mrmagooey

I made something similar as a fun little project https://github.com/mrmagooey/taboo, does the same print function but also does some basic querying, deletes and updates, left and inner joins. I had no idea that the inbuilt version existed though.

The paper reports:

> Colorado’s legalization of recreational cannabis sales and use resulted in a 0.7 deaths per month (b = −0.68; 95% confidence interval = −1.34, −0.03) reduction in opioid-related deaths.

Which if I understand right, they're pretty sure it did something, but that something might be so small that the value of reporting it is negligible.

> If there's a serious vulnerability that actually needs your attention, you will read about it in the news

The ol' security through tech press approach. Seriously though, you can't have the security of your devices dependent on whether or not someone has come up with a catchy name for their exploit. The exploits with names like broadpwn and stagefright are the exceptions, not the rules, there are plenty of critical CVE's that have never had cool names or tech articles written about them. Even if an exploit has a cool name and some press, what if people don't upvote it when it gets posted here (or reddit/wherever)?

Isn't JWT a modern alternative to CSRF tokens?

You don't I guess, I'm just using 4 as an example (it's also the number of words used in xkcd's password strength comic).

Aren't passphrases kind of a bad choice for passwords? If all you are ever really guessing is the symbols that make up someones password, and you know that for example they have 4 words that make the passphrase, then you effectively only have to iterate 4 symbols with a known list of possibilities for each symbol (i.e. the dictionary).

If you compare the permutation space of a short passwords (length 7) with random characters (say ~80 potential symbols), with a long(er) password made up of 4 english words (say ~3000 potential symbols, the most commonly used english words).

    character_symbols = 80
    word_symbols = 3000
    number_of_character_password_symbols = 7
    number_of_word_password_symbols = 4
    permutation_space_characters = character_symbols**number_of_character_password_symbols
    permutation_space_words = word_symbols**number_of_word_password_symbols
    print('%.2E' % permutation_space_characters, '%.2E' % permutation_space_words)
    ('2.10E+13', '8.10E+13')

The words space is four times bigger, but in the same magnitude as the short (bad) password. I'm not an expert here, so I might have stuffed it up, but it seems like passphrases shouldn't really be encouraged?

I do love the recommendation to remove time-based password expiry though.

I'm surprised no one has posted this fairly thorough criticism of PHP from a few years ago https://eev.ee/blog/2012/04/09/php-a-fractal-of-bad-design/

This is a common error message for a number of CMS's (in this case probably WordPress) when overloaded, and shouldn't reflect upon the validity of the source.

Is there a concern that the mechanism allows for DoS? How do they mitigate the situation that the author describes?

There's several hundred Y Combinator companies, but I don't think I've seen a commensurate number of posts to HN. You'd know if it was open slather on Y Combinator companies posting self-promotion material to HN because this post would not be at the top, it would be some launch page for a company ending in 'ly'.

I typically only notice YC companies mentioned here when it is a Techcrunch (or similar) article about them.

I wouldn't have thought the GC would be expensive enough to warrant turning it off, interesting thought though.

Can't really read the whole thing at work as I feel self-conscious reading a page tiled in labradors on work time.

There have been a few projects to generate VHDL/Verilog using an LLVM backend, a quick google brings up some interesting presentations. I imagine constraints similar to those that the links OP brings up are why these aren't more mainstream.

You exploit peoples interest or addiction to various chemical substances and they devote entire government departments to chase you down, but you exploit peoples interest or addiction to the latest consumer products and you might get some tax breaks.

Agreed, also need to keep in mind that "power utility" can describe 3 discrete agents in electricity markets: the generator, distributor and retailer. The distributors may find themselves with a more active role to play as everyone becomes a sporadic generator.

Assuming trunk and 2.5.0 are roughly the same thing it seems like a decent performance increase http://speed.pypy.org/

Is there a way to filter out the jquery scripts?

You can't up the ante and claim it's analogous. Burning a tyre releases a tremendous amount of thick black smoke, burning a joint releases several orders of magnitude less smoke, and unless you're within 10m of the person you realistically are not going to be affected.

For effect: "What if someone built a rocket launch pad next to my house and it was directly affecting my health?"

Given that it's a USB plug powering the device, I doubt it, although maybe the lower power usage by the Pi might provide some extra overhead.

A lot of programs have more complexity than what is immediately obvious:

* The Microsoft office suite has a VB interpreter for every application,

* 3D (Blendr, Rhino) and graphics (gimp) tools have inbuilt python interpreters,

* And, it seems like there's always notes coming out from postgresql about how to deal with os limitations/gotchas

I was under the impression this "application-state" issue was something that the MVVM pattern was invented to solve.

I didn't think d3 targets anything in particular (from memory the tutorial uses divs to draw a histogram), a google search turns up a number of d3 canvas examples.

Not to detract from the fundamental misunderstanding of the word 'patch' by their marketing department, but it's probably safe to assume that they're not using an open-source stack and hence will be ok.

I keep meaning to use project Euler for this purpose

Indeed, why people upvote these things is beyond me.

Siege

Sometimes I wonder if any new investment that I make in my skillset is just buying me a few more months of profitable employment at some point around say 2050. The loss of employment for less skilled labour is happening now, but I see no reason why eventually all labour could be supplanted by increasingly efficient machinery/robotics (for physical tasks), and AI for information/services tasks.

Capital is increasingly producing greater returns than labour, and market pressure is causing businesses to invest in capital as a result... but what does the economy do when labour cannot produce or earn, and hence cannot spend?

The overuse of the history api also makes it frustrating to navigate back from as well (at least on ipad).

And possibly not with ASIC given the potential of multiple vendors worth of ASIC's coming online at roughly the same time. I believe at least one has shipped the bare hardware.

I don't think anyone holds up Linux as the gold standard for simple, built-in, user friendly, GUI-based, system essential utilities, and holding it up as such seems like a bit of a strawman here. I believe the gold standard for the above is OSX's Time Machine, which most consumers would probably prefer over manually copying files (manually versioned files tend towards a total mess over time IMO).