skysight-inc/HackerNews huggingface dataset:
The Python community seems to have a virulent hatred of threads. I don't understand the reason. Yes there are hazards but you can code in a style that avoids them. With something like BEAM you can even enforce the style. Async/await of course introduce their own hazards.
Both. And the issue about trying to relate it to an hourly rate is the immense unpredictability. Some months (and some companies) may have a lot of vulns in a new product and it’s open season for a bit, but then it slows down, and you’re constantly hunting for new bounties.

It’s not entirely unlike a proper consulting gig, where half your time is spent doing the job, and half your time is spent building a pipeline of future work.
Yesterday I spoke with a Generac (home standby generator) dealership owner in the Houston area, and they are getting swamped with calls (80 a minute at times) and they have 20 people manning the phones.

One of the problems I see is that people aren't prepared. I live my life by the motto "Be Prepared" (see username). One of the Merit Badges I teach is Emergency Preparedness, and with camping, my Scouts are okay going without electricity and electronics. Even if you're not interested or able to participate in Scouting, swing by your local Scout Shop and pick up an Emergency Preparedness Merit Badge booklet and learn what you can do to Be Prepared. It doesn't extend to just hurricanes.
Obsidian is pretty close to that. Markdown is basically plain text.
I think it should go without saying that allowing companies to vaguely say things like “our product contains a bunch of stuff, trust us, bro” goes against the spirit of transparency behind the FDA’s rules.
Freelance rates database to know your worth
If I understand it is not privacy preserving with regard to you and the aggregator but it is preserving with regard to you and the ad agency.
Uhm, get some rechargeable AAA batteries? It's what I use with my boring wireless mouse.
> MAD is the foundation of international politics

MAD is a religion-like fiction by-for people who emotionally need it. People armed with nuclear weapons are coming for us, whether it's emotionally convenient for you or not. And it doesn't matter whether we have nukes, too.
Authoritative Nameservers
Windows 2000 and XP had very good support for many MS-DOS games if you installed VDMSound.
sounds like me, lol, before I realized modeling 3d things required artistic/visualization skills of which I had none.
At the first glance I thought you meant starting a different service called Twitter.
Only economical way is to collect a salary from the NSA while hunting for the exploits. Otherwise seems too much of a lottery on both discovering a valuable exploit and getting a sufficient payout.
You are technically describing your interpretation. Careful, the supernatural can be found in what would seem like the very most unlikely places.
In exchange for taxing them twice. First with Corporation Tax, and then on salaries/dividends/capital gains/however the shareholders extract income from the corporation.
It's also easier than "gray market" sales. Bug bounties pay for a wider variety of bugs, including plenty of stuff that's of no interest to your perhaps-Saudi buyers; and they don't require you to develop a weaponized exploit - "hey, I noticed this crashes" is often enough.

Plus, less risk of waking up and finding out you've been sanctioned by OFAC or something like that.
I remember around two years ago, we got in touch with a company—without mentioning the name but it has "ripple" in it—and after an hour-long seminar, NDA, password-protected binaries, and other BS, they barely delivered ~150ms latency..
I can think of plenty of others, like that time PayPal took $1.3m of Flipper Zero's money and ran because reasons: https://www.dailydot.com/debug/flipper-zero-paypal/

And that's just a particularly high-profile example; smaller organizations and individuals routinely face this sort of thing from centralized payment processors. Said risk is nonexistent with any competently-developed cryptocurrency (and even most incompetently-developed ones).
Sanders never killed anyone either. He was involved in a shootout where the other guy shot and killed the gas station manager, Sanders' involvement was shooting said guy who lived and later went to jail as a result of killing the manager.
Again highlighting the unrecognized liability companies are taking on by logging every scrap of internal communication, no matter how informal or ill-conceived it may be.
>Maybe this is a good time to do this?

Depends on what you want. If you're looking for bang for the buck, mini PCs in NUC footprint, with oomph that can play some games too are terrible at that. They'll cost you nearly as much as a budget gaming laptop from Lenovo using the same APU and that come with a screen, keyboard and touchpad as bonus. For value/money, standard ATX size PCs rule.
There are vanishingly few examples of infrastructure spending that don't turn into massive, wasteful boondoggles; perhaps the Interstate Highway system.

The national railroad system a century prior and even the Internet were nearly entirely built with private funds.
Sure. Whatever you say. It's really hard to tell who's lying and who isn't with all the misinformation and also the sheer volume of facts.

It's also hard to find the "good guys" because both sides did some pretty awful things. Which again muddies the waters.

But the thing is that you chose to sweep the deck and call everything I said a lie with no nuance or thought. This brings me back to a different debate I had with someone I think here... I mentioned that Israel has gay rights and one of the most advanced human rights laws, civil rights, religious freedom etc. It's essentially a super liberal country in most regards (our labor laws will make California blush).

On the flip side I mentioned gays get executed in Gaza and wife beating isn't a crime under Hamas law. Honor killings are normal occurrences (if you don't know what it is you should seriously read up about it). I was accused of "pink washing".

Pink washing is when a corporation tries to hide bad behavior with a sham gay gesture. Israel has been pro-gay for decades, pro women and human rights. That's not something tucked on.

But the accusation reminded me of you. It accused me of stating a bad verifiable fact about Hamas while saying something verifiably good about Israel. How dare I state such inconvenient facts to assault your sensitive preconceived notions of whose "good" and whose "bad" in this narrative. I've clearly gone too far.

All joking aside. Why do you think those are lies?

Why do you choose to not believe a flawed democracy over a terrorist organization that murdered people for decades?

A terrorist organization backed by an Iran, Russia block... A terrorist organization that is killing its own people. If any of these facts seem wrong to you, I suggest furthering your research on that. I think you were deeply mislead. Israel is very flawed and did indeed mistreat the Palestinians a lot (especially in the West bank) but you need nuance. Palestinians vary Hamas is evil, the Palestinian authority is "complicated". Israel is also nuanced, it has the worst government in its history right now, but that's an anomaly. It did have more liberal governments over the years.

Unfortunately, Hamas and lack of nuance from the west help strengthen the bad players within Israel and move it further to the right.
4 figures. You can get P20 molds, good for 20k cycles, <$5,000 in China. And of course, you can get family molds that make more than one part at a time, though most of the savings is in per-part cost.
Sanders killed anyone. He was involved in a shootout at a gas station, and a gas station employee got shot by his shootout opponent and killed, which effectively won Sanders the turf war.
> Moles, mice, things walking/driving over the top

I wonder if anyone has started an environmental impact statement about burying lines. For example squirrels, possums, etc use them as bridges over streets, birds use them as observation/socialization spaces, especially some flocks of migratory grackles (maybe?) that have a giant winter rookery on the lines around a grocery store.
https://www.youtube.com/watch?v=vEb9cL3-kf0
that isnt a cause, that is an outcome.
* Remote: Yes (open to onsite/hyrbrid)

* Willing to relocate: No

* Technologies: React.js, Next.js Vue.js Typescript, HTML5, CSS3, SASS, Node.js, REST,MySQL,PostgreSQL, Docker, Azure, AWS, Agile, Git, Github, Playwright, QA, UI/UX,CI/CD

* Résumé/CV:https://docs.google.com/document/d/19dhr91VFgYRoRAtRdVE0nQQ6...

* Github: https://github.com/DMC09

* Email: [dharminc].[Dev]@gmail.com

* LinkedIn: https://www.linkedin.com/in/dharminchauhan/

* Summary: Software Engineer with 2.5 years of experience with expertise in Front End Engineering and QA. Seeking a larger Front End or Full-stack role with greater impact and opportunity to learn other skills or languages.
I'm trying to be polite. :-)
And there is a lot of great C++ code and developers out there - especially in the e-trading/HFT space.
Your response makes sense to me, but it also highlights why I've become so disillusioned with "tech" generally over the course of my 25 year career.

My optimism about tech used to be because I saw tech as solving humanities most pressing needs (even if it usually has unintended consequences like pollution, etc.) But now I see tech (most of the time, obviously I'm speaking in broad generalities) as not even bothering with pressing problems because you can make more money hijacking dopamine pathways to sell ads.

I mean, when I think of tech that would actually improve my life I think about things like a clothes-folding machine, not a program that writes mediocre poetry.
It's worse than that. Those massive debts are from loans from a loan company. The parent company of the loan company is also the parent company of Thames water.

It's all a massive scam. It would be better if companies were not able to own other companies.
Would you rather have three fingers and a thumb or seven fingers and a thumb?

70 million year old evolutionary technical debt rearing its head, yet again.
Am I wrong that it is only aggregate to the advertisers and not aggregate to the ISRG? I feel pretty negative about the ISRG having my data to provide aggregate data from.
Houston is a low-lying coastal city surrounded by rivers and bayous whose population has increased 10x since 1950. Not really an ideal situation to build out that kind of housing for millions of people in floodplains.
There's a lot of participation from India and other lower-income countries. Not a bad thing - it keeps a fair number of talented school-age kids gainfully employed, and it's a lot more dignified than being paid peanuts for solving captchas.
> b) The shilling for "#yolo, let's start nuclear war with Russia" is a bad idea. Trust me. You don't want to go there.

Russia already went there. We're already there.
The idea behind Zulip is great, but the UI is horrible. (Slow, clunky, ugly)

Developers can put up with it, but regular people will hate it.
Okay, you don’t like her. Cool, nobody’s required to but that’s a feeling, not data, and the accusation I responded to was a specific claim of dishonesty of the sort which, if true, could easily be supported by logic and evidence, not just emotion.
My experience participating in Google's program has been pretty good. The reward money is a nice supplement to my grad student stipend. I got a free trip to DEFCON out of it, too.
Is it even legal to view that data ?
Yes. I've claimed a few Bug Bounties after accidentally discovering them. For example https://shkspr.mobi/blog/2021/12/responsible-disclosure-chro...

It is uncertain work. As well as finding the exploit, you've got to write it up in such a way that it is convincing to the people reading it. Then you have to argue with them if they don't accept it. You have to pay currency conversion fees and, depending on where you live, tax on income.

That's a lot of work. But it is significantly easier (I imagine) than selling to the mafia. The bad guys don't have a publicly available schedule of payments. And if they don't pay, you can't complain publicly.
Ask HN: Developers using Java without Spring, and what is the alternative?
The point you are missing is that many of us do not have big tech careers. I am very fortunate to have a big tech career, but before I was hit by a stroke of luck, I was doing gig work paycheck to paycheck barely making ends meet. When you can’t see more than two weeks ahead in time, which you cannot do living paycheck to paycheck, you don’t think about the long term consequences because you are not capable of it. The incentive structure is too strong to sell zero days to any external party for those who have nothing to do all day but try to find exploits.
The exploited laborers part is true and you never know how the care is going.

Someone noticed rashes showing up on an elderly person and installed an in bathroom hidden camera. They were leaving them in the bathroom for hours and exiting/re-entering through the window.
Minisforum g7 pt with 7945hx was just released and it’s in pre-sale now. Best you can get now in my opinion.
How would this work exactly with current LLMs? Like this surely would yield such inconsistent results? It would be gamed. Again one of these just slap AI on it and hope for the best. Surely you need a robust process for prior authorisations which can be handled by some sort of automation. Not AI.
In a very large company like Disney there are often legal data retention requirements from ongoing litigation, which means Corporate Slack might be more complicated than the AT&T customer data breach.
Someone link the fictional book of future countries with borders enforced by nano-bots, please.
it happens all the time, companies go bust and get sold for pennies. they get bought and then pivot towards something the new owners want to invest into.
151515 is such an elitist number..
3 * 13 * 37 * 3 * 5 * 7
Ask HN: What Do Go HTTP routing libraries get wrong? And how can we fix it?
Hey HN,

I'm working on developing a new HTTP router for Go, and I'm curious to hear from the community about what features you'd like to see added. Specifically, I'm interested in:

1. Common Pain Points: What issues have you encountered with existing Go HTTP routers? Are there particular features or functionalities that you find lacking or problematic?

2. Desired Features: What new features or improvements would you like to see in a Go HTTP router? This could be anything from better performance, more flexible routing patterns, easier middleware integration, etc.

3. Comparisons with Other Libraries: If you've used routers in other programming languages or frameworks, what features or design choices do you think should be adopted by Go routers?

Your feedback will be invaluable in helping shape a router that addresses real-world needs and improves upon the current offerings. Thanks in advance for your insights!

Best Regards, Sam!
You're posting on HN, everyone here knows how to setup apache. I'd suggest you target less technically inclined people or offer more features than github pages. Honestly, just having an easier way to publish than github pages would be a good idea
+1 for physical notes (:

I use a lot of diagrams / sketches / arrows between things / etc, so doing it all in text on a computer is too cumbersome.

Of course, with paper, looking up something from the past is a pain sometimes.
OpenAI reportedly nears breakthrough with "reasoning" AI
OpenAI has revealed a new five-tier classification system to measure its advancement towards developing artificial general intelligence (AGI). The levels range from current conversational AI to hypothetical future systems that could manage entire organizations. OpenAI believes its technology like GPT-4 is currently at Level 1 but on the verge of reaching Level 2 "Reasoners" with human-like problem solving abilities.

While the framework provides a roadmap of OpenAI's ambitious goals, many questions remain on how to meaningfully quantify progress towards the nebulous target of AGI. The system is likely best interpreted as a communications tool to entice investors rather than a scientific way to track the development of human-level AI.
Sorry, I meant specifically threads, so the atomicity is purely process local of course. There is an I ternal (recursive) mutex inside FILE.
Ask HN: What's the next big step in the evolution of web applications?
Today there seems to be two paths towards creating a "modern" full-stack web application. One is to use something like Next.js for both backend and frontend. The second path is to have a mix of a Javascript framework (React/Next.js, Vue, etc.) and one or more microservices serving API endpoints.

What's the next big step in the evolution of web apps? Perhaps, one which allows you to have a more homogenous development experience while still retaining a lot of the benefits you get from one of the previously mentioned paths.

Is there a new technology stack that accomplishes a superior developer experience AND user experience?
I think Swift is close to optimal for now.

It does have the union type Result<normal, error>, but most people throw/catch Error.

In Swift, error is a simple value (without a stack frame) and thus is as cheap as a return value, but can be handled/caught anywhere in the call chain like an exception.

Error is a protocol that tags any type, so it can carry any details you like, and your catch can switch on the type.

But it's only now (10 years on) that they're declaring error types in the function signature. In this world, it turns out that not throwing is the same as throws(Never). It took this long because it's unclear (but possible) that per-type error handling helps, mainly with libraries.

Serializing/tracking the originating (thread) context and avoiding merge conflicts in error streams seems like the unsolved problem. Both Java and Swift have structured concurrency with parent/child relations with derived cancellation/termination. Perhaps later that can include errors.
Show HN: A CLI for Confidential Journaling the Speed of Thought
My mom or other people kept finding my diary because I carried it around. Traditional journaling apps were too slow for capturing my thoughts effectively. That's why I created something new—fast, private journaling that keeps my thoughts safe from prying eyes. Welcome to a diary as quick as your thoughts and as private as your mind.

This CLI lets you journal super quickly without anyone discovering your thoughts, thanks to its strong AES encryption.

Features:

- Protects your posts using AES-256 encryption
- Ensures only you can access the journal
- Works on Linux, macOS, and Windows
- Create, view, edit, and delete journal entries
- Easily find posts by keywords or dates
- Supports terminal-based text editors for seamless writing
- View posts by year and month for easy navigation
- Perform specific actions directly from the terminal

To install it, run: npm install -g secret-journal

For more info or in case of issues, check out the repo linked above.
There's no specific law against selling exploits. The problem is the subsequent crime - and if someone wants to pay you a lot of money for a 0-day in Google, it's hard to come up with an explanation other than that they're about to commit a crime.

So, if you knew or should have known, then feigning ignorance won't save you and you won't ba having a good time.
Huge.
It works with texts, so it support lots of languages, but now I'm using the sentence tokenizer only for english, so in other languages that sentences are not correctly detected. It should be improved in the future, but I realized, I don't need 100 % correct detection of sentences. I'm using OpenNLP libraries for it. It scrapes webpages with Jsoup. Again I'm using libraries like Readability4J and Crux for parsing the webpages and removing ads etc.. So, the main idea and payoff of the project is to have a chunk of text associated with the picture. It's good for focus and have distraction free environment. For example, for me, it is a problem to read longer texts and don't be distracted by the surrounding chunks of text (before and after the chunk I'm reading in a moment). I have a positive feedback of one dyslexia patient, but he is no longer on Facebook, so it's the question if it helps dyslexia as well. But I personally use it for incremental reading webpages almost daily and I can better focus with it. I'm glad to share it as open source.
whataboutism?

Sure I trust Mozilla more than Google/Microsoft.

But less so, now.
Rising seas could initiate coastal wetland drowning within decades
Impressive. These are all more advanced than something like the staple cube (https://www.tiktok.com/@meimeitiktok4/video/7116863895171583...) I was expecting
I get great amusement from seeing the accounts KFC follows:

https://x.com/kfc/following
Hot Take: these bug bounty systems are a way to get cheap labor.

Instead of spending the time and money to build secure systems up front, they will offload this to "bounty programs" where the time spent finding vulnerabilities will not match the reward. It's like an unpaid internship, but worse since you are competing with people of varying cost of living requirements.

Yea, a potential $150K bounty sounds is a shit ton of money for a person in a third world country. But for anybody else (given the same time spent finding the vulnerability), there is no financial motivation. Only "fame" via disclosure reports in the security community.

This is the equivalent of a customer asking a professional photographer who is new on the scene to do their photography for free in exchange for "exposure". No, you aren't innovative. You are a cheap asshole.
Inflation and fiscal irresponsibility are central to this issue. It just takes a really selfish generation and a political system that rewards myopic policy to create this sort of gerontocratic inequity. The fix is fiscal responsibility and fostering a culture of personal responsibility rather than a culture of "the government owes it to me" which is pretty obviously not sustainable. The sins of the father... There is no money here, only debts, both monitary and moral.
It was my first time making a language, so I built into the language whatever was needed to build something cool with Crumb.

Wanted first class functions to simplify the parse step (they can be treated like any other value), but I needed a different mechanism to invoke “native code” vs user-defined methods, so there’s two different types for that.

Needed some kind of compound data type, but I didn’t want to deal with side effects from pass by reference, so Crumb implements lists, but they are always pass by value :)

P.s. theres some pretty neat stuff build with Crumb at https://github.com/topics/crumb if anyone’s interested!
That was my first thought. How much does the market pay for an account takeover?
Show HN: Resurrecting a dead Dune RTS game
Nonetheless, there are no recorded instances of large storm-induced floods in the SFBay area that I'm aware of. Do you know of any?

Fires, earthquakes, heavy rains causing mudslides that have actually killed people: yes. Some very localized flooding around the Russian River happens all the time. The Guadalupe River in San Jose flooded a few years ago. But storm surge from the ocean? nope, nope.
Perhaps one day, we can return to the days when a KB was a KB and a MB was a MB. Those grand old days, when we all accepted kilo and mega stretch a little more for computers. Because in binary, base10 metric is a wee bit of a shoehorn. Just a bit.
Seems hard to square spam being more of a problem in discord when visible spam is observably much less than in other forums
As resident layman and LLM/chatgpt hater, I am offended on behalf of dang. He is not replaceable with a real person; an automated replacement is insulting to even consider.