skysight-inc/HackerNews huggingface dataset:
I created a tool [1] to easily convert GitHub gists into bookmarklets and share them. Includes versioning, multi-file gists, etc. Some of my favourite examples hide images until mouseover [2] and play a procedural Brian Eno tune [3].

[1] https://bookmarkl.ink/

[2] https://bookmarkl.ink/ashtonmeuser/21427841853c9f2292c8f7d7a...

[3] https://bookmarkl.ink/ashtonmeuser/5e696524d986ba6c25af0df89...
Since Go came up earlier, likely it is being contrasted with Go in this case, where Go has a fast and robust crypto library in the standard library.

And yeah, safety is clearly a continuum: hardware is not perfect, operating systems are not perfect, etc. However, being defeatist about this point is not really the way to go. We should aim to replace less safe things, especially in safety-critical parts of applications like the cryptographic operations and TLS implementations, with safer things. That's definitely why in the Rust ecosystem there's been a huge emphasis on pushing rustls forward; it's a shame to put all of the work into making safe and robust software, only to have a giant OpenSSL or BoringSSL-shaped liability sitting in the same address space as your program. Battle testing alone has proven insufficient over and over and over and over, whereas statically verifying the absence of (at least some kinds of) flaws remains very promising still.

In practice I'm sure it's obvious that to make any application secure and/or robust it's going to take multiple layers of defense where ideally there is no single point of failure. But to make progress, you have to... you know, make progress. Programming languages, toolchains, and standard libraries can't stop your operating system from being insecure, but they do have the ability to not put less safe/verified things into your address space.

Maybe some day, all of these safe Go/Rust/Swift programs will have much more robust hardware and operating systems to run in that are, themselves, "verified" to have certain security assurances. For that to really be all that meaningful, though, the programs themselves have to actually be "safe".

And hopefully, even when standard library code can't be proven to be "safe" using the language's normal mechanisms, we can still prove it using heavier duty tools. But, it certainly isn't happening over night...
Would require a structure light enough to prevent implosion.
This does not exist.
I would prefer something more like what htmx has in hx-trigger:

https://htmx.org/attributes/hx-trigger/

w/ an explicit and declarative syntax, but that attribute is fairly involved

this was a brief exercise in thinking about the minimal changes necessary to HTML to support something like htmx, and unfortunately there isn't any attribute that maps to hx-trigger in the same way there is for other htmx attributes, so I resorted to the on* attributes + generalizing the submit() function on forms.
> “if regulations are created based on ideals, it is regular users who are the ones who suffer.”

As opposed to the bystanders who are suffering from every ICE vehicle sold? Make better EVs.
This question has been asked a few times, so lots of interesting comments to read!

- Ask HN: What do you wish you had known before you turned 40?
https://news.ycombinator.com/item?id=9092246

- Ask HN: What do you wish you had done/known in your 30s?
https://news.ycombinator.com/item?id=30782994

- Ask HN: What's your best advice for someone turning 30 today?
https://news.ycombinator.com/item?id=26068320

- Ask HN: How would you wish you had invested your money if you were 30 again?
https://news.ycombinator.com/item?id=13179385

- Ask HN: What's Your Biggest Regret?
https://news.ycombinator.com/item?id=33118584

[Shameless plug: I found all these on my llm-embedding based search engine I launched today: https://payperrun.com/%3E/search?displayParams={%22q%22:%22A...

It's much better than HN's default search: https://hn.algolia.com/?q=Ask+HN%3A+What+do+you+regret+doing... ]
can you go a full 8 hour work day without touching the mouse?

edit: can you easily pipe the entire file through grep or awk, or insert the contents of the output of curl or jq?
Towards understanding sycophancy in language models
Force narrow page - this one just shrinks body width, useful for handling pages which simultaneously don't allow zooming and also want to be 100% width on a giant monitor

javascript:(function(){var newSS, styles='body { width: 25em !important; overflow: wrap; margin-left: auto; margin-right: auto; }'; if(document.createStyleSheet) { document.createStyleSheet("javascript:'"+styles+"'"); } else { newSS=document.createElement('link'); newSS.rel='stylesheet'; newSS.href='data:text/css,'+escape(styles); document.getElementsByTagName("head")[0].appendChild(newSS); } })();

Kill sticky:

javascript:(function()%7B(function%20()%20%7Bvar%20i%2C%20elements%20%3D%20document.querySelectorAll('body%20*')%3Bfor%20(i%20%3D%200%3B%20i%20%3C%20elements.length%3B%20i%2B%2B)%20%7Bif%20(getComputedStyle(elements%5Bi%5D).position%20%3D%3D%3D%20'fixed')%20%7Belements%5Bi%5D.parentNode.removeChild(elements%5Bi%5D)%3B%7D%7D%7D)()%7D)()
Coastal is still better from the perspective of being able to safely abort. The further inland you go the more risk you run of failed launches resulting in big pieces of the craft coming down over populated areas.
Apple Releases iOS 17.1 with AirDrop over Internet
I guess certain cities like NYC/Philadelphia might also push effective income tax to over 30% for lower incomes, but for the purposes of comparing income tax rates and capital gains tax rates in the US, it does not make sense to include the social security component of FICA or medical costs.

Edit: I am barely getting 30% in NYC, even including FICA (zip code 10118)

https://smartasset.com/taxes/income-taxes

$90k as single is $27,171, or 30.19%.

$90k as married filer shows $20,758, which is 23.06% (incl FICA).

But, again, I would not include all of the social security portion of FICA (6.2%), since presumably you will be getting some of that back.
Junji Ito’s The Enigma of Amigara Fault comes to mind.
I lived in Louisville when this happened, and met the guy who came in second place for Louisville portion of Google Fiber.

1. Yes, the microtrench became a disaster, because the material they used to cover the drench stuck to people's tires when it was hot outside and it pulled up. Paving over it would have solved the problem

2. Google chose to hire a lawyer to run the project. The second place guy had installed fiber his entire life, had personal relationships with the people that owned the right of ways to connection poles (ISP). The ISP folks did not like the lawyer and did not work with him and that's why it really died. (according to mr. second place)
unironically, having three browser engines is three times the attack surface, what's the problem with that claim?

uarch "multiculture" hasn't saved us from architectural attacks, actually it probably increases the total number of vulnerabilities, and browser multiculture won't magically make them all perfectly secure and perfectly implemented either. if each browser is only 99% secure now you have 0.99^3 total security, you have ~tripled your odds of a vulnerability existing in at least one of your apps at a given time.

there are other arguments in favor of sideloading, but, I don't really see how multiple browsers is a security improvement, actually it seems unironically much worse on that front, since now you are depending on three teams of engineers (two of which are not even at your company) to execute perfectly and never have a vulnerability, in what is one of the highest-privilege applications (essentially the canonical "full control" app). People want their browser to have access to location info (thus bluetooth/wifi settings), camera, camera roll (thus long-term location history), microphone, everything. The fewer applications that exist like that the better you are.

I can't fathom anyone saying that they should, for example, run three different high-privilege pieces of software in their production systems, when one would do fine - f.ex you wouldn't run nginx, apache, and keycloak all mixed into your environments. That would obviously inflate the risk of being subject to at least one attack. Why is the browser different?
And how much would it affect agriculture? Do the plants thrive if you do this every year?
click those skip ads buttons on you tube

javascript:eval(atob('c2V0SW50ZXJ2YWwoZnVuY3Rpb24gKCkgewogICAgdmFyIGVsZW0gPSBkb2N1bWVudC5nZXRFbGVtZW50c0J5Q2xhc3NOYW1lKCd5dHAtYWQtc2tpcC1idXR0b24geXRwLWJ1dHRvbicpWzBdOwogICAgaWYgKGVsZW0pIHsKICAgICAgICBlbGVtLmNsaWNrKCk7CiAgICB9Cn0sIDEwMDApOw=='))
Note that many of the artifacts are interactive: buttons and links are clickable (effectful within the museum, does not leave page), text is scrollable, videos play, etc

Fantastic work.
I can't find the article where I read it, but an interesting thing about the environment is that it's connected and we need it to stay alive.
I am familiar with the system and many serious problems with it. Some people who want to fix things about government go work there. You are complaining that they think of you as an adversary, but it's clear that you are thinking of government employees as adversaries, who have been frustrating you for years, and at least sometimes you're clearly being a dick about it.
Mass starvation and malnutrition was extremely common all around the world before the industrial revolution.
Porting Linux Pledge to Go
Well, the drones to kill off the huddled masses that attack as mass starvation and chaos sets in would be a bit expensive. Plus it kind of kills the party mood.
It is, but consider the future. We need net negative emissions to stabilize the climate because we didn't decarbonize early/fast enough to achieve this goal with emissions cuts alone. The vast majority of climate progress must come from energy system decarbonization, but active carbon dioxide removal approaches like this one will be necessary to draw down the excess atmospheric CO2 accumulated so far.

"IPCC Report: Carbon Removal is Now Required to Meet Climate Mitigation Targets"

https://www.carbon-direct.com/insights/ipcc-report-carbon-re...

Also see this IPCC fact sheet about carbon dioxide removal, which includes enhanced rock weathering (the technique under discussion here):

https://www.ipcc.ch/report/ar6/wg3/downloads/outreach/IPCC_A...
I don't think it's that simple. There are too many variables. It's probably different for each person and depends on a host of health-related things. It's probably also different for the same person at different stages of life.

Wouldn't it be nice if there was a simple number or rule or formula? We're not that lucky. You have to pay attention, preferably with the help of sensible people who know you and have an interest in your continued well being. And yeah, that can be the luck of the draw, too.
I'm a bit confused by the comment because it would seem that these are all relatively common tasks. The first and third being identical. Good example is in vision you might want to semantically change the photo like adding a pair of glasses or doing one of those things you see on the Google commercials. That's done in a latent space

I think this is clearest in the Normalizing Flow cases because you're just turning your space into a Gaussian (diffusion does this too, but through approximation methods and isn't invertible, though it is reversible). You project the image/sentence/data you want to manipulate, manipulate within gaussian space, then return back to target space.

Or maybe my confusion is shared confusion because embedding is an overloaded word that means a lot of things? Maybe you're just thinking of the first block that converts discrete integer tokens into continuous floats? But we learn those embeddings so even though it becomes like a lookup table it's still a neural process. People do things like SVMs on this space alone. But I think it is like latent space, which is only a bit more abstract. At least embeddings need to be injective, well... mathematically...
What Is Data: A Brief Guide
In the context of that sentence, the Hindenburg is mentioned as is/was the largest aircraft ever built at 245 m (804 ft) length. Pathfinder 1 is about half that at about 123 m.

It is surprising how 90 some years later we aren't even close to matching the size, though clearly the technology has advanced greatly. Even with the new tech and power efficiency, the speed is still slower (60 knots vs 67 for the Hindenburg).
Show HN: Incident Response on Steroids
Hi HN!

We're the founders of Hatchet. Hatchet is your copilot for incident responses, we're able to inject context as soon as on-call engineers get a page, which translates to a reduction in the time spent getting up to speed on the issue itself.

Hatchet is able to aggregate context from your Pagerduty, Sentry, DataDog, OpsGenie, CloudWatch, Confluence, Slack and Google Drive to deliver a holistic view of your systems immediately when you get paged.

We have 5 more spots left in our beta and we would love to chat with folks who have hectic on-calls. You can book a demo with us via the link in our page: gethatchet.com or by sending us an email: andre@gethatchet.com!

Cheers,

Andre
Because increasing the attack surface would somehow increase the security?
> the people who think Star Trek is some post-racial utopia -- even though the bad guys are still mostly dark-skinned

That’s... not true of the franchise as a whole, or even any of the individual series.

So, this is hardly creating confidence in your reading of the other works under discussion.
>The most meaningful application for airships is to carry blades, nacelles, and towers for wind turbines off-shore

It seems like a boat would be better to bring cargo to offshore applications. Especially factoring in weather.
> consider keeping the first variable name which comes to your head. It is simple, straightforward.

That strongly differs from person to person, I am the kind of guy who immediately comes up with names like glass-hardness-at-temperature-in-centigrade-before-tempering before refactoring it to untempered-glass-hardness-at-centigrade.

> Instead watch or read about people building things.

Definitely watch/read those too, but there's nothing wrong with watching e.g. the MIT OpenCourseWare Structure and Interpretation of Computer Programs (SICP) videos.
It's not just a lockfile, though the 'Nix flakes' feature does have a `flake.lock` file. It locks the revision of your 'inputs', i.e., repositories containing packages. The most common and important input is `nixpkgs`, which is kind of like the default package sources on a Linux system. It has glibc, bash, coreutils, etc. but also an extremely large number of other programs that have been packaged. And in a particular revision of nixpkgs, any package has exactly one version. So, yes, the versions of all packages can be locked.

As for the granularity: that really depends on how you want to go about it. If you manage a NixOS system (a Linux distribution built on Nix), you can control the versions on your system. But any project could have its own environment entirely. In fact, in any project you can have multiple versions of nixpkgs if you really wanted to.
> While the founders, who started months earlier, get an order of magnitude more equity, and under better terms

What are these better terms you speak of? First time I hear about this.

Also first hires typically get restricted stocks (which are much better than isos bc you don’t have to exercise and they qualify for qsbs ;))
I don't understand why it would have been awkward. Whatever the flaws in the institution as a whole I'm sure she doesn't blame you for them personally. You have no reason to feel self-conscious about satire.
Locals probably know the date.
Thank you. Do you know if lockdown mode / disabling JIT would mitigate the issue?
They also added a search box to my task bar after the last Windows update (albeit with a "do you want to keep it?" prompt). Guess what browser the search results open in? Hint: it's not my default browser
How Michael Lewis Got Duped by Sam Bankman-Fried
Sentences are the things you get after being prosecuted. Did you change the topic?
I was just having a discussion with a friend yesterday that touches on this.

If you could go back in time, visit your younger self, and give 100% accurate advice, would your younger self take heed of that advice?

And, if your younger self did, would that result in a better life than you had? In other words, if we could avoid the large mistakes we make on our path, would that improve our lives in the longer term, or is making those mistakes a critical part of shaping us so we can have a better life in the longer term?

My more direct answer to the OP question: the only things I really regret are those where I've unduly harmed others.
Literally any framework that allows attributes/props, and child components has various ways this could be done. Vue, React, Svelte, Angular, all of them.

There are many issues with Web Components, but I don't think this is one of them. The real pain doesn't start until you want to do something like:

<form>
<my-input></my-input>
<my-button></my-button>
</form>

and have everything behave as expected.
I mostly run NixOS but do work on macOS occasionally and being to bring all my familiar home environment, configuration, tools and a multitude of project specific development shells is a huge time saver.
It's not like they could put out a public notice for all of the fish and wildlife to attend a planning & zoning meeting for their comment on the situation. Determining the effect of human endeavors on said fish & wildlife is a little more complicated that going door to door and informing them of their plans.
That is even more baffling then that they’d fail to see a phone with tape on it poses the same risks as the laptops they ban
Yeh there's no way humans are watching those, almost technically so. Whoever is buying the ad time is being scammed hard or money laundering somehow.
*Until fusion energy
setInterval(function () {
var elem = document.getElementsByClassName('ytp-ad-skip-button ytp-button')[0];
if (elem) {
elem.click();
}
}, 1000);
The auto manufacturers don't want to sell 'affordable' EVs, when they can use their limited supply of batteries for higher-margin luxury vehicles instead. The affordable EV is an e-bike, as shown by sales numbers many times higher than that of electric automobiles.
Things I'm missing from this FAQ:

- Is this a Webkit vulnerability or a Safari vulnerability?

- Does enabling Lockdown mode mitigate this vulnerability, seeing as mobile Safari doesn't expose these dev settings?

- What's the timeline on the disclosure to Apple?

Edit: they updated the page to answer the last question:

When did you notify Apple?

We disclosed our results to Apple on September 12, 2022 (408 days before public release).
Agree.

> Akita makes monitoring and observing system behavior accessible for every developer. Quickly discover all your endpoints, see which are slowest, and learn which have errors

Translation: Install a Docker extension that intercepts and inspects your network requests to infer the shape of your API.

I feel like when you're targeting developers, you should quickly explain what it is you actually do.
Could this be the real reason women are paid less than men?
Don't want to "punish" anybody. Those bailouts are all over now. I'm just tired of coming out on the losing end and would like to make something from this crisis, versus just paying for it.
Mercenaries are a liability in that scenario
Waves and waves of nostalgia <3 thanks, this is wonderful
This. If downtime is that big of an issue, you should be on Cloudflare's business/enterprise plan which allows CNAME DNS, have redundant DNS providers with 30s TTLs that flip over to another provider. Better yet if you can 50/50 the traffic and 100/0 it when something goes bad. Downside is cost and DNSSEC has an issue with multiple keys. I think there was an RFC on that though I'm not sure it's well supported yet.
Globally, probably not. In the US? Yes, I think it is common enough to be the major cause.
I use

- Alfred
- Cheatsheet
- Bartender
- 1Password
- iTerm2
- Moom (you could also check Rectangle)
- Some IDEs from Jetbrains
> Engagement across ideologies seems to be part of the solution

I don't know why people say this, as if such engagement wouldn't cause people to dislike each other more.

If you take two opposed people who are firmly on different ideological sides, they would have to be pretty intelligent and capable of above-average emotional control and awareness to truly or productively engage, and then, in the best case, they realize their normative views about things are fundamentally incompatible and maybe it would be better if they didn't share a country after all.

Take the average progressive Manhattanite and have them talk to an upper middle class businessman from suburban Ohio or something who continues to vote Republican; I think their worldviews would be totally distinct and divergent in a way that no good faith attempt could bridge. And of course one can imagine various pairings who might be even more divergent.

Contemporary America is really testing the kind of normative gap people can have while being part of the same country, and I worry we will find out that you really can't have that.
> Modern SaaS applications are multi-tenant.

This is true in a sense “most modern SaaS apps have at least two unrelated users or user groups” (forgive me please if I’m wrong here, but that’s how I loosely understand “multi-tenant”), but it’s not exactly clear why this is important.

I strongly suspect that the majority of modern SaaSes don’t do any database-level tenant isolation or per-tenant backups. The smaller the company the less it’s likely. Row-level security is a very rare sight to behold, even in regulated areas (certifications like HIPAA compliance don’t really require this). The best they do if they’re really global (I’m sure most are only global in “we accept users from anywhere”, but not so much under the hood - even though cloudy sales pitches love to paint a different picture, most SaaSes I’ve seen were one or two-region deployments) is try to move/shard data closer to the the user’s region.

I think one concrete example (as simple as possible) would help a lot.
Had the same question. There's a lot of unsubstantiated stuff on this as this is not exactly a hard science.
So what we've learned once again is: running random code off of the internet is a bad idea... Wonder if we'll stop doing this at some point?
Not if you are your own boss.
Is this the old name of Influencers?
Similar to npm lockfile, basically you can install an specific version of a program globally if you want, but it's not recommended, and you can have multiple configurations for different projects or folders with an specific version of tools/apps-
How would I incorporate Nile into a disaster recovery or failover plan?
It can be all of those, which is why its "better" than brew or some other package manager. At its core, its just a reproducible/hermetic way to declare and build artifacts.
Well sure, I am talking about urban areas mostly.

Similar things hold for regional transit, trains are better than cars (for reducing traffic jams and road wear) and then depending on the particular circumstances one would pick the best option for last mile.

And like I added, this is where self driving taxis could really shine.

Re scooters and snow: build bike paths and service them in the winter. Easy enough and done in many places.

It is all about adding more options for people so they are more free to organise their lives as they want and lighten the traffic load on the roads.

There are people who will only want a car and there are places where mostly only cars (and possibly bikes) make sense and that’s just fine.