Hacker Newsnew | past | comments | ask | show | jobs | submit | mikey_p's commentslogin

But isn't the web so much better now that everything is client side instead of server side?

I still think client side JS apps are the biggest mistake this industry ever made.


Stuff like this is why I migrated all my services away from Google. I don't do business with people that treat me like shit.


Didn't even share the :bufo-pulls-andon-cord: image for adding to your own Slack :(


Whoops sorry, I'll need to size this down but: https://gist.github.com/abelanger5/c513ef259b1b03fe2e5a27b96...

Going to create a PR into https://github.com/knobiknows/all-the-bufo later today.


No, if you read the article the author was downloading firmware from their website and still found the token.


This is a great question, and theres alot of history there, this is how time used to work until travel and communication speeds necessitating coordination over larger areas required it. The biggest driver in North America? Railroads.

Great documentary on the history of human relationship with time is available here: https://www.pbs.org/video/pbs-indies-time-1/


They didn't have to but Anthropic chose to open their mouth and announce their "reasons" for the rewrite. Don't blame anyone but Anthropic for this, they didn't have to try to justify it, but they decided to anyway.


Sure that had to justify it, people were writing all sorts of posts about how Bun was no longer trusted since it was rewritten with Rust.

Bun's post was explanation of that process that was (IMHO) pretty reassuring in that the new version of Bun is not 100% garbage.

(Now in the ideal case that post would be released before, or at the same time as, rust-based source code on github... Then there would be much less drama)


I think the thing is that there is no official accepted value of LD50 for THC since there has never been a recorded death from THC:

> The median lethal dose (LD50) of THC has been determined in various animal species through oral administration and ranges from 800 to 9000 mg/kg. In humans, there have been no recorded instances of fatal overdoses resulting from acute THC use. However, estimates for a potentially lethal human dose range from 4 to 15 g.

https://www.ncbi.nlm.nih.gov/books/NBK563174/


It's not true that there has never been a recorded death from THC. A quick literature search turned up:

B. Hartung, S. Kauferstein, S. Ritz-Timme, T. Daldrup, Sudden unexpected death under acute influence of cannabis, Forensic Science International (2014), http://dx.doi.org/10.1016/j.forsciint.2014.02.001. Case report of two otherwise-healthy 20-something men who died of cardiac arrhythmia's following large marijuana doses.

https://3402974.fs1.hubspotusercontent-na1.net/hubfs/3402974...

Noble, M. J., Hedberg, K., & Hendrickson, R. G. (2019). Acute cannabis toxicity. Clinical Toxicology, 57(8), 735–742. https://doi.org/10.1080/15563650.2018.1548708. Clinical review of 253 Poison Center cases involving acute cannabis poisoning; 8 patients were admitted to the ICU, 3 were intubated, and 1 died.

https://pubmed.ncbi.nlm.nih.gov/30676820/

There's also a Heyndrickx 1969 paper that everybody cites (including my original reference on hazard ratios), but I can't find an abstract or full text anywhere on the web.

Cases of cannabis poisoning fatalities are extremely rare, but they do exist. Your citation was apparently unaware of (or possibly published before) the other cases.


Those appear to be reports of cannabis poisoning.

Without even considering the veracity of the reports, cannabis is not the same thing as THC.

In illegal markets product safety is not assured, there are plenty of examples of cannabis being treated with other drugs, not to mention simple unsafe horticultural practices.


The longer I go the more I have actually come to appreciate the way Packagist works for the PHP community, there are lots of cool things it does that I wish NPM or other registries did by default, like forcing you to package from a source repository, so that you can't upload a different artifact from what you keep in source control.


I'm not sure that really gives you the guarantees you think it does, though.

For example, I could push some malicious code, tag it, wait for Packagist to finish pulling it to publish a package, and then amend history to remove the malicious code, rewrite the git-tag, and force-push both to the git server.

This scheme makes it hard/impossible to push mismatching code by accident, but doesn't do much to stop a malicious actor.


This kind of thing is one of the reasons crates.io distributes source only, and that published crate dependencies can't depend on other repositories (that might allow for that attack).


How does a close source package work? Depending on the language its not super helpful, but a package that is closed source should be possible.


For crates.io: They don't allow closed-source packages. But they're just the free community package index, you're not forced to use them.

You can:

- host a private index

- host the proprietary binaries in a git repo and use a git dependency

- commit the proprietary binaries into your source repo, and use a path dependency


crates.io also only distributes source code.


I've already been wanting to get rid of my Roku TVs and boxes for awhile now, they tend to be slow and buggy lately which requires ALOT of restarting.

Before Roku I spent 2005-2018 on various TiVo systems including whole house with minis and the cable-card system. Was thinking of quitting that for awhile, but the Rovi/Macrovision acquisition was definitely the writing on the wall.

Guess it's time to try an Apple TV as it seems like the only semi-premium option available.


> Laws aren’t made that way

That's basically exactly how they get made. You don't know anything about the agriculture checkoff in the US, do you?

Every single pound of pork sold or produced in the US sent a tiny amount of it's sale price to the "Pork. The Other White Meat" campaign: https://en.wikipedia.org/wiki/Pork._The_Other_White_Meat

> laws made that way usually aren’t good.

I don't think anyone said they were good laws.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: