What would you use?

Re: the unauthenticated RCE (CVE-2025-11344), am I to understand that Apache will read and honour any .htaccess file it finds, even outside of the config root path? The lack of file clean-up when handling the exception is one thing... but this .htaccess logic strikes me as a bizarre default (if true).

Yes, Apache reads and honors .htaccess at every directory level for every request. 'twas how we did things before nginx with its pesky, centrally-sanctioned configuration that you had to manually reload.

Thank you. Sounds like I should stick to me boring nginx

You see the same thing with hundreds of CVEs assigned to random crap like PHPGurukul or Codeprojects. I.e. repositories of "tutorial" projects. Just like submitting a CVE for a vulnerability in OWASP's JuiceShop.

Nice. I notice that the author has some other interesting posts. I like this one on the James–Stein estimator [0] and this one [1] on day length variations.

[0] https://joe-antognini.github.io/machine-learning/steins-para... [1] https://joe-antognini.github.io/astronomy/daylight

By the way I think there's a missing factor of rho in the numerator in [1] in the sample transformation section. Should be rho^2

Thank you for the kind words! Yes, I think you're right about the missing factor of rho. And rho^2 is being drawn from a chi-squared distribution, not a chi distribution. (But the mode I stated is correct for a chi-squared distribution --- I must have omitted the squares when typing this up.)

What's the status on that? Did the series ever get finished?

No word on whether it's finished or will ever be but already looks complete enough to me? I mean, the subject is endless and there are so many ways to do things. But as primer, it's pretty good as it is.

I want to like this. But... one has to write the answer in EXACTLY the same format, down to each variable name it seems?

I'd love to see that. Could you link me to an implementation or explain this in more detail please?

Here's a 3D version used in the creation of sparse voxel octrees:

https://forceflow.be/2013/10/07/morton-encodingdecoding-thro...

Here's an example from AWS, where lat/long pairs are put into a Z-index, which is used as a DynamoDB sort key, letting you efficiently query for items near a point.

https://aws.amazon.com/blogs/database/z-order-indexing-for-m...

I would like to know about this more, too. Is there a code anywhere, ideally with comments? But I am fine without comments, too, I would just like to see the code and possibly with an example usage.

Okay, I was intrigued and I did some digging. Morton / Z-order is all about interleaving the individual bits of the x and y coordinates. You end up grouping by quadrants. Python one liner:

    points.sort(key=lambda p: sum(((p[0]>>i&1)<<(2*i))|((p[1]>>i&1)<<(2*i+1)) for i in range(16)))

With a tiny tiny caveat of wanting to run Nvidia drivers instead of nouveau.

Nvidia's official drivers have supported Wayland quite well since the 550-series. If you haven't tried it in a few years, now is a great time to give it a spin.

I hate that very often my first reaction to Show HN posts like this is to cynically look for signs of blatant AI code use.

I don't think that's the case here though.

Indeed. To me it still looks kind of fishy, because the author doesn't have a single other C project on github. The blog post reference is the only thing that makes it somewhat legit, to me at least.

Wait, is `List` to be avoided now? I'm behind the times then. I figured it was still the preferred type hint over `list`.

Avoided? Rather, probably personal preference.

But it is outdated since 3.9+ over just `list` . Same for `tuple`, `dict`, and so on)[0].

[0]: https://peps.python.org/pep-0585/