skysight-inc/HackerNews huggingface dataset:
> Shift JIS is actually just one of those out-of-band vaporware methods.

It's the opposite of vaporware; there's a whole bunch of well-known software that handles encodings correctly.

> new code that doesn't care about handling some lang metadata is not going to care about Shift JIS either.

If you support encodings the way almost every programming language tells you too, you'll handle Shift-JIS just fine. If you use the "legacy" encodings approach and test even one non-English language you'll handle Japanese fine.

> Can IMEs and converters simply stamp each variable character with invisible mark based on current input language? I suppose there's some catch…

They're officially deprecated, IMEs and converters don't use them, naïve search implementations (which is to say most search implementations, because people do not test for an obscure edge case) break, ....
Show HN: A unique open-source database client tool
Yep, and so much is integrated now, so an average design is a bunch of tiny black squares in close formation under software control, it's very difficult to diagnose the dead component unless you are very intimate with the design or you get lucky it's failed short and the controller doesn't turn it off so it shows up thermally.

The "good" news is that lots of stuff will never get as far as an exciting excursion into unanticipated solid-state physical regimes and instead will become junk much earlier when the app no longer accepts it or the server is turned off (cough Hive)
see langtail app (I am not maker)
And things are often colour coded for adults to help them differentiate information quickly as well. Are yellow hazard signs childish or the different colours on traffic lights?
Apple and Google are not "decades of US engineering". They are two corporations that really exploit decades of (open source) US (and European) engineering to siphon huge profits to tax havens. If they were to exit the EU market, Europeans would still have access to US engineering just fine.
I wish more people would try this. Everyone might learn a thing or two.

Obviously this was a failure but there is probably a bit of learning here for everyone.

I'm surprised he didn't do worse, clearly he still had skills that can't be erased which to me sounds reassuring in some way.
Didn't you guys have filesystem backups of a shared git repository?

This is exactly what backups are for.
Decentralizing Social Media with CRDTs and Blockchain
The cost of custom chips is massive, but then manufacturing is cheap - after selling N units to pay off the initial investment, it's almost free (unit cost) when done at scale.
Last I interacted with appstore uploads, they had restrictions on features you could have in new IPAs you upload. Old versions do stick around though. (even if users can't download them if there are newer app versions)

Can Xcode 15/iOS 17 SDK still build 32 bit apps for iOS 9, and can you upload them? I'd be very impressed if so.
Great idea, especially since many popular cycle tracking apps have a bad rep of sharing data eagerly with Facebook and other entities.

One thing though: I know it's popular in these apps to show the cycle as a "clock face", but if you think about it, this is a weird representation, because of the variations in cycle lengths (of natural cycles not changed by contraceptive hormones). So, if one cycle is 26 days long and the next cycle is going to be 30 days long, the clock face will show an average of 26 days for the next cycle and the handle looks stuck "5 minutes before 12" and every day, the handle doesn't tick one further, but the unit (day) becomes more compressed.

This makes comparing cycles unintuitive and suggests that natural cycles always have the same length. In reality, the majority of women have fluctuations of 8 days or more in their cycle's lengths per year.
It does. Nintendo is able to make free products too, and trademarks are certainly about provenance. Nintendo could claim that the use of their trademark could confuse users on the origin of this free product.
And there are people who say that Ukrainian war or downfall of the ussr was result of the US/NATO expansionism.

Nope - people just wanted to escape this madness, rest was just a matter of opportunity not the cause.
I think the law itself only mandates a very small section of that standard: more or less 'no common default passwords' and 'have a means of reporting security bugs'.
How do companies usually hire freelancers? Do they search for them "cold" online or do they go through their network (more my experience)?

Just wondering if the directory / lead gen angle actually works.
Supreme Court Rejects Former Trump Adviser Peter Navarro's Request
> The rules are really quite pissweak.

Ah, but you need to look at how the UK government has implemented this [1].

The law itself is the Product Security and Telecommunications Infrastructure Act 2022. That law makes reference to "security requirements" with which manufacturers must comply. Importantly however, the actual security requirements aren't specified in the Act itself. Instead, they're specified as regulations set by the Secretary of State. As I understand it, regulations are easier to update than acts, and here the government is actually obliged to review the suitability of the regulations at least every five years [2].

In theory this allows the government to apply salami tactics: start with some regulations (the 2023 version) which are indeed so weak that no manufacturer could have reasonably objected to them, but then to add more requirements over time, hopefully ending up at a point where we have some more impactful requirements placed on this stuff. Whether the government actually does that, and over what timescales, remains to be seen.

[1] https://www.gov.uk/government/publications/the-uk-product-se...

[2] https://www.legislation.gov.uk/uksi/2023/1007/regulation/10/...
Wow, is #3 disingenuous.

"Use of social media to target individuals" sounds like some internet personality doxxed you, or sicced their followers on you.

But it looks like... someone linked your own public comments from a Nix Discourse thread, and then the board rejected your bid to join them?

Apparently this Jon Ringer guy has it out for you, as much as anyone else. He keeps sabotaging you and putting words in your mouth. /s

Reading your comments, I'm continually reminded of MLK's Letter from Birmingham Jail, "Shallow understanding from people of good will is more frustrating than absolute misunderstanding from people of ill will." It's clear you still haven't educated yourself on the issues around representation, and the distortions of "meritocracy" in a world where we didn't all get to race from the same starting line.
Interesting. Using Linux here as well.

Sounds like a selective roll out or testing then maybe.

Either way, if/when it rolls out to me that'll be the end of my YouTube use.

--

Hmm, is it something simple like needing to refresh the uBlock Origin filter list? I've seen that happen before for other stuff, so maybe that's it?
I Rented Out a Movie Theatre (Again) and Used My Steam Deck to Play Co-Op Games
Thank you sensei, I think that I do understand now.
> Slippery slope fallacy

How is what I said a "slippery slope"? And what makes it fallacious?

> Facism / bigotry are catch-all terms for a broad range of things

Why not then drop those terms, and replace them with more specific terminology?
Yes. https://thc.org/ssh-it/ being a more recent implementation of the same concept, using $PATH modification instead of LD_PRELOAD.

It also has some other optional tricks such as searching for unprotected SSH keys and the likes.

This kind of thing can be deeply interesting to run in environments where developers share things like jump boxes, to determine the “blast radius” of a compromised account over time as part of a security exercise.
There's literally a law, in a functional democracy. Doesn't get more rules-based than that.
I think that was true 10 years ago, but now it seems to have evened off a bit. Generally speaking (in my circles and the circles I see around me with family etc) there’s an acceptance of the “polish plumber” as a hard working person getting by these days.
Github culture is the infection vector. That's why OpenBSD is unaffected.

Hygiene, folks.

Also could be the fact that the entire reason OpenBSD exists is that De Raadt got cancelled out of NetBSD: http://mail-index.netbsd.org/netbsd-users/1994/12/23/0000.ht...
This, and worse: I’ve stopped using libraries that migrated to GitLab in my own personal projects, because I just can’t be bothered to check for updates there, or deal with the UX, or log in to report bugs because I don’t really want to create another account.

I remember when SourceForge was a thing, and GitHub was just tremendously superior feature-wise and community-wise, with new issues and PRs for stuff coming in daily. GitLab, Codeberg, etc. may have 90% feature parity, but they’re not anywhere near the ease of interaction.

(I’ve also set up a Gitea instance on my NAS to mirror my own stuff, some GitHub projects that might be controversial—like emulators-and stuff from GitLab and Codeberg. And guess what, I seldom use that as well to keep track of external projects.)
Rise in prison death rates during the pandemic
With some additional tricks, lab machines at universities would be fertile soil for such.
And it's a very poor rendering of a man page. man can generate HTML or PDF output if you want it:

man -Thtml ls > ls.html
man -Tpdf ls > ls.pdf
The Microsoft GitHub requirement is the only reason that I do not contribute to NixPkgs except by sending a mail to a maintainer sometimes. Everything I package stays in my own flakes. If a community arose that hosts its own repo or is hosted at e.g. CodeBerg, I would contribute.
It was actually due to the way "gatekeeper" is defined. The EU has now said that although iPads (still) do not meet the criteria, they are being explicitly targeted anyway. My guess is because this is simpler than expanding the criteria to include iPads in some way.
> SOAP was designed as an object-access protocol and released as XML-RPC in June 1998 as part of Frontier 5.1 by Dave Winer, Don Box, Bob Atkinson, and Mohsen Al-Ghosein for Microsoft, where Atkinson and Al-Ghosein were working. The specification was not made available until it was submitted to IETF 13 September 1999. [1]

WSDL 1.0's list of editors reads [2]:

> Erik Christensen, Microsoft; Francisco Curbera, IBM; Greg Meredith, Microsoft; Sanjiva Weerawarana, IBM

IOW, TypeScript is by the same company as SOAP and WSDL.

> Nowadays big companies rarely work together [...] That results in a higher quality approaches

[Citation needed]

[1]: <https://en.wikipedia.org/wiki/SOAP>

[2]: <http://xml.coverpages.org/wsdl20000929.html>
This presents a false dichotomy (Github vs email patches), when there exist a whole host of self-hosted options (Gitea for one).
Having a choice will not harm you. The "brainpower" required to stick to one appstores is virtually nil, evidenced by the vast majority of android users sticking with only the play store. You don't want other people to have that choice because you're a sycophant for a corporation.
This would be true if the only alternative to piracy is not using said content or software. If paying is a valid alternative to a nonzero fraction of pirate users if piracy was not an option, then the piracy does affect the creators economically.
iPad (any model) with keyboard-cover can be used as a great portable ssh/mosh
terminal (eg with Termius app). I work in Emacs--most functionality is available via terminal.
It’s only from your comment that I realise that this was posted by the author, seems reasonable that should at least be acknowledged.
I didn't say it'd be easy. In fact, I was being sarcastic.

Sadly, my doctor also said I can't have the lollipop.
I think it might be because microsoft charges money for windows licenses and you can't keep it free of charge and pay for licenses for the lab vms. But for exploit labs,you just need to give learners the samples and/or something like an ansible playbook to setup the vm and they can run it on their own box.
Unlreated: Is the title correct english?
Short term maybe. But Github has already a kind of monopoly on git web interfaces. Package managers (e.g. npm) already have preferential treatment for it, and adding "github" to a search term is quite a standard way to search for source code.

My guess is that sooner or later we'll see EEE. GitHub will slowly get more and more tied with MSFT technology (already ongoing), and at some point MSFT will want to start squeezing profits with their lock-in one way or another.

IMHO Microsoft shouldn't have been allowed to buy GitHub. In general it's really not a good situation that so few megacorporations dominate the software industry. But the regulation is broken.
I wouldn't believe for a second the Murdochs have given up on that power.
Almost a decade ago, I bought an iPad Air to try and replace my MacBook Pro. It didn't work and had to resort to laggy online editors with paid subscriptions. And even then, when I was doing Ruby on Rails, it didn't even work out. Ok, so, the technology was new, sure.

Last year I got myself an M series iPad "Pro" thinking things would have changed. Well, VS Code was the only product that allowed me to run a tiny VM to edit and deploy my apps online. It worked really well to its credit despite a little bit of hacks (have to save it as a Safari shortcut) but still, a far cry from replacing my MacBook Pro.

I have the same M series Mac mini back home that I do insane multi-tasking on and something I would claim is easily the best god damn computer ever made for IT devs like myself. That's when I realized, the limitation is in the OS and not the hardware. The iPad "Pro" is really powerful for a lot of other stuff. Photo editing, music creation and what not.

Ironically, I saw someone on YouTube get annoyed with the same problem and use a Raspberry Pi attached with the iPad as a MacBook Pro replacement (it draws power from the iPad itself, so it's a single cable solution). I was amazed and sad at the same time that Apple had to push their neglected audience so far to the point of even bundling our own DIY hardware to make it usable to call it a "Pro". The iPad's "Pro" is such a misnomer.

I am still waiting for the day when I can throw away my MacBook Pro and work from a small factor without carrying a brick to charge a 14", almost 3Kg device in my office bag every day.

Hopefully this changes things.
> If it weren't, you wouldn't be experiencing this cascade of downvotes, so get with the program.

Disregarding this statement's general silliness, it is also downvoted. Now we're in a paradox. Downvotes mean you're wrong, so the statement that downvotes mean you're wrong..is wrong?
Actually, all resolvers that hide the EDNS Client Subnet
I mean it was bullshit, he had a free apartment from a friend, and some other "help" to get him ahead, so the fact he failed with a leg up is just insane. Oh and he quit for medical reasons, even though he kept his medical care from his normal life, so didn't even have to deal with you know... crippling fear of bankruptcy or being able to see a doctor during his "game" of life bullshit
Its refreshing to see that just hate systemd because "its not UNIX way" is not anymore. I see better discussions under this post and in other places around the web.
NASA lays out how SpaceX will refuel Starships in low-Earth orbit
> Sponsorship with the attached advertisement is very different than "used by". Don't be silly.

Sure, but what does that have to do with the Civil clause that you mentioned? It doesn't say anything about sponsorship, but it does say about "used by": "Any participation of science and research with military use or purpose must be rejected". Obviously, this cannot be true, since it can be applied to anything that is used by the military, including paper, towels, pens, computers in general, water, etc.

> Are you even aware, I am referencing the issue of a Nix conference hosted at a German university

I am, and? I think you missed my point?

> I linked a Wikipedia article, read it, if you're genuinely interested and not debating in bad faith.

I did. The Civil clause of some universities does sound fine ("strive to", "focused on"), but the others make a blanket statement that is very hard to take seriously. Obviously, they don't take the statement to the letter, and in fact it's hard to tell what they aren't supposed to do (if anything), unless perhaps you look at the other universities. Even then, none of those clauses say anything that can be applied to hosting a conference with military sponsorship but not to contributing to Nix.

Regardless, I don't think what you linked to is well known outside Germany. You can judge by the extent and completeness of that Wikipedia article. I'm European (EU), went to a European (EU) university and I had never heard of such a clause.

To answer to your point:

> To even think of the sponsorship as a valid idea is US centric ignorance. Outside the US people don't get the "Thank you for your service" indoctrination and are way, way more reluctant to work with the MIC.

I think you're generalizing a wee bit too much -- I'm not from the US and I think there's plenty of indoctrination to go around, and yet I don't think rejecting this sponsorship is in accordance with open source and Free Software values, philosophy and spirit. You can go read about it here -- and notice how it says several times that the point is to include everyone: https://www.gnu.org/philosophy/free-sw.en.html

To be honest, I think the mistake with Nixcon was not Anduril, but rather, to host the conference at a German university.
I’ve been bitten twice by leashed dogs. On the sidewalk. The owners were flabbergasted. Seriously, just blows my mind how terrible so many owners are.

Edit: neither time did I engage or pay attention to either dog.
LED lightbulbs are terrible but good LED lamps and fittings do last forever!

In a lightbulb the power electronics, LEDs, etc. are all squished into a tiny package that struggles to shed heat.

I have a 15 year old led desk lamp from Philips. The Power supply is separate, the LEDs are attached to a heatsink. It could be taken apart and components replaced if someone is handy. Modern xiaomi desk lamps, ceiling spotlights and light fitting with integrated lefd are decent as well, LEDs are not overheating.
The real culprit is actually ifunc feature in the dynamic loader / glibc
Tried that. And other alternatives I don’t remember right now. Still a hassle I don’t want to get into (and I have something like seven Proxmox nodes in the house). I just have other priorities and wish that this was as easy to do as in Android.

The EU adjust doesn’t get that, and probably never will, because the bureaucrats are more worried about impact to their industry lobbyists than to their citizens.
I might be wrong but I think the orignal wikipedia is not banned. They can't really ban it, it's like banning youtube -- the outcry would be too loud
Yes and they are astroturfing Devin is all over the place.

Several subreddits were overtaken by Devin bots for a few days. When the dust cleared everyone realized what had happened.

And here we are again.
Is this a common solution or documented in obvious places?

It wasn’t until I just read her article that I’d even considered some systems/distros doing weird things like rewriting C include syntax for questionable reasons.

What a terrible thing to deal with, simply frustrating.
Yep. Repeating a collage from 2020 ( https://imgur.com/a/CQwApt8 ) and comment ( https://news.ycombinator.com/item?id=31644188 ) on the strange workarounds done to use Linux (or possibly even windows) on an ipad.
I'm not saying it was a bad target. It was a perfect target. How many more would fullfil these criteria? Those would be the type of repositories I'd go and investigate.

For there to be another repository affected by the same attack you don't even need to think this specific attacker did it twice. You can just consider that multiple attackers had the same idea. I think it's way more likely that there's more repositories affected by the same type of attack than not.

I'd go as far as saying this is an issue of national / global security and there's space for an agency like the IMF but for software security that would be funded by all the countries of the world to bring more resources and assuredness to this type of dependencies.

Because even if this attacker didn't do more than N=1 and other attackers didn't have the idea before, they surely have it now.
The tool doesn't try to do away with root, it tries to do await with the setuid bit. Meaning, "running a persistent daemon as root" is the intentional solution, and presented as the significantly better option for good security.
Because it doesn't meet the criteria. To summarise heavily, they are:

- Size criteria:

Have an annual turnover in the European Economic Area (EEA) of at least €7.5 billion in each of the last three financial years, or

Have a market capitalization of at least €75 billion, and

Provide the same core platform service in at least three EU countries.

- Control an important gateway:

Provide a core platform service which is an important gateway for business users to reach end users.

- Entrenched and durable position:

Enjoy an entrenched and durable position on the market, operationalized by having had at least 45 million monthly active end users and 10,000 yearly business users of the same core platform service in the EEA in the last three years.

In fact, the EU has admitted that iPads do not meet the criteria, and are making an explicit exception to include them.

Don't get me wrong, I'm _very_ happy about this, but you asked ;)
That would be a comfort to the bereaved.
Phone Keyboard Exploits Leave 1B Users Exposed
I think that would make it cross a border where ‘Lite’ no longer applies.

It also would be quite a challenge given their long-term-support statement (https://www.sqlite.org/lts.html):

“Cross-platform Code → SQLite runs on any platform with an 8-bit byte, two's complement 32-bit and 64-bit integers, and a C compiler. It is actively tested on all currently popular CPUs and operating systems. The extreme portability of the SQLite code and file format will help it remain viable on future platforms.”
Calendar Types in Watches
Probably a user setting? Our car gives us a visual warning. I think it’s a nice to have.
Yeah, I’ve been doing the “sidecar” approach for a long time. Here’s the latest iteration: https://taoofmac.com/space/blog/2023/10/07/1830

I would also love to run a Linux VM on my iPad Pro, but if we could get third-party app sideloading to work without alternative app stores and other idiocy UTM would fix that for me.
The point is to separate the cleaning stage from the import stage. Having a clean utf-8 csv makes debugging import issues so much easier. And there are several well working csv tools such as the Python one, that can not only detect character encodings but also record separators and various quotation idiosyncrasies that you also need to be aware of when dealing with Microsoft Office files. Other people have already thought long and hard about that stuff so you don't have to.
Response to Hanson on Health Care
I did a contract in the run-up to Y2K to help with some code that used two-digit year fields. In their defence, it was originally written in Fortran II sometime in the early 60s, and I think they can be forgiven for not thinking it might still be in use nearly 40 years later!
It's with Cloudflare's resolver
I found this by looking at spark source code to figure out what they were doing under the hood to deal solve this problem. :)
My system's SystemD was not affected (I use Arch btw)

https://archlinux.org/news/the-xz-package-has-been-backdoore...
Could you elaborate? I think I totally miss this subtleties
I disagree that this is comparable to American politics in 2001, and that Eelco isn't actively involved.