skysight-inc/HackerNews huggingface dataset:
You have to look a little further back into mid-2000s to see larger impact XSS attacks, but each FAANG has had to recover from them. I'm on mobile right now but I'll look for some examples later.

What most companies realize early on is that you can't guarantee you'll prevent an XSS from slipping through. But, having a good template engine that sanitizes all strings automatically is good enough preventative measure, and putting all user-submitted content on a different subdomain or domain (like usercontent[dot]company[dot]com) with browser same-origin policy and perhaps CORS rules, will be enough to keep the impact contained. From there, just about everything else can be categorized as user error.
MPS implementations generally lag behind CUDA kernels, especially for new and cutting edge stuff. Sure, if you're only running CPU inference or only want to use the GPU for simple or well established models, then things have gotten to the point where you can almost get the plug and play experience on Apple silicon. But if you're doing research level stuff and training your own models, the hassle is just not worth it once you see how convenient ML has become in the cloud. Especially since you don't really want to store large training datasets locally anyways.
I use nix (flakes) almost religiously now for exactly that reason (both for Python and R).
A new one is on the way.

https://beta.weather.gov/
The word "methane" doesn't appear once in that article. Any time you bury organic material in anoxic conditions you can get anaerobic decomposition, which makes methane. In the short term methane is a very powerful greenhouse gas.
So safe the effort for the things that actually matter in your life.
Vox just posted a video called "Why China is winning the EV war: it's the battery":

* https://www.youtube.com/watch?v=rkxMdmipYqM
This exists:

https://global.abb/group/en/technology/did-you-know/pantogra...
Thanks, I have a book about win32 programming, published 25 years ago but seems to be still relevant. I'll read the internals after I get some ideas about user space programming first.
Not an expert, but it seems very clear to me that autothrottle is not intended to disengage when you press the takeoff/go around button. The whole point of that button is that you press it when you need to take off or go around and the plane attempts to set itself to a configuration where as long as you point the nose in the right direction then that should happen.

But it does rather sound like it was an expected behaviour. The system has a history of nuisance disconnects, the manufacturer recommends that you reject takeoff when that happens, and for some reason instead of doing that, the crew reacted to the disconnect warning by pressing the button again and, at that point, trusting that it was engaged and working. My reading of that is that the plane regularly has an A/T fault that can be fixed by simply pressing the button again, so this crew has developed a habit of doing that, but this time it was a different fault with different behaviour that their usual fix didn't work for, and they just failed to notice.

The report is clearly limiting itself to describing the difference between what actually happened and what the procedures say should happen, rather than speculating about what the pilots were thinking, but that's the only way it makes sense to this very much not expert that you shouldn't pay too much attention to.
No. Every system can fail. Manual systems fail too (people aren't perfect). Having an automated system there for most of the time when it's more likely to do the right thing than a human is still good for the overall reliability of the system.
If you want a great deep dive on this offbeat topic (with interview directly from the person who selects/fabricates/implements car paint colors at Subaru), I highly recommend this Freakonomics podcast episode:

https://freakonomics.com/podcast/car-colors/
Definitely Python. I only use R when I have to (working with other people). R packages are a nightmare.
> lithium-ion batteries ... aren’t ideal // The Material Sciences Group at the DoE’s Pacific Northwest National Laboratory ... teamed up with Microsoft. // Using a combination of AI models and cloud computing, the tech giant simulated potential chemical combinations for batteries, starting from a list of 32.6 million materials. Within just 80 hours, it had identified 18 promising candidates for new battery materials. ... Something that could have taken years

> PNNL scientists have already synthesized one of the candidate battery materials for testing — if it performs well, it could enable production of batteries containing 70% less lithium

https://news.microsoft.com/source/features/sustainability/ho...
500kW charger has non-trivial size and cost.

Even a 60kW unit [0] looks to be pretty large and listed as "call us for price".

[0] https://www.heliox-energy.com/us-products/60-kw-dc-charger
You could still buy merch. I like buying vinyl and displaying it on my wall, personally.
True, but in this case there was a __known__ bug.
Neither is correct.
1) (new and innovative) and (safer, written in rust) are orthogonal attributes.

(2) Rewriting isn't necessarily a waste of time. There are rewrites of some wretchedly vulnerability-prone (and poorly extensible) core infra like ntpd, sudo, etc., that are sorely needed. Plus, rewriting them in a safer language will make it easier for future innovations, because it won't be as terrifying to try to have on them without introducing yet more vulnerabilities.

(3) Same applies to using rust for future components within the kernel and major browsers.

(4) Sanitizers are great, but they're not as strong as what you get from a memory-safe language. Most importantly, sanitizers only check where your tests cover.

(5) ripgrep. It's not a rewrite of grep, it's a rethink, and it's amazing.
I am reading the book, now that you mentioned. I only reach the part when David was hired by Microsoft though. Actually I'm super interested in his earlier works in Dupont and DEC as they paved the way.

I took him as an inspiration. His “What I really wanted to do was work on computers, not apply them to problems.” rings so true with me, and he as a natural leader also makes me look up to him.
R has been part of my stack professionally for around 16 years and in that time I'd estimate maybe 15% of my code had anything to do with statistics. I've used it for numerical modelling, data viz, ETL pipelines, deploying APIs, building dashboards, amongst many other topics. To reduce R to statistics is doing it a disservice.
sorry to interrupt your comment thread, this is completely unrelated. are you the tracerbulletx that used to go by davey on an old forum called ultio? i know it's a long shot. i've been trying to get back in touch with him over the years, but all the forms of the internet that we used to communicate over are now dead. anyway, hope you're having a good day either way. if you're not davey, disregard this. if you are, let your pal cass know you're alive? cheers.
Thank you for doing this!

As my own sidebar, I spent many years at a national lab working with distributed sensor networks (primarily ATC and other radar for detecting non-weather stuff :) ). I thought about using ADS-B as input for weather state and forecasts, but never got around to trying it. Now that I am working on my own startup (self-funded and without revenue so far), so this again will likely languish in my todo list. If someone wants to try it, great, and feel free to reach out as I can probably save you some time selecting and interpreting the right ADS-B fields:

We have a lot of aircraft blasting ADS-B reports whenever they fly. Most reports contain (1) accurate 3D position, including altitude and (2) barometric altitude measurements, which gives you (after some minimal work) air pressure. So you have millions freely available pressure reports not just on the ground, but throughout 0-40000 ft altitude band.

You also get measured airspeed and groundspeed, so in addition to pressure you get wind vectors at thousands of points in the air, updating in real time. I suspect this can provide some non-trivial information and I am not aware of anyone actually using it for this purpose.
Are you getting paid for broadening your horizons or for getting sh*t done?

Stroustrup was spot on about two types of programming languages.
I didn't realize the probability of death in a drop of thousands of feet is under .00001%
Cities know how to improve traffic. They keep making the same mistake
The worst case used to be 6.5 degrees. The worst case has been revised down to ~4 degrees.
There is a difference between having something and then losing it vs not having it yet. If you get a license to do a thing you should be able to keep doing it until you are deemed incapable and that will vary between people.

Also, plenty of children those ages drive on private property, especially farms. There are kids doing backflip jumps on dirt bikes at those ages. Many of them are likely safer to be driving than others who are of "prime" age. I drove with a 30yo who terrified me with his dangerous lack of skill.

People are variable in capacity and skill. The bureaucracy finds it more manageable to put policy in place than to determine individual skill.
> London buses spend a lot of time stopped at bus stops.

A lot of cars spend a lot of time stopped at traffic lights and often stopped/crawling in traffic, and it's probably why start-stop mechanisms can really improve fuel efficiency. Engineering Explained with "Americans Have No Idea How Much Fuel Idling Uses":

* https://www.youtube.com/watch?v=dFImHhNwbJo
Here is an example: https://www.wordfence.com/blog/2020/05/nearly-a-million-wp-s...

That is what happens if you are the WP admin and think that you don't need to update your plugins because "it's just XSS, nothing major".
When I type "ps -aux", why do I get all the information from other users too? Shouldn't this be private information by default?
Bike do fine. Riders, not so much.

Seriously, I cannot recall any news report, of any bicycle accident, that didn't end in permanent injury or death (which sort of makes sense, but still ... )
WWDC 2024 What to Expect: AI, iPadOS, iOS 18, macOS 15, Siri, More
Someone needs to keep the ember of sanity burning in this vast darkness
The title makes this sound sinister, but Google is avoiding a jury trial by accepting the damages as claimed. Google was just recently handed a devastating loss after a jury trial in Epic v Google, a loss they don't want to repeat. The government asked for $2.3 million and Google agreed to pay it, obviating the need for a trial of the facts by a jury. This seems to be an entirely normal process.

Also note that this is US v. Google (2023), the one about the advertising market, not the 2020 suit about search.
The conspiracy theory is that Boeing hired somebody to kill the whistleblowers. But even if they committed suicide (which is more likely), it is because of the immense pressure but on them by Boeing. Which, in my book, is as bad as hiring a hitman.
NASA Exploring Alternative Mars Sample Return Methods
can't read? parent clearly says "ARM macbook".
How Python Compares Floats and Ints: When Equals Isn't Equal
Still, why is one of the most densely populated countries in the EU designating so much of its land to agriculture?
It's not about how many bits are 1 - it's about how many bits are important. And the first bits are always most important. So it's the first x bits.

If you have a /48 then 48 bits are used to determine the address is yours. Any address which matches in the first 48 bits is yours. If you have a /64, any address which matches in the first 64 bits is yours.
Perhaps amortize the size/cost by combining the bus stop with a charging rack for e-scooters/e-bikes.

Might be a bit cheaper per unit if you buy 19,000 of them (one for each London bus stop).
>You are far more likely to die of eating too much and getting too fat than whatever microplastics are supposedly doing to you.

Funny how you can imply that we are still in the dark about how microplastics and other toxins or chemicals (in our food or water supply, for instance) actually affect our health, and, at the same time, assert with such confidence that something else is more likely to kill you. You don't know how A is really affecting you, yet you're saying that surely B is affecting you to a greater degree than A? Are you incapable of seeing the incoherence and bias here?

>it's largely due to the fact that we're succumbing to diseases of lifestyle that are entirely within our control as individuals.

Yet another unfounded assertion to protect your dismissive standpoint. Man, I'm glad you decided against becoming a scientist, phew.

>folks, take a step back and realize...

>Worry about that, not...

No. The issues the user you replied to are legitimately concerning and I don't think it's reasonable to dismiss his worries, which many people share, especially through such an unscientific and biased way of thinking.
posixutils is something more. (see README.md)
> Everything combined costs me $55 per month.

For many (most?) people this is too much; enough for them to give away some control to a third party - and get a similar product for free.
Wavefront Threading Enables Effective High-Level Synthesis
You can harden your system using hidepid.

Chapter 4.1: https://www.kernel.org/doc/html/latest/filesystems/proc.html
This doesn't always make sense.

In Zürich Switzerland the calculation was done between placing charging systems at end terminals or at the central garage (where busses park over night).

It was determined that a central garage charging setup is better because the time the bus spends at the end station may get shortened significantly in order to keep the bus on schedule. So charging time would be very irregular. Also to get the power infrastructure to those locations is very costly compared to a central location.

The new battery bus fleet in Zürich can run for about half a day and then return to the central garage.

Future buses are expected to become more efficient and have larger batteries so the central charging setup makes sense.

The central garage has a fast charging setup for 74 busses underground. It is a very impressive setup.
My dreams are usually more disturbing, or fun…

But yes. My work is kind of similar… I do some data curation / coding, and help 2 engineers who report to me. I enjoy it.
err...

> ... we have entered into a new long-term agreement with Apple that extends beyond 2040, continuing our longstanding relationship of collaboration with Apple and Apple’s access to the Arm architecture.

Arm's IPO F-1/A.

https://www.sec.gov/Archives/edgar/data/1973239/000119312523...

Which was linked in the MacRumors link.
Curious what troubles you had with R packages? I find R packages the easiest to use of any language; install.packages("<package name>") and library() and you're off the races. I occasionally have library issues with python/ruby; many more still bundling javascript. By contrast R rarely gives me grief.
The problem is it adds quite a bit of thickness to the device. The framework 16 solution where it slides into the back is better, but we will see how well upgrades are supported.

Surprisingly the older iMacs are very upgradeable because of their socketed CPU and MXM GPU. I recently received a free 2010 iMac and was able to upgrade the dual core i3 CPU to a quad core i7, which then boosted the RAM limit to 32GB. I also grabbed an $8 FirePro M4000 MXM GPU from a dell laptop and flashed it for MacOS compatibility .

This old 2010 iMac now has a quad core cpu, 32GB RAM, and a metal capable GPU running the current version of macOS Sonoma. It's running great, and I can essentially run every app on the machine without ever hitting swap, unlike my 8GB MacBook Air.
It's configurable - "hidepid=1" mount option on procfs.
> Nothing about language is determined by reality.

This is just transparently silly. Or rather, you're equivocating between "language is not fully determined by reality" and "language is uncorrelated with reality." Language is partially caused by reality; thus, large language models, seeking compression, learn the arbitrary parts and the reality parts separately. That's why they can translate.

The human sensory stream is a kind of language. The exact same logic goes for it! If LLMs could not learn about reality from language because language was not determined by reality, then human brains could not learn anything about reality either.

Nothing about reality forces a certain neural state vector to correspond to a certain sense impression. E pur si muove.
Despite a 100% tariff on cars imported to the US by BYD. They are already making buses in the US: https://en.byd.com/bus/about/
> Mallory belonged to an older generation (he was thirty-seven)

what a depressing sentence lol
Why is this unfair? With these private companies I get access to all this data for free. If the government did it I would have to pay for it out of my taxes. Why do we need the government to provide more accurate forecasts when this is already taken care of by the private sector?
The ocean temperature data from the last year is suggesting that there are significant problems in the climate models and not in a happy direction. I try not to dwell on this subject, but I’m increasingly glad that I never wanted children.
That this has to be an either-or crusade against Boeing instead of blaming all the relevant parties speaks volumes about how much fucking damage "journalism" like this does.

Once again: Both Boeing and the pilots along with whoever else is involved in this are all to blame equally.

If you're going to let pilots who don't properly check their engine gauges off the hook because you are far more interested in crapping on Boeing specifically, planes are eventually going to come down regardless of Boeing.
"Work on computers, not apply them to problems" feels like the kind of mentality that gets a lot of people into trouble :)
Open Source Next.js Boilerplate
My weewx station has been running since 2013 on a RPi.
Makes sense. Jack Churchill did WW2 with a claymore and longbow after all, why wouldn't other nations have similar anachronisms?
Not nearly as hard of a problem. Python does work just fine when it’s pure Python. The trouble comes with all the C/Cuda dependencies in machine learning
I think generalization would have been a better word but everyone understands what they meant
Why should anyone care about the emotional state of members of a "private army"? Why would this be one of your analogies in the first place?
Earth feels like a chemical reaction over a very long period of time.

Atmospheric methane was abundant billions of years ago. Then somehow life appears and transforms the composition of our atmosphere.

Now humans are terraforming us back towards the initial stage.
Oh wow, I’ve been a Python engineer for over a decade and getting dependencies right for machine learning has very little to do with Python and everything to do with c++/cuda
People can downvote you for any reason, don't worry about it. If I had to guess, someone may have mistaken your summary as a shallow dismissal of the work. On another note, your reply comment is addressed by two different HN guidelines which is impressive.

Please don't comment about the voting on comments. It never does any good, and it makes boring reading

Please don't post comments saying that HN is turning into Reddit. It's a semi-noob illusion, as old as the hills.
Depends on timeline

If the concern is: my apartment burned down and I need a backup from this past month, it should be ok (given the double copies & other redundancy)

If the idea is that they feel safe deleting things from main storage because it's backed up several times, your concern is probably right. I'm not sure tape is really justified for their use though. (What else has comparable longevity?)

And of course you could back up somewhere else. But eg mongo doesn't let you delete from their cold storage iirc (I can't validate this claim! So consider it hearsay)
But she hasn't - WADA has appealed to CAS and will likely prevail. At which point she will get the 6 month or so backdated suspension she was always going to get in a case like this. The whole "spend all your money" part was entirely unnecessary.
Are high AI computing costs weighing you down?
I found something interesting via Github, Enova open source.

1. Easily deploy LLM and create a WebUI with just a few command lines!
2. Recommend optimal computing resources and operating parameter configurations for LLM
3. Dive deep into LLM's operating status and let it self-heal during any abnormal conditions!
4. Achieve seamless load balancing through autoscaling!
I agree, but unfortunately Asciidoc’s adoption is limited (imo) by the fact that the two most supported parsers are written in Ruby & JavaScript. Not having a C library really limits its potential reach. I personally tried it and enjoyed it, but Ruby/Javascript don’t fit into my projects or preferred tools.
Languages aren't just good or bad in the abstract. It's about problem-tool fit. The author mentions a specific field and evaluates the fit of R and Python. Do you believe there is a language with better fit to Bioinformatics? I'd like to hear your recommendation.
The same goes to smartphone as well, that's why Samsung was and is still winning the smartphone market due to its superior display manufacturing capability. BYD used to be the major OEM battery supplier for cellphones then smartphones, and Samsung used to be the major OEM LCD display supplier for cellphones then smartphones including Sony [1].

[1] How China’s BYD Became Tesla’s Biggest Threat:

https://www.wsj.com/business/autos/how-chinas-byd-became-tes...
Understanding the LLM Development Cycle: Building, Training, Finetuning
Why Elon Musk switched Starship from carbon fiber to stainless steel
Grand-parent: programming languages are tools. The more tools you can wield, the better you can choose the right one for the job.

Parent: yeah, but R and python are shit tools; learn how to use better tools too.

You: are you paid to learn how to use better tools, or are you paid to solve problems with shit tools?
None of this discredits the argument that there exists an isolationist strain in US politics today.
4 named Israelis rescued and 40k nameless "terrorists" killed. It's insane how Israeli propaganda gets a free pass in HN. Shame on you
Careful, this won't stop systemctl from showing the full process command line in its output.
Tape storage is way too expensive. It needs to be disrupted.
If you make it that long
The words of an elected president (and at least half his party) absolutely qualifies as proof of an isolationist strain existing within US politics.
Really? I did it recently (integrating an OpenGL texture render target into a D3D application) and it was pretty straightforward (on Windows, at least).
It wasn’t long ago that switching to agile was the “swimming upstream” activity.
The problem is that the Sun is significantly brighter now than it used to be back then, so the amount of heating from the same amount of methane/co2 is proportionally more now too
Somewhat related question... I bought a used hard drive from a thrift store. It has a massive and very eclectic collection of music on it, but the file names and ID3 tags are a bit of a mess. Any recommendation on a good way to clean all that up? The errors also include some band name misspelled, etc.
Little surprised that there aren’t contamination concerns with pumping waste water back into the snow pack. I guess at -60° it doesn’t travel far, but still.
I’ve watched a few videos on YouTube (using the DaVinci surgical robots) and they’re nothing short of amazing.

The ability to perform (certain) surgical procedures while minimizing trauma to the body and speeding up healing, is a welcome advance.

I’m not a doctor, just a curious nerd.