skysight-inc/HackerNews huggingface dataset:
Such a mandate would still be useful. Even of 80% of users can view things on ipv6, very few people will sacrafice the 20%.

I'd like to see rules that force ipv6 support, and then to prevent idiot network admins from disabling ipv6 locally because they're too lazy to learn how it works, make some websites v6 only. Start with essential government websites and move on to laws forcing more and more private websites to be v6 only to force people to maintain its functionality in their networks.

See: https://konecipv4.cz/en/

The market has been given its chance to move for DECADES and we're not NEARLY at the approximately 100% deployment that we need. It's time that we fix this mess.
We will see. I still have some hopes, call me foolish or naive, that Microsoft will implement Recall in way that would be compliant with EU GDPR. The user is in control and can decide how data are being accessed. So far that’s what I’ve seen, users can control applications, website that are saved, and for how long. They can also easily delete a timeframe of data.

But if I’m honest I would never use that feature if I would leave outside of the EU, I don’t know another regulatory body big tech is taking seriously.
Here's Google's graph: https://www.google.com/intl/en/ipv6/statistics.html

Adoption rate is currently increasing roughly linearly at a rate of about 5 percentage points every 12-18 months. Also note that there is a clear weekday/weekend pattern, with weekdays about 3-4 percentage points lower than weekends.
Cause society leaves you hanging and alone with genetic curses best yiu get is chemical pacifiers and endless wallowing in the psychological diggestive tract to reform you into a productive sociopath. Labels help to for groups of people suffering a similar fate ignored by the out group, which does not get what labels are for.
the problem Tinder is used to solve is being single. If you use it for ten years straight it has definitely not solved your problem. It’s therefore a Market for Lemons.
Yep, the HTML5 spec has an agreed on way to parse and interpret invalid HTML, so all modern browsers should handle it pretty consistently.

I was more interested in finding out where this style had come from really, because I've seen a lot of devs doing something similar and semantically it's just always struck me as a bit odd looking!
Tangential to this bill, wonder if anyone has predictions on how driving a car yourself vs taking a robotaxi (e.g.,Waymo) will play out over time (assuming autonomy doesn't get derailed due to risks in the tech or crippling regulation). I ride Waymo a bit these days and it's still surprising when the car comes to a complete stop at stop signs. I'm actually delighted by it and I say that as a fan of driving (and, candidly, speeding when I do) though certainly not on traffic-choked roads and freeways. If I could vote tomorrow, though, and everyone would drive as "thoughtfully" as a Waymo, I'd vote for it. That said, I can't see any politician in a red state like Texas, or even in many blue states, telling folks they have to give up driving themselves. Is it a foregone conclusion that if the tech does in fact survive this break-in period, that governments will stop people from driving? Will it have to be a hybrid forever in the name of "freedom"? A lot of ink has been spilt about this already on HN and elsewhere, of course, but always interested in the HN crowd's current view on this.
My money is that outside of a couple of dog and pony demos with everyone on one well-administered LAN you could not make this work with system time and NTP on consumer devices. You will regularly see 100ms difference in NTP time.

The fact that phased array microphones exist has nothing to do with the point we are discussing, which is audio coherence across heterogenous devices whose only real connection is a web browser.
Cool whats the energy density of this? The sodium batteries also look promising.
Is there a list of journal ratings? Howwould I know what is junk and not ?
> some countering that it might just be the practice of drinking a very hot infusion

Yeah and from what I remember, frequently cited studies were looking at the combination of maté with tobacco and alcohol, others didn't control for the delivery style. Maté, especially when consumed in a tiny gourd that's constantly refreshed with boiling water, can make the tissues in your mouth and neck more vulnerable to subsequent cigarettes.

On top of that, maté leaves are often smoke dried, which carries some self-evident risks. My conclusion was to get air dried leaves and be mindful of how hot the water is.
Medical Forecasting
Submit a username and password via a form over https. Your backend hashes the password, and checks it against the stored (hashed) password in your database. If it matches, the user provided the correct password. Create a session token (random string is fine) and return it to the user via a cookie in the reply. Store the session token in your database, such that you can map it to the authenticated user. Then on each subsequent request, look up the session token and you have your logged in user.

This is how apps were doing it for literally decades, before JWT was invented. And most web frameworks will do all of this for you.
I do. I'm trans and have had sexual reassignment.

I do notice I've been heavily downvoted and flagged. How dare I share my experience.

Interesting how everyone hates on me for being trans.
Sadly most of modern communication infrastructure is built on the stateless substrate of HTTP, where every interaction starts from a fresh slate. And zero trust networking suggests we should not rely on border checks to let people 'in' and 'out', but rather check access control at every interaction.

Really, modern practice has moved past 'log in', sorry.
A Bull Market in the Humanities
Because they don't care to apply those top notch optimizations to their exception implementation.

VC++ is much faster, as it pings back into Win32 exceptions, for example.
> as fast and convenient as filling up a gas tank in 1-2 minutes.

I recently drove to the airport in a bit of a rush in a small 4-cylinder car. Drove straight up to pump that was basically touching the road I was on, tapped credit card, authorized for $100 and opened cap at same time. Stuffed the pump in and held it at max flow. 45l of gas later, cap back on, pump away and moving again.

I don’t think it would be possible to be faster.

Total time stopped: 7 minutes.

I'd love to know how much range you're adding to your ICE vehicle after pumping gas for 1-2 minutes.
"We found no evidence of increasing risk with a larger area of total tattooed body surface."

Without a dose response, I'm inclined to believe that the increase in lymphoma seen in people with tattoos has more to do with confounding factors than with the ink or the act of getting a needle poked into your skin. I would think that controlling for all confounders in a study like this would be exceptionally difficult.

That said, I'm pretty sure that at least some inks do contain known carcinogens[1]

[1]https://tattoo.iarc.who.int/background/
"If you want to make something dirt cheap, make it out of dirt. Preferably dirt that’s locally sourced."

- Don Sadoway (liquid metal battery comprising liquid layers of magnesium and antimony separated by a layer of molten salt)
https://www.youtube.com/watch?v=hNBgEirKxq8
Your benchmark supports the position that exceptions should be used instead of return codes for better average case performance, at least for GCC.

If your function throws an exception 9% of the time, then it outperforms error codes. That's because you always pay for the cost of an error code, regardless of success, but you only pay for the cost of an exception on failure.

I suspect most functions don't throw an exception 9% of the time that they are called.

For clang, yes the situation is worse, indicating that if your function throws an exception ~3% of the time it's better to use error codes, but once again I don't think most functions throw an exception 3% of the time.

If you need to optimize for latency, or real time performance, then exceptions are not at all suitable and I think most performance sensitive developers who have those requirements already know that.
"might as well"

Those are the most expensive 3 words in the english language!
I'm a daily mate drinker (from Argentina). It's like a milder coffee. Great beverage, I recommend it.
You can add Ubuntu PPAs and install software from them on Debian. Occasionally, the software won't run because it's expecting different versions of its dependencies, but I'd say this is the exception rather than the rule. It's more likely to be an issue with games or specialised scientific tools, whereas development tools probably won't be fussy about which versions they require. And you can always use Ubuntu inside a container (with Podman or Docker), chroot or virtual machine (libvirt or VirtualBox), or even use an alternative package manager like Nix, Spack or Guix on top of Debian!

One final suggestion is to simply look to see if Debian already has a piece of software when people suggest using a PPA. Some developers don't like Debian (for instance because Debian disables tracking code by default) and recommend PPAs when you don't actually need them.

P.S. 'PPA' is a Ubuntu term, while Debian tends refer to 'third-party repositories' instead. Luckily, they are exactly the same thing!
I’m not surprised — tattoo inks are not regulated and the colors are often formed with toxic compounds (e.g. copper). Then the needle avoids the protective barrier provided by the skin.

Ironically, while working on a drug program that involved intradermal injection, we needed to tattoo the injection site so we could find it later. The FDA was very demanding that both the procedure and more importantly to them the dye would not have any effect that might alter the body’s response to the compound under test. We had to do a whole study just to validate this.

So the FDA is concerned about this issue for guinea pigs, but is barred from investigating the effect on humans. All they can do is publish advice on their web site.
fine with me as long as you don't pronounce it "jay double-u tee"
The electrodes lose contact with the solution if enough gas is collected.
It's unusual, at the very least. Because it's relatively close to us.
> You probably don't really need Auth0

And there's a good chance you really don't want to pay for Auth0. Their Enterprise tier becomes very expensive as your MAU starts to grow
> which works for CSVs that fit in memory.

what? Why CSV is required to fit in memory in this case?
I tested CSVs which are far larger than memory, and it works just fine.
>I don't see how it could be anything else and pass any data-protection regulation

>Having said that, I'm very much aware that most implementation of these tools will become a security and surveillance nightmare.

The contradiction of the quoted statements nullifies anyone's ability to make sense of the theme in the post.
I generally don't find that sort of thing offensive when combined with useful alternative approaches like your post provided. However the phrase does come with a connotation that you are surprised by a lack of knowledge or skill in others. That can be taken as smug or elitist by someone in the wrong frame of mind.
Because what we call electricity is electrons moving. So it would make sense for electrons to have the electric charge.

Now we are in a weird situation where current flows from positive to negative, but electrons flow from negative to positive. It would be a lot more logical if the direction of the electrons was the direction of the current, but the name was arbitrarily decided before we knew what electrons were.
It looks like you have a bottle of oxygen and one of hydrogen.
The best tooling to have them automatically applied are VC++ and Clion.

Or you can get the DevOps team to install Sonar, PVS, and then it gets "automatically" enforced by not allowing merges with broken guidelines.
Turn It Up or Turn It Down
> It's amazing how we deprecated unencrypted http across the internet but still use the equivalent for ip addresses.

This makes no sense, http is flawed because its unencrypted and allows MITMing information.

IPv4 is flawed merely because it doesn't have enough addresses.

How are these two comparable? Your proposed "solution" is overkill and is completely ridiculous.
> the stored (hashed) password in your database

Hashed and salted

I hope
> just with more bits for address

And by having a just more bits for the address - be incompatible with IPv4.

DNS is IP^W address protocol agnostic, by the way. If you really need you can run it on IPX/SPX.

DHCP is just a lack of the autoconfiguration in IPv4. No thanks. Nor APIPA, nor DHCP with the same 192.168.0.1/24 everywhere solve that properly like in v6. Sure there were some nuances in the begging (like the inability to provide the DNS servers addresses at the beginning) but they were solved 15 years ago.
OpenAI's ChatGPT "custom instructions" do not add to your token count AFAIK.
They ARE limited in size, though.
Anecdotally: yes. Mimic saddles are more comfortable for both men and women than identical non-mimic models. Myself (male) included - it was a significant improvement. It’s a simple change, softer padding, something that recreational riders have used for decades.

When I sold saddles at the bike shop I would say “women are more sensitive than men, surprising none of them”.
>but then you are offloading all the issues of JWT's to Auth0 so in theory, probably not in practice, you don't have to worry about those.

Yeah, exactly. I get to offload everything to Auth0 instead of maintaining a cryptographer on our payroll to reimplement a solved problem. Hand rolled OSS authz/n may work for individual projects, but there's no other reasonable solution in a modern enterprise environment with SSO.
I don't understand your example because from your description I can't tell who set the place ablaze.

If it's the owner, then it's insurance fraud, and it has nothing to do with moral hazard.

If it's not the owner but say a random crackhead, then I also fail to see how it qualifies as moral hazard, and if the insurance doesn't not cover them nobody will (because the arsonist is insolvent and will never be able to pay $3M) and the business owner is screwed, which is a terrible outcome (and is exactly what happened here).

In any case the answer to 1) clearly is “the insurance company” exactly as if arson is excluded.

> Without insurance, the owner is the one who bears the costs directly no matter what,

Which is exactly what he's trying to avoid when paying for an insurance in the first place.

And like with health insurance, there's actually very little link between the fact that you're insured or not and the risk you're taking (Like nobody gets hurt because their injuries get reimbursed) because the harm goes far beyond the economic loss you're insuring yourself against.
The same way that 240/4 can become internet routable: a global effort to change defaults and push code and configuration changes everywhere over the next two decades.

It isn't all in use on most machines. Many hosts only use 127.0.0.1/32 and do not use the rest of the space; changing the default netmask on the loopback interface from /8 to something like /24 would be one step of the transition.

Like 240/8 it's probably not worth the effort.
In addition to the sibling comments, I have a somewhat esoteric reason to wish that the signs of electric charge were reversed.

In the coordinate system of an atom, the nucleus is at the origin, 0, while the electrons are a positive distance from that core. 0 is not negative, obviously, but it's non-positive.

When terminology is concordant in this way, the topic is easier for a student to grasp. When discordant, harder.

There's little chance for this wart to be remedied, invalidating every paper written up to that point is a bit of a non-starter. But I dislike it nonetheless.
The life of an optimization barrier in Rust and WASM
He is.

https://www.reuters.com/business/autos-transportation/tesla-...
So the problem is the people not the words.
Maybe instead of overloading the shorthand with two definitions, it's best to just use the actual words.
>What an absurd statement. It's a) not a fucking competition and b) nearly impossible for you to know that and c) not going to be universal for all balls-havers and all labia-havers.

As a trans person, having both equipment, and being a long distance cyclist. I was just sharing my experience.

But as usual the anti-trans people on HN have censored my comment.

>Also, like, what is your comment even aiming to achieve?

Sharing my opinion in a way that people hate I guess?

How dare I share the recommendation for women's padded underwear.
This is the direction I've moved to as well. I've used ROR and Clojure w/ heavyweight frontends in the past, but I eventually came around to the idea that I value Go w/ stdlib to avoid dependencies/framework churn, have painless deployments, and get extremely solid performance w/ minimal memory footprint out of the box without doing anything special.
But the original point is valid that most "how to" blogs will turn your gaming rig into a heating device. It's not that the chatbots are better, it's that getting trivial information from the Internet has become a form of torture.
Authentify is also valid but obviously leads to even more confusion
It should be deployed everywhere where IPv6 is deployed and there's an IT department if only for logging/audit.
Technically yes, of course, but if you’re using an algorithm that requires you to manually worry about salting then you’re probably doing it wrong. Hence, “hashed” with an algorithm like bcrypt or scrypt is good enough.
C/C++ is just fine, just use it properly.
There are some subtleties here that are important to know[0]. Which is why I generally advise people to use the framework provided code for this.

0: Such as use a secure hash like sha256 or blake2 instead of md5.
> A program which will do anything for anybody...$15.00

Such a bargain!
Parquet is a file format, not a piece of software. 'apt install csv' doesn't make any sense either.
Big data companies or those that work with lots of data.

The largest dataset I worked with was about 60TB

While that didn't fit in ram most people would just load the sample data into the cluster when I told them it would be faster to load 5% locally and work off that.
While I could agree with the sentiment "consider using opaque auth tokens instead of JWTs in most use cases" I can't get behind the opinion-presented-as-factual-statement tone of the article. There are valid use cases to offload authentication to the client rather than verifying an opaque token with every request. One advantage is that community support for JWTs is large, but home-grown, ad-hoc opaque token solutions not so much. Another is that any claim at all can be stored in the JWT: IP address, user name, opaque token, whatever makes your app secure. While these same claims could be stored in a database, now you have extra overhead and maintenance dealing with them.

I would like to see an open-source project from this author that uses his proposed solution.
"anchor or a trawl is dragged across it"

At this point this seems to be the most common cause of see cable damage.

I guess the captains decide that it's worth dumping the anchor in a storm to protect the cargo even if the area "forbids" it.
fair enough, but you're also downplaying/omitting the huge dependency cost of React, both server side and client side. so pick your poison.

you're basically saying "I want server side code without having to actually code anything". of course nothing is going to beat react, its an impossible ask
No, not all were IR.

But all of them made by "LG" and featuring a single-chip design are either IR or RF.
Because in an electrical current it is electrons that move (usually, unless you have a hydrogen plasma or something), so since electrons have a negative charge, the direction of the positive current is the opposite of the direction the electrons are flowing.
What was your takeaway? Any added insights/reading?
It's not that simple for non-native English speakers, not everyone works in an international team so English is being used on a technical level and you basically have to memorize what those words mean if they dont have similar sounding equivalent in your native language. And there people mess it up or simplify the terms by combining them and it doesn't make sense. And you wouldn't use your native language equivalents because docs are usually in English and we code naming things in English. Using those dumber terms would be much more straightforward for everyone.
The client ID should be a primary key or some other indexed value, making those database hits fairly cheap. You'd also typically have some kind of rate limiting.
> One could buy a bicycle costing several hundred (or even a few thousand) dollars or euros with a lighter body, fancy brakes, suspension and so on, but you’d still get sub-par saddles.

I think the fact that saddles are so individual means that high end buyers expect to be replacing the saddle that comes on the bike with their own personal preference. So brands are incentivized to compete on cost and equip the bike with a cheap saddle since buyers aren't comparing full bikes on the basis of saddle.

> As a non-cyclist, I’m curious to know if there’s even any kind of standardization to fit saddles to any bicycle

Yes, saddle rails are extremely standardized. For most saddles it's a pair of "7x7mm" circular rails that get clamped by the top of the seatpost. (Carbon-railed saddles use 7x9mm rails, I think, but that's a pretty niche part of the market.)
Even a correlation with the amount of ink could be a lifestyle confound. I'm pretty sure that the population that has a small tattoo differs from the one with large parts covered. Indeed, it is hard to find a cause.
Maybe not the C community at large, but companies / teams / projects that care about security have done this. For example, iBoot uses Firebloom which is basically C with fat pointers and bounds checking.
If you follow the link from this article to the preprint, you'll find some explanations, references to other papers, as well as enough terminology to do some Googling.

Have fun! It's quite interesting.
As a kid I tried hanging with adults doing this.

That social circle was fun. I do miss it.

The idea of sitting in a circle today for four hours between meals seems unattainable today.
I think developing these habits requires real will power.

Its relatively easy getting pumped and aggressively dieting or exercising for few weeks/months, and then later slowing down and gaining back all the lost pounds.

A habit that seems to be making a difference for me is consciously chewing food 2x longer than usual. I end up eating less food and have improved bowl movements.
Yes, though I would recommend something that is resistant to timing attacks such as bcrypt. And this was why I mentioned frameworks in my last sentence. My intention wasn’t to give a comprehensive soup to nuts guide for what to do; instead i was giving a high level overview.
Some time ago authentication was shortened to authn and authorization was shortened to authz. If I had to guess that was to aid people who had to write those words a lot. In that aid, I think they've somewhat lost meaning and just became generalized as "auth". People generally do know there are two steps to auth, are aware of the standards, but when asked to put it in words struggle because of some lexical convergence.

An analog to this is when I first stumbled upon words like a11y and i18n I had no idea what they meant. Now that I've actually had to deal with internationalization systems and accessibility systems I know very much what they mean, but similar to "auth" they're an umbrella invoking a large number of systems that can all function differently.