skysight-inc/HackerNews huggingface dataset:
Not saying that opportunities for large-scale tax evasion don't exist--and you may disagree with policies at both the individual and corporate level that enable tax-avoidance--but the opportunities for people who are properly classified as the the 1%s or at least the top few percenters mostly don't exist without really going outside the law.
Indeed, I too chuckled at that. Do you remember those hobbyist kits from the 80s for building your own electronic ignition unit? (i.e. points replacement)
Its pretty common to see "easy" algorithm problems or potentially build a small simple app as a way to test that you can actually code. I'd say 75% of companies I've interviewed at have at least one algorithm interview with hands-on coding. This seems to be even more true at big tech companies because you're likely debugging software written in multiple languages.
I'd assume slow rather than expensive; if it's similar to other electroplating, think in terms of nm/s in the z-axis, 96,485 Amp-seconds* per mole of whatever metal you're putting down at a small (material dependent) number of volts of potential, so I'd guess OOM €10/kg process plus whatever the material cost is in the form of an electrolyte.

* https://en.wikipedia.org/wiki/Faraday_constant
So Erlang unifies both the gorountine and the channel into a single construct with an identifier?
>The best way to counteract this alarming trend is by educating yourself and becoming a more knowledgeable musician so that great music can make a return. This is why I'm passionate about teaching and have created comprehensive music learning courses and software to support this process. Check out my Channel Anniversary Sale below if you're interested, which contains all four of my music programs.

There's a good meta joke about "the real reason why the internet is getting worse" in there.
NBC Brings A.I. Al Michaels to Peacock for Customized Paris Olympics Recaps
Not faithful adaptations, to my knowledge. They tell their own stories, and they do a good job of it, but they don't tell other people's.

The Earthsea adaptation was more of an action film than the books were action books, which happens to Tolkien adaptations too.
Not in this case, for better or worse. The point of polyfill.io is they tailor the delivered Javascript based on the deficiencies of the user agent making the request, so it's not compatible with SRI.
Yep, there’s a reason we didn’t give Germany and Japan our “exceptional” electoral college system.

Tech debt exists in constitutional law as well.
Performances are plateauing, let's make the leaderboard steep again
> I provided a JS try-catch example above; is there something wrong with it?

Yes, it suffers all the same problems. And then doesn't even help you with the errors once you get them! You then have to resort to this kind of craziness to do something with the error:

try {
doSomething()
} catch(error) {
if (error instanceof FooError) {
console.log('foo')
} else if (error instanceof BarError) {
console.log('bar')
} else if (error instanceof BazError) {
console.log('baz')
} else {
console.log('unknown')
}
}

Which leaves you wondering why you didn't just write:

err := doSomething()
switch {
case errors.Is(err, ErrFoo):
fmt.Println("foo")
case errors.Is(err, ErrBar):
fmt.Println("bar")
case errors.Is(err, ErrBaz):
fmt.Println("baz")
default:
fmt.Println("unknown")
}

At least Java gives you multiple catch blocks to make things slightly more sane.

But I get the impression that those who find benefit in passing errors using exception handlers don't handle errors. If you don't have to worry about errors in the code you write, then I think there is a good case to be made that errors as exceptions is a better approach.

That is, after all, the difference between scripts and systems. Scripts can simply fail, leaving the user to try again. Errors as exceptions, or something in the same vein, make sense as the predominant mechanism in scripting languages. Systems, on the other, have to deal with failure. You don't get to just bubble it up and let the user deal with it. This is where errors as exceptions becomes a nightmare. Go is unabashedly a systems language. It is not meant to be a scripting language.

Different tools for different jobs.
Worrying that AI might make exams obsolete is kind of odd, I mean, it is a symptom I guess but only at the very end of a long stupid cascading failure.

Students cheat because they want the degree but don’t care to learn the material. Or maybe they want to learn the material, but see employment at the end as requiring better grades than they can get naturally. Either one is the result of bullshit credentialism. (Bullshit credentialism probably comes in part as a result of bullshit jobs where work-product can’t be evaluated because it’s all useless).

Hopefully students manage to cheat on so many tests that grades can become completely useless for employers. Then, they can become something useful for the students, a way to evaluate their progress and get feedback.
This explanation makes sense, Nadella is a much better CEO than Ballmer. But I hope HN can hold Nadella accountable for Microsoft’s key decisions in the future instead of blaming MS as a faceless corporation because Nadella is the face of MS. And the decision to make Windows into an OS that spies on its users for the sake of increasing ad revenues is a decision that must have been made at the top.
Bridge RNAs direct programmable recombination of target and donor DNA
uBlock origin also blocks polyfill.io. Is that also wrong?
nvidia drivers + cuda + tensorrt + deepstream + PyTorch = Madness
Ah, wow. I didn't realize this was a thing, very convenient target for a supply chain attack, then.
Member Ordering and Binary Sizes
Where did you hear that?

In general, the issues sintered parts have are slight porosity (<3%), slow annealing cycles (internal stress), and possible problems with conventional machining.

We also looked at metal-salt plating processes, and concluded the risks to the operator made it nonviable for general application. There was also the serious environmental impact risks, and that meant hazmat disposal costs etc.

There are always trade-offs with any technology.

Have a great day, =3
It wasn't even 5-4, it was 6-3.

The basic idea, AFAICT, is that _federal_ law should not punish _state_ crimes under this specific section of the law (§666). As noted elsewhere, there might be other laws on the books for bribes, but §666 doesn't apply here.

The distinction between "gratuities"/ "gifts" and "bribes" is artificial to me, as a normal person, but I understand that the law makes a distinction.

I'm sympathetic to the federalism argument (every state should have anti-bribery laws so that _states_ themselves can take them to court instead of waiting for the feds!).

But I don't understand why someone would explicitly write a law that tries to draw a fat line between bribes and gifts. Is that the legal equivalent of a bug? A bad law?
Wouldn't that be Rust?
Scaling production isn't the issue for Waymo, it's scaling and maintaining operational capabilities within cities at a cost that still lets them be profitable.

I think it's possible, but it's definitely less trivial than scaling production of more self driving cars.
For me, this is why it makes sense: customers on Cloudflare signup (at least in part) for Cloudflare to protect them against attacks.

Cloudflare is all about changing the "truth". When your site is behind Cloudflare, they block many requests to your site. The lock in the browser can be lies. Cloudflare is decrypting that content - and if the site owner hasn't setup TLS between Cloudflare and the backend, it's being re-transmitted over the internet unencrypted. On paid plans, Cloudflare will compress images and swap in their version. Cloudflare will compress an uncompressed response before returning it. Cloudflare will take the HTML returned by your backend and obfuscate any email addresses in that HTML before sending it along to the browser.

Your server returns a page with evil-polyfill/bad.js and Cloudflare inspects the HTML and rewrites it to say good-polyfill/good.js

You might not want this behavior and you can shut it off in Cloudflare, but it seems like a reasonable default given that customers have signed up for a product meant to protect them against attacks. Cloudflare has never been about passing back the raw HTML it receives from the backend or passing along the raw requests it receives from browsers.
Ctrl-k kills the rest of the line. Ctrl-u kills the entire line.

Ctrl-y yanks stuff back in from your kill ring. Esc-y will then replace the stuff with the previous item in the kill ring.

Ctrl-arrows moves a word at a time.

Ctrl-r starts a reverse interactive search through the history. Use any editing key, like ctrl-e to start working on the current search result.
Solar panels clearly don't work wel enough to be able to solve our energy demands. A very significant portion of the day they don't work at all.
Are you really shooting to generate something full-fidelity? Or rather provide lower fidelity but empower the user to spitball and maybe test light interaction?

And if it is full fidelity, how do you ensure users actually own the copyright at the end of the day?
But how did you do this without (ab)using a blockchain? You'll never get get funding like this...
> We have not outright blocked the domain through any of the mechanisms we have because we are concerned it could cause widespread web outages given how broadly polyfill.io is used with some estimates indicating usage on nearly 4% of all websites.

Frankly I find this to be a weak argument. "We'll continue serving malware because broken websites are worse than infected ones" is not a good argument. I'm a cloudflare customer and I think this is a very bad look, even if it does mean websites keep "working."
What doesn't make sense for a business might for a government agency. Cloudflare way too juicy of a target to be left alone.
Ask HN: Why is HN often talking about PDF files?
I noticed quite a few posts about PDFs (last today was about pdfscale) and wonder why they receive so many comments here on HN.

Are there problems with PDFs that are somehow making us all passionate about?
it's idiomatic in go to use short names like chan though. I ignore that personally and use names like yours, but it's not been especially common in the go code or docs I've seen.
The Dirty Pipe Vulnerability (2022)
My point wasn't actually that Rust's ownership model could be improved. While that's also true, features like being able to take disjoint mutable borrows of two fields of a struct are generally agreed to be good things to have, and I expect the language team to solve them eventually.

It's simpler than that: Rust prevents you from doing a lot of correct things in the safe subset of the language. It does it for a good reason, because that lets the compiler prove a bunch of nice properties, but it's a fundamental tradeoff: in exchange for not having to deal with bugs in shared mutable access to data, it doesn't let you write programs that way. I actually think that Rust is a great choice for multithreaded programs which want to follow a one-writer-many-readers pattern, because that's very difficult to do correctly without the borrow checker.

But when you say this:

> The ownership problems are 100% there in other languages too, it just isn't a compiler error.

A straightforward read of that is that anything you can't do in safe Rust is a bug. That's very far from true, it's in fact backward: what you can do in safe Rust isn't an ownership bug, by construction. But I see this implication reversed in a lot of Rust advocacy, and it directly contributes to the Rust fatigue which you'll see on this very website, and many other places.

It's the difference between prohibiting potentially unsound ownership policies (what Rust does) and prohibiting only unsound ownership policies (which safe Rust does not).

> My main point is, the general concept of ownership and having to care about it is present everywhere

I completely agree with this, fwiw.
> Writing documentation up front is a good idea, but only if one treats it as the first iteration of the program with the expectation that the initial documentation may well be thrown out. The process of writing the documentation no doubt will help you organize the plan for writing the code. But there will also be things that the documentation does not capture or problems it does not foresee that emerge as the program is being written.

Everyone else is building all kinds of things from technical drawings. We could identify and describe what is so different about writing code which would make it clear what not to document or we can just suck it up, stop pretending our problems are special and closely mimic existing methods :)

Making a construction drawing is hard but people are some how doing it, they make them for mind blowing size projects. Things definitely go wrong but no one says it is just the way things are. If changes are made there shall be new drawings.

However, when it comes to renovation or repairs the process is often the opposite. Unless it is a boat, there if every brush of paint is meticulously documented it adds value in $$$.

A friend told a funny story about construction workers building a large building across the street while they were debugging their code. First he joked about construction workers doing real work, then about how structured everything was and eventually about the building being finished while they still had countless bugs.
Out of curiosity, what’s the Reddit thread?
How is it continuous wave if it has a non-unity duty cycle?
Thanks - I did wonder if it had been posted previously, but didn't have chance to check on my phone.
Many of them predate those native browser APIs. Pollyfills, the topic at hand, were literally created to add modern APIs to all browsers equally (most notably old Safaris, Internet Explorers, etc.).
The point is that by accepting gifts themselves they are biased as to whether officials should be allowed to do "after the fact".
The Montreal metro also had a pleasant three tone chime on the older MR-73 trains.
This says more about the exams than the AI or the students…
clippings.io has a browser extension that scrapes all your highlights from Amazon's website and lets you download them in various formats.
> I have friends who are trans, they are not doing it to hop on a trend or as a lark. Like pundits often say, it often comes with difficult medical procedures or at the very least a lot of social problems.

Which confirms you're not talking about the same group as the other person and me. The derogatory term is "transtrender"; they're claiming the label "trans" for social clout and don't have any of the issues you're talking about because they don't have any body dysphoria and have no intention of actually transitioning.

To quote one of my former co-workers who was like this, "everyone should be trans, it's fun".
Related:

uBlock origin blocks Polyfill.io https://news.ycombinator.com/item?id=40802393

Polyfill supply chain attack: https://news.ycombinator.com/item?id=40791829
Stay free, friend.

But I wonder: How many people does he gain by this kind of thing? Thousands would not be enough. He needs hundreds of thousands.
> is like claiming you invest in dollar bills

Well - if you're currently living in Argentina, with ultra-high interest rates[0], you should invest in dollars. Investing in another currency is definitely a thing.

The problem with crypto isn't at all what you're saying, to the extend you're saying anything. The problem with cryptocurrencies is the majority of the underlying value isn't "this country/group of countries uses this currency, so it's valuable". It's "other people who buy in later will allow you to sell for more than you bought".

[0] https://edition.cnn.com/2023/05/15/business/argentina-intere...
> Seaweed grows very quickly

This is like saying that trees grow quickly.

"Seaweed" means thousands of different species. When we see a cluster of seaweeds in a rock some of them are not even in the same kingdom than their neighbors. Its life cycles and chemical properties are totally different.

The truth is that some species are really picky and some take decades to regrow after harvested. Just because brown seaweeds are fast growers does not mean that red seaweeds are.

> there's been relatively little need for seaweed in recent decades

You may not be aware of how much of our everyday stuff includes algae. The demand of toothpaste has not fell. I would dare to speculate that the demand of laboratory stuff is probably higher than ever since Covid.
Oh, of course, that's the most charitable interpretation. Usaglig.
Interesting comment detailing when the polyfill.io domain actually delivers the malicious code: https://github.com/polyfillpolyfill/polyfill-service/issues/...
How the STL Uses Explicit
Enhancing a Display's Sunlight Readability with Tone Mapping
Ranchers go to the local store and buy whatever barb wire is in stock. Whatever the owner of the store buys is what they get. There may be more than one store, the store may order from different manufactures, and the store may have more than one type in stock (with different marketing trying to convince you one is better than the other) - but in the end it is all what the store has in stock. I'm going to count the local Sears catalog (and others) as a local store for this discussion.

The important key is farmers don't consult with others to be intentionally different. (farmers will consult with each other but that is only to see what works for someone else to copy it - if a farmer has barbed wire that doesn't work they will replace it and tell the neighbors). They all have the same set of choices to work with.

Farmers also have no reason to care if their fence is different. They know where their land is (and often are leasing land that someone else built the fence). Barbed wire isn't something that a dishonest farmer would steel - it gets harder to work with after it has been put up once so a fresh roll is better.
What does this add over slides.com, pretzi.com or any of the many other presentation tools (for devs there also the many text to slides tools like reveal.js, slides.dev, impress.js)?

I thought this space is pretty saturated is this essentially just to capture and lock in more users into a single tool?
https://en.wikipedia.org/wiki/Structural_coloration seems like a decent explanation.
I mean, if you have billg money, I guess you could have a couple ex-FAAMG software developers on payroll just so you could call them up at any hour of the day and have them give you uninformed hot-takes about an article you found online and just forwarded them, and need them to tell you something based on the headline without actually reading the article, but that seems a bit weird. I don't even have Snoop Dogg money to pay someone to roll joints for me though, so what do I know about having billg-levels of money.
Only skimmed this but didn’t see any mention of tracking, which is the only way (?) to get the true velocity when there’s non-radial motion.
The Sinai agama turns blue during the breeding season to attract females and it might be why blue connote to ribaldry
Coup Attempt in Bolivia
Here's how I process it:

Cloudflare shouldn't have such a control over a part so big of the internet.

But since they do, they are right to use this control against malware.
1. Feature isn't public yet, but currently we're able to block ingress/egress by IP + MASK and/or DOMAIN resolutions (meaning blocking the resolution itself, or anything that is resolved from or to example.com, synchronously while the resolution happens). This would be given as a setting (yaml?) to our CI action to be configured by the end user. L7 firewall is in our roadmap.

2. Leo is former falco creator (sysdig), I'm former tracee core developer (aqua). For CI/CD, performance isn't usually a concern, unless the "sidecar" is consuming all runner resources and causing latencies/jitterings/false-positives in functional tests (saying this because your comment about bad experiences with side cars, or eBPF agents).

3. I don't want to FUD but argus is currently consuming less than 10% resources when compared with other eBPF security tools around, with the same workload, and it does not miss events (not a single one don't matter what you do, without causing latencies to your code). Argus has a complete different architecture. You don't even need an userland agent running if that is mandatory (although it improves some available data). Userland code basically aggregates and report, almost no resource consumption.

4. Although argus performs so well, we're targeting it for CI/CD now, until something changes (never know), but all its infrastructure is ready for staging and production environments (same info and detection events).

5. About the threat model:

- Everything is a resource (namespace, user, group, task, socket, network flow, file).

- Resources suffer actions (different depending on the resource, files actions are heavily influenced by VFS operations like unlink, read, write, mmap, for example).

- All resources can be stored for further analysis (historical deduplicated data of all actions that have ever happened to each resource).

- Detections are built on top of this model: events are deduplicated and generated (or re-generated) only if the resource data has changed (like another action was taken on it).

Example: process opens a file that triggers a detection (under certain conditions). A detection event is generated with an unique deduplicated id. The process exits and know the "task" resource has a new info (exittime), so the event is sent again with updated info (but same unique key).

Putting all this together, our detections vary among Evasion, Brute Force, Credentials, Discovery, Drift, Escalation, Execution, Exfiltration, Lateral Move, Mining, Persistence, Tamper OS, Tamper Kernel, Tamper Argus, App Hooking, Kernel Hooking, Denial-of-Service, Offensive Tool, Informational. We're not mapping 1:1 with MITRE but some of our labels are a mix of couple (or sometimes 3) of MITRE classes.

I hope it answers your questions for now.
Yeah even Russian troops they interact with will mostly be pissed that they were forced to be there, I imagine.
Kotaku.. I remember that name.

> Private equity-owned G/O took control of the suite of websites in 2019 following former parent Gawker’s bankruptcy.

It is very brave of them to write about zombies and graves.
The sad reality is that you can spend a lifetime collecting something, the but likelihood that any of your potential heirs is also interested in it, is pretty close to zero. That's true of multi-million dollar vintage computers, or your childhood stamp collection that's mostly worthless. Paul's mistake was not properly establishing a foundation & endowment to maintain this musuem, which almost certainly leaks lots of money.

I personally have a decent art collection that I've amassed over the past couple decades. I have a few pieces earmarked in my will to specific friends & family that have really liked certain pieces (they don't know), but the reality is that my estate executor is going to sell the vast majority of it, and at 50¢ on the dollar of what I paid.
> it isn’t the job of the Supreme Court to change them

by determining whether a law is constitutional or not, they are indeed changing laws
Users of these sites they fixed the polyfill for didn't agree to getting infected with malware.
I'm curious as to how Fastly can defend their choice to keep Jake Champion in their employ after the damage he caused by transferring polyfill.io to Funnull[1], triggering this entire incident.

The warning signs should have been obvious. There's no profit to be had in this kind of free CDN.

1. https://x.com/JFSIII/status/1761385341951361182
Figma invested years in this super powerful real time canvas, only using it for UX mocks is not tapping its full potential
The pointers that the programmer controls live on the shadow stack and that's how they get updated. Another term for this is a "GC handle"
Fake Your Way Through Minis and Mainframes (The Operating Systems Handbook)