skysight-inc/HackerNews huggingface dataset:
Much more than 12 days. Below is a copy/paste of a recent security vulnerability timeline:

2015-12-14 | me > dotCMS | 8 SQL injection vulnerabilities

2015-12-14 | dotCMS > me | they were planning fixes in upcoming
release, estimated to beginning of 2016

2016-03-16 | dotCMS | dotCMS version 3.3.1 release (CVE-2016-4040
still not fixed)

2016-04-07 | me > dotCMS | what is the situation with reported vulnerabilities?

2016-04-07 | dotCMS > me | CVE-2016-4040 will be fixed in 3.5, which
is estimated to be out in mid-April

2016-04-19 | dotCMS | dotCMS version 3.5 release

2016-05-10 | dotCMS | dotCMS version 3.3.2 release

2016-10-31 | me | Full Disclosure on http://security.elarlang.eu

Source: http://seclists.org/fulldisclosure/2016/Nov/0

This timeline from first report to full disclosure was 10.5 months. Note that I did not go looking for a long timeline, this was the first item when I Googled "CVE disclosure timeline."

--Donald
Ah, so that's the Thomas Midgley Jr. of agriculture.

The CAP has turned into a disaster for the environment and for the EU. Perverse incentives abound.

https://en.wikipedia.org/wiki/Thomas_Midgley_Jr
...and now off to re-build the British Empire...?
That's an option in android chrome.
It's figure of speech.
> if you have the seed to start with

Seed would not be the limiting factor. Land would.

I feel fortunate to live on a bit more than one acre of suburban land that would be relatively appropriate for farming. But if you plow up the entire lawn, cut down the trees, and discount the drain field, house, and driveway, and don't purchase feed for livestock, that's just not enough area to feed my family.

And most people in my area don't have an acre. Sure, some local farmers have hundreds or thousands of acres - but there are a lot more people who only have a second-story apartment or a small city lot.

It's a simple problem of economies of scale. If you have a tractor, it's much, much easier to go from 10 acres to 100 acres than it is to go from 0 acres to 1 acre.
China President Xi Jinping: 'No one will emerge as a winner in a trade war'
"While critics might note that Apple’s price increase is greater than the pound’s loss in value, financial analysts predict that the market still hasn’t fully priced in the cost of Brexit — that is to say the pound still has further to fall."

So what mechanisms keep the price from instantly dropping if "everyone" agrees it should be lower? Market inefficiencies? Or lots of money betting on an upswing?
I'm aware of the recent curve25519-donna on 32-bit MSVC research, but PHP uses a different instruction than llmul (smull), so I'm not sure if that particular research is a concern here.

I don't have any tools to objectively measure the timing differences to detect leaks on-hand. I'm not sure if any even exist for measuring PHP software.

So, the answer to your question is "No, but open to suggestions on how to measure and possibly mitigate".
Isn't that idea also in Asimov's The End of Eternity? https://en.wikipedia.org/wiki/The_End_of_Eternity

In this book humans have at some point invented time travel. Subsequently an organization ('Eternity') is born out of it to regulate and protect humans accross centuries. But, because of it, Humanity never left Earth. The main protagonist stops time travel from being invented and kickstarts the nuclear age, this is supposed to start robots and later Foundation.

At least that's what I remember, I tried to summarize without reading Wikipedia for a change.

The key of the story is that either humans invent space travel and have a chance to thrive, or stay on Earth and are guaranteed to become extinct.
I think, regardless of where she intends to end up, she always had to start from the perspective of the UK being completely out of the EU. Showing that the UK is prepared to stand on its own two feet. If not prepared to do so, negotiations would be very one sided.

It'll certainly be interesting to see how the negotiations play out.
Since I have the advantage of having read the article, I can say that your speculation is correct: the author describes a systematic way to control how much less to eat. But "eat less" is still the bottom line. He lost weight because he ate less over the month of the experiment that he had been eating previously. How else did he lose the weight? Note that he doesn't report increasing his caloric expenditure through exercise, for example.
I began 2016 knowing (and hoping) Remain would win the referendum, and Clinton would win the presidency. So I'm not going to make any predictions at all.

Despite this speech, we still have absolutely no idea what conversations are being had in private, or how anything is going to work out.
"It's your job, the job of business, to gear yourselves up to take the opportunities which a single market of nearly 320 million people will offer.

Just think for a moment what a prospect that is. A single market without barriers—visible or invisible—giving you direct and unhindered access to the purchasing power of over 300 million of the world's wealthiest and most prosperous people.

Bigger than Japan. Bigger than the United States. On your doorstep. And with the Channel Tunnel to give you direct access to it.

It's not a dream. It's not a vision. It's not some bureaucrat's plan. It's for real."

Margaret Thatcher 1988
Microsoft+is+planning+to+come+up+with+a+2-in-1+foldable+device+latest+news
I've worked in the industry as a developer for 12 years and I can't remember any.

I do remember a competitor dying of not releasing their big refactored next version soon enough, and running out of cash.

Spolski tells it better than me:

https://www.joelonsoftware.com/2000/04/06/things-you-should-...
I don't think vbezhenar necessarily does anything wrong. I've been (and still am?) running into the same issues with Gmail, as well as with Yahoo (but not any other providers). I'm owning domain and IPs for about a decade, using reverse DNS, DKIM, SPF, on no blacklists, also using SRS for forwarding, registered the domain with Google, not bouncing possible spam, older recipients who moved mail out of spam folder: no problem, new recipients: tagged as spam. I'm using my mail server for a few small-volume mailing lists now, with an added comment on the subscription instructions that subscribers should watch out for mails moved to the spam folder; that has been working well enough for over a year now, but I'm not sure whether that has helped alleviate the problem (I should do a test run again, but it's time consuming and worrisome to create new Gmail user accounts for testing as I fear Google linking those accounts to myself might actually contribute to the bad scoring).

I know someone who does his own mail and does less than me (e.g. no SRS), and yet he doesn't have problems and thinks I'm doing something wrong...

My best hypothesis is that Google doesn't like the network that my server is in (Hetzner, various neighbours in the network are listed on a couple blacklists). When I find the time I'll set up a server with a different provider and see if it improves things. Other hypotheses are the software used (buddy uses OpenBSD and its mail server instead of Linux and QPSMTPD/Qmail+patches, perhaps they care about software headers or are doing OS fingerprinting), the fact that I'm using a fallback server on another continent (US), network timings, and plain noise (perhaps they use some kinds of machine learning that have persistent low-level irregularities).

PS. yes I'm not doing DMARC yet, but neither does my buddy.
Many here in the UK might actually be hoping for just that!! Fingers crossed it doesn't turn into a mess!
I think Britain will eventually come out of this stronger. However, it's clear in the interim period (which could be 5-10 years I think) there could be huge transitional issues. Whether that pain is worth suffering, only time will tell.

Personally, I am not a huge fan of these currency, trading or political blocs. The WTO exists for trade and I would much prefer it to be the vehicle for trade, rather than groups of geographically close-knit countries.
I believe convenience may be a huge argument for a lot of ppl. Paying to new provider takes a lot of resources, while using yet another AWS like api is easier.
A poorly made responsive layout*

If it was any good, it would be showing the desktop scaling/layout/whatever instead of the mobile when 'show desktop version' is on.

It's also not always about being on a responsive sites, a lot of places still do a m.website.com redirect when visiting the main site from a mobile device, but with no backwards redirect when visiting the mobile site (which is almost certainly non-responsive, otherwise there'd be essentially no need for the m.* site) as a desktop client - so you hit 'show desktop version', the m.* page refreshes and you just get the mobile site with funny scaling.
ME is where the IPMI implementation lies. It can be used over the network to monitor sensors, to access the serial port and so on. It also has an HTTP server providing a web interface to the same functionality.
ISIS has converted commercial drones into bombers
Show HN: Generate Lorem Ipsum text from your terminal
Haha, new marketing category: product only available for purchase in a 24-hour period that happens twice a year, or on a date decided by the roll of a dice in a youtube video, or by solving a puzzle, or .. :)
In fact Chrome has a reading mode but only on mobile and only if page is detected to have large desktop layout, and only sometimes - you get a "mobile view" button on the bottom. Byt there is no way to have it enabled on your own from some menu
> we, as a society

yes, we (the united states where google is head quartered) as a society, have agreed to at least pretend to allow the legal system to define guilt and innocence. But this isn't a philosophical debate. This is a discussion of what can be done to fix the AMP dilemma.
Ask HN: Do I need Google AMP if I already use a CDN?
I want faster mobile speed and better SEO for my ecommerce site.

I am already running a CDN. If I have a CDN like Akamai, Fastly or Incapsula, do I need Google AMP as well?
I think this is a great decision.

Not only does it allow May to try and negotiate a good deal. It also means the UK is free to negotiate deals around the world.

Prior to entering the "common market" the UK was 4th largest economy and had trade deals with the world.

The UK really needs to get back to basics. Trade deals with Canada, Australia, New Zealand, the ex-colonies, the US and then the EU (if they want a trading partner).

Not only that. Make Britian Great again. Lets have lower regulation than the EU. Lets have a much lower corporate tax and sales tax than the EU.

The UK needs to be the most attractive country to invest in. The UK needs to be very business friendly. There is a lot the UK can do without having some other country want to veto it.

I voted for Brexit and the UK can do a lot better!
For anyone not familiar with British political etiquette, the phrase:

"the UK cannot remain within the European single market, as staying in it would mean not leaving the EU at all"

can be interpreted as:

"I told them they better give us a special exception for single market access and no immigration and they laughed at me".
Playdead (Limbo, INSIDE) co-founder given $7.2M in split [reddit's translation]
Doomed...
Soccer and rugby are formalized and tamed down versions of communal games going back to the middle ages
You seem to have taken a "lesser of two evils" approach and that's probably a good idea. Side channels are not as bad as completely broken crypto, as long as the critical infrastructure (api.wordpress.com, etc) is good. If someone's private wordpress hosting gets knocked it's not a big deal but if the private keys of wordpress.com leaks through side channels it spells trouble for everyone.

In the ideal world, this project wouldn't need to exists but it's not the world we live in.

> I'm specifically more concerned with the second-order effect of what you've described; namely, PHP projects can't require ext/libsodium because they can't expect everyone to easily install it.

This is just a sad state of affairs.

> If it turns out that this project is helplessly insecure and there's no way to make it reasonably secure, I'm never tagging v1.0.0. Dead stop.

This is straight and honest.
If only the Neanderthals had thought of building a wall (and made homo sapiens pay for it, of course).
Is there any guarantee in their terms that they're not going to check which API brings in the most cash, and make their own if it's any good?

They might not need to know the specifics, just count hits. Then they could look at the public end of any seriously popular API.
It's not a constructive critique. If the intent is not to further the conversation by improving it and moving it forward, there's no constructive purpose in making it. Further comments by 'geon make this clear: there's no sincere attempt to understand or charitably grant that the interlocutor might be have a reasonable argument, even if it's one you might not agree with.

Edit to add:
Rapoport's rules are really helpful, particularly when discussing contentious topics.

https://www.brainpickings.org/2014/03/28/daniel-dennett-rapo...

This is too far off-topic now, and at best we're talking past each other, so I'll take any answer off the air.
It is indeed Debussy, "Clair de Lune" from this video: https://www.youtube.com/watch?v=CvFH_6DNRCY although embedded on astronaut.io as http://astronaut.io/audio/debussy.mp4 ...
People spell it e-c-t. I have heard it often. I can't help it that you haven't!
What math would you mean?

Calculus? More on the "building the theory" or "being able to do differential equations"

Algebra? Linear? Group-theory?

Discrete math? Logic? Proofs within logic systems? Completness theorem?

Graph Theory?

There is lots of different parts of math that would be suited to different kinds of projects :-)
"This latest round of price changes doesn’t just affect the UK (customers in India and Turkey are also going to see increases).."

OK, '25 percent due to Brexit' is going to get more clicks.
Exactly - you can't show nervousness like Switzerland did. May is taking the only starting position possible, when performing hostile negociations.

When Switzerland was faced with a similar issue (after citizens voted to restrict EU immigration) it was clear their Government knew straightaway they needed the deals with the EU, so it was impossible to negotiate anything of value.

Britain is politically and economically very important to continental Europe, so May does have some bargaining chips.
This is almost certainly a collosal act of self-harm, and deeply short-sighted.

I was desperately hopeful that the whole Brexit situation could be salvaged in some way, and that some way forward for liberalism might be figured out such that the rising tide of populism could be countered. I'm less and less confident about that.
Not at the concentrations that are used. The amount of residue is minuscule and modern pesticides have far less toxicity than older ones that have been phased out.

So now you give some qualifications to your earlier statement.

Do note that modern pesticides are not in widespread use all over the world (cost). Modern pesticides applied by a well educated professional can have a relatively low impact on the environment. But there are a lot of poorly educated farmers out there (most of them, really), and that doesn't begin to address the abuse of pesticides by lawn care companies and homeowners.
Which is funny because if the EU is to survive, immigration controls will have to be put in place. Many countries are already demanding to control their borders. So when that happens, the UK will feel stupid for leaving, I suppose. They could've just waited.
This is such a pity. European Union is (was ?) an incredible achievement. I don't think we realize exactly how improbable uniting Europe around a common destiny and a shared set of values is.

I hope the best for Europe and UK on their separate path. Given the mess, a clean cut is probably in the best interest of both sides
As far as I know, only the code is signed, not the partition table. This means that you can freely modify the partition table and completely remove some modules.
I wouldn't dare pretend to know what'll be the result once it's all said and done.
Stone: An awesome packet repeater tool that will save your day
Economics is messy
But the EPA says it'll cause kidney damage in the water table, which is what I specifically said. The WHO specifies that contamination with cadmium causes osteomalacia with various grades of osteoporosis accompanied by severe renal tubular disease. I also mentioned lead, which you've glossed right over. I said nothing about tattoo ink.

Your example underscores my point. Why should I trust you when you whip out an unrelated example to try and ad hominem your way to all-chemical farming, in the service of the idea 'organic farming will kill us all'?

How exactly does your example of 'cadmium is harmless in tattoo ink' make the larger concern irrelevant? From where I'm sitting (admittedly, it's Vermont, where we like organic farming a lot) you represent a prevalent class of agriculture arguers, who are insisting on full-tilt-bozo unnatural farming to the Nth degree, claiming it is the only thing that can save the world.

And yet, the arguments are as manipulative as 'cadmium is harmless in tattoo ink' when it's NOT considered harmless in the water table, and you may have known that full well.

Your example suggests (does not prove) my underlying concern: individual chemical compounds may well be trusted, but I do not trust the people selling them. It's far too profitable to be dishonest about this, and that's not going to get any better (indeed, as this way of farming wrecks the environment, it will get even more profitable to lie and mislead about it)
"If not prepared to do so, negotiations would be very one sided."

Exactly that, and it's pertinent timing given the noises that Trump is making regarding import taxes, and the implications of those taxes for EU exporters.
Except she was Lied to. We all were.

Also, it's not as clear cut as 320 million people.

They all have different languages.
All have different customs.
All have different laws.
All have different banking structures.

The EU is not like the US. Please don't think it is.

Have you tried exporting something to the EU? It's not easy. Oh and developing a website for the EU and communicating to it's citizens. Again not easy.

I launched a business in the US. I have 1 language, 1 bank, 1 custom to deal with. Oh and as it happens, I speak that language also. Very easy to deal with. The EU was a nightmare!
I suspect that is scaremongering from the suits that wants to let in American style for profit medical services.

Same shits been going on in Norway for decades.
This article is a reasonable rebuttal to the usual chicken little statements by people pushing industrial farming of GMO crops as the only way to "feed the world", but there are a couple of things this response misses.

1. If we stop eating so much beef, we really, really don't need to grow so much corn. Cattle feed accounts for an astronomical percentage of the need to grow so much acreage. Dropping the ethanol boondoggle (it is not a real solution to our problems with oil, it is not scalable or efficient) would make a lesser but still significant impact in freeing up existing farm acreage for edible crops.

2. These people tend to compare farms that are making no real attempts at maximizing for profitability against industrial farms that are totally maximized for profitability (in both cases here profitability can be considered a synonym for efficiency.) Making money is of course on the list of priorities for local farms, but it's not their primary goal. Most of the people I know who are running local farms in my area either inherited the farm from their family or left lucrative careers in other areas to become farmers. Money is not the primary driver of their actions as it is with an industrial farm. So of course they don't compete on that level. They are not trying to.

3. I don't buy local because I believe it is "more nutritious". I buy local for a few reasons. First, the food tastes better. Garlic is a great example. Store garlic that often comes from Mexico is very dry and the individual cloves are usually very small. They grow varietals that are maximized for number of cloves. My local garlic has larger bulbs and it is fresher because it hasn't taken a long voyage from Mexico. Because it has fewer individual bulbs, the volume of the head is more usable garlic and less paper. This applies to most produce I get from local sources. Tomatoes are another prime example. Mass produced tomatoes are picked before they are ripe and gassed to give them their color. Local tomatoes are red all the way through and taste way, way better.

4. Animal welfare isn't even mentioned in the article that I saw. But it is a big reason I try to buy my meat and dairy locally. I've seen what happens at industrial farms, and I've visited my local farms. It's night and day. I am comfortable with how the animals are cared for and live their lives at my local farms. I think anyone with a heart has a hard time watching footage of industrial farms and knowing we contribute to that horror.

5. Lastly it presupposes an all or nothing world. This is the biggest piece of bullshit that the "We have to pursue industrial farming at all costs!" folks push. Their argument imagines only a world where we are 100% local organic farms that care nothing for efficiency or only 100% industrial farms that are super efficient (but care nothing for animal welfare and quality of the end produce.) This of course is ridiculous. It's never going to be all or nothing. The future will be some version of what we have now; a mixture.
It is not completely Unsolicited because the client has asked for help on twitter.
https://en.wikipedia.org/wiki/Genetically_modified_maize#Ins...

Short answer: it's not a pesticide which affects humans.

Discussions about poisons fundamentally have to include a discussion about mechanism of action, because plenty of poisonous things to one species are completely harmless to another - i.e. chocolate is toxic to dogs, but harmless to humans in fairly massive quantities.

Debate over GMOs is in no way helped by attempts to broad-brush, and in fact reveals some rather startling and unfounded biases - i.e. the idea that "natural" is healthy is completely absurd - the vast majority of plants, and animal meats, are toxic for humans to eat. If you ever go ocean fishing, you'd be incredibly stupid to eat a fish you couldn't identify.
It chimes with UNIX philosophy for me. Organisations like the WTO which do (approximately) one thing and one thing well are preferable to those that try and do a bit of everything. It keeps the politics to a minimum.

Likewise, subject to the outcome of the negotiations, I imagine after a period of uncertainty and perhaps some turmoil it will be for the best. The timing may be unfortunate for some though.
Please check the wiki for more detailed information: https://github.com/corna/me_cleaner/wiki/How-does-it-work%3F...
Hackerspace 3D Prints scalable prosthetic limb for 3 year old girl
Parliament has to vote on it... might be hope
I might be referring to a different problem here, but often when ML gets something wrong, it gets it mind-bogglingly wrong.

Taking an extreme cartoon example, where a doctor might think a cancer is a cough, a computer might think the lamp is a patient.
Scientists create super-intelligent mice, discover they're also very laid back
> Many countries are already demanding to control their borders.

Yes but that won't happen.

> the UK will feel stupid for leaving, I suppose.

Nope. It's not just about immigration. It's actually being able to run one's own country. When you sign up to the EU, you are effectively giving up your country.
There are currently such controls for the EU, actually, and done on the French side of the channel. Those may go as well.