skysight-inc/HackerNews huggingface dataset:
CSV is hell. Some idiot somewhere decided that Comma Separated Values in certain locales should be based on semicolons (who would have thought files would be shared across country borders!?), so when we open CSV files that are actually comma separated all the information is in the first cell (until a semicolon appears).

To get comma separated CSVs to show properly in Excel we have to mess around with OS language settings. CSV as a format should have died years ago, it's a shame so many apps/services only export CSV files. Many developers (mainly US/UK based) are probably not aware of how much of a headache they inflict on people in other countries by using CSV files.
Well, it is an opt-out feature, which is already a way to purposely collect data if you're not playing attention enough. Plus, if npm has such flaw, this is still no excuse for Core to do the same.
Visual Studio Code also has opt-out telemetry enabled by default, with no warning (that i've seen).

https://code.visualstudio.com/docs/supporting/faq#_how-to-di...
That makes no sense.

There is a segment of the population that is physically one gender but feels they are actually the other. If we weren't that different, nobody would go through the massive physical alteration.

The size of the population that has gender dysphoria is irrelevant.
None of the technology node names have corresponded to actual physical gate length since probably the 45nm node.
It would be interesting if spreadsheets supported a sub-set of a binary interchange format like FITS or HDF5.
Heheh, welcome to JavaScript kid! Hold on tight!
You'd have to find a pretty stupid home owner to agree to let a stranger mail stuff to their address...you know mailing contraband and all that.

Better idea is to find a home for sale without a tenant and claim that as your address and hound the mailbox for the next few days.

I also don't think Nextdoor carss about duplicate accounts. I kept my account from my old neighborhood and created a new one for my current home using another email address. I don't try to hide it... Same name, I address etc.
It's not blatantly racist stuff.. It's random things like "hispanic male in hoodie walking around neighborhood, doesn't look like he belongs"...

The first few times you see it, you think, ok whatever, people are just being overly cautious. You might even think it was useful, and you could see yourself reporting such things.

But after like the 10th time you see postings like that, you really start to wonder if this is what racial profiling looks like in practice.
If you want privacy, I guess you have to do it the old-fashioned personal meeting way. No recording devices. Deniability if that's necessary. Snapchat has the silly "this message will self-destruct", but someone can still point a camera at their phone to record it.
GDP famously includes the cost of ambulance rides, replacing broken windows, and insurance claim examination, even though we might not really want those things.
"Only in particularly hubristic times (like now) have we expected to adapt our environment to us."

You can't generalize at this level of granularity. Humans have done a lot of "adapting the environment to us" - draining swamps, building canals, reversing rivers, building dams, making water, power, and sewage distribution systems.
So is privoxy happy handling HTTPS requests as long as it's fronted by Squid? I guess I'm still not clear on how/why that works. I thought privoxy could only handle HTTP.
So, eliminate competition because it's unfair? That does not to me seem like a recipe for success on a global scale. If anything, the thing which has made the culture in the US uniquely attractive to so many people from all over the world is the fact that we revel in competition in a way most other societies do not. We love to compete, and are unabashed about keeping score.

Let's assume for a moment that we focus exclusively on helping everyone get ahead and eliminate standardized testing. What happens when people get out in the real world and get the shock they never had in school that they don't quite measure up? To prevent that would require a complete restructuring of society, it'd look wildly different. Among other things it wouldn't be possible with a capitalist economy by which the "best" products in the market are rewarded financially and competition is the basis of business.

Is that really the world you want to live in?
Extremely disappointing.

First we had to keep a close eye on our browsers, now we have to keep track of our text editors, dev tools, operating system, and even our own hardware. if we're really lucky, some will have some obscure way of limiting it.

Making you job easier and improving your product are not valid excuses for this kind of despicable behavior.

When I set up my next dev machine, everything will be sandboxed or the entire machine air-gaped. Some developers and software vendors can no longer be trusted.
Even if they are immigrants, knowing Spanish makes them half-way native English speakers because of the similarities between English and Spanish.
You're right, but at the same time you should not have to. Software should be secure by default.
Deep learning based optical communications :D

https://arxiv.org/abs/1709.03222

It has the potential to significantly reduce complexity in various areas of the signal processing stack (in exchange for greater software complexity and black boxes)

We plan on using it to process signals for LED-based satellite FSO systems.

Would you like to get in touch to discuss more about it? We could use some advice on software for atmospheric simulations.
There was a recent argument over gun ownership in my neighborhood's nextdoor, which resulted in a bunch of gun owners outing themselves. Unfortunately, this did this alongside their actual addresses, which isn't great for various reasons. Users of Nextdoor seem to struggle more than most services around how they represent their private and public lives on the site: it seems to give many a false sense of anonymity, which is dangerous as hell when performed at the neighborhood layer.
If you don't feel the pain of rejection, how would you want to chage your action for a better outcome? Desensitized of rejection doesn't mean you need to actively seek for rejection, right? It will only make you feel like a loser and okay with that.
dot NET core, for example. Considering it's basically spyware, it definitively qualifies as junk.
If exiting VI takes years... I shudder to think how long it'll someone to learn the "Write with Sudo" trick.
We ban accounts that use HN primarily for ideological battle. Since you've been doing that, and repeatedly posting uncivilly to boot, I've banned this one.
I say go for it. I'm not remotely interested in mobile or ar/vr.
That's not for you to decide. It's meant to be the user's call.
What happened when I opened a restaurant in Portland
Also people use their garage for storage, so not so the space will be recuperated.

Hell, some people have so much junk they can't even park their cars in their garage.
Sorry to balk, but I'm more outraged at the title, another injection I need to talk about that isn't really the case. The root cause is the interpreter executing untrusted input, the same can be said about macros or any other file type. The perception being most people open CSV files on a regular basis and perceive them to be safe or not interpreted when it appears they are.
Pretty sure that is the case everywhere. Old white people having a place to fret about their bubbles being burst.
There is an easier solution, at least a partial one. Just don't use Microsoft crap.
You bring up a good point. Software shouldn't start sending information until the user is explicitly informed just as users are required to explicitly consent to an EULA.

Otherwise it's the software that's using the user and not the other way around.
You can register some gift/prepaid cards online with the issuer, and enter an address. Then it can pass AVS checks.
I live in Seattle, and I can tell you from the few times I've been on NextDoor, even in a blue city like ours, I was surprised at how racist people still are, albeit subtly.
> they tend to become a terrible metric

Not exactly. When a test becomes study-able, it becomes a good metric for how hard people try and how much time/effort people put into their studies/career. And that is arguably what people making tests were trying to or would want to measure.
This is exactly what is needed. Publish on each user's profile whether their account is secure, and provide an option in the client to disallow upgrading package versions owned by users that don't comply.

You could even try to crack the password of any user with enough (by some threshold) downloads using known leaked passwords as seeds, and mark them as insecure and reset their password if successful.
Zuckerberg 'tours' flooded Puerto Rico in bizarre virtual reality promo
:shrug: don't care
Anonymity? Everyone’s real name is verified...
There's nothing in CSV that has anything to do with presentation (nor with what the underlying values are, for that matter).

These vulnerabilities can't be blamed on CSV so much as on the desire of application vendors to treat data as code.
Using Machine Learning to Understand Middle Eastern Politics
A CSV importer absolutely needs to be configurable. I've seen delimiters including tabs, vertical bars, tildes, colons, and random control characters (they didn't even choose RS and US).
That seems less of an indictment of npm and more an indictment of JS developers not caring about or understanding basic information security principles.
Really? Spyware? Really?
I wonder if they could lean into that and show people a different way. The last time this came up they had some tools for helping people recognize they were being racist and think about it.
Pakistani scientist developed tool to help detect cancer more quickly
We filed IP on a solution to this in June. :)
Except the same people that fret about privacy post sensitive information about their neighbors at the drop of a hat. These people have no clue about the ramifications of their actions.
How to create a self updating portfolio website?
Ok, so you have your metric. What next?

They plug all of your stats into the function, and it says, "you will never be a good NBA player." With the NBA, we're comfortable saying "meh, not too many of those anyway -- moving on to high stakes poker -- never liked playing basketball anyway."

But when the metric is of something much more broad, such as "success at a 4 year college" we're not so comfortable doing that.

I just don't see what problem the standardized test actually solves.
Ok, we replaced the title with the subtitle.
Journalism ethics do contemplate situations where otherwise unreportable news of crucial importance to the public should be published. Same for news about things that happen in private but are related to public figures. There can often be very serious consequences for the organization and reporter in these cases.

Neither applies here.
What do you mean by "set-manner than a C-in-SQL manner"?
People regularly leak what happens inside companies, where people have signed secrecy agreements and face repercussions far more serious than losing account access to a social network.

Nextdoor is fighting a losing battle.
CSV was only ever intended to store simple text and simple numbers.

Dates are a /type/ of text; parsing dates in to machine readable formats is an /entire/ other can of spam.
More concise version here:

http://longorshortcapital.com/four-simple-steps-to-becoming-...
Please don't take HN threads on generic ideological tangents. The site rules specifically ask us all to avoid them: https://news.ycombinator.com/newsguidelines.html.

The reason for this is that they're (a) always the same and (b) always degnerate. (a) makes threads unsubstantive and (b) makes them uncivil. Civil, substantive conversation is the whole idea of HN threads—however rarely we may actually achieve it—so you could hardly do anything that more violates the site's values, even if you didn't mean to. Not meaning to makes it more insidious in a way.
It's not really "their dealerships". A car dealer is an independently owned franchise. None are owned by the car manufacture.

Of course, the manufacturer can say "we will give you $x off your car purchase if you let us use your lot" but the reality is the dealership can just tell them to take a hike.

Also, manufacturers lease to rental car companies. So that is an option as well. I can imagine Enterprise having unrented cars in a lot that switch to robotaxis...
Tencent, a copy cat or the hidden king of innovation in the technology industry?
> Only if you know about it prior to installation.

This is a piece of third party software. "Should be" doesn't override reading the manual and knowing what you're installing.
> Nextdoor is kind of a hangout for the worst types of HOA/worry-wort/NIMBY type

That might have something to do with where you live. In our neighborhood, it's more of a status report on various happenings like crime, city projects, etc. Here's an example from today: someone posted they were putting a 9' x 6' Persian Rug on the curb, free for the taking.
"FYI: Microsoft

The fact that this is an opt-out vs. opt-in and the opt-out procedure is based upon an env. var. just caused dotnet to fail an externally conducted HIPAA privacy/security audit at a genome testing lab in the backyard of your main campus.

Lucky for us, we were able to convert the runtime to use Mono and get a temporary pass, but this killed the future CIL-based projects with the lab's management..."

Ouch!
NextDoor - like Yik Yak, but for grownups. Same problems.
The Latest on Shiva Ayyadurai's Failed Libel Suit Against Techdirt – Techdirt
Yes, but wealth is also correlated with aptitude.

I'm not saying our system is perfect. Plenty of rich bozos.

On the other hand, in a perfect system, to me, it seems that the highest achievers would tend to both: 1. Succeed in school and 2. Acquire wealth.
Ok, my mistake about the quoting.

About the substance, I think the public commitment for 6 years for 4.4 has more relevance than just PR.
I have been finding this vulnerability in apps since I started in infosec 10 years ago. I have seen it go any number of ways:

CSV -> import on web app -> SQLi

Malicious input -> CSV download from web app -> Excel -> formula -> sneaky data exfil

CSV -> JS -> import into web app XSS (in places no other XSS existed because of the data)

CSV import -> weird CSV header -> arbitrary data loading (headers were column names.... Schema injection .. like SQLi only more hilarious

Point is apps and devs can have blind spots (knowledge gaps) or just not think of a CSV import or export like other functionality.
Are rules only valid when they consider every edge case? That disqualifies almost every law, among other things.

With a little bit of moderator judgment a rule like that can be enforced. It's ridiculous to say that these bans somehow can't be done, that moderators will look at a proof that their system is imperfect and come undone.

It won't be perfect, but it's eminently doable.
Why isn't it as simple as "if it's not on a computer you own, don't expect privacy."
Just wait till everything runs in a web browser. But by then you'll be able to convert your Rust program to web assembly to draw UIs on the canvas for VR apps.
Imagine if the argument was over growing medical marijuana at one's home. A string of burglaries, or worse, would ensue.
Can your mind heal the body?
You need to look at the returns of a portfolio, not an individual investment. Most of the investors in these bad deals were investors in very very good deals based on very similar signaling. Most pension funds would be crawling over each other to get into top funds — which means a fund that’s going to blow up half its portfolio.
That's a straw man argument. If you want your content to be free, open a free WordPress account.
CSV is a format for two-dimensional text values, and nothing beyond that. It's not a poor format, it's a simple low-level format.
I don't understand why you would expect anyone to say "this is for boys" when producing a toy that is generally considered to skew male. Try looking at Meccano, for instance - I've never seen them say "boys" but I'd bet money that most Americans see a racecar/truck/etc kit and think boy.
Lots of FUD as usual with these topics.

The .NET Core CLI/SDK dev tool to build and package code is the only thing sending telemetry. It's not the main `dotnet` command itself nor anything in the runtime. The data is also available for anyone to analyze: https://docs.microsoft.com/en-us/dotnet/core/tools/telemetry

It's definitely nothing out of the ordinary and is common practice among many tools and apps you already use. Your smartphone sends back way more data if you're that concerned.

There's also a warning the first time you use it, and if you're using something like this then it's a reasonable expectation that as a software developer you understand the message and how to disable it if you want to.

EDIT: the insights based on this telemetry are also interesting to look at and add further clarity: https://blogs.msdn.microsoft.com/dotnet/2017/07/21/what-weve...
Cambridge Five - The Cambridge Spy Ring
We want a well educated population.

To do this, we have set up an educational system. However, education is a difficult problem, and it is not clear what works and what does not. What we need is some way of measuring how well things work. That is the problem that standardized testing is meant to solve. There are some tests that are intended to assist in accademic discrimination (eg. we only want good students here, so you need a good SAT score to get in), but that is not the usage we are talking about when we say California's are flatlining.

Google A/B tests moving a pixel on their home page. Compiler writers performance test optimization passes. Educators want objective feedback too.
Serverless Computing: Economic and Architectural Impact [pdf]
Being harassed for no reason except the color of your skin is equally harmful whether it's down to white-supremacist politics or cold statistics.
Is it possible to see the list, would be interested to see whats happening in Australia.
Little Bobby Tables reminds us to sanitize our database inputs.

https://imgs.xkcd.com/comics/exploits_of_a_mom.png
We're referring in this case to the wealth of parents, not of students. Students have very little control over which parents they're assigned.
A decade or so ago when I was working on residential gateway/set-top box project, I used Privoxy to filter certain words from URLs via C/Linux programming.
I would be surprised if your area's leadership was so petty, but I guess it's possible. Double blind works well in this case, nothing else will actually.

Our conferences cost money because...well...ACM. Heck, even when we use university resources, the universities still charge us. You'd be surprised how much a biggish room goes for at ucla, for example.
It seems like a no-brainer that any accounts on the main npm repos would _have_ to have 2FA enabled.
Automated testing tools and support for CI – can you have both?
Well, it catches folks by surprise. We could abstract all computer vulns down to a few broad computing concepts, but that isn't as useful.

This one is your data turned out to be code. There are many, many books on all the various forms this takes. Memory corruption cat and mouse..... It is a long complex story that we can sweep up to that generalization. But it is important to know that high, medium, and low level of these issues. They form a gigantic tree. The medium level somewhere between is where devs need to threat model most of the time. But some of the time things are very specific and you just need to know about the specific thing and not it's various generalized forms, because the specific thing can really matter. E.g. simple programming mistakes lead to side channels, etc. We can generically understand a side channels easily. But it takes a ton of specific hard earned knowledge to avoid it.
This is the same excuse I use to avoid learning Japanese. Just a bunch of unintuitive arbitrary characters!
OP here.

There are a few reasons you might want uploads to go through the server, and they basically amount to having more control. Imagine that you have an API that's being used by multiple sources - maybe a web app and a mobile app. The initial work to create uploads to S3 directly for each might not be too bad, but what happens if you want to change something later? Maybe you decide to move from S3 to something else, or maybe you decide that each upload should actually generate 3 different sizes of the image. If you do it through the server, this is all relatively simple. On the other hand, if you do it directly to S3, then not only do you have to change it in two places now, but you also have to navigate the issue of app versions - your original app version is uploading to S3 but your new one is uploading to some other hosting service, so how do you really get off of S3? And how do you keep them in sync? Definitely possible, but much more painful than changing a few configuration options on the server and migrating the existing data, etc.
The other entries can be seen at https://www.washingtonpost.com/archive/lifestyle/1994/12/04/...
Fake Adblock Plus Extension with Over 35k Users on Chrome Web Store
You're conflating whistleblowing with publishing conversations that are explicitly "off the record".
Do you have a metric that doesn't require waiting until students are leaving high school to return results? Some of these scores are for primary school students. It's not very useful to their teachers to be told 5-10 years after they teach a student that the improvements in instruction they attempted had or failed to have an effect.
From wikipedia: https://en.wikipedia.org/wiki/Spyware

> Spyware is software that aims to gather information about a person or organization without their knowledge, that may send such information to another entity without the consumer's consent, or that asserts control over a device without the consumer's knowledge

This fits the bill, it's gathering information without consent and sending it to another entity. Most of what I'm sure you'd consider real spyware is collecting statistical information for "legitimate" market research companies, not sniffing for credit card numbers. At least the have the decency to use dark UI patterns or long EULA's to get consent.
Even if they get a greater shock when entering "the real world", they would still be better prepared for it if they were more competent coming out of school.
It's a red herring to say that we would need to further restructure society to get any benefit from helping youth better overcome the challenges of school.

I'd say that probably depends on what you expect from them. But I don't think it's unfair to say that probably more students are left behind because of teaching/learning disabilities than there are people who simply will never be able to cope with the subjects at hand (because of cognitive limitations).
Partial functional indexes are amazing. You can create an index that not only elides execution of the function, but automatically only includes the subset where that function would be relevant. Makes the index smaller, to boot.

create index repo_name_lower on repos(LOWER(name)) where name IS NOT NULL;
The richer you are, the more affordable travel is, and when one sees various options available at relatively affordable price points in Costa Rica, southern Spain, Caribbean or New Zealand, the urge to empty one's brokerage account in order to buy a one bedroom condo in a crowded area plagued by homelessness, inadequate schools, laughable public transportation and overpriced food is not that strong anymore.
What's a good alternative non-proprietary format that all major spreadsheet software supports?
IFC, STL File Formats Support and Enhanced AutoCAD DWF Conversion to PDF in .NET
North Korea hacked allied war plans, Seoul lawmaker says
The SAT is explicitly designed to predict success at college.

https://en.m.wikipedia.org/wiki/SAT