skysight-inc/HackerNews huggingface dataset:
Systems software design (SSD) is too different from application design to automatically use one conclusion for the other. Things like OS's and database engines are designed by mostly logical engineers for logical engineers.

Business and amininistration apps, on the other hand, reflect screwy random-seaming legislation and management whims, which often change in unexpected ways. Management doesn't care that much if their screwy rules and processes complicate automation. (Or don't comprehend the impact.)

I noticed this in debates where SSD experts showed code patterns that assumed too much uniformity between variations of concepts (sub-types, etc.). They just wouldn't fly in biz apps.

I lean toward using flags/tags to manage variations on themes instead of sub-typing, composition, or dependency inversion. Variation granularity has to be small in these domains.
> No other rocket even in the planning stage comes close to Starship.

Both my rockets and Starship have reached space the same number of times.
You don’t need to know how to program to be succesful in life. In my career as an engineer most of the people I encountered who are wildly succesful are not engineers and cannot program.
What? No state owns me.
Acrobat Reader does let you sign PDFs and fill in forms, those were the two use cases you mentioned.

Windows has a built-in PDF reader with basic editing functionality in the form of Microsoft Edge actually (although I've never used it for that purpose to be honest).

As for a non-malware PDF editor, I'm not sure if Preview.app is such a great example in light of the recent image processing zero-days ;)
> 747

A 747 can’t stay in the air indefinitely. An airship can refuel and resupply without the owner even being aware.

He can park it 5 miles off the coast and stay there forever. A 747 can’t do this.
The vast majority of the Mexican Gulf coast of the US is relatively swampy. Texas, Louisiana, Alabama and Florida all have extensive areas of swampy wetlands.

If I correctly recall, Houston has frequent issues with flooding because so much of it is built on basically paved over wetlands.
They don't want to get involved with tech that goes out of date every year.
I think GCP is better than AWS (2020)
This looks like it might be in a similar vein to the navigation system discussed in a previous post about a new Royal navy test system. There are many good links in the comments https://news.ycombinator.com/item?id=36222625
I wouldn't call "having a catalytic converter" installed in an industry standard manner a "fundamental design flaw."
> The only time we had a downtime with cloudflare, they gave a detailed description and it was related to our cloud provider and not Cloudflare

Hah. Cloudflare's rise to fame was them proudly announcing how their servers were running but the users misconfigured their site, by "defacing" the users' non-resonse.
I love that meme! And yes, its kind of like that.

I am actually reasonably familiar with ITAR, including part 121, category 4 (or IV). And Mexico has 'special trading partner' status under the USMCA (formerly NAFTA) and there are carve outs between the US and Mexico.

I recognize the reality of such a move would be complicated, require licensing and review, and have geopolitical consequences that everyone would want to weigh in on.

All that said, SpaceX could start that process in earnest (which is to say, announce it, start knocking down the regulatory hurdles) and that would give them tremendous leverage in their discussions with the FAA. It would take a while, it would take persistence, but the longer they pushed for it the closer it would get to reality. It would create a credible alternative (if somewhat longer) path to launch against the push back by the US Gov't agencies.

The politics of space flight are complicated, but they are politics.

I would think that the people here who watched Uber take on the politics of the cab monopolies, or the EU's politics of privacy reaching in and impacting US companies, would begin to understand that laws and regulation are an expression of the prevailing politics and when the politics change the laws change to support the current point of view. Those examples are clearly not as significant as national security politics but history tells us that even those change.

The crypto wars, which I was in the middle of, are a good example of going from "you can't do that" here are the laws, regulations, etc. To "okay fine."

To be clear, I don't expect SpaceX to advocate for building a launch facility in Mexico. Their somewhat mercurial "technical guy" with the billions of dollars at his disposal however doesn't seem to shy away from politically difficult strategies if he sees an advantage in them. That makes betting against SpaceX opting to build a launch facility further south not as safe a bet as it would be say for Blue Origin doing something like that.
Perhaps we could form a similar agency that could find and prosecute those stealing the catalytic converters.
> "Don't mess with paste"

You are my hero
I know 802.11ay, but what has this got to do with the article?
Companies in general should do this, not just ones targeting developers! Instead they have a bunch of vague marketing copy that means nothing. It's a pet peeve.

My favorite is when they think they're keeping it short and to the point, with no bull. So, they'll have a hero section with copy like "Sharpen capacity. Scale across segments. Nuff said." No, not enough said, say more!
Zombies can’t get to airships.
you could also argue that everybody should know the law. but people don’t. same with personal finance.
A person could coherently argue that if you're trusting Microsoft with the operating system you might as well trust them with the browser and not add another party to trust in the form of Google. (I'm not saying I hold that view, but I can see how a person could argue that.)
WebKit Features in Safari 17.1
Find it extremely interesting that Jason Calacanis on TWIST yesterday interviewing a journalist covering the trial predicted SBF would testify and do it against his lawyers advice.

https://www.youtube.com/watch?v=wixsNOI5mBg
> writing an entire app in vanilla web components is kind of crazy talk in my opinion

Why?

I've done many.

My guiding principles:

- Avoid shadow dom unless it's a library. Stick with the light DOM and css system of your choice.

- Use lit-html or similar for rendering

- Use class properties for reactivity (add a render() call to setters, as needed)

- Ignore attributes entirely. Just use properties.

- Don't bother with composable components and slots. You generally don't need them

- Use a nice router like vaadin or ionic or similar to hoist components and support deep linking

- Let components maintain their own state. Structure the dom so that it's easy to grab state from a component with querySelector. If this doesn't work, I have a little state lib called ApplicationState[1] that works great.

- Really think about what needs to be a component vs normal html. Don't overdo it with components.

- Structure the app with high level "scene" components that map to URL deep links, and app components that you use to build the scenes. Scenes are targets of the router.

I've been doing this for years for many apps for many clients. Blazing fast, simple, no framework churn, no compilation, no framework download or overhead...

It's pretty tough to make myself use a framework at this point.

[1] https://claytongulick.github.io/applicationstate/
That raw rebar will likely rust after exposure to rain and puddles. Why not to have had it painted right after the installation?
They use window.open on a mouseover event listener to open another page. Even if you close it, they still are able to read from it as that memory isn't immediately zeroed or returned to the OS.
What team is quoting the first sentence, but not the second, even though it's presumably a continuation of the first quote?
I'm genuinely curious if you could elaborate a little bit more, thanks.

I always thought about a product like that in my area but the "features" you mentioned (soil/climate conditions monitoring) are pretty simple, so I wonder if you're still able of finding a market (fit) for products like that, that "anyone" could build. Are you able to find customers, which I assume is B2B?
Does someone in a third world country who came up with the exact same idea as you years earlier have "intellectual property rights?" Is that entire conception not just construct of privilege, safeguarding only the well off?

Generative AI is already allowing people to unleash their creativity in miraculous ways, thought impossible previously. I feel your argument is unfortunately extremely dated already. I am also not seeing your connection between holodeck and replicators to Amazon drivers peeing in bottles? I wonder what coal miners have to do to make a living? There are all kinds of grotesque jobs and practices, the aim is to eliminate all of them in time with automated labor, and taking all the necessary supportive actions to make that possible / sustainable. Generative AI distributes creative control and power to everyone instead of those with money to afford it.
> relatively common

I'd love to see some links, all I see used in practice (including in the OP blog post) is semantic search and a bit of clustering

> adding a pair of glasses

Actually that (and generally all the SD/VAE stuff) is a great example of the kind of thing I was thinking of, though I have yet to see that concept being used together with a vector database; generally all the user-facing stuff I've seen fits it into the standard "train a model, then do inference" workflow, in contrast to something like semantic search which more obviously focuses on the embeddings themselves

> First and third being identical

Definitely related, but I make the distinction between projection/sorting along an axis vs constructing a new vector by addition/subtraction

> Manipulate within gaussian space, then return to target space

This is definitely along the lines of what I had in mind, any example of this being used in practice?

> Embedding is an overloaded word

Yeah I'm using the term somewhat loosely and broadly here, as basically "a vector in a real vector space where distance represents some notion of semantic similarity"

> People do things like SVMs

Who?
I regret not having:

- Practiced better financial behaviors. I'm nearly 40 and have a negative net worth (lots of debt, no assets, no retirement, only part-time employment). I really need to sort that out instead of wasting time on HN, lol

- Learned to mountain bike/kayak/climb/ski/do martial arts sooner (lots of fun, but my old body struggles and all the joints ache). I still do all those things, just at a lesser intensity. I wish I started much younger.

- Taken better care of my teeth and listened to my dentist's advice more thoroughly (ouch!)

- Put more energy into side passions outside of work. Had a tendency to float around between hobbies, without much devotion/commitment, so never really developed any of them meaningfully

What I am really GLAD I did:

- Learned to be happy while single (super important!)

- Moved around a bunch, both geographically and between jobs. Learned a lot along the way and met all sorts of interesting people and went to a lot of awesome places. Not exactly digital nomading, just uprooting every few years.

- Tried out a lot of different events / subcultures, from dance to martial arts to board games to dev meetups to sports groups to music concerts etc. Good way to learn what kind of activities and people I actually enjoy.

- Met many people, friends and dates both, but treated them all with respect and formed lasting relationships

- Maintained a relatively OK exercise & diet pattern (not great, not terrible). Slightly overweight with some minor chronic health issues but nothing major yet, thankfully

-----------------------

Overall, I think the most valuable lesson for myself has been "It's OK to fuck up, as long as you learn from it... eventually. Sometimes it takes two or three tries, but just keep trying to do it better than last time. You'll get there... someday." I'm not necessarily a more effective person than I was in my 20s, but I'm an infinitely happier one now.
Why MulDiv(1, -0x80M, -0x80M) returns 2 on Windows (2012)
PyPI Security
Please correct me, if I'm misinterpreting this, but is the framing regarding Webkit-only actually correct? The cache exploit seems to be a general one:

> Here, we show that our attacks have near perfect accuracy across Safari, Firefox, and Tor.

Moreover, is the attack via `window.open()` really specific to Webkit, or is Webkit just the only engine that was studied in depth for this study? Notably, `window.open()` implies a shared context between the calling window, which receives a reference to the newly created window, and the new window, which has a back reference via `window.opener`. Do other browser engines achieve perfect isolation?
Yes. But it's incredibly hard to pull off.

My understanding is that the theory of this attack was introduced with Spectre. iLeakage adds enough research to create a working proof-of-concept, plus acknowledgment that, as of last year, it wasn't addressed in Safari.

More on site isolation (the functionality that mitigates these attacks):

https://w3c.github.io/webappsec-post-spectre-webdev/
https://www.chromium.org/Home/chromium-security/site-isolati...
https://blog.chromium.org/2021/03/mitigating-side-channel-at...
How about...Guantanamo?

There's precedent for these sort of foreign enclaves that would still be a part of the host country but fall within the geographical borders of another. Mexico could be open to some sort of agreement.

France keeps French Guiana and the ESA gets to launch rockets there. It's strategically valuable.
>> Ultimately, we achieve a out-of-bounds read anywhere in the address space of Safari's rendering process.

> So, in my opinion, this is a Safari vulnerability: they hold Site Isolation wrong.

Previously, something I would normally consider a Safari specific bug (IndexedDB storage not being isolated to its owning web page) also made it into Gnome Web and various other WebKit browsers. Site Isolation is enabled on other browsers but as an outsider I have no idea if that is normally handled by WebKit or by the surrounding framework.

It looks like Gnome Web/Epiphany is safe at least: https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/448 but there are plenty of WebKit implementations out there, such as cars and video game consoles.
> I can certainly imagine being in their situation due to the mistake of having an asshole friend-of-a-friend in a group chat and some bad settings in my phone. (I have neither, thankfully.)

This always makes me think how much worse middle school will get: kids are guaranteed to push boundaries, they all have some anger justified or not towards each other or the adults they know, and some fraction will learn how nastily they can weaponize the mandatory reporter system. Even if the truth comes out quickly, there’s so much room for strife first.
A product in search of a problem - that game "Milo" was such a scripted farce.
Why do some sign up forms block pasting from the clipboard?
ironically, i teach at a university

agree that anti-intellectualism is a danger if you take grugbrainism too far
That is netlink.

https://man7.org/linux/man-pages/man7/rtnetlink.7.html
Just want to toss out there that if you don't like driving a car or owning one, but still want to have a reasonably navigable city to live in that's not quite the imposing canyonscape and non-stop noise of New York city, and arguably better access to different kinds of interesting opportunities, DC punches well above its weight class here.
To reach maximum sequestration rate I thought it was much longer than that (~95% within 30 years at 3um). Where did you get your numbers from (curious, always looking for more sources)?
Many smaller businesses like 'kiosks' acting as sort of post office for all the parcel services now, where you can get or send your packages(except letters). Meaning they have the infrastructure for cashless anyways. Like non-chain restaurants and so on, also do.

Source: lived in Germany, at the outskirts of a large metro area, still visiting every few weeks to months into my own appartment, which I didn't abandon.
It’s a reasonable idea in practice, but they can’t carry that much weight, so either you land often for showers or water would have to be recycled. They can have a lot of power by having the top covered in flexible solar panels (ignoring the risk of a spark) so you can run reverse osmosis… but it might be a tough sell.
Do these articles ever link to a comprehensive gallery of photos? Or are those selectively published?
Toil is a good way to distract from the bigger issues that are too overwhelming to contemplate.

And the work ethic is rarely Protestant, but really a stress reaction for a certain percentage of the population. One that is very hard to get out of once it starts.
Yes. If you look at, for example, Amazon's offerings, this is how they use the terms.
For a time, I emailed every B2C customer who signed up. I welcomed them, asked where they heard about BeeLine, and told them if they ever had any questions they could email me directly.

Most people didn't engage, but some did. I was able to nip some onboarding issues in the bud, and develop some evangelists as well.

Some bigger companies automate this, but I always found it feels weird coming from a big company. I was always careful to put "founder" in my email signature, so the recipient knew it was coming from me. And I never sent the email right after they signed up, which might make it seem automated — even though it wasn't.
For me, the advantage of Nix is that I can install stuff without worrying about what it will mean for anything else on my computer.

I can type `nix-shell -p <package-name>` and get a new shell with that package. Maybe it's something I just wanted to try out. When I exit the shell, it's basically gone (it's still on my disk, but it hasn't changed anything in my normal shell environment).

I can have different versions of Python or Ruby for different shells. In fact, I can solve some of the "works on my machine" issues with Nix. I can put a shell.nix file into my git repository. Then when someone else wants to run my Python code, they can use `nix-shell` to bring up a shell with everything I expect to be there. I don't have to tell them "ok, first install version X of Python. Oh, you already have version Y installed? ...well, figure that out and then we're moving on to installing..." It creates a nice little semi-isolated shell with all the things needed to run my thing - and I can replicate that environment on other people's machines.

It's also a ton faster than Homebrew when installing things. I was shocked how much faster.

My advice (if you're interested in trying it): start small. You already have Homebrew. Install Nix on your machine and then forget about it - until you want to install a new package. Then type `nix-shell -p <package-name>` and you have a shell with that package. Later, you can create shell.nix files. You can commit these to a git repo so that you can bring them to a new machine.

I don't personally use it that differently from Homebrew, but there are certainly times when it's really nice to be able to install something without it causing chaos in my system and it's nice to have files written down with the things that I want installed so if I want to reformat my machine, I can get things back up nicely. I'm sure there are more use cases for its semi-isolation, but in the meantime I've been quite happy with it.
Show HN: JellyBox – Jellyfin Desktop Client
Hey guys, so I've been working on native desktop macos client for jellyfin server.

Feel free to join and try it out
https://testflight.apple.com/join/LVj8KwAq
Some examples:

- The Airbnb founders took photographs for listings themselves.

- ProductHunt started out as a newsletter, with the founders themselves hunting and curating products.

- Reddit founders submitted links (wrote comments?) everyday using different usernames, to get the community going.

- Dropbox launched with a video demonstration and an email signup page to gauge viability. The product wouldn't be ready for another year, iirc.

- Doordash was a single webpage with a phone number (and 5 students?), serving just Palo Alto.

- Meesho was a WhatsApp group (one of the few teams in the batch that failed to raise money on Demo Day, afaik).

- Segment was a single javascript file viz. analytics.js.
No. On page 9, Section 5.1 they state that by default Safari will spawn one process per tab and they provide less consolidation by default than Firefox or Chrome. It is only window.open(), which is used to create popups, that was not updated from the old design that did not use isolation to the new model that does support isolation. The "security experts" at Apple were just too incompetent to audit their code base and fix all the known security holes.

I mean, this is not exactly shocking coming from the same company with "security experts" that released a version of macOS that allowed anybody to login to root with any password [1]. Their security review process is grossly incompetent. At some point you should stop believing the "security experts" who do the security equivalent of putting antifreeze into the ice cream because they ran out of sugar and the antifreeze tastes sweet so it must work just as well.

[1] https://arstechnica.com/information-technology/2017/11/macos...
Helium is expensive, which is why they are considering Hydrogen. Yes, that’s what was in the Hindenburg, and yes, it can go big boom, but that’s the idea.
NIST Standard Peanut Butter – $1,107
It's Peachi: https://www.mycreativeland.com/peachi-serif-font-family

Apparently based on https://en.wikipedia.org/wiki/Souvenir_(typeface)

See also https://fly.io/
Many times doing that will cause far worse problems, especially at home. Work is at least ‘safe’.
Also add current page snapshot to the wayback machine:

javascript:void(window.open('https://web.archive.org/save/'+location.href));
If anything, he would have to be considered behind Waymo.
Chrome on Android also opted not to deploy their version of full per-origin isolation for the same reason. However Chrome does create a new process for cross-origin navigation, which is sufficient to protect pages which disable iframe embedding. That's what Apple missed here.
I was just reading about a converse case that involved public land that was effectively "landlocked" by private land. The private landowners had assumed exclusive access to the public land. The case was made that their private land value should be adjusted commensurate with the additional public land value, since they were the only ones with access.
When reddit first started, all merch was hand packed by Alexis with a note in it. At one point he sent us a stack of 1000 postcards and made all of us sign them, and then used those to pack the merch.
1) There are a couple of minorly endangered species near the launch site, so EPA, FWS would be involved anyway.

2) the FAA's concern is protection of humans, and the FAA is the lead agency.
no, born in the 70s and not in the US. gumby doesn't seem to be one of those things that caught on internationally.
Lockheed and others operate in Mexico already.
Right, but I detected a whiff of a complaint that taxes were high, so I wanted to emphasize that a huge chunk of the wealth out there is taxed at much lower rates. These are edge cases if you count by number of people, but not if you count by number of dollars. Rich people live in a different world.
"Geeking out" can mean to overshare or obsess about one's geeky passions but it's also used to mean someone who's tweaking on speed.

The drug-using definition predates the nerd-culture definition from what I can tell (the Urban Dictionary entry is older for one thing).
Good news for you - it does (for some parts).

Once you reach the Internet era, you can copy/paste the links within the embedded browser to access them directly. e.g.: https://internet-artifacts.neal.fun/sites/y2k/index.html