skysight-inc/HackerNews huggingface dataset:
And as per the instruction of 1919 "it is customary to draw a line above all letters making up the number, the dots of i and j being put above the line" (in other words, the horizontal line is directly above v, x, c, and so on but between the dot of i and j and the lower part of the letter).

I think this way it is difficult to add more Roman digits like x to fake a higher amount than prescribed.

The letter j seems to be an additional security because i as a letter is narrow and one could perhaps squash in one or two more i's. The instruction also mentions that the number of dots is important, if the number of i and j is not the same as the number of dots above the line, the apothecary should assume an error.
I don't have first-hand experience with Kolide, as I refused to install it when it was pushed upon everyone in a company I worked for.

Complaints voiced by others included false positives (flagging something as a threat when it wasn't, or alerting that a system wasn't in place when it was), being too intrusive and affecting their workflow, and privacy concerns (reading and reporting all files, web browsing history, etc.). There were others I'm not remembering, as I mostly tried to stay away from the discussion, but it was generally disliked by the (mostly technical) workforce. Everyone just accepted it as the company deemed it necessary to secure some enterprise customers.

Also, Kolide's whole spiel about "honest security"[1] reeks of PR mumbo jumbo whose only purpose is to distance themselves from other "bad" solutions in the same space, when in reality they're not much different. It's built by Facebook alumni, after all, and relies on FB software (osquery).

[1]: https://honest.security/
They use a fork of a browser engine and there is no money in building a browser engine.

The money is in building a browser around the engine because there you can inject tracking and try to make your product unique.
Indeed, also one needs to investigate if the 503c organizations that claim to be in "the public interest" are really in "the private interest".

Many software foundations serve their directors and the power of a select group of developers, do not fund actual development and largely serve as self-marketing and propaganda groups.
Assuming that the purpose of the blog is to write/publish, then all of that is distraction from actually writing.
German citizens who bring back Plastic bottles to supermarkets receive 0,25 € for each one. Fields are pristine needless to say
Adding to this argument:

A lot of panics are placed instead of proper error handling as a cause of happy-path programming. (E.g. all cases of .unwrap())

Some panics are placed not knowing they’re panics. (E.g. indexing, calling a function that panics)

Some panics are legitimately placed by people who want a program to panic at a given place; this may collide with the caller’s desire to use Result and error types.

There are lots of situations where being notified about where the panics live can make your code more robust, because they do sneak in.
Disagree with the part where you put onus on customer. As has been mentioned in other HN thread [1], this update was pushed ignoring whatever the settings customer had configured. The original mistake of the customer, if any, was they didn't read this in fine print of the contract (if this point about updates was explicitly mentioned in the contract).
1. https://news.ycombinator.com/item?id=41003390
Just compromise one popular vim plugin and you have dev access to half of the industry.
BetterTouchTool is overkill for most users who only need window snapping :-)

I‘m the developer of BetterSnapTool & BTT and have also discovered & reported these fake reviews to Apple about three weeks ago on July 2. They are investigating and keep deleting (some of) the fake reviews, but I have no idea who is responsible for them or what they want to achieve
Yes indeed. If you are doing this kind of job, reach for a parser generator framework and fuzz your program.

Also go read Parse Don’t Validate https://lexi-lambda.github.io/blog/2019/11/05/parse-don-t-va...
Would NOT recommend.
I lost an earthbag house to forest fires in 2017.
I am still cleaning up plastic bags and their uv damaged shredded remains.

It is a rather stupid idea to embed 1200 plastic bags into earth.

First of all, filling them and stacking took me 1 year of work. rendering them takes ages, and depending upon the UV coating on the plastic, they burst after variously 1 month to 3 months exposure to full sun, leaving a confetti of microplastics in your soil...

A plastic bag house is a rather dumb idea. Been there. Done that.
The illegal migrants coming to the US know they have to work if they wish to eat. Meanwhile, coming to Sweden has been just a ticket to easy life, where you get free housing and money, but will be probably excluded from the job market unless you learn the language and get several years of education.

So, in practice the two phenomena are very different.
> Do you have anything to back yourself? Reputable sources?

I linked to sources about the number of coal plants being built before (eg https://www.carbonbrief.org/china-responsible-for-95-of-new-...), it's not controversial data.

You claimed "they are peaking plants". This is obviously wrong (how many peaking coal power plants are anywhere in the world, I'd be surprised if there's even one) and you have not provided any sources.
That's what actually makes it a source :) You get the news from the horse's mouth.
BuildCast #1: My First Ever Buildcast, Building Talentrun.io Live
Hey everyone, I'm Mas, and I'm building TalentRun.io https://www.talentrun.io/

Decided to try something new (BuildCast) where I'll be live-coding and sharing my startup journey with you all. Today, we're adding some cool AI automation for booking calendar invites using NextJS and Inngest.

It's my first time doing this, so expect some real, unfiltered startup action - bugs, breakthroughs, and all! Whether you're into tech, startups, or just curious about building a SaaS, come hang out. Feel free to ask questions, share ideas, or just chill and watch.

Let's make recruitment smarter together!
#BuildInPublic #StartupJourney #SaaS #AIRecruitment #LiveCoding
From a risk management perspective they’re different things, and are managed differently. This tweet is just a dumb rehash of an old platitude that’s trying to bandwagon some social media engagement. Nothing interesting to see here, unless you’re itching to dump on CS some more.
malicious action on xitter.

just like google forcing browsers to send full referrer cross domain by strong arming w3c with chrome. because their business model depends on full referrer cross domain.

xitter decided it's business model depends on third party cookies. so they're strong arming users into enabling it on the browser globally.

everything is simple. there's no complex technological reason for any of those things. it's all access to your data and money.

the browser is the battle ground and they win every single time.
You will not notice good cyber-attack, it is completely stealth. Control over machine has a value, so attacker may even patch security holes (to prevent other attacks), and remove other malware!

There is a story from early 2000s, when some guy from East Europe did network administration, in exchange for fast connectivity and warez hosting. "Customers" had no idea, and he kept their servers running for a few years longer.
Futhark is being developed at a university, so at least there is partially public funding.
Here are some insights into how proxies are sourced: https://scrapingfish.com/how-ips-for-web-scraping-are-source...

There's also an option to build your own mobile proxy pool which gives you very good reputation IPs for web scraping and doesn't harm other people: https://scrapingfish.com/blog/byo-mobile-proxy-for-web-scrap...
you mean their career depend on them claiming ignorance.
Given Zig has one, it might actually be possible to delegate to that then?

It would be awesome to have a post explaining how to do that :)
Curious mind here: I have few projects running on Firebase. Haven't had any issues so far. What type of safety issues/bugs and limitations are you referring to?
Mastodon doesn't have a fraction of the ground sources that Twitter has. You go to Twitter because that's where the people who know shit and tell you about shit are. It has nothing to do with Twitter itself. It's just network effects.

I get why you're annoyed at Twitter (Elon) - I am too, and I still call it Twitter - but there just doesn't exist anything like Twitter. It's the only place where you can ask CEOs and CTOs questions directly. Where you can learn about what is actually happening on the ground in Ukraine from first hand reports from people who are there. Where you hear subject matter experts debating strongly in favor and against all matter of topics. It's sad that it's the only place like it, but it is.
Is there any feature in Krita, Darktable, Scribus, or Blender, which Adobe products do not have? It certainly is the case the other way round.
Data Science Tutorials in Julia
Because that leads to lower capacity. For example, a 4096 bit RSA secret key will fit in a binary mode QR code but can't be stored base 64 encoded in a text mode QR code.
I have the unfortunate "habit" of writing in the style of chatgpt, even before chatgpt existed. So no, not a chatgpt comment.
That’s a lie we tell children so they think the world is fair.

A Marxist reading would suggest alienation, but a more modern one would realize that it is a bit more than that: to enable modern business practices (both good and bad!) we designed systems of management to remove or reduce trust and accountability in the org, yet maintain as similar results to a world that is more in line with the one you believe is possible.

A security professional though would tell you that even in such a world, you can not expect even the most diligent folks to be able to identify all risks (e.g. phishing became so good, even professionals can’t always discern the real from fake), or practice perfect opsec (which probably requires one to be a psychopath).
> What recourse any customer can have in in such a case ?

Sue them and use something else.
> a half-page of code is sufficient to define a basic Lisp interpreter in Lisp given a few primitives (car, cdr, cons, eq, atom).

One line of code is sufficient to define the 206-bit BLC interpreter in BLC given no primitives whatsoever [1] :

(λ11)(λλλ1(λλλλ3(λ5(3(λ2(3(λλ3(λ123)))(4(λ4(λ31(21))))))(1(2(λ12))(λ4(λ4(λ2(14)))5))))(33)2)

This code tokenizes and parses (something the Lisp code skips) the binary encoding of a lambda term from an input bitstream and applies that term to the remainder of input.

[1] https://tromp.github.io/cl/cl.html
There's at least five different things that went wrong simultaneously.

1. Poorly written code in the kernel module crashed the whole OS, and kept trying to parse the corrupted files, causing a boot loop. Instead of handling the error gracefully and deleting/marking the files as corrupt.

2. Either the corrupted files slipped through internal testing, or there is no internal testing.

3. Individual settings for when to apply such updates were apparently ignored. It's unclear whether this was a glitch or standard practice. Either way I consider it a bug(it's just a matter of whether it's a software bug or a bug in their procedures).

4. This was pushed out everywhere simultaneously instead of staggered to limit any potential damage.

5. Whatever caused the corruption in the first place, which is anyone's guess.
Could also be a "missing missing reason"
> To perform any action on the DOM, you need access to the nodes

Not really. With declarative approach you can just give HTML to the browser (or some templater) and get your page completely laid out without having any access to any nodes.

In fact, declarative approach does also allow to connect handlers with ease (onclick and similar attributes are very much a thing).

Using onclick handlers doesn’t scale well if we are talking about Web apps with complex GUIs, but then the naive imperative approach of createElement scales potentially even worse. The approaches that do scale tend to favour declarative approach with isolated imperative logic (such as in event handlers).
Yep.

Looking at how this whole thing is pasted together, there's probably a regex engine in one of those sys files somewhere that was doing the "parsing"...
Intent matters, but that's only one half of a problem. Improperly
implied permission is an equal issue.

There are bad software updates that are not malicious, just inept, or
an unfortunate accident that cause havoc. I think the Crowdstrike
event was such a mishap.

And there are plenty of software updates that are plain malicious but
hiding behind the "legitimacy" of an update. I'm thinking here about
Amazon deleting the 1984 book, or printer 'updates' that lock-out
third-party ink etc. These are really violations of computer misuse
acts and ought to be prosecuted - because they are indeed vandalism
indistinguishable from a attack.

Maybe they're worse than a cyberattack, because they are harms that
abuse a privilege.

Because companies have not been prosecuted but allowed to get away
with this sort of crap for decades were in a sticky situation now.

There's a whole spectrum of intent between sincere security updates
that go wrong and spiteful for-profit sabotage. People need educating
that if you allow anyone remote access to your computing property,
no matter what their credentials and bona-fides, they are in a
position to massively abuse that trust. Just because someone sold you
some hardware or software doesn't mean they continue to have your best
interests at heart or any rights to interfere with your property.

All software and hardware should by law come with the ability to lock
out the original vendor, supplier and to reliably stop egress and your
device from "phoning home with telemetry".

The customer is buying a product not a relationship.
It’s absolutely a racket.
There are plenty of binary serialisation protocols out there, many proprietary - maybe you’ll stuff that base64’d in a json container for transit, but you’re still dealing with a binary decoder.
No bet. There are two failures here. (1) Failing to check the data for validity, and (2) Failing to handle an error gracefully.

Both of these are undergraduate-level techniques. Heck, they are covered in most first-semester programming courses. Either of these failures is inexcusable in a professional product, much less one that is running with kernel-level privileges.

Bet: CrowdStrike has outsourced much of its development work.
rr – record and replay debugger for C/C++
Yes, that’s one part of the initial protest.
See https://northeastbylines.co.uk/news/world-news/report-from-b... for details.
Unfortunately Bangladesh’s democracy was slowly suffocated, with the only party in power liking their corruption schemes a little too much to allow for fair elections.
Just like Cuba didn't really itself point missiles towards the US (it was the soviets), the Warsaw pact nations inside current EU were used as Soviet proxies too.
FYI, Zig is in the process of dropping dependence on lld on Linux and Windows; macOS uses Zig's own linker since roughly 2021 as far as I recall. Tracking issue for reference: https://github.com/ziglang/zig/issues/8726
Something blue-collar-ish, like cleaning, plumbing, construction, repairs. Anything 'trade'. People are significantly less self-sufficient nowadays, and setting up a plumbing business (in my country, The Netherlands) would easily get me a million-euro business without too much effort.

If it has to be in tech, I would jump on the latest trend and try to squeeze it quickly before moving on.
Are you comparing nonprofit project budgets of a few thousand euros to corporate VC/investment budgets that are orders of magnitudes larger?

> the lack of impressive success

Successful delivery of hundreds of projects doesn't count? Improvements to widely used office and communication software? Improving critical infrastructure used by journalists and other members of civil society? Mentoring the next generation of developers who can staff future EU technology companies?

What type of tech projects, budget and success do you expect the EU commission to fund? Are there previous successes that could be emulated, from the EU or other governments? Google was created by private investors, as was Skype.
Some feedback: Try to showcase or demo your report or results. Do not explain to me the value of finding competitors (I already know the value).
Tell me your differentiator. How did you collect the data? How accurate it is?
Compare yourself to other competitor finders.
Freedom of choice? You realize we're talking about a man who got beheaded because of showing drawings of Muhammad to his students, right? (Ignoring the fact that the instigator of the whole event lied about what he actually did)

Do I not have the freedom of choice of not wanting people who will murder over something like that in the same country as myself?

> Do you believe you are presenting an honest appraisal of both the upside risk and downside risk of immigration?

I never said I'm anti-immigration. I'm an immigrant mysely, soon to be a naturalized citizen of my host country after years of hard work at embracing its culture and traditions as much as I can.

I am, however, anti-immigration if the kind of people we're talking about are the types of people that go around beheading people, regardless of their reasoning.
This guy’s actions are 100% in line with Nintendo’s policies. They actively hate their fans. There is a legal way to punish Nintendo: Stop giving them money, and make sure everyone knows that the reason why is that you don’t do business with bullies.
https://you.com/search should be more popular.
Packaging has become so advanced that they now need similar accuracy and clean rooms as the chipmaking itself. When they add microfluidics it becomes even more difficult.
Great, now I can't move.
the point is that if it's not a swing state politicians don't care about the state wants. so the embargo might fall to the sidelines
They'll be sued by the insurance companies probably.
Problem is that many do.

Doing it right requires very capable individuals and a significant effort. Less than it used to take, more than most companies are ready to invest.
Nope, Ex rated coriolis flowmeters are barely $150k.
Ask HN: Are privacy concerns with GenAI services overblown?
A lot of people that I talked to brought up privacy as the biggest issue when it comes to using a GenAI service like OpenAI, Anthropic, etc. They would always say they "cannot upload confidential data" to the service and they are wary of what AI will do with these data. I'm just not sure whether this concern is founded as:
1) They are already using cloud services: email, slack, cloud storage. Literally all company data is on the cloud.
2) These AI services actually made it clear that they do not use any data from the APIs for training.

Are they being contradicting or am I just not seeing the potential security issue of a cloud GenAI service? Really curious what is the consensus outside of the circle of people I talked to and also what are the critical company data, if any, that somehow can be in all cloud services except GenAI?
Sure, I agree that Greg Abbott is an asshole. That doesn't necessarily make him wrong, though? I'm not looking at his actions, it's obviously political theatre. The actions that appear to be revelatory to me are the ones by Democratic-led cities that went from grandstanding of their own to immediately backpedaling when the burden of providing social services to illegal immigrants was shared with them. Greg Abbott is taking a bad situation and sharing it with his neighbors, but they were closing their eyes and saying "there is no problem, and it's good actually" until they had to deal with it themselves.
An admin can obviously disable a scheduled task... It's not "impossible" to remove the software, just annoying.
Does anyone remember Servant by Andy Hertzfeld? Which kind of blended the Finder with ResEdit, showing the resources just like it shows folders and files. Allowing to manipulate them the same way, for example copying via drag'n'drop etc.

http://bitsavers.org/pdf/apple/mac/Servant_A_New_Shell_for_t...
...I mean Zig has those features too since the beginning with `zig cc`, translate-c and @cImport (currently via an embedded Clang), but the post is about an indepdent C compiler written in Zig (but which will most likely replace Clang as the embedded C frontend once Clang/LLVM isn't compiled into the Zig compiler anymore).
This was what I was thinking.. Moving something from rails to elixir as a copy-pasta wouldn't give you the things elixir is great at. You'd just get MVC.. No use of OTP or Services.

When I was at Uni I wrote an app for a Java course. The prof laughed and said. "You're a c++ programmer aren't you." My code smelled of it.

"A language that doesn't affect the way you think about programming, is not worth knowing." - Alan Perlis
I don't know the contract details but these workers are picked up at the facility every day with an 8-person van and brought to the job site. Not only will it be very difficult to get a rental apartment for 2 months at less than €600/month, you also miss out on the transportation if you do.

And these jobs are usually picking strawberries out in the rural sections or working for Amazon at some industrial estate that doesn't have public transit late at night.
It is not just speed. The media don't show you everything and almost all of them are highly selective.
In a world of complex systems a "confluence of improbable events" is the same thing as "a disaster waiting to happen". Its the swiss cheese model of failure. Y
What prevented someone from just extending the line?
Even on hn, comments advocating engineering excellence or just quality in general are frequently looked down on, which probably also tells you a lot about the wider world.

This is why we can’t have nice things, but maybe we just don’t want them anyway? “Mistakes will be made” is way less true if you actually put the effort in to prevent them, but I am beginning to think this has become code for quiet-quitters to telegraph a “I want to get paid for no effort and sympathize with others who feel the same” sentiment and appear compassionate and grimly realistic all at the same time.

yes, billion dollar companies are going to make mistakes, but almost always because of cost cutting, willful ignorance, or negligence. If average people are apologizing for them and excusing that, there has to be some reason that it’s good for them.
This is great. Have you looked into QR code's structured append support? It provides the sequencing metadata required for reconstructing the data of multiple QR codes even if scanned out of order. It's limited and other schemes would still be valuable but it might still be worth supporting since it's native to the format.

Does it have camera support? I added binary decoding feature to zbar a few years ago, zxing already had it and seemed to be in far better shape overall but zbar had builtin camera support which was necessary for my use case.
you should really read on Cuba before comparing it to Serbia. completely different situation and the people fleeting it in the last decade is exclusively about the the embargo.
ok so no salt? that's just cabbage gone bad...
TIL about spellbound. i see you just launched 2 months ago and already have a careers page with 4 jobs... are you making that much money already??
Btw YAML would be a proper superset of JSON if it wasn't for the fact that yaml doesn't allow repeated fields while JSON is relaxed about that.

That's just a small detail though. You can for all intents and purposes out JSON objects in YAML files and I'm still puzzled while so many people fiddle with indent in helm templates instead of just using toJson
I think he would fit right in at Riot Games next.