skysight-inc/HackerNews huggingface dataset:
"I would prefer if Hindu artifacts and texts and ancient Indian history remains hidden. It is not a safe space out there because even though India is allegedly a Hindu majority country, there are strong interests to wish to erase the Hindu identity of India"

So to preserve "the Hindu identity of India" important parts of that story should remain hidden, rather than scanned and distributed more? (we were talking about documents here)

That does not make much sense to me. Also when you say "the Hindu identity of India" it sounds a bit absolutistic to me. Hinduism is no doubt a important part of india, but maybe not the only one?
I thought it was understood that vocal language grew out of sign language used by hominid hunting groups?

It seems to me that "action selection and the sequence of actions" reaches it's zenith in pre-linguistic animals in hunting. It would be the most complex sequence of actions any animal attempts? (Building a nest, say, is complicated but static: the nest materials are not actively attempting to avoid being made into nests. Mating behaviors are instinctive and stereotypical. Only hunting is open ended?)
Thank you! Yes, you should definitely use this instead of localstack :)
> First they came for the homeless, and I actively celebrated it.
Middle-upper suburban logistical warfare. A game theoretic amalgamation bound to piss off drivers.
You make China sound like a VC,

Uber, AirBNB, etc ran at a loss to try to own the market.
So maybe we have different definitions of "time travel". But I recall that

- if a compiler finds that condition A would lead to UB, it can assume that A is never true
- that fact can "backpropagate" to, for example, eliminate comparisons long before the UB.

Here is an older discussion: https://softwareengineering.stackexchange.com/q/291548

Is that / will that no longer be true for C23? Or does "time-travel" mean something else in this context?
Curious: if you were going to switch, how would you want to run this? Would you want to deploy it to your own EC2 instances, or would you want a hosted solution (just as SQS itself is?)
> But that's exactly how real malware usually works. Individual components that are correct in isolation get combined in ways where the developer thinks that one component offers a guarantee that it doesn't really, and so some combination of inputs does something unexpected. An enterprising hacker exploits that to access the unexpected behavior.

That means there's a security vulnerability in the app and a bug in the library. Not a security vulnerability in the library.

IMO it's a mistake to assign CVEs to libraries
Unfortunately the usability of the available Matrix clients leaves a lot to be desired. When we evaluated Element I think it was in a particularly buggy state.

In contrast, Zulip is fast, simple, and “just works”.
> What would the American version be? Hamburger patties cooked? Smartphones charged? Highway miles driven?

We tend to use homes powered. Which seems logical enough, until you realise there is a built-in assumption of 4,000 kWh/month homes.
> Shouldn't it be on security researcher to prove that how this can be exploited if no http end points are created?

The problem is, from their viewpoint the security researcher is completely correct: a vulnerability is a vulnerability.

Consuming applications absolutely have to do their own research for CVEs in dependencies, to determine if they are impacted or not, and to develop mitigations on their side as well if needed.
I'd guess that even outside the US mentioned in the article, there will be some political conditions to be met in order to get the samples
Parts of the code actually parses the IP strings into a sensible type (toBuffer). Why not use this representation for _all_ the queries and operations instead of mixing in regexes?

Regexes can be fine in order to parse the string representations initially. But for everything else I would stick with byte arrays etc.
Agreed that it's not fake.

However, the severity score of 9.8 [1]

Whereas a remotely exploitable remote code execution bug in a windows wifi driver only scores 8.8 [2]

So the score seems very inflated to me.

[1] https://nvd.nist.gov/vuln/detail/CVE-2023-42282
[2] https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...
> The problem is, from their viewpoint the security researcher is completely correct: a vulnerability is a vulnerability.

In the app using the library, not in the library.
Wasn't aware of synchtex - read up on it a bit based on your comment, yes it looks like that might work, thanks!

For collaboration, I meant real-time collaboration, where you see your collaborator's cursor or changes while you are on the document yourself. Git push/pull probably won't suffice for that, but yes, while convenient, the larger question is if all projects even need that kind of collaboration.
Name a single court that hasn't made important decisions. You might not like the Roberts court and even disagree with its majority, but it operates no differently from any that has come before.

What is different now is an explicit push to constantly highlight the supposed leanings of the members...but to do that you have to completely ignore the 7-2 and unanimous decisions they have come to just this session...
Even if we accept that it wasn't supposed to launch (which is a big 'if'), why was it not fitted with a destructive abort/ Flight Termination System?
The EU has a vision for semi R&D. What about the U.S.?
I should have been more explicit.

I do not intend to change the Postgres database or introduce a new one. I’m sure this won’t be an issue for the majority use-case.

However, I am open to learning more about alternate ways to efficiently handle Yjs state updates, which may be useful for a cloud version that would run at scale. If I were to go that way, it would not affect self-hosted users and would probably be via a reference pointer and not a database switch.

This is absolutely not an issue at the moment.
Nothing to worry about.
Is it though? I don't remember the last time I saw so many spam messages. Most sites I visit do a better job of preventing or removing spam.
Thanks to CRA they are obliged to pay for such support.
Biots in Rendezvous with Rama by Arthur Clarke.
Also one of the big bad enemies of the polity universe by Neal Asher is a species that can perform biological modifications to their own bodies by thinking about it.
“ A split in decisions among federal appeals courts has set the stage for possibly overturning the Chevron deference.

In its ruling on the Cape May fishermen’s case, the First Circuit Court of Appeals in Washington, D.C., “decided that broad ‘necessary and appropriate’ language in the Magnuson-Stevens Act, which governs U.S. fisheries, augmented the agency’s regulatory power,” according to a narrative from the New Civil Liberties Alliance. “It then relied heavily on Chevron deference to uphold the agency’s ostensibly reasonable interpretation of a supposedly ambiguous federal statute.”

https://www.nationalfisherman.com/national-international/sup...

Here’s the necessary and proper clause:
https://constitution.congress.gov/browse/essay/artI-S8-C18-1....

It’s hard to square “well congress didn’t intend for them to have that power” when they quoted their own damn rules when they wrote the law.

But again, SCOTUS decided Congress doesn’t have that power.
Yeah, but they're getting rapidly phased out for electricity generation. The most difficult to replace are the ones which also supply district heating, which is pretty widespread in the former GDR.
If you have a profile and a playlist that consists of things you like (can be the Liked videos one):

1) Nuke the built-in youtube history

2) Download browser plugins that disable the "are you still watching" popup and one that lets you watch videos faster than 2x

3) Click on your playlist, make sure autoplay is on

4) Leave the entire thing overnight so that the history fills up

This didn't fix the problem, but it at least made it bearable and improved the quality of recommendations.

I also recommend the "Channel Blocker" extension, works a lot better than built-in functionality
this is a common thing for platforms...

sadly, don't think there is a good answer... :-(
The EU has a vision about semiconductor R&D. Not sure the U.S. has a vision. Thoughts?
In which case the risk to any individual stock is even greater.
Correct - called "ground testing"
>effectively pushing the responsibility back onto the clients of the library.

well, yes. that's how this should work. if you want to use a library, it's up to you to decide whether or not it is a good fit for your project, including whether it has security issues that you need to worry about. a tool like NPM audit can help you make this decision, but there is no scenario where it makes a library developer responsible for fixing a security issue in your own project (unless you're paying them for that service).
"Germany will phase those coal plants out before the end of the decade"

Very optimistic. If we can avoid a CD(S)U-AfD coalition it might even work out.
Let me coin the first slur for our foreskin-suit robot overlords.
The CVE industrial complex is real. The majority of CVE I’ve looked into are not really risks. It’s a sea of noise with the occasional super important exception. Good an on this dev.
Mikhail Baryshnikov on Leaving Everything Behind
Luau can be sandboxed, and scripts limited in cpu and memory usage.
Impressive that the launch vehicle broke away from the static fire restraints so cleanly and evenly that it was a vertical launch. What were they holding it down with? Skipping rope?
Looks like a lot of the signs are also outdated. Would be cool to see the full history of how the signs evolved over the years.

Nevada's new sign is a lot different than the one shown. Here's the new one: https://lh3.googleusercontent.com/p/AF1QipNgQnNQlhV7PDD-q6PZ...
What is going on with the comment section on this post?
https://www.reddit.com/r/mtgoxinsolvency/comments/94dkfi/how...

You're out of luck if you haven't archived a registration or password reset email

Also probably out of luck regardless due to deadlines
The number of long standing precedents that have been overturned is different from previous courts.
I feel this is tongue in cheek, and recommend adding some kind of identifier as such. Sarcasm is hard to parse in text.
I don't know if it is genetic, a side effect of chronic or acute pain, or just plain luck but I've seen family wind up not addicted at all despite heavier doses. If it is genetic it might be linked to not finding painkillers enjoyable at all.

I know from my wisdom teeth removal getting a few days of oxycontin while it helped with the pain it mostly made me feel weak not only while taking it but for about a week or so after discontinuing it. And this is from someone with a low pain tolerance.
Ask HN: What's the most affordable and efficient DB for a newbie?
building a web app (ntwrk.site) that allows users to store contacts. Not sure what DB to use. I'm heavily considering Mongo or Supabase.
Reminds me of the old thing about the guy who said every now and then he'd go and fire off some shots in his yard just to keep the property value down...
While that's very British, you forget the obvious: The BTU is the British Thermal Unit.

Can't get any more British than something with British in its name. Not to mention it's very widely used in practice, though it's up there with pounds, gallons, and miles.
It’s not if it leverages the risk.
It's important to realise in cases like this you mean it is sickening to you personally (and potentially others). Your wording takes a personal value judgement and clothes it in words that hint at an objective moral judgement.
There is no level of writing in a statute that can survive an activist judge that wants to eliminate that statute.

The clearest example of this is the clean air act. The EPA has the authority very clearly spelled out in statute to determine what is and isn't a pollutant and how to restrict it. So why then couldn't they define CO2 as a pollutant and regulate emissions? Because activist judges did not like that. The supreme court reversed those powers granted by congress.

We have multiple recent examples of the supreme court ignoring what the law says because it's inconvenient to their political agendas (For example, the gutting of the voting rights act).
This is super cool! I love projects that aim to create simple self-hostable alternatives to popular services.

I assume this would work without much issue with Litestream, though I'm curious if you've already tried it. This would make a great ephemeral queue system without having to worry about coordinating backend storage.
> The talent to run your own servers with modern HA and reliability expectations has largely been consolidated

I kind of learned how to do all of this from Homelab communities. Claude 3.5 does really well with eliminating the toil of configuration documentation. If anything people vastly underestimate their capability to do this stuff themselves.

That said, AWS RDS is a unique product that people will not migrate from. As long as Postgres developers and ecosystem continue to work for Amazon for free, companies will be overcharged by it.
Reminds me of the Trenton sign that also happens to be a welcome to New Jersey from Pennsylvania:

TRENTON MAKES THE WORLD TAKES

https://en.m.wikipedia.org/wiki/Lower_Trenton_Bridge
Now it only needs your jacket, your boots, and your motorcycle.
>Except the law did contain the provision for this fee.

Incorrect. The law has provisions of this kind of fee for other types of fish, it was silent on herring which these boats were fishing for. Historically, the government had been funding these monitors until budget cuts made no longer possible. So, agency created a rule that since while law says monitors are required and we can't pay for it, the industry must now pay for it. Industry sued and here we are.
I fixed California, for some reason it was showing the sign for Arizona...
Scheduling engine test at 9am on a Sunday, I thought leaf blowers were bad.
DHH did mention in the article that if you are just starting up and finding market fit, you should use the cloud and not buy your own hardware.
In common law systems like America yes precedent is extremely important. Generally courts must defer to precedent

But sometimes long established precedent is wrong and must be overruled.

https://en.m.wikipedia.org/wiki/Brown_v._Board_of_Education

An example where the Supreme Court famously said a then 58 year old precedent was wrong
> How frequently the advertising device is sending out a beacon

Fine, but then the immediate question is: why is it sending out a beacon so rarely?

> for back compat, the beacon is sent at the slowest speed of the protocol as is the handshak

Fine, but then why was the protocol ever so slow? Electromagnetism hasn’t changed much.

> there may be multiple advertising channels

Fine, but why are they all so slow?
When there is a split among Federal courts then the SCOTUS does often step in. The SCOTUS decision was that the interpretation of the First Circuit was wrong.

FWIW it says "the Congress shall have power..." not unelected bureaucrats of any stripe. In the event the issue about "unbiased experts" is raised, remember that the case is about "who should pay" not that there should or should not be monitors on the boat.
I love AGPL, I wish it had taken off more.
The government also stands to benefit greatly if they throw their weight behind smart ideas, just like VCs. It would be interesting if the government could fund itself with investment.
The answer to that is not banning apartments through the vast majorities of our cities, forcing everything to be spread out so that you have to drive a car to participate in society. If the elderly could just walk to where they needed to go or walk around for leisure, they would not age as fast.

I shouldn’t have an old lady approach me to help her across a 2 lane + left turn road in Ann Arbor MI because she is afraid she will get hit again.

Human looking robots would be such a dystopian and sad solution to elderly loneliness. They need a third place and access to such in old age.
They don’t use an FTS on many launches. It’s caused problems before: https://news.ycombinator.com/item?id=38783870

IMO their space program is very cavalier. This was apparently a secret facility near a residential area so they should have at least been distributing safety and emergency information. Not even telling the people living next to it that the facility exists is inexcusable.
>Then it's the time for a public funded and steered project.

Which means there is a 0% chance of a usable product. No manufacturer will ever use it and it will be all around terrible.

If VW is bad at software, the German government is at a totally new level. Btw. I have seen entry level software developer jobs for the German government starting at 35k.

>car core systems are essentially interchangeable and so are many parts, you can find the same on a SAIC, BYD, CATL, BAIC, Xpeng, Geely, Voyah, Chery, Changan and so on.

Wtf are you talking about. No, that is not true at all.

>Since all functions are pretty the same for every car because you can let's say design gazillion of breaking techniques, differentiating the break force/pulse per wheel, with various sensors to choose how and so on, the devices you actuate and the sensors you use are essentially the same the same.

You know that cars are different, right? Different systems, different behaviors, different sensors.

> just above there is so little difference that you can have a common software stack.

What are you on about?? No that isn't true at all.

>Failing to have one is a way to keep costs high while China get ground even if they are terrible at software.

How can the same software run on two cars which have totally different behaviors and components. Do you think you can run the same software on a rear wheel drive ICE with active suspension as on a all wheel EV with torque vectoring? This is delusional, you don't understand cars at all.
Any views or experiences evaluating OpenStack instead of one of the big ones AWS/Azure/GCP? OpenStack has a bad rep due to added complexity and limited developer tools that may lead to ultimately higher TCO but I wonder if this similar to what Linux was like roughly pre-2005 before becoming commercially robust and refined enough to replace many corporate-level server operating systems.
A live ranking of airlines by how much luggage they are losing
Integration of LLMs with existing compute and data systems will have an excellent return on investment if done correctly.

The current brain dead spitball method of shoehorning a chatbot interface on top of every single existing GUI application is not that.
Most of this behaviour comes from the desire by many companies to by compliant with a lot of security regulations. Which in many cases means silly rule like “you must run and action a security scanning system”. Because a lot of these scanners are just dumb wrappers running any piece of software that pretends to be a security scanner, and because the more rules does one have the more “valuable” it is, you end up with a race to scan the most. And that sadly translates into rules and reports like https://hackerone.com/reports/191220 - OPTIONS method can be used to check what methods does a web server accepts, therefore an attacker might use it to learn which methods to use for the attack. Except they can just try it with no effort. It’s this sort of “if you can see a lock then attacker will use that knowledge to know where the lock is” logic that must be followed by “let’s remove all locks so they cannot be attacked” response.
Can you point me at some more detailed rules that support your assertion? Not trying to argue - I’m actually interested to read more details on that.
I haven't tried this with litestream! It will be worth exploring that as a replication strategy.

The nice thing about queues is that backend storage doesn't really need to be coordinated. Like, you could have two servers, with two sets of messages, and the client can just pull from them round robin. They (mostly) don't need to coordinate at all for this to work.

However, this is different for replication where we have multiple nodes as backups.
This is awesome! But i would really prefer a browser that doesn't crash as often as arc does :(
I think one key requirement is a strong centralized directive on allowed technologies. If every team is allowed to run whatever they want, you’re likely going to struggle to run it on-prem, if for nothing else it’s unlikely that a dev team has the knowledge or resources to operate and maintain Kafka, for example.

Running HA services on your own is not as difficult as it’s made out to be. Anything stateless can just be another endpoint behind a load balancer. Stateful things like RDBMS require more thought (not only for HA, just in general), but this is also a solved problem.

The other thing this requires is a more careful and performance-oriented approach to development. “It works, ship it” will likely wind up consuming far more resources than you’d like. Taking the time to profile the code – which can be done in CI – and addressing hot spots will greatly help.
It says STATE LINE MAINE. If it were at the southern end of Lake Tahoe crossing into Nevada it would also be informing you of the name of the CDP: https://en.m.wikipedia.org/wiki/Stateline,_Nevada
A more reputable source than a Twitter screenshot of an unknown, uncited news source would be worthwhile here.
Agreed:

15 requests
53.80 kB / 33.89 kB transferred

That's pretty good for a functional, densely packed website full of information.
"Urgent critical vulnerability: SPF record on your domain allows soft-fail, do the needful and pay a bounty for our hard work"
The BOM of this circuit really is very minimal because it’s a clever circuit.

It’s not without flaws (regulatory approval is non-existent for this) but they really did combine some dirt cheap components on to a dirt cheap PCB.

You, too, could assemble this circuit at scale for extremely low prices, no government intervention necessary.
Your old rebuttal didn't work so your new rebuttal is that Apple innovated faster than competitors in the initial smart phone market almost 20 years ago? I'm sorry but I don't see how that's going to make your point today. Nor would it ever really make your point, in my opinion. If you start up a company that innovates an entire technological market, and you're waiting for the rest of the market to catch up, that's not something to really hold you accountable for. You just had a vision and executed it first. Please, just admit to yourself that you really want to believe Apple holds a monopoly, and you'll do any amount of mental gymnastics to get there. Once you admit that, we can have a thoughtful conversation on how Apple is a net negative to tech culture in more valid ways.
I'll be very interested to see what comes of this (if anything).

https://www.ftc.gov/business-guidance/blog/2024/03/price-fix...
Every library makes assumptions about the usage context. Stating those assumptions up front should be sufficient.

For example, Go has two differing template libraries: one for general text and one for HTML. They have very different assumptions about how you use them and what they protect against and those are stated in the documentation.
"Impossible" to read? No. I didn't find it difficult to read at all. There are even comments that tell what the code is supposed to do, and tests that show how to use the functions. Are regular expressions "impossible" to read? Well maybe if someone doesn't understand regular expressions. There are a hundred million other ways to write these functions, sure, but if we wrote code to appease the personal tastes of every programmer in the world, we'd never get anything done.
For writing simple code, I often remind people that the first working code is not the one to commit.
Just like a text draft is edited, once the code works, now is time to trim it and simplify it.