skysight-inc/HackerNews huggingface dataset:
Complexity is the enemy of both security and usability. I had a day last week where I had to authenticate 28 times to different services due to forced re-auths. No security benefit. None. It cost me 2-3 hours of my life. The IT team needs to realize their security is costing our company 4102avg_hourly_pay*26 for this. That’s a lot of money for zero benefit.
Thanks for the clarification! In that case, the README could definitely benefit from including at least one example to illustrate this functionality. That said, as you pointed out, selectively loading relevant columns—which pandas supports for both Parquet and CSV—would still be a more straightforward approach for most use cases.
> i love node, but some of the packages in the ecosystem really let it down, and it means node devs get a bad wrap.

I think you'll find that for any environment that promotes package use and has a large following, I don't think its down to inheritably down to something node is doing wrong.

> so i've never had the need to worry about things like this before, it's something i've noted for the future, so i hope that makes things a little more understandable.

part of the reason I left Twitter (or X now?), Mastodon, Threads etc. The platforms promote people posting things without thinking them through first and you never know what's going to come bite you in the arse later.
Regexploit: A tool for finding DoS-able regular expressions
https://en.wikipedia.org/wiki/Alain_Delon
> I spit my coffee out on part of this one!

I don’t know if the Spring team have dev evangelists, but I got a chuckle out of it too. Such a dev evangelist thing to say.

I do agree with your assessment, btw.
2005. There was still code and pages dating back to then running and being used. But over the years, more and more was built on top of it rather than a different stack.

Frontend code would vary with whatever flavor a developer liked at the time, but the backend was still always going through Rivet/TCL.

ICs would complain about it but the founders cashed out to the tune of 9 figures in the end, so it worked out for them.

I’ll agree that TCL isn’t inherently insecure, but you aren’t getting any libraries or frameworks with it either to make your life easier or safer.
Who is Oxide Computer Company? [video]
T.38 can help - but the codec reinvite process to switch to it when you detect fax tones can trip up a lot of machines .. And you still have to transcode the t38 back to 711 or tdm to send the call upstream which can be problematic as well on some switches.
My favorite picture of him, with another iconic french star of the same era, Brigitte Bardot:

https://www.entrevue.fr/de/brigitte-bardot-exprime-son-inqui...
Why was it possible for the junior dev to bring down prod for 24 hours? That seems like your/the organizations failure, not the poor new person. Of course junior devs don’t know the downsides and risks of what they are doing. That’s one of the things you learn on the way to become senior.
> The Python implementation can do whatever it wants

No you're misunderstanding how it works in Python. This isn't like Rust where "the implementation is the specification".

The Python type checking standards explicitly don't define semantics (though I think they give guidelines). The standard Python implementation - CPython - does not include a static type checker. There is no "official" implementation.

In fact there are at least 4 Python static type checkers and they are all third party projects and they do differ in interpretation of types sometimes. The most popular ones by far are Mypy and Pyright (and Pyright is the far superior option).

So it is exactly the same as what is proposed for JavaScript. It definitely sounds mad and I do agree that it would be better if they just actually specified semantics, but not bothering isn't the complete disaster you might imagine.
Whoa! Nowadays, you'd get banned from social media for a joke like that.
Explaining South Korea's Railway Ambitions in Central Asia
I mean, you could look at most VHS tapes and tell if they're rewound or not. Don't even need to insert them into a VCR.
Title should say (2013) not (2022)
Those aren't my confused beliefs, I was literally quoting the text at the links.

And you don't have to be so defensive by jumping to conclusions that I hate "weebs" and think they're all pervs (although the ones obsessed with sexualizing little girls are certainly misogynistic pervs). What I hate is spending precious time and effort catering to small groups of people obsessed with particular fetishes (perverted and misogynistic or not), at the expense of prioritizing solving the real problems of large groups of people suffering from particular egregious bugs and usability issues.

Remember: it's been A DOZEN YEARS since I reported the problems in great detail with step-by-step instructions to reproduce them, and they STILL haven't fixed those problems that I and other people reported. Maybe refusing to ever acknowledge or fix those horrible bugs is Rémi Denis-Courmont's way of getting revenge on me for hurting his feelings by posting a wall of text he claims he didn't bother to read, at the expense of all of his other users and the quality and usability of VLC, so now I'm sorry I ever took the time to try to help by reporting and documenting the bug, and I'll never do that again, but he still seems pretty arrogant and thin skinned to me, even quite recently. And VLC's user interface STILL sucks.

Edit: The link I'm quoting is myself, quoting the text in another link written by SOMEONE ELSE. Literally, the VLC release notes, and an anime discussion about MKV which I read before I quoted it, so I already fully understand what you're mansplaining to me, and I'm not complaining about cartoon porn or MKV, I'm complaining about idiotic priorities. I'm sorry I touched a nerve that triggered you, but I don't hate "weebs" or porn, just misogyny and child abuse and terrible user interfaces. If you want to argue in favor of those things, go back to 4chan.
> Things just got worse

I quite like twitter now. I wasn't enough of a user five years ago to judge if it's better or worse.

Even the 'free speech' stuff is not so bad. The mainstream media can be a bit prone to blocking things at times.
It's not "enforced by law", but recommended.
Except the password manager becomes a central point of failure. If someone gets your phone, opens your password manager, boom they have keys to the castle. Because let's be honest, the password manager is on the phone, and there's no way keyloggers or screenshot backdoors get on there, and there's no way someone isn't looking over your shoulder with the latest iPhone Pixel Galaxy supercamera across the room.

It is really hard to listen to any security recommendation from anyone in the industry when there are SO MANY bad password rules that restrict what actual good long passwords are. Length restrictions, restrictions on special characters or UTF-8, password rotation rules. These examples of bank logins at major banks absolutely blow my mind.

https://xkcd.com/936/

and is site-specific with some leetcode subs or a magic number suffix is about the strongest password for login and for long-term user security and usability.

Maybe in another 15 years the security people at corporations will get their act together?

Maybe sometime we'll get legislation with some actual teeth on login security?
one benefit (idk if it applies here) is if the select/put/delete statements didn’t require loading the data in memory; so you could query massive data files with limited RAM and not have to solve that problem yourself for each data storage format you’re working with
Measuring things, knowing the units and how to convert them, and how to use the appropriate tools (measuring tape, multimeter, your hands, calculator). Math.

Wish I did.
Stop the madness. Its stupendously simple.

As the user, not you the author of some code, make changes to the UI it will be via events. In the respective event handlers just update a big state object with the identity of the node and how it is changed. When the page loads simply read from that state object to recreate the respective node exactly how they were when the user modified them. That's it. Nothing more.

Its how I wrote a full OS gui for the browser. It does far more than SPA framework, does it substantially faster, and requires only a tiny fraction of the code.

Yes, yes, here come all the excuses, like: I can't code or it wont work in a team, because other people cant code. Stop with the foolishness. Provide some governance, preferably fully automated, around event handling and you have complete obsoleted your giant nightmare framework.

I describe it here: https://github.com/prettydiff/wisdom/blob/master/state_manag...
>Would today's youth, even if equally gifted and ambitious, have the same opportunity?

Not the exact same opportunities, but the same type.

The type of opportunities that work like this have never been there for the taking, only for the making.
> simply adding an element and then immediately removing it with no lines of code in between those two calls was enough, in some cases, to completely mess up whatever order I thought there was.

Yes, this is what I expect too. But this is NOT what Go is doing here. Go is actually randomising the order EVERY time you try to iterate, even if you do NO manipulation of the items inside the map. See this comment thread for more details: https://news.ycombinator.com/item?id=41274850#41276274.

This is the surprising part, not that the iteration order may change if you add/remove items.

> My own OSS hashmap library, on github

Does your hashmap library, say, have a `iterate()` method that randomises the order of items every time it is called? If yes, ok, we are talking about the same thing here. But I am almost sure that it does not, and this is what Go is doing here.
You could open dev tools and modify the input then pasting worked.
Essential Linux Commands for Setting, Monitoring and Troubleshooting Networks
My guess is technical reason drove decision not “Lolz, no more iOS 15”. Looking at our telemetry data, less then 1% of devices that run our B2B app are iOS 15 or older. If we ran into iOS 15 issue, we would lock them out as well.
As described, I can't say who's at fault. What is outrageous about having few complaints about a high level design, but many more concrete complaints when there is a concrete implementation?

If someone can derail the project they should have been giving feed back iteratively, otherwise we fall into a water fall trap.

I don't really like the "senior design review" because of this lack of continued involvement.
I would be more interested to see how modern techniques could improve the then-state of the art.

A lot of the modern stack is layers of abstraction, which probably wouldn't be appropriate for such limited machines, but maybe superoptimizers and so on, and just more modern algorithms, etc, could help show what's really possible on these old machines. Sort of retro demoscene, but for useful apps.
Imagine finding a piece of art you like, but finding a minor anatomy flaw. When you point it out, the artist says they aren't going to fix it, because the piece is finished, and it would be impossible for them to do it, you point out that other artists have touched up their finished pieces, and they tell you to do it yourself, then.

Why is the artist obligated to do the work you think they should do? Why, if they don't do this work, should they be obligated to not release their work publicly?

FOSS is not an obligation to do everything that every user wants you to do. It's not an obligation to even communicate with those users. In fact, it comes explicitly with no warranty, even for fitness for any purpose.

The developer is a poor communicator, but how anybody can be defending those annoying, entitled, lazy users is beyond me.
Good concept!

The important thing to know when learning hotkeys is how to perform the same action using application UI.

Otherwise the keyboard becomes an obscure medium for discovering application functionality
I did found plenty of docs and books mentioning setrusage() though, like a proper Mandela Effect.
Yesterdays aesthetic wasn't thick chunky pixels with outputs exactly matching the indexed palettes with wide color range. Sure, resolution was low and color choice was limited... but so similarly limited was the way we transmitted and displayed things. These dithered polygon shadings turned into new colors, the blocky details into new smooth shapes, and the colors overall more muted than just popping the RGB value onto a modern screen would suggest.

That's not to say this aesthetic is "bad" (I'm actually quite fond of it and similar styles too) but just that it's absolutely nothing like the emulated Star Fox screenshots being used as the target suggest. If yesterday's pixels is the goal then this is missing the main part of what made those pixels look the way they did.

For those who haven't seen games like this on the typical technology of the era: this is a photo of LCD output using a similar path as taken here, a photo the same with a CRT emulation shader, and a photo of an actual CRT (don't take this one CRT to be gospel of what every CRT output from all of time looked like) https://i.imgur.com/lo8ytRq.jpeg
In jest, the orange tank like thing attached to that satellite looks sorta like a stargate ZPM haha.
>The thing is, even here on HN (where I expect, maybe not warranted, the level to be higher), people seem to absolutely proud and entitled to chargeback whatever for whatever reason.

I'm not American (I'm from the UK), but filing a chargeback is an incredibly satisfying weapon for a consumer.

So many companies try to weasel out of their legal obligations under consumer protection law, so why not hit them with a chargeback when they won't do what they're required to?

After being burned by PayPal protection not working out, I will now buy anything I can directly on a Credit Card, as you just get so much more protection in the UK - both contractually and legally.
Choosing the more "artistic" one didn't fail me.
How did divers manage to blow up the Nord Stream pipeline?
Seems apt that the error for a generic type would (and should) be spelled "terror."
Having recently messed with JMESPath in AWS, I wonder which of these structured data tools:

- Is easier to learn
- Has most/best documentation
- Is faster to write in

Does anyone know of a good comparison article?

(I still default to jq, I guess it has the momentum)
Radio Free Asia is literally an American propaganda outlet.[0]

[0]”Radio Free Asia (RFA) is an American government-funded non-profit corporation operating a news service that broadcasts radio programs and publishes online news, information, and commentary for its audiences in Asia.”

https://en.wikipedia.org/wiki/Radio_Free_Asia
My favorite was Le Cercle Rouge. Robert Evans supposedly was pushing for him to play Michael in the Godfather.
You probably don't want to adopt this metaphor.

Imagine someone saying it in a meeting that includes people other than some homogeneous group that thinks it's funny and clever and appropriate.

If you saw someone else making that mistake, you might have to interrupt them diplomatically.
What you're describing is a political calculation that I doubt Irish courts have the discretion to make. The law was in place, and Twitter chose to either knowingly break it or act without assessing the legality of their actions.

Inconsistent application of corporate/employment law is a strong disincentive to business participation because it makes the law feel capricious (and because there are plenty of disputes between businesses where there's no obvious way for political actors to put their thumbs on the scale in a "pro-business" way).
Yeah, you could just delete "readonly" from the input, then try the password manager autofill again. Thankfully no longer necessary.
For things that are mostly shell scripts and things in a similar family (Ansible playbooks, deployment pipelines etc.) and where you need to modify a structured file quickly, it's usually much faster to use the DSL provided by the tool than calling out to various scripts to extract or modify a single JSON key.

People often say that they'd prefer to write their shell scripts in Python or even Go these days, but the problem there is that the elements of structured programming makes the overall steps difficult to follow. Typically, the paradigm with use cases adjacent with shell scripts is to be able to view what it is doing without any sort of abstractions.
Yes ok, I did read the thread but didn't get the reference. I wouldn't say it's "quite remarkable", more simply that I misunderstood. My apologies.

But I stand by the broader point that I do not think his attitude is at all constructive or helpful, and while I am sure he is fed of up what he views as entitled users this is not a productive way to handle it. The toxicity is that it casts shade on FOSS and pushes people away from the community. And VLC would be half what it is today without it's users. He would do well to remember that, too.
Isn't this how Permutation City started?
KeePass, peeps
Evidence stacks up for poisonous books containing toxic dyes
The title is misleading. SpaceX launched it. The title had me wondering when the UK had suddenly developed a launcher.
I still feel like I'm a teenager, both in mind and body. I did took better care of my health on older age than when I was younger tho so I wasn't in my prime in my 20s.
Funny take. My life experience brought me the opposite realization :)
I know, right? It's like those people who listen to Zeppelin on CD or -- ugh -- streaming instead of how they were meant to be listened to: on vinyl.
> Could you clarify what exactly in this post you think is spammy?

In just the last 12 months, you’ve submitted your own domain 26 times. When you’re not submitting your own domain, you’re almost universally submitting content about your product.

Self promotion is directly addressed in the site guidelines.

> Please don't use HN primarily for promotion. It's ok to post your own stuff part of the time, but the primary use of the site should be for curiosity.

While I think some of the content is actually good, my reaction is to the fact that it has increasingly felt like pure self promotion, and the data backs that up.

> The posts only get traction if people like the content and upvote it. What's wrong with that?

See above. But for me, I’m just sharing how I feel after seeing these posts repeatedly. I’m tired of them to a degree that I felt compelled to comment about guidelines, which is something I generally try to avoid.

If it was an organically hot topic getting submitted by dozens of different people, I’d accept it as the current buzz in the zeitgeist and move on. Because it’s all coming from one account, it feels engineered, and yes, spammy. The quality of your content isn’t enough to excuse the behavior, and the behavior is now one of the lenses through which I’m seeing your product.

Too much of a good thing perhaps.
> Of course, but it means it should be within reach to turn on and it will blast blue light in my face should I want to check it at night. An e-ink screen would work best, considering low refresh rate is not an issue in this scenario.

You can set a schedule. Mine automatically go into DND mode a little before bedtime and turn off after the sun is up.
I bought a pair of sensors based on the HN mentions, and so far I'm pretty happy. I was mainly interested in their PM sensor, which isn't on your list of complaints, and works quite well.

I discovered my rangehood, which doesn't have an outdoor exhaust, is even more useless than I had imagined. I bought a HEPA filter for my kitchen to run while I'm cooking (a Blueair based on other HN comments) and based on the PM sensor readings of the AirGradient the HEPA filter is quite effective.

I did have to configure the CO₂ sensor recalibration period to keep the numbers sensible. It wasn't so easy to set different recalibration periods for the indoor and outdoor sensors, but with some curl commands, I was able to get things configured to my liking. I do appreciate that, in principle, I can edit the firmware to my liking in the future.
The Wikipedia articles claims that W is efficient, but only for a core language without highly desirable features like recursion, polymorphism, and subtyping.

https://en.m.wikipedia.org/wiki/Hindley%E2%80%93Milner_type_...
America has a seriously dated infrastructure system, practically no public transit, a car centric system that is falling apart at the seems as roads and bridges go into disrepair, and China is building infrastructure that Americans don’t even dream of.

But yeah keep believing China is full of “tofu dreg” buildings or whatever bullshit the Feds want you angry about lmao
With generics being available, couldn't any library implement it without waiting for stdlib to have it?
It’s not marclou. This is some person that goes by @xdchesko on X. They are spamming to win more referrals for shipfast.
I think HN readers are missing the point. It's not about the money, or opportunity to (or lack of) make living off a blue collar job today.

Here's what I got from reading this article.
No job is beneath me. I once scoffed at an opportunity to work at a supermarket when I was between employment. But looking back, maybe I should have.
I believe strongly that everyone should work at least once in their lifetime to work at menial/low-level job. I think working at menial jobs like in retail when I was young helped me a lot, even though I didn't realize it at that moment.
By working at minimum wage jobs at restaurant, retail, etc..., I've learned to respect others, no matter what they do for living, like a janitor or truck driver or a fastfood worker.

Also there is something about physical labor and working with your bare hands that makes me feel so alive and fulfilled.Perhaps, I am wired and built to work on physical things. Even as an old guy, since I started fixing physical things like broken toilet, or making physical things, even if it's just assembling Ikea furnitures, or tinkering with hardware, I feel more well and alive compared to when I'd been working as a dev.
Maybe that is why some of high-level tech workers leave their high-paying career to work at a farm or become a truck driver.
> VLC is what it is today

VLC is the least common denominator of video players. Its UI is asinine and the two primary reasons for its popularity are its iconic logo and multi-OS compatibility.

I admit you're probably right on the topic of stepping backwards by one frame, but I wouldn't be so quick to shower VLC with broad praise like that.
Musk recently personally donated cybertruck to effin' Kadyrov which was very thankful for it and promptly installed machine gun on it. A confirmed mass murderer and generally firmly in pool of the lowest human scum this planet has ever hosted. Lets be realistic for a while and not assign some stable high morals to mr musk.

Apart from his morality being flexible, his admiration for various murderous oppressors is famous at this point and his very obvious continuous mental issues only allow him to act in several modes. At the end, brilliant broken little boy with severe daddy issues and uber massive ego, stuff which he can never hope to fully tackle and it doesn't seem he is even trying to.

So, trying to map his responses to simple if x then y won't work like with normal balanced folks, he is too unstable and emotional for that.
It seems you prefer to study the masters and the pupils.
EDIT: because established.... rarely actually goes away
Yep! https://en.wikipedia.org/wiki/CORONA_(satellite)
Well, currently I'm in a major metro with good schools and hospitals, big houses for cheap next to modern transit, where my wife does not get regularly assaulted whenever she goes outside. The pay is several times higher in major metros with bad schools and hospitals, tiny shoebox apartments where the only ISP is the local cable monopoly, where my wife has been regularly assaulted whenever she went outside, and where I will probably get to have a favorite window glass shop again.