eurleif
eurleif on Hacker News
Now deleted, and replaced with:
https://x.com/dok2001/status/2112802620029223193"Cloudflare has protections in place for known exploit payloads. There will be more variations to come and the only way to fully protect your site is to update php once released."
Is this LLM output? It's not supported by your source, which only says that activating the hazard lights is permissible, not that pulling over is impermissible. In fact, your source says: "We note that Subaru indicates that when the driver is unable or unwilling to take control of the vehicle, the system will bring the vehicle to a stop. A vehicle system that stops a vehicle directly in a roadway might, depending on the circumstances, be considered to contain a safety-related defect, i.e., it may present an unreasonable risk of an accident occurring or of death and injury in an accident."
With all due respect to Steve, under 1 minute isn't that impressive. You can get there just by doing the beginner's method (a handful of different move-sequences) rapidly. The people who really study Rubik's Cube algorithms in depth can do it in a few seconds.
>melatonin should be consumed in doses an order of magnitude smaller than the smallest available dosage.
It's available on Amazon in doses as low as 100mcg: https://www.amazon.com/dp/B08MJL2GTC Are you saying this because you believe the correct dose is on the order of double-digit mcg, or because you're under the impression that the lowest available dose is single-digit mg?
>They now admit that their outside lawyers emailed the wrong person after confusing two Asian last names—only after we brought this to their attention.
I find it bizarre that they felt the need to specify "Asian". What does that have to do with anything?
Posted by
eurleif on Monday August 03, 2026 @09:07PM
from the show-hn dept.
https://leifkb.github.io/crack-attack-browser/
Crack Attack! is a classic open source puzzle game that's included in many Linux distro repositories. I first played it around 20 years ago, and I've been hooked since.I wanted to see if an LLM could port it to run in the browser. I suggested recompiling it with Emscripten, but the LLM decided to rewrite it in TypeScript instead, using the original code as a reference. I had to prompt it a...
You seem to have the restrictiveness backwards? The MIT license (uutils coreutils) is less restrictive than the GPL (GNU coreutils), and the AGPL is more restrictive than the PostgreSQL license.
And it doesn't violate the PostgreSQL license to license the rewrite more restrictively. That's part of what makes MIT-style licenses less restrictive than the GPL or AGPL: they allow for more-restrictive relicensing.
The GP seems to be describing "auto hold", which is a different feature from hill start assist, and is newer and less prevalent.
I had to drive a rental car for a bit recently, after getting rear-ended, and I was shocked to discover that it defaulted to recirculation mode every time it was turned on, regardless of whether you'd turned it off the previous time. I felt light-headed in it a few times before I realized I needed to manually turn recirculation off every time. Horrible behavior, and I don't doubt that it's responsible for many accidents.
It looks like the "Skin Damage Over Time" chart is the same information as the timer.
It would be useful to have an option to change the time of day, rather than always using the current time; e.g. for planning at night what to do tomorrow.
To go even deeper into the weeds: this is only true of "simple" requests[0]. Requests that aren't "simple" always require preflight approval. This is based on which requests a <form> or link could already create without approval; since the dawn of time, <form method="post"> could submit a potentially-destructive request, and sites needed to protect themselves against that via XSRF tokens; so CORS could allow submiting the same class of requests without preflight approval, and not introduce any new attacks. But there's no <form method="delete">, for example, so CORS would have created attacks against previously-secure sites if it had allowed DELETE requests without preflight approval.
[0] https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/COR...
The part you may be missing is that cookies exist.
User visits A.com, types in their username and password, and a cookie is set in their browser. The browser will send that cookie back to A.com with all subsequent requests, and A.com's server will use it to enable access to the user's account.
Now the user visits B.com, which makes a request to A.com/private_user_data. The user's cookie is sent with this request, so A.com will respond with (and B.com will receive) the user's private data without the user consenting to this at all (not even in a "misguided" way).
At least within the federal court system, binding precedent is already freely available. Only circuit courts and SCOTUS can create binding precedent, and the opinions of those courts are freely available on their respective sites, outside of PACER. E.g., here's the 9th circuit:
https://www.ca9.uscourts.gov/decisions/opinions/
>Notepad++ name itself is trademarked by Don Ho
Is it? I can't find a trademark registration on the USPTO site.
The part that would violate guarantees in JavaScript is not function objects being kept alive longer, but function objects which should be distinct not being so.
function foo() {
return function() { };
}
console.log(foo() === foo()); // This must log `false` in a compliant implementation
The linked Google policy states:
>We won’t give notice when legally prohibited under the terms of the request.
The post states that his lawyer has reviewed the subpoena, but doesn't mention whether or not it contained a non-disclosure order. That's an important detail to address if the claim is that Google acted against its own policy.
The original claim being discussed is about the overhead of an in-process database vs. a database server in a separate process, not about whether SQLite or PostgreSQL have a faster database engine.
A very long time ago, I had the idea to set up a joke site advertising "SpamZero, the world's best spam filter", with a bunch of hype about how it never, ever misses spam. When you clicked the download link, the joke would be revealed: you would get a file consisting of `function isSpam(msg) { return true; }`.
Apparently that's not a joke anymore?!
The documentation doesn't make this entirely clear, but I think these are two separate things: the original `edit` command which is built into Windows 11 (and has been built into prior Windows releases), and a replacement written in Rust that can optionally be installed.
Note that my link is dated 2023, whereas Wikipedia says that Microsoft Edit was first released in 2025: https://en.wikipedia.org/wiki/MS-DOS_Editor