Hacker Newsnew | past | comments | ask | show | jobs | submit | jsmith99's commentslogin

Is the lack of CVE because the implementations you wrote are better written and safer than those in the standard libraries or because no one has checked?

Presumably the latter. However, mindlessly bumping package versions to fix bullshit security vulnerabilities is now industry standard practice. Once your client/company reaches a certain size, you will pretty much have to do it to satisfy the demands of some sort of security/compliance jarl.

And yet npm install [package with 1000 recursieve dependencies] is not considered a supply chain risk at all to those security/compliance jarls.

Let alone having to check all licenses...


Well there's probably far less attack surface.

The big difference is that 'real' nappies become extremely uncomfortable when wet (child immediately cries to be changed) so toddlers get a strong incentive to stop wetting whereas with modern disposables they barely even notice when they wee.


I assume the esrog is the primeval citron but I've noticed that Jewish tradition (which rejects the use of hybrid citrons) allows some surprisingly different citrons in practice, popularly associated with Israel, Morocco, Yemen, Corfu etc. These differ considerably in eg rind thickness.


It's still unavailable in many regions.


Whenever I build a new feature with it I end up with several plan files leftover. I ask CC to combine them all, update with what we actually ended up building and name it something sensible, then whenever I want to work on that area again it's a useful reference (including the architecture, decisions and tradeoffs, relevant files etc).


Yes this is what agent "skills" are. Just guides on any topic. The key is that you have the agent write and maintain them.


The first baby photo is definitely the best. Artistic lighting setups can work for adult portraits, photographers used to recommend side lighting for male bone structure, but it just looks wrong in these baby photos.


Wouldn't stockfish's position evaluation be incorrect in that case? (If it evaluated the position based on a formula that assumed normal rules)


I'm not quite clear on the how of it, but Stockfish works pretty well outside the normal bounds of chess. There are toy chess variants on chess.com with "dragons" (knight + bishop) and stockfish can use those very effectively


London oyster cards also offer a refund of your pay as you go balance.


I suspect most people just use contactless nowadays, Especially infrequent visitors.


> Especially infrequent visitors

I don't know a single resident who uses oyster (maybe kids? Dunno, I don't have kids in my social circle), infrequent visitors are actually the only ones I've seen using oyster and that's because they thought that was the only way to use transport


Many, many people use Oyster cards for monthly or annual passes.


It's a second price auction. Who cares what their limit is. If it's more than the value of the item to you then they will win. Otherwise you will win.


Exactly. I could put $100,000 as my max bid, but if second place only bids $10, then all they know is I bid $11 (or whatever the increment is). eBay doesn't tell anyone my max is $100K.


I think the reasoning is that people are irrational, and people don't actually have "hard limits' so others will bid in increments to exceed it. So in aggregate you will end up hitting your max more often because of others' irrationality than if it was a sealed auction and you don't give them that chance.


People also will often have a "hard at the time" limit that turns out to be very soft when they realise other people also wants the same thing.

A bidding war can make the perceived value of an item increase.


This is my point. If you look at the actual behavior and read people's comments in forums you'll see that almost no one sticks to their "hard limit". Including me!

People's competitive behavior, or "you're not taking this from me," or "I've definitely got this item and have made plans" or any number of other emotional behaviors take over.

People's railing against sniping also demonstrates this.


They've now made a change in that at least when you open a csv it now asks you beforehand if you want your data transformed, eg converting strings to numbers where that loses leading zeros.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: