zzzeek

yes. everyone install Cookie Auto Delete.

the problem is a plugin like that would take out entire industries because it would basically end anonymous tracking cookies.

> Instead, it was triggered by a change to one of our database systems' permissions which caused the database to output multiple entries into a “feature file” used by our Bot Management system.

And here is the query they used ** (OK, so it's not exactly):

     SELECT * from feature JOIN permissions on feature.feature_type_id = permissions.feature_type_id

someone added a new row to permissions and the JOIN started returning two dupe feature rows for each distinct feature.

** "here is the query" is used for dramatic effect. I have no knowledge of what kind of database they are even using much less queries (but i do have an idea).

more edits: OK apparently it's described later in the post as a query against clickhouse's table metadata table, and because users were granted access to an additional database that was actually the backing store to the one they normally worked with, some row level security type of thing doubled up the rows. Not sure why querying system.columns is part of a production level query though, seems overly dynamic.

because we're an open source project that accepts pull requests on github and we'd like our PR submitters to see why their PRs are failing tests

~~two~~ three comments on that:

1. DDOS protection is not the only thing anymore, I use cloudflare because of vast amounts of AI bots from thousands of ASNs around the world crawling my CI servers (bloated Java VMs on very undersized hosts) and bringing them down (granted, I threw cloudflare onto my static sites as well which was not really necessary, I just liked their analytics UX)

2. the XKCD comic is mis-interpreted there, that little block is small because it's a "small open source project run by one person", cloudflare is the opposite of that

3. edit: also cloudflare is awesome if you are migrating hosts, did a migration this past month, you point cloudflare to the new servers and it's instant DNS propagation (since you didnt propagate anything :) )

it has to sound like a german word though

debating the environmental and public health effects of AI negates the possibility of debating those same things with respect to cars/trucks ?

as an American I will note you are breathtakingly incorrect about there not being policy differences between Republicans and Democrats, and the "cave in" over the government shutdown is strictly one of tactics, not ideology.

> many Democrats do support the Trump administration policies on healthcare

citation needed

> Or how the core Democrat party

The phrase "the Democrat party" is a well known right wing slur against the Democratic party; this term is used exclusively by right wing activists and party members and you'd only see it by reading lots of right wing sources.

It's still marketing , "Claude is being used for evil and for good ! How will YOU survive without your own agents ? (Subtext 'It's practically sentient !')"

Hetzner is German?

it's getting hard to ignore Hetzner (as a Linode user).

Thing is, Linode was great 10-15 years ago, then enshittification ensued (starting with Akamai buying them).

So what does enshittification for Hetzner look like? I've already got migration scripts pointed at their servers but can't wait for the eventual letdown.

wow add Posthog to Places Id Never Work

"you asked someone what they thought of your approach? BAD! that's not our culture!"

both of my parents have low cholesterol, my mom's cholesterol is naturally under 200, my dad is on statins but the highest he ever got was about 230. they are in their 80s. Nobody on any side of my family (for which I have about 25 first cousins) has ever had any heart disease of any kind, no bypass surgeries, no heart attacks, nothing.

I'm familiar with the genetically high cholesterol thing and when you look at that you see parents/grandparents having heart attacks in their 40's. nothing like any of that in my family.

anyway yes im on the statins and probably need to boost my dose a little more to be below 200.

yeah I read all that and it's why i did "diet" (already exercised) first.

still doesnt explain what my cardiologist was talking about, though. he's not the first dr. to tell me that "diet isn't really going to help you much". one dr. said, "if you went totally vegan, maybe it would have a slight effect". so no I didnt go totally vegan.

i think the idea is diet/exercise can make a 20 point dent in your total cholesterol but in practice, not much more than that, if you have total cholesterol over 250 kind of thing.

> Sure, it is absolutely true that better lifestyle and diet has a huge effect.

not for me. My cholesterol was hovering in the high 200's, then finally hit 300 and I completely freaked out, radically changed my diet, and lost 22 pounds (from 180 to 158).

What did my high cholesterol do ? It did absolutely nothing. ticked down to like, 280.

So I'm on the statins. my total cholesterol went from high 200's to about 150 in a month and was impacting my liver function. so we reduced the statins to a very low dose (5mg three times a week, crazy low). My total cholesterol hovers around 200 now. My cardiologist tells me that the conventional wisdom of "diet and exercise" is almost entirely disproven to have any meaningful effect on lipids these days (though i havent researched deeply).

so now that jim crow is over, redlining is over, and legalized discrmination is...."over", so to speak, generation upon generation of Black people (the people who were referred to as "colored" in that photo) have been denied generational wealth and prosperity, we now deem that whatever problems the Black community has, are disconnected from any of that. Impossible to pin down factors like "group preference" are why Black communities continue to be so segregated, why the community has a dramatically higher rate of incarceration, poorer academic outcomes, poorer health outcomes...we can never know how much 400 years of institutional oppression had to do with that vs. simple "group preference". Attempts to observe any of these factors as potential causes are deemed as "Wokeness" and giant multinational corporations are run by zealots who seek to eradicate any such "wokeness" who are also cheered on by Hacker News readers similarly tired of this bothersome "wokeness". 400 years of institutional oppression simply can't be separated from random group preference, and that's why it should be illegal to even question this conundrum.

I actually agree with you on that as well, watching claude take over so many tedious "oh this thing broke, I have to google how that works, re-learn its config format, fix the thing, then forget about it again" kinds of tasks does at the same time reveal a lot of thought processes that i no longer have to engage in.

then again I dont see how it's too different from just a simple move into middle management where you manage programmers but dont do as much of the coding yourself. with Claude I'm finding myself taking on much bigger tasks and orchestrating a lot more technologies to do things, so I am learning about things i would not have if i didnt have the LLM to assist me through it.

using LLMs for creative purposes is terrifying. Because why? learning the craft is the whole reason you do it. however using LLMs to get work done, I just had Claude rewrite some k8s kuttl tests into chainsaw, basically a complete drudgery, and it nails it on the first try while I can stay mentally in EOD Friday mode. Not any different from having a machine wash the dishes. because it is, in fact, nuclear powered autocomplete. autocomplete is handy!

OK, so you reject the claim that systemic racism had any effect that can be meaningfully attributed (I guess sort of like how you cant blame climate change for the exact nature of a specific hurricaine). I see you carefully sidestep the instantly-disqualifying claims of "genetic inferiority" as the cause of racial disparity and instead claim..... "group preference"? or "what does Black really mean, anyway?" (what was the Civil Rights movement about, exactly? What does "Colored" mean in this sign? https://edition.cnn.com/2012/01/22/opinion/greene-racial-sig... who really knows, right? ) Black people "preferred" to live in poorer neighborhoods and to not buy houses in Levittown back when everyone was doing so?

I dont even know what "anti-wokeness" means. For me, "woke" means when I, as someone who has lived in NYC / LI his whole life, learned that all the highways were built in such a way as to intentionally exclude poor and especially Black people from participating in society: https://transalt.org/blog/repeal-robert-moses and about LI's nasty history of redlining that prevented Black communities from gaining generational wealth: https://projects.newsday.com/long-island/segregation-real-es...

Despite growing up in these places, I had no idea about any of this - Black people, to me as a youngster, just seemed to be these people who all seemed to live in other neighborhoods and were seen in 1970's Long Island as people to be wary of. "Woke" to me meant, holy shit look how badly these people have been treated, no wonder things are this way.

So then WTF is "anti-woke"? is it the claim that none of that documented, well known systemic racism for decade after decade, after 300 years of slavery, actually matters and the real reason for racial disparities is genetics or something? I mean what else could that mean ?

It's garbage, reject it. Over engineered. Update your PR guidelines that AI is fine to help write code but PRs have to be ultimately human designed.

async python has problems, but "anyio exists" is not one of them that can be blamed on python, simply dont use weird third party libraries trying to second guess the asyncio architecture

edit: ironically I'm the author of a weird third party library trying to second guess the asyncio architecture but mine is good https://awaitlet.sqlalchemy.org/en/latest/ (but I'll likely be retiring it in the coming year due to lack of interest)

it's from rick and morty that was referenced here last week with a post about robots that pass butter

Good decision, judging by their general level of impatience with things they would have hated my ORM :).

Also I think the node approach is probably still more performant than FastAPI but that's just a hunch.

Hopefully they won't have security issues because someone hijacked the node package that sets the font color to blue or passes the butter or something.

the way to combat this is to legislate against media conglomeration in the hands of a small set of billionaires. We have anti-trust laws that can be pulled out of deep storage to be used for this purpose. while we're at it, deflating the wealth of actual billionaires back to nine or fewer digits would be pretty helpful too.

huh? public figures should not speak out against things they disapprove of, particularly by people they are known to be closely associated with? at the very least they should do it for themselves, to publicly distance themselves from something they disapprove of. Otherwise, we assume they approve, and that is the actual point of my post, which is as long as they stay silent about their colleague, we have to assume YC types have no problem with this stuff. (which we knew anyway. but their silence confirms it).

like here's most of RFK Jr.s actual family saying he should resign: https://www.pbs.org/newshour/politics/rfk-jrs-family-members... what losers! they should have said nothing and stayed silent. because what's the use right? The use is at the very least, we know that they, the immediate family members, do not approve of their sibling's actions.

What's scaring me the most about AI is that FOX News is now uncritically showing AI videos that portray fictitious Black people fraudulently selling food stamps for drugs, and they are claiming these videos are real.

AGI is not going to kill humanity, humanity is going to kill humanity as usual, and AI's immediate role in assisting this is as a tool that renders truth, knowledge, and a shared reality as essentially over.

More like they'd come out publicly against what Thiel and Palantir are doing, given that they are members of, and colleagues within, the same communities of moneyed tech leadership.

I know, this is just how it is I guess . Those of us mystified what the big problem is with virtualenv and pip and why we all have to use a tool distributed by a for profit company and it's not even written in python will just have to start a little club or something

I guess this is mostly about data science code and maybe people who publish software in those communities are just doing very poor packaging, so this idea of a "lock file" that freezes absolutely everything with zero chance for any kind of variation is useful. Certainly the worst packaged code I've ever seen with very brittle links to certain python versions and all that is typically some ML sort of thing, so yeah.

This is all anathema to those of us who know how to package and publish software.

the people who run YC and Hacker News have Peter Thiel's phone number.

that's all I'm saying

i figured that's what it was, but i didnt know how to find it in the browser tools but i missed the "after" part, so yeah it's in the "pseudo-elements". nice!