skysight-inc/HackerNews huggingface dataset:
This strikes me more as propaganda than the news.

Cartooning involves a lot more ability to editorialize. Even if the words are the same, subtle alterations in depictions can convey what the cartoonist wants.

In addition, in a world of StableDifffusion and AI generated graphics, are we really wanting to train teens to get their news via (human for now) generated depictions of current events?
Microsoft hasn't really dogfooded their own external facing GUI frameworks in forever. It's not a great look, but to some degree it also made sense. These frameworks (especially the dumpster fire ones) are .NET/C# (usually with XAML) frameworks, designed (it feels like) primarily to build line of business internal applications, with cross-platformness tacked on in more recent years. The grand-daddy of all of these would be WPF (all the way back in 2006).

Basically Microsoft's flagship non-developer apps (ie Office Suite) is its own little kingdom. They never bought into any of the developer facing C# frameworks that MS created (makes sense I guess?... Office isn't a C# code base). Office basically developed its own visual language and internal framework.

Visual Studio itself actually got some WPF back in the day (though I understood the code base to be kind of what you expect of something of its heritage). I imagine it still has WPF to this day.

Their newer apps - especially the ones that are actually trying to be cross platform (like Teams, VSCode and friends). Well, Teams has the excuse that they need a web version anyways, so Electron really does make sense (see Discord and Slack).

VSCode... the first version of VSCode came out in 2015 (omg..... it actually released a few months before Windows 10). MS had no in-house cross platform solution at that time. At that time, they did have a partnership with Xamarin (Xamarin would later be acquisition). .NET MAUI is the evolution of Xamarin. But Xamarin I always understood to be a bit of a dumpster fire. I was evaluating our choices for a small windows desktop app back in ~2015-2016. Xamarin did not seem appealing. After a misfire with UWP (another MS footgun I think), we just did WPF (cross-platform not required).

Honestly, I wouldn't expect anything that could even remotely be described as an "IDE" to NOT be based on the VSCode code base now. MS has something -very- good going for it there.

And I guess this is kind of one of the challenges. The part of MS that builds apps, is not really related to the part of the MS that builds GUI frameworks for external developers. And the part of the MS that builds apps does not really want their success to be tied to this dumpster fire.
Let's be real - why would you use anything but excel for this?
A 'sealed' retaining wall where the stones are interlocked or even glued/mortared together would probably have a higher load capacity than one made dry/unadhered. Or someone could simply like the aesthetic of a more 'filled in' wall, regardless of practical considerations.
There is a great Map Men Episode about the Longitude Problem[1]

[1] https://www.youtube.com/watch?v=3mHC-Pf8-dU
I almost liked the tone this was written in until I got to "totes". It's a fine line between clever and cloying. Depressing how much of that article I understood.
The general idea of the blog post is correct, but so many things are worded in slightly incorrect ways. I think this blog post needs a few edits.

> JSON Web tokens (JWTs) for session handling instead of cookies.

JWT and cookies aren't mutually exclusive, you can put a jwt in a cookie, unless it's too big.
There are two issues: Where do you store a sessions key, and how you create the session key.
The author correctly argues that the session key should be stored in a cookie, but doesn't make any arguments against JWTs, as far as I can tell.

> This approach is insecure because essential flags like HTTPOnly are not supported.

This wording is odd, because it's the other way around? It's not that HTTPOnly isn't supported when storing the session key in js, but that HTTPOnly enforces that you don't do it in js.

> the logout function often merely overwrites the JWT on the client side, leaving user sessions valid until timeout.

That's obviously bad, but there are also people who just set a different cookie, without making the previous session cookie invalid.

Then the author goes on to explain a possible XSS attack, but fails to mention that in the example XSS would also be very bad without the vulnerable session key. The injected js could do something evil right away, without steeling the session key. (But yes, it's worse with the session key exposed)

The author doesn't mention the relatively common flow of using refresh tokens together with short lived session keys.

Overall, I think this article can be misleading. A confused beginner could read this article and misinterpret it to mean that protocols like OAuth or OpenID Connect are insecure, just because they use JWTs in some places.
This mullvad thing is just another "what is my ip" service.
His site lets you download the entire database locally, for free, and without registration.
If I was the engineering team, I would be trying to eliminate all these noises.

Every single one of these could be engineered away. For example the pops and bangs at a supercharger is the metal shield deforming when heated. Instead, it should have circular ridges stamped into it around the fixing points to let it expand against the springiness of the steel.

The clunk noise from brakes could be engineered away by using stainless steel spring clips to prevent the pads being able to wiggle around in the calipers (used by many manufacturers already).

The clunk from the contactors opening/closing could be engineered away by having the contactors open/close far slower - with a proper precharge, no current is flowing, so there is no longevity benefit of fast close/open. Or... decide not to have contactors at all - I don't really see any reason they're needed, just keep the high voltage system always energized and design all the other components to have a suitably low leakage current. For maintenance and emergency de-energization, have a manual lever or a pyro-fuse.
It's really a nice project. It's really too bad that it doesn't compile for mobiles.

It's the one point preventing large adoption of go as a gaming language I think. I haven't found a 3d lib that supports building for mobiles.

And it's really too bad, because go would be perfect for writing games.
IPINFO.io has that info, but I too would like to have this information in a free service.
Well, yeah, that was the original idea. Didn't work out like that though.
It does but here is the kicker... it also uses QT on Windows.
Just store it in localStorage...

It is just fine.

If anyone is allowed to inject javascript in your site, samesite=lax httponly cookies aren't gonna help much either.. the attacker can fetch /api/me/delete with credentials: include (just like you would have to do in your js code) and it's game over.

And extensions can access httpOnly cookies as well. Not to mention other applications can simply access the plain sqlite db.

So really, just use local storage for tokens.

This way, if you want to expire sessions via refresh tokens, you can simply layer it on top of this, by setting a refresh token in a cookie and adding some extra logic to the api calls.
> Also public ownership doesn't mean the enterprise can't be self funding or even profitable. E.g. my city's electrical plants and distribution are run by municipally owned company that pays dividends of the profit to the city.

You seem to be using examples I'd also cite as non-terrible reasons for a state/municipality to run something. I.e. things that are mature technologically, or at least we're willing to pause innovation and just stick with what we have, and just need an ultimately simple single product or service to be done efficiently.

However, if you got the municipality to run the companies (one of which succeeded, for each machine in question) that risked a lot to develop the necessary machinery to build those plants, I think you'd have seen a very different outcome.

I can also give a counterexample, if we're into anecdotes: Eskom, the South African state-owned energy company, is running South Africa into the ground with now daily scheduled blackouts, that have been going on for years. The government didn't let Eskom (back when it was private) to build enough power plants, and with South Africa's growing population, they don't have enough plants to keep online at once to serve their grid. This has been going on for 10+ years, but has really been hitting in the last 5. It doesn't matter to politicians, because they can afford generators in their houses and private healthcare. And there are no shareholders to care, because it's a state monopoly.

There can be bad governance in the private sector and in the public sector. The difference is the blast radius is far larger when it's the public sector, as the state has far more capacity to do damage than an individual company does. And if a company gets even 1% as much capacity as the state to do damage, we call it "rent seeking" or "monopoly".
> ... but why Go for game dev? The purpose of the language was to tackle backend services previously written in C++ focusing on junior developers, not game dev.

I'd say using any language for game development should be embraced, not discouraged.

Imagine if William Crowther had thought, "Why Fortran for game development? The purpose of the language is to tackle scientific computing." Thankfully, he did not think like that.

All Crowther had with him was PDP-10, Fortran, a teletype that probably looked like https://en.wikipedia.org/wiki/File:ASR-33_at_CHM.agr.jpg, some sheets of paper, and a sense of fun! Without being bothered about what these tools were really meant for, he went ahead and developed Colossal Cave Adventure thereby introducing the genre of text-based adventure games into the field of computing. A player had to type their input into the teletypewriter and wait for the computer to print the output on, well, physical paper! Still it was fun. It is nice to have fun and write games with whatever technology we have got.
It's not necessarily listening or intercepting radio systems for eavesdropping, but getting locations for radar sites, etc.
This is an aside, but as a native of winter cold: shivering is an excellent strategy to avoid death, but it’s a terrible strategy for actually feeling warm. (Better is moving, relaxing, and massaging the ears/hands/feet to promote blood flow.)
He effectively is arguing that the "good guys" will develop a superhero AI that will protect us simply because it feels that is the right thing to do. I'm not sure how any logical basis can be used to back that up, or where any meaningful example of similar behavior that didn't ultimately lose to the "bad guys" can be found in human history.
Love the expected noise while in ludicrous mode
We are huge into Microsoft but MAUI is on the no touch list.

After maintaining a Blazor (server-side) app for a few years, it has become clear to me that even if the abstractions are ideal, the tooling may cripple the entire experience.

I don't trust Visual Studio 2022 to not treat me like a piece of shit in a UI style project anymore.

The only project types I really trust to not suck are: class library, console app, and azure function (timer or http triggers).

If Microsoft wants me to give their UI frameworks another shot, then I challenge them to rewrite visual studio itself using whatever proposed framework. Only then would I have faith that someone sorted out all the long-tailed dragons that would bite me in the ass 2 years deep.
I mean, the existence of significant numbers of people who don't have "normal colour vision" is a pretty good indication that different perceptions of red is an actual thing. Seems far more childish to insist that that everyone's perception is either identical or impaired.

If it is possible for human perception of colour using similar hardware to be so different that they subjectively experience 550nm and 700nm wavelengths as identical in appearance, it is surely possible for the minds of that people who can reliably distinguish between the two don't necessarily perceive them exactly the same way you do or I do. Apart from anything else, it would explain a lot of people's decorative choices!

Even the "same hardware" argument doesn't stack up because even if it turns out you're actually my identical twin, our visual cortexes and brain structures and chemistry that parses, interprets, emotionally responds to and stores images evidently aren't the same.
I still play cribbage according to the rules, but like to do things like set my opponent's back peg to the rear by a few points, and count my hand in bizarre ways that still yield the proper results.

There is playing the game, and there is playing the playing.
It's an arms race though, most people prefer bigger cars because it makes them feel safer from all of the other big cars on the road.

Also it was actually the gas efficiency regulation that started the arms race, because big trucks were exempt from the regulations so car manufacturers started pushing more people towards buying trucks instead of sedans.
I agree with the sentiment, but the entertainment industry is largely built on a spread of various more or less risky bets. Usually from a single giant budget of a studio, and focused on ensuring a constant release timeline.

And this isn’t a Netflix or streaming thing - the big 5 studios and tv industry have always had cases just like this one. We would have to take a look at the rest of that spread to figure out whether this is more or less business as usual.
> It reminds me of how ESCs for RC vehicles use the motors to generate audible chirp tones to indicate status.

Super Mario Wonder from Nintendo recently uses the vibration motors in your controller to play sound effects in some places which I thought was an incredibly neat trick.
Yet another reason that I sometimes wish we had Taze-over-IP.
I am gonna try to generate Nim for this with https://github.com/nimterop/nimterop.
I think if you write what you want in a “code comment” then below it will try to implement that comment in the autocomplete
You still have the choice to close your eyes: just don't watch the show.
Amen to that.

Of course, just as most of yesterday's crypto experts are today's AI experts, the main wastage seems to be moving towards LLMs these days.
The Five Meanings Of #. And What Does ${####} Mean?
We should probably be calling for an open model or open data approach if that's what we think is best.
Calling it open source leaves plenty of gray area in the definition.

For example, I run a few instances of open source software though my instances' databases are private.
My first thought was to the 1999 movie:

* https://en.wikipedia.org/wiki/The_Mummy_(1999_film)
Don't get me started on MS and UX libraries everything you need to know about microsoft and the state of UX is is that they are trying to implement a complete darkmode for windows since 2015 and are still failing at it.
Seconded! Especially if you only have keyboard controls. Once you have mouse events there is no mapping between mouse position and an object in game, which makes it a bit harder. If so, you may wanna use svg. It makes it easy to handle mouse events, rendering is “free” and you can also do smooth animations with CSS. The main downside imo is that svg has more browser inconsistencies for some reason.

Example: https://loz.payload.app/
as usual the stock market is to blame. in the 100 years or so it’s existed, the BBC has never really had a sustained drop in content quality, and yet its model is somehow taboo
You want my Password or a Dead Patient
After all, a good debugger always includes watch makers.
> Once you have a captive audience the next strategy is to milk it to death

Netflix (or any streaming service) users are not captive audience. The network effect for such services is next to nil.

If I don't like what Netflix offers, I will simply cancel my subscription. There is nothing that would keep me paying other than quality content.
I launched a new WordPress plugin a few months ago and we’re offering a Black Friday deal. OMGIMG ( http://omgimg.co/ ) is for editing featured images and generating Open Graph images inside WordPress. We’re offering 50% off forever!
air/air heat pumps have a fan on both the inside and the outside. In modern designs, both those fans will be brushless DC, which enables deliberate heating through software.

Note however that both fans will typically be ~150 watts - which means that when heating they can't produce orders of magnitude more heat than that. So heat produced by the fan motor, even when run to generate as much heat as possible, probably won't be a very significant contributor to overall system heat output.
9FRONT (Plan9) "Humanbiologics" Released
Thank you, that's indeed super interesting for me (we use go as our backend language).
> Seems like an advert

The decision diagram and conclusion below, applies to any pair of OSS or vendor routers in the "guest" and "secure" roles.

Guest Router First, Secure Router Second

Option #1 is the recommended and accepted best practice. The guest network connects directly to the internet, and the secure router plugs into the guest Router.

> we have Zyxel gear were we can tag WLAN connections with a VLAN based on the SSID

Open-source SPR can place each wireless client device in its own VLAN, with a unique WPA3 passphrase for every client.

This allows granular, per-device rules for routing and filtering, instead of dumping all devices into one-VLAN-per-SSID.
Anti-tumor activity of all-trans retinoic acid in gastric-cancer
“All models are wrong, but some are useful”

https://en.m.wikipedia.org/wiki/All_models_are_wrong
Seems like the only good open source projects are made by a single person.
Yes, but other posters are mistaken that it is a 'clever' feature to prevent overheat during heat soak. It is instead more an accidental byproduct of the fact it is wired direct to the battery and not to the ignition circuit. Thats done to save a couple of cents on the ignition switch (no need for a large high current fan to be powered through it).
The fact that CSS3 was released in 1999 and such an app in 2023 is a cool HN-worthy post shows how easy, accessible/programmable/inspectable keyframe based animation got stuck with not much relief in sight. Flash dropped dead like a decade ago leaving a void, what remains is its husk as Adobe Animate, and droves of so-so frameworks and communities around them. Robust CSS/SVG based animation remained mostly an empty promise. You can find nice examples, sure, but it remains a niche craft.
Suppose you've paid for content (apps, movies, music, games, or services). If your seller can terminate access at any time and for any reason, are you okay with that?

The 'don't like it, don't buy it' sentiment appears shortsighted, especially considering that both Android and iOS are operated by two major corporations.

Think of banking apps, for example. Banks usually do not favor a tampered OS.

Consider:

False Sense of Security: A Study on the Effectivity of
Jailbreak Detection in Banking Apps

https://ieeexplore.ieee.org/document/8806743

PS: Yes, you might use another OS, but how would you do your online banking with it? Explain.

Another point to your "don't like it, don't buy it"-argument:

Suppose you buy a device; further suppose the state is not involved (no warranty). Your device breaks down the moment you bought it, and there is no refund. How do you deal with that, especially if you are low income?
Smalltalk's method editor approach has always seemed nicer to me (when combined with a Smalltalk system that knows how to sync its code to disk, I'm not a huge fan of image-based systems ... just everything else about Smalltalk).
My experience of darktable consists of:

seeing my RAWs looking completely wrong

Googling wtf is wrong

Seeing a bunch of reddit/forum threads of devs telling people that it's a feature not a bug.

Going back to pirating lightroom
We decommissioned all our mobile apps built with Xamarin.

Some of the Microsoft teams don't listen to user feedback.

We use Azure DevOps, feedback from years ago for basic features still not developed.

https://developercommunity.visualstudio.com/AzureDevOps
Since we're talking about GUI frameworks, I wonder how Qt fares in terms of bugs and fixing them.
True. Many will dismiss this opinion but that's how it is. The only issues being actively resolved and substantial progress happening is in:

CSS - New units, flex, grid, subgrid, animation, new query methods, view transitions.
JS - New APIs ranging from cryptography to WebGPU, Web Assembly.

If you must give an interface to an application, there's absolutely no match to what web platform can offer in terms of fidelity + ease of use and accessibility.

Sure, you can go bonkers with Flutter, Qt, Swing or other immediate UI libraries but then you're on your own to invent everything on your own.

You can't find like of d3js in Qt, Swing, MAUI or GTK. Not saying some half baked version of some of it does not exist OR is not doable at all in any of the toolkits. Just that you have to do it on your own.
Depending on their ages and tastes here are a few of my favorites :

- Manu Larcenet : has many great series suitable for kids. If you want to check one a bit more for adults I recommend "Blast" which is pretty much my favorite comic ever.

- Lewis Trondheim has a great series around his character "Lapinot" (his Donjon series is amazing too ; be careful one or two of the albums can be a bit scary if the kid is too young, for instance I remember a scene of rape, not visual but it is clear what happens ; but a good chunk of the series is light-hearted especially potron-minet and parade)

- Joan Sfar : actually co-author of Donjon but has entire work of his own, quite introspective with his jewish culture

If you would like to teach with songs I also recommend Renaud (the albums from the 80s, not the recent ones), Brel, Iam (french 90s rap group but a lot of the lyrics are non-violent ; their most famous piece is about star wars actually).
aka "This is a risk-based intervention. We don't know if it will happen, but there's a real risk and better start now than scramble later."
It's not just crashing/halting. See Rice's Theorem. The machine can't predict its own future behavior in most ways that are important.

I'm not an expert in this stuff, and my point was that a serious treatment of super-intelligence should address such limitations to computations. In particular the "super" part seems to imply solving exponential-complexity problems in linear time. I remember looking in NB's book and not finding it.
I don’t disagree with your take, but the absolute magnitude of electricity demand wasn’t that different.

Lower temperatures increased heating demand by around 20%, but it’s not like heating was the only thing people use electricity for. Stoplights, water pumps, exterior lighting, etc need power either way.

What made it worse was the triple whammy of more generation going online, slightly higher demand, and prioritization of specific areas which didn’t lose power.