skysight-inc/HackerNews huggingface dataset:
As someone who can work with both worlds, I am already helping some psychiatric patients (together with certified professionals).

I help them first with some simple meditations: it really helps them to learn to focus. Focus on the body and emotions. Often their thinking has run wild and that causes them to overstress and think unclearly. By just breathing and if possible, feeling they can get their senses back
slowly. It already helps with people that have a light psychosis.

The spirits, as I perceive them, are often in a psychosis themselves. Others are in a huge depression, or in an extreme panic. They can feel like a cloud enveloping the mind. It draws us into their world, if we are not grounded well. That is why people that are close together can get into the same psychiatric problem.

People often call these spirits the "negative voice" or inner demon. But it is a bit more complex than that. Spirits are part of the consciousness of people that have died, and have not returned to their source. They lost contact with themselves, and with reality. They identify themselves with anything that they can attach themselves to. So when you are very stressed due to work or life, it can happen that a spirit joins your experience and identifies itself with you. And suddenly you "lose your mind". In deeper stages this can lead to depression or psychosis or other psychiatric problems.
https://imgur.com/gallery/SOS4E

By removing the spirits, a person can recover his/her own mind. I have often spoken with people in total panic and seen them calm down in a few minutes after removing the spirits. Depression and psychosis take a bit longer, because there are more factors involved. But there have been some improvements.

In scientific sense it all seems impossible, since we have no models for spirits or consciousness or whatever. I am working on that on http://www.reddit.com/r/paradigmchange

Medicine can help to slow everything down, but does not magically remove the psychosis or depression. It makes it less active. Modern medicine works by slowing down so much that most stress can go away, after which the patient can recover. Sadly that means that the patient can sometimes fall back into the same psychosis or depression if the medicine is stopped or when it has grown less effective.

To heal better, it is always good to learn to meditate and regain control over your own mind. Mindfulness can already be effective. Enjoying some peace in nature works very well too.
I have two remotes: One to turn the TV on and off or change the volume, and another, much smaller one to control my Android box running KODI. I just re-used the Amazon fire TV stick remote. Works great! 7 buttons.

Simple and usable is still possible, but you have to do your homework.
India’s electric car pioneer plans new mobility revolution with SUN Mobility
To loop others in:

Summary: https://en.wikipedia.org/wiki/Therac-25#Problem_description

Full Reading from Berkeley course: https://www-inst.cs.berkeley.edu/~cs61a/reader/Therac-25.pdf
Related topic: In the eternal and tiresome dispute between religious Creationists and modern science, a favorite talking point is that "it's only a theory!" As a result, some science-minded people are proposing that scientists adopt a different word to substitute for the "tainted" word "theory," whose colloquial meaning differs from that in a professional scientific context.

Me, I think this is a terrible idea. I fiercely resist having my (or anyone's) use of vocabulary directed to accommodate ignorant people. I can see only losing battles in that direction.
Dr. Dao didn't look like he had a particularly safe experience in the photographs.
Yeah. And to avoid theft, simply don't acquire things that are not yours.
on United -- it was almost certainly a Global Services passenger. Those folks get whatever they want.
What makes you think you can't do (or teach) low-level stuff in Rust?
$1,000 does not sound like true full fare first (I.e. F class http://www.cwsi.net/m/united.htm), but my real guess is they had a global services customer they needed to get on the plane and this had paid less or had lower Frequent flyer status than the rest of the cabin
> That’s why I want United Airlines to go out of business for it.

Sounds like the economic version of dragging their employees out of their seats to me.
that's a very broad brush you're painting with. Women can be all of those things, none of those things, or anywhere in between. So can men.
California Moves to Fine UBER for Failing to Investigate Drunk Drivers
That would be ideal, but it's hard to see what you can't see, right ?
A guy in local hackerspace is building just that: https://hackaday.io/project/19035-zerophone-a-raspberry-pi-s...
While this might or might not be technically legal, what shocks me is the response you'll see on online fora, that passengers should just shut up and comply, and that failure to do so is childish.

These posts are often at great length, and laden with appeals to authority. Some might be trolls. But others appear to be by people who genuinely value an environment where the lowliest airline employee, no matter how poor their judgement, no matter how absent their discretion, is more right than any customer. Munoz's email to employees, of which I've not seen a retraction, takes this line wholeheartedly. It's a trait that suffuses the industry. Who the hell ARE these people?
Definitely. Thanks.
Had they listened to the naysayers, they would have used gnome shell all along, the development resources would have been more focused, and desktop Linux would be better off.

I recently switched from unity to gnome shell and it's much much better. Unity's bugs were simply embarrassing.
A few little personal things I've done with PhantomJS:

• A script that would go to Comcast's TV schedule for my area and make a list of all movies upcoming in the next two weeks on all channels that are included in my subscription. I could then grep that for a list of movies I've been looking for.

I couldn't just grab the page with curl and parse it, because JavaScript does most of the work. JavaScript fetches the listings, and when you advance the listings it it fetches the new listings and replaces the old ones on the page.

• A script that goes to the FCCs license information site and gets a list of all ham radio callsigns issued recently [1].

• A script that given a URL to a tactics problem on lichess gets the FEN for the position. I'd use this if I was doing tactics training there on my iPad and did not understand why my answer was wrong or why their answer was right.

I'd mail myself a link to the problem, and then later on my desktop I'd give that URL to this script and it would go to lichess to the problem page, and then from there to the board editor page for that position, and grab and give me the FEN, which I could then use to set up the position in Stockfish to analyze.

(This is no longer useful. They have made some changes at lichess and now they have a browser-based version of Stockfish on the problem pages, so I can answer my questions right there).

• A script that goes to everquest.com and gets the server population levels from the server population display on that page.

I don't think that there was anything in this one that actually needed a headless browser. As far as I recall it could have all been done with getting the page with curl and parsing it. It was just easier to do it in JavaScript using the DOM. (The lichess one may also have been that way).

[1] https://github.com/tzs/todays_hams
This is actually a really good thing if numbers are greatly hit. It'll hopefully lead to the entire US travel industry to focus on becoming the most travel friendly place it can be. But the hit needs to be big enough for shareholders to care.
Why and how would learning C rather than Rust make them any closer to the machine? It's not like C corresponds particularly closely to the hardware (e.g. there's no way to get access to the carry flag). Learning assembly might be worthwhile, but learning C isn't.
What? Cannot talk about Fallout 4 but Oblivion (and Skyrim and Morrowind) was full of CTDs bugs. Some of them are fixed in EngineBugFixes(http://www.nexusmods.com/oblivion/mods/47085/?) or the Oblivion Script Extender (as the SetLevel bug). Don't you know that the background SpeedTree laoder thread has a potential for a data race that can cause random CTDs in the Wilderness? Or the Corrupted SpwanPoints bug? Or calling GetAlarmed on a NPC without AI package. Or the internal heap manager with it's race conditions?
Suddenly I understand why the comments on these articles tend to be so hostile.
Still trying to figure out the connection to https://en.m.wikipedia.org/wiki/All_You_Zombies You'd need a time machine to have the skills they want?
Hi Scotty - awesome video! Do you plan on doing any more builds?
GraphQL might not be the new standard for web, but for sure it has great influence on how we are seeing future of client-server communication.
This is probably less severe than it sounds like because of the MSG_PEEK option needed in recvfrom(), which is rarely used.
I like that idea on so many levels right now! I want to talk to you, what's your email?
What does worm level mean? I heard it in relation to heartbleed [or something] but couldn't figure out why it's worse than non-wormable.
That's not true. Airlines can remove a passengers for safety reasons whenever they need to.
For those unaware, "All You Zombies..." is a fantastic short story by Robert Heinlein about time travel that was adapted into the 2014 film Predestination (fairly well, too, considering the source material.)
> Chrome is faster and more stable than PhantomJS. And it doesn't eat memory like crazy.

Wait, can someone tell me where to download this doesn't-eat-memory-like-crazy version of Chrome? Activity Monitor is showing me 2GB of Chrome processes right now and that's even with The Great Suspender having paused almost all my tabs.
In a way, there are two questions at work here.

The first question is whether you can have rent-a-cops throw a passenger off a plane after they have taken their seat. As I understand it, that is not legal.

The second question is about over-booking more broadly. After all, though there's a legal distinction between a passenger a second before boarding and a second after, from a customer service standpoint they're still denied the seat they were promised. Is it right that an airline can sell 310 tickets on a 300 seat plane, deliberately entering into 10 contracts it knows it cannot honour? As I understand it, that is legal. But should it be?
Everything you mention is something that is the concern of a product manager, not an engineering lead. It becomes the engineering lead's problem when the product manager tells them it is. A huge problem at a lot of companies is when engineering teams go "off script" and build solutions for problems that nobody has. Is it an accident that Google's "10% policy" has largely evaporated as pressures on efficiency and productivity have come in from Wall Street?

Also speed on the type of sites you mention is a solved problem. CMSes these days have an option to generate static content and push it to a CDN. Is it free? Nope. But it's a problem with a solution.
Monsanto is not running out of money any time soon. We can always tax it specifically to finance more research. They want to play with dangerous techs ? Ok, well it's going to be long and expensive. And again and again and again. Any other way would be foolish.
I see you're not exactly clear on the reason a SWAT team would be deemed necessary, so I guess we can stop here.
Watching some managers fail just feels like karma sometimes. I can't imagine the company in question will be around for too long.
That works both ways. If you are on a flexible ticket you can get a refund up until the door is closed. All these rules work 2 ways.
Like being arrested for resisting arrest.
>But the hit needs to be big enough for shareholders to care.

Also time. Something like a fundamental travel industry shakeup could take decades. Here's hoping. As a Canadian, crossing that border is getting less and less appealing.
My wife and I did something a little similar. I built out our RSVP system on a web app, but we still printed actual invitations pointing people to go to our website, with a unique handwritten code on each one.

You can check out the code here if interested. It also includes the wedding info site as part of it, so there is a bit of cruft, but I'm sure you could repurpose it if you dug into it deep enough: https://github.com/mvarrieur/vovarrieur-dot-com
"That requires finding the remote first."

My TV is so old the remote is still wired to it. Finding the remote is never an issue.
How to embed an iframe with 'x-frame-options: DENY' set
Yes, there would be virtue in clarifying the title in brackets, just as HN often suffixes titles with "(2011)" or similar.
For new Language to become safe you need to write state of-the-art linters, static source code analyzers, dynamic code analyzers, code coverage analysis tools, testing tools for the language.

C has all these. Only C/C++ and Ada have these.

People who say "C is not a safe language" may not be aware, but most of the worlds safety critical code is written in C or ancient C++. Most aerospace, military and medical applications are written either in C/C++ or Ada. Ada would be much safer than C, but it has been abandoned for C/C++ because language of choice is not that important.

If the culture and tooling to write safe code is not there, changing language is not going to help. It's currently easier to write safe code in C than it's to write safe code in your favorite 'memory safe' language like Rust.

https://en.wikipedia.org/wiki/MISRA_C
By worm level I mean it's a remote code execution attack which can be propagated over the internet.

Someone can write a little piece of code that scans for random hosts, runs the attack and installs itself on the target system which then does the same until it's taken over all vulnerable hosts. It can self-replicate extremely fast.

This was a huge issue back in the Blaster/Sasser days of early Windows XP when plugging in a machine to the internet directly was common.

Servers and home routers are often plugged into the internet directly and often run Linux. So if this is easily exploitable it could turn into a real disaster.

Heartbleed can't be turned into a worm because there's no code execution, just information disclosure, with this there is.
This is exactly right. My girlfriend was extremely frustrated when WestJet (Canadian) introduced "first class". For a long long time they had gotten on just fine with a single kind of seat for every passenger.

The same tendency towards "privileging" can be seen in the constant push for two tier health care and two tier education systems (here Alberta is a bulwark, compared to Quebec).

Anyway, great post. I'd love for this kind of analysis to reach the mainstream.
Browsing that on firefox on mobile was terrible, about part way down the page a fullscreen video overlay appears that I couldn't work out how to close.
heath data doesn't leave the phone. it's a pain (at least in the past) to even get it to transfer to a new phone.
Ask HN: What're the totally free cache sites to download torrents directly?
Torrent client is forbidden in many regions. Cache sites like bytebx, myfastfiles etc. offer direct DL for torrents, of course, exchange of sack of money. I wonder, because of the demand, there should be something free of cost out there in deepest areas of web for the pros.
Can anybody help?
Here you go:

Simple GPG setup: https://github.com/lrvick/security-token-docs/blob/master/Us...

Advanced GPG setup with backups: https://github.com/lrvick/security-token-docs/blob/master/Us...

SSH Setup: https://github.com/lrvick/security-token-docs/blob/master/Us...

I also will be adding an alternate "quick ssh setup" guide via PKCS#11 flows to just store an existing ssh private key. Still I think GPG is the way to go in general given all the other use cases it opens up.

Please file issues with anything you want to see! I have a lot of unpublished content I can get polished/up if people care.
> People will need to settle for whatever model pays them, so that they can work on better things.

If you're doing something valuable, figure out a way to get paid for it. By and large the thing you get paid for is the thing people value.

> On a different note, Google itself is spoken of as Ad company till date. But look at what it has now, possibly a leadership position in self driving cars; Companies working on longevity; Android and several other Alphabet companies.

None of which is profitable. They're an ad company with PR.
No, my current company comcast has a bunch of diversity initiatives but for core developer jobs you will be whiteboarded, qa not so much.
http://www.diabetes.org/diabetes-basics/type-1/
Servers are usually on LTS versions. Ubuntu 16.04 is on 4.4 last time I checked. My Android 7.0 phone is on 3.10.84, last updated in February.

Edit: Ubuntu's tracker is at https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2...
This doesn't seem true from the commit: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...

The bug is said to not be exploitable since Al Viro function change. This change happened in 3.19.
Because C is less safe. Simple as. If I stop worrying about certain aspects of very low level programming, I will never learn how to implement the solutions that take care of that for other programmers to benefit from.

My goodness, I'm not saying C is better, or that programming needs to be harsh by default, that memory needs all of your attention or that garbage collectors are for peasants... But there are many bonuses to learning C even today. Teach a kid Rust today and he will never really know about memory safety - it's handled, don't worry about it! My concern is when EVERYONE starts their journey like this, the small group of people that can handle it can only grow shorter.
"I don't know much about this, but when I set Siri up I think it does some voice recognition so that I am the only one who can control the phone."

No, as I can use my fiance's iPhone and our voices are at least a fifth apart in tone, he has a northern accent, I have southern drawl.
So your point is that we should not criticize despicable business practices, because those businesses are headed by people. And we should not 'hate' people because that is bad, I guess?

Definitely, next time we catch Nestle aggressively pushing their formula in Africa or private prison companies bribing judges to jail kids for minor offences I will stay my outrage. Of course, the companies are not just faceless abstracts, they are people, that absolves them of all the guilt.
> Last time I've looked (just a few months ago), the libraries weren't exactly mature-looking, e.g. prone to n+1 queries issue.

This point seems perfectly concrete.
> Just because things are natural or traditional doesn't make them necessarily better than the chemicals we are dealing with now

a) cyanide is 100% natural so is snake venom so is that better then you?

b) Everything is a chemical. Salt is Sodium chloride (NaCl) has it certainly does destroy the soil. If you don't like someone try dumping some salt into their garden. https://www.gardeningknowhow.com/plant-problems/environmenta...
At least he's not selling anyth... oh, wait....
It switched to Electron under the hood a while back.
MEC: Modular Matrix Exponentiation Cryptography
Release notes: https://wiki.ubuntu.com/ZestyZapus/ReleaseNotes
Are there any safe software alternatives to Google Authenticator? Duo? LastPass?
"Zello, an app that allows users to talk one-on-one, like a walkie-talkie, or in broadcast modes that can reach hundreds or thousands of people at once"

Is this a protest app?
I have the daydream, and it looks like it doesn't use the controller for anything other than "clicking". Your head movements are still used for all of the controls.
Nollysquaretv.. Home of hot romance and Movies
>it's not happening on its own.

How do you explain pretty much every standard that governs the web and computing in general.
Does that work for the hands-free activation? The voice lock on Siri doesn't apply to queries once it's activated, only to the activation itself.

E.g. if I say "hey Siri" while my phone has its screen off, it wakes up and waits for a query. If my girlfriend (or anyone else) says a query at this point it will respond to it. But if the screen is off and my girlfriend says "hey Siri", nothing happens.
It's not a problem limited to our society. Ethics, regulations, and consumer pressure can all help to keep corporations in check. The thing to remember is that a corporation can never have a moral compass, so we have to give it to them.
Patches from upstream are regularly backported by distribution vendors, including Redhat, Debian, Ubuntu (though I don't know if Ubuntu do this themselves or base on Debian). Anyway, looking at the version number is not enough, you should refer your vendor security advisories.
I saw a trick where you can run Chrome and give it less memory, and it uses less memory. This is done using cgroups.

The blog post is somewhat old[1] and not in sync with the version that is in Git[2], you might find a way to do this without Docker (I was using an old version of Docker and kernel that couldn't get it to work. But I need the old version of Docker for reasons.)

Chrome will aggressively consume any memory you give it (up to a point?) to "make your browsing experience better" somehow. You're not wrong. But there is modern technology that can make it better. If you have a fast SSD, then Chrome can still use Swap to make your experience better. The later version in the Dockerfile linked on Git also leverages swapaccount with the seccomp setting.

This may be one great use of Docker for people that wouldn't yet have been convinced to use Docker for any serious reason.

[1]: https://blog.jessfraz.com/post/docker-containers-on-the-desk...
[2]: https://github.com/jessfraz/dockerfiles/blob/master/chrome/s...
I'd like to see you try?
I don't paint. I observe.
Public information is very thin on the exploitability of this. Are you able to elaborate a little bit where MSG_PEEK might be used?
Is it used in the kernel? Only in specific applications?
Just to play the devil's advocate here what is so bad about a lack of diversity in a private companies employees?
No link to buy it? :(
What do you mean by information vacuum?
Here I am, find me! IN LOC 42 50 23.798 N 78 46 27.126 W 192m 10m 100m 10m
Unfortunately, due to the economics of airline class[0], privileged passengers account for about 70% of airline revenue.

0. https://www.youtube.com/watch?v=BzB5xtGGsTc
I'm not sure that the results should be expected to be the same in GUI and in headless mode. I don't know - I'm just saying this is not clear without a test or clarification from someone who knows how it all works.
This is part of a series of where we want to experiment a bit with what we can do with our proxy technology apart from our current main use case (co-browsing). With our technology we can basically change HTML pages on the fly and inject for example Javascript. You can read more about this here: https://docs.surfly.com/introduction/the-technology.html#sur...

In the first one we used our proxy approach to enable an open web proxy, which you can find here: https://www.surfly.com/labs-advanced-http-web-proxy/

I'd love to learn about more possible use-cases for this approach.
We've all been there, recruiters calling you because you are the perfect applicant because of your skill with framework XYZ (even though you've never worked with it, nor claimed you have experience with it). And also because of your experience in Java (even though you are a javascript dev). They have the perfect job 'opportunity' for you!
As long as you have at least 15 years experience in React and Angular and SCRUM and agile you should be fine. Oh, and you have to lower your hourly rate so the recruiter can make $20+ per hour of of your work.

Seriously, when does it stop?