so I have made Genesis 32:30 display on startup. I want to build software to keep the Bible holy.

You can see a preview here:

https://asciinema.org/a/606332

Genesis 32:30
‾‾‾‾‾‾‾‾‾‾‾‾‾
So Jacob named the place Peniel, for he said,
“I have seen God face to face, yet my life has
been preserved.”

(NASB)

This is the moment I got born-again (born of Spirit / born of Truth):

- http://web.archive.org/web/20220402091720/https://mullikine....

As you can see from the date on that blog article, Jesus saved me on 2 April 2022, daylight savings.
2 April also happened to be Palm Sunday in 2023, which is the day that Jesus triumpantly entered Jerusalem.

On 3 May 2022 I confessed (out of body, to the Holy Spirit, the Spirit of Truth):

- My God is the God of Truth (Psalm 31)

- Jesus Christ Saved me from lies

- The Holy Spirit is my comforter

Once again, this was documented here:
- http://web.archive.org/web/20220503030344/https://mullikine....

Jesus is in me forever through the Holy Spirit.
I don't have to go anywhere to find Him. He found me.
He is the one keeping me alive.
To embrace Him is to embrace God Himself.
He is God Almighty.
Without the Holy Spirit we would not be able to obey the LORD.
He is the one who also washes us.
The Holy Spirit is doing the washing.

I've made mistakes as I was barely ready after
being born again to get thrust into spiritual
battle, but I want the remainder of my time on Earth to honour Him.

- John 3:16 - For God so loved the world, that He gave His only begotten Son, that whoever believes in Him shall not perish, but have eternal life.

- Hebrews 4:12 - For the word of God is living and active, and sharper than any two-edged sword, even penetrating as far as the division of soul and spirit, of both joints and marrow, and able to judge the thoughts and intentions of the heart.

- How to make a heart holy: By the blood of Jesus Christ and the Word of God in your heart.

Truth is a person, Jesus Christ, and Jesus Christ is the Word of God Almighty, and is God Almighty.

Jesus can save anyone! I pray that anyone reading this will be blessed by God!
39 minute podcast, no article.
Thinking about the fertility crisis facing most of the world has made me rethink the foundations of a 'good' society. People who have more education, income, intelligence, and secularity are simply not reproducing in anywhere even remotely near sustainable levels. So what's going to happen? These traits will naturally be removed from society, up until the point that this trend reverses.

So we will essentially be defacto empowering many of the views that you may consider undesirable. It really makes one rethink the relevance and place of sustainability. It seems that on any timescale that matters, it must be considered the most fundamentally critical value of any culture. Because in some ways society really is a sort of expanding zero-sum game. When one group declines, another group defacto rises.

It's really annoying that there seems to be little to nothing in the way of a compromise between indulgent excesses driving the death of procreation on one end, and 'trust nothing but the Book' driving successful procreation on the other. There needs be some sort of a cultural medium.
Totally agree that partial hydration helps more than full hydration, but note that if you compared SSR vs RSC the charts they posted wouldn't look so impressive.

Maybe I was too strong worded, but the point stands that without making it really clear they are "skipping a generation" basically, it makes their comparison look extremely favorable, whereas RSC actually has a big overhead: it serializes all props and the entire tree that's not hydrated into an arbitrary serialization format that JS then needs to parse and hydrate. They actually are far from as zero-cost as other partial hydration methods. And if you had compared SSR vs RSC you'd see that the numbers don't actually improve so much.

So is it like 10/10 deceptive? No, but it's also a meme thats going around and not the first article to try and gain attention by conveniently leaving out of the title and most of the article that 80% of the gain they got was just going from client-only to server-rendered, and not actually RSC. I absolutely stand by it being deceptive, if only on a more annoying than actually harmful level. The graphs aren't comparing SSR to RSC, they're comparing the (comparatively much, much worse) client-only to RSC.
Hi, if someone from Kagi is reading this, can we please get a lower tier than $5/month- even specially for India?

We are kinda priced out when keeping the PPP in mind.

Say $1-$2 for 100-200 queries?
Ahh good old Shimano 105s still trucking after ten years and unaffected.
That's hilarious to me -- I took two courses in Complex Analysis, 4 courses in Algebraic Geometry, can prove Riemann-Roch theorem, and also still don't know what modular forms are. They have always been just beyond the horizon, right after the next hill you need to very laboriously climb.
Indeed, Zoroaster has really been dropping the ball in matters regarding sorghum. :-(
My recollection is that the "key" there allowed a teacher to give out multiple tests with questions in different orders, and then you would mark the letter for the test that you were given in that section. So test A would have questions in order 1 2 3 4 5, while B would be 2 5 4 3 1 and C would be 3 4 1 5 2. They could also change the letter of the answer, or really whatever you imagine.

Presumably it reduced people copying answers from their neighbors.
Probably Java/JVM... Never seen something where all kinds of libraries log more.
The underlying issue is the thoughts. Once you have done all you can do many start worrying the future won't unfold as they predicted. Fool yourself into thinking you live in some hell on earth is worse than thinking you might be happy with your current situation.
>Additionally, modern processors all have at minimum 64 bit buses, so exposing anything other than 64 bit scalar types makes no sense.

Yeah but you have a 32 bit data type and a packed 32 bit array, so why not have the same for 16 bit? Not just that, there are also SIMD operations that work better with 16 bit numbers.
Why is it not efficient though? How many times do you need to open an bank account? Once every few years. And I think you need to do it once to establish a relationship, once you have it, opening an additional account would not require another trip. Seems reasonable and secure.
I don't think policing in The Netherlands, Denmark or even Germany is bad.

> My point was that measures like this destroy this 'advantage'.

First, I don't think politicians care about this 'advantage'. Second, policing is necessary, and with changing conditions, the means for policing change. There's always tension between individual freedom and security/safety. But I agree that this is not a great move.
See this: https://news.ycombinator.com/item?id=37608452
As soon as you have multiple relationships to a table relying on different foreign / composite keys, I’m pretty sure this completely breaks down. And the second you add an additional foreign key, you break all queries — so you’ve turned foreign key constraints from an internally managed constraint to a public interface whose addition/removal at any point is a breaking change.

Natural joins however depend on already publicly exposed metadata (column names), and if that changed you’d break queries anyways.
One of his sons publicly decried him, which genuine or not, at least signals that they cave under the expectations of polite society.
They are the only ones with enough guns to do it.
Yaml tags allow for serialization of native types, and has been abused to run malicious code.

I think you can also make circular references in yaml effectively making a zip bomb

This is why you have yaml.safe_load in Python and SafeConstructor in Java's snakeyaml package

The end result is that you should not use yaml to handle untrusted data unless you are also explicitly handling it safely
There is no "grandmother" in Swedish, you just have mormor and farmor. That makes a huge difference with how you have to use the language, you can't say "do you have a grandparent" since there is no word for grandparent, you will have to say "do you have any mom or father parents".
As I struggled about 6 years ago to work the TI graphing calculator that was necessary for my Calculus course, I found that there were alternatives. There are emulators that you can just install and run on Windows. Even crazier, I was sorely tempted to use those websites where you could just enter in a formula, and it would do the derivation or integration totally automatically. I mean, I knew I'd get answers that way, but not learn the process. It was one of the most difficult classes for me. I believe that the IT-related majors later abolished all of their Calculus requirements.
> There’s unfortunately just not enough real estate as thin as they are.

Darn, one piece of marketing BS getting in the way of other marketing BS. Yea, 1080p is plenty high res enough for your work meetings and family calls - but users don't really care about the thin aspect, we care about weight. Getting better key depth on laptops in exchange for a modicum of extra width is a deal I'd take any day of the week... and that'd allow far better cooling engineering and for a few more bulky components.
Kagi is the single best productivity tool I've added to my kit in the past year. It is easily worth the price.
Show HN: My own Redux alternative that is simple to use
So let's say we have a post with 110 upvotes and 40 comments, as well as 30 flags (i.e. 150 post interactions and 30 flagdowns, or a 1:5 ratio of flagdowns to interactions), and another with 27 upvotes, 13 comments and 20 flags (i.e. 40 post interactions with 20 flags, or a 1:2 ratio of flagdowns to interactions).

The second one is clearly more relatively flagged down than interacted with, even though it was flagged less. This could mean that the topic was clearly against the guidelines for glaring issues. On the other hand, the first could very likely be a controversial topic of discussion with clearly redlined sides (like the recent Jacobin mag article on men's health), or (unlikely but possible) that a swarm of company Z employees could have zealously flagged down the post because of its critical nature against company Z.

In an absolute flagging system, the first article would be flagged, by virtue of having the higher number of flags. In a relative flagging system, the second article would be flagged.

I assume that you hold final authority on which flagged posts actually get flagged and which stay. I hope it's not another decision that's been relegated to an algorithm in the background.
Parachute use to prevent death and trauma when jumping from aircraft:RCT(2018)
LATERAL is part of the SQL standard (since 1999 if I'm not mistaken)
selection bias can cause faulty correlations. If you select on the basis of a correlation, you don't get to say you found a correlation.
Socialism has started being adopted as a synonym for "something I don't like and/or don't understand". It would be funny if the word didn't have an existing meaning.
All good things do come to an end. There’s no argument here.

But I think we’re in a different situation when people are willing to pay monthly for search.

There is also exactly 0 risk involved here for a consumer. If this product stops being worth your time and money, just stop using it?

It’s not comparable to say, buying a service or product that you build on top of. No lock-in in that sense.
If a religion be the cause of hatred and disharmony, it would be better for it not to exist

Any religion which is not a cause of love and unity is no religion.
Pat Buchanan.

I see them more left centre because of their support for the liberals. I think they try to stay as centre as possible but move right on class issues.
Nexus user here as well.

Of course you can accesss your stuff on it, just back it up with android debbugger (adb).

If you're annoyed with the search box you can disable it or flash GrapheneOS or LineageOS.

My partner is always having a hard time transferring her iPhone photos to her desktop. Finally gave up and bought iCloud storage. Apple has better integration with their peripherals though. No stupid app to use the heaphones, create other accounts etc. Their Apple Air Pods setup is just integrated in the OS. I have Sonys and absolutely hate their 4.7 star rated app, nags you to create an account and give it access to the camera in order to optimize your sound.
It wasn't really a question about options in general, but these specific options. If they are either basically free money for the seller, or suspicious trading by the buyer, why allow both sides to trade like this?

The seller is basically stealing money from a "sucker", until they suddenly aren't. No value in allowing those kind if bets, then. Where the seller either wins or claim fraud. Very one sided.
If somebody find a bug, please report it or push a PR.
There are 1000 simple web servers. That part was never interesting to anyone interesting themselves.

If it had been "process some records with awk" that too would have been uninteresting even though it said awk.
I found this terrible commercial: https://www.youtube.com/watch?v=FYheRAPnVkA

"Touch tone dialing was a breakthrough. With push buttons, you could dial numbers quickly. [long pause to change the subject] Introducing the FV1000, a revolutionary voice activated telephone from Southwestern Bell Freedom Phone."
Developer Driven Automated Test (DDAT)
I'm old enough to think of that as boring-era Talking Heads, but it's great to know they've been in the same room together doing press after so many decades of shit-talk.
I don't know if you all know this but you don't have to fix CVEs. If the software author won't issue a fix, you are supposed to have an exemption process to accept the non-existent risk.

In my view, the CVE system is too strict, it needs more noise and low severity vulns that are hard to pull off in the real world. It showd the scrutiny the software has gotten and seeing a lot of such vulns shows the software has good and secure design. Contrary to public sentiment, not having CVEs does not mean the software is secure, it most likely means (and you should presume) it hasn't gotten proper scrutiny.

The main issue I have seen is how the scoring can be 9 or 10 without a working exploit.

It's a database to help people make decisions not a compliance checklist. You should not misuse the databse alone to measure the how vulnerable you are, you should also be considering risk and impact as well as how fixable it is. But using it as a beating stick is far too easy.
"Suppress" seems to be a loaded word.

In the context of "denying it exists", yes, it's clear to see that it's not possible to process the negative feelings if not explored.

But the positive interpretation would be to not spin on these thoughts endlessly. It's a trap for all of us and obsessing over hurts doesn't serve us well either.

I have a theory I call "the emotional digestive system": we take in these hurts, taste them, chew on them. Then they digest. If the process is working well, we shit them out.
Why doesn't the IRS use Login.gov
The wii has GameCube hardware and the Wiiu is basically just a faster wii.
Trying to find any guides for anything in Baldur's Gate 3 returns page upon page of AI generated garbage, a sure sign of things to come.
It would appear that "until" is the latecomer, evolving from the word "till". Perhaps the question is really: When did "until" become widely spread as a replacement for "till"?
Apparently not fine. Are you about to cry?
If the government is currently shrugging its shoulders over the dumpster fire that is current LLM safety mechanisms, I'm not sure why they'd suddenly start caring about Open Source communities.

For the same reason that nobody will bother to shut down your pirate radio station if you broadcast on an empty channel at 79.1 MHz, but the wrath of God will fall on you if you broadcast on an empty channel at 89.1 MHz.

In the first case you're just breaking the law. No biggie. In the second case you're competing with powerful corporate interests who paid a lot of money for their own licenses and don't want competition.