skysight-inc/HackerNews huggingface dataset:
Although the WaPo article isn’t a primary source, it seems to say the opposite and cites primary sources:

> Much of the data to support the update came from Systolic Blood Pressure Intervention Trial or SPRINT trial, a large-scale study of more than 9,000 people sponsored by the National Heart, Lung and Blood Institute

And regarding the proposed treatment:

> But the report's authors predicted relatively few of those who fall into the new hypertensive category will need medication. Rather, they hope that many found with the early stages of the condition will be able to address it through lifestyle changes such as losing weight, improving their diet, getting more exercise, consuming less alcohol and sodium and lowering stress.

Here’s the primary author’s home page, though the report isn’t on it: https://med.virginia.edu/endocrinology-metabolism/research/e...

Update: here’s an analysis of the number of people affected by the lower threshold: http://circ.ahajournals.org/content/early/2017/11/08/CIRCULA... (“Compared with the JNC 7 guideline, the 2017 ACC/AHA guideline results in a substantial increase in the prevalence of hypertension but a small increase in the percentage of U.S. adults recommended antihypertensive medication.”)
Unless you are 8 years old this is just not true.
Something Is Wrong with Hackernews(Look at Usernames and URI for Each Post)
5/5 but only because I have ran into these problems on my own in the past.

edit: MySQL
Nope. I have no ad blockers installed. I also checked the Amazon affiliate website and the new banner ads (at the size I wanted) no longer have the option I was used to.
The main issue I have with Authy is caused by their apparent efforts to convince websites to implement two-factor authentication in such a way that it exclusively works with Authy, despite offering no advantages over TOTP. (My understanding is that the API effectively creates a TOTP token, which if you can intercept, can be used in a normal TOTP client.)

Cloudflare used this for years, and Humble Bundle uses it right now. It is hard to understand why this is a thing if Authy is not paying companies to restrict a critical security feature to users of their app.
Lol, people from Citi and ING are cited as experts. ;-) Big financial corporations are threatened by Bitcoins.
In a humorous context, of course. I mean think about it.
Yes, of course, thanks for correcting me!

WTF is wrong with me?? I should be banned from this forum for life!
Its like people from energy companies being interviewed as experts on solar energy.
> But here's the problem: For a man talking to a man, all of the above are just plain fine.

I strongly disagree. Some of those should be just fine for anyone (telling someone they look good, advising someone they should dress better ("Dress for the job you want to have"), telling someone to stop being such an asshole (phrased more nicely perhaps)). For most of the others the distinction is not male/female, it's friend/buddy or co-worker.

I've worked with very straight-laced folks in the teetotaler and conservative religious categories, and drinks and lewd jokes would be completely inappropriate for them as well, male or female.
Search indices != primary storage.

Ask Google about that.
Number 1 is especially key, last 2 years US businesses have pulled out of China a lot because of really really sketch actions by the Chinese government. Doesn't hurt to use the totalitarian argument either, but mainly they are losing money. Goldman Sachs, Citigroup sold their stakes last year as well.

China will likely start opening up more because Western companies aren't as naive anymore and short term profits for long term losses aren't much of an option anymore now that Chinese companies are well developed in all the tech and economies of scale.
it is indeed. i dont think there are any right answers. all i know is that i want the right to have the right kind of people in my company and that i am to decide who they are, not a small group of feminist who think they know human psychology and social dynamics and want to enforce their view on others. thanks for at least listening.
I just searched Xiaomi A1 on Google Shopping and there are several results and all looks legit.
> it’s utterly insane that we allow this situation to continue.

That is the point I am trying to make.
How long before everyone says this is insane and tries to start blocking deals?

Though China's inflation due to currency printing press might come home to roost before that happens.
Since this is a throwaway:

CSLB-C8 (Concrete contractor)
Here in Startupland we sometimes disparage 15%/year. But at the scale where big companies operate, that can be truly massive. facebook is realizing something like 15% return on 70 billion of equity book value.

Getting 15% on a 100k real estate flip is one thing. Realizing 15% on 70 billion dollars is quite another.
As a developer of a long-lived popular app I've been pretty agressive at cutting off older OS versions from updates (min sdk 21 right now, considering 23). But the Play Store lets you keep serving up an old version of your app for those older devices. So before I cut off an old OS version I make sure to have a solid bug free release that I can serve them for a few years until eventually my backend API server is forced to break backward compatibility at which point I pull it from the app store and serve up an I'm sorry message for anyone trying to run that old version, about 3 years old at this point.
Maybe they could be used for hikes and climbs where you could put all of your camp gear on it and have it follow behind.
I wasn't there and I'm not you, so I can't comment on your personal experiences, however, studies have shown that what you're describing is very unlikely, particularly outdoors. A psychological explanation is much more likely.
The big break in computer languages
I've been using the developer edition of Firefox and have been finding it to be a joy. It is very odd how Chrome stopped having the "knack" of being extremely fast.

Edge on Windows 10 claimed to be fast, but I think that it was doing more "cheating" with the UX than actually being fast.
They never get the chance to expand in China. Most of the time it operates in China, AWS phrases it as 'in preview', that significantly disencharges user adoption, because it is significantly more complicated to go through the registration process that is required by the CCP
This could have been as simple as the individual accidentally "missing" a single line of a large, multi-line configuration when copy/pasting it into the router's console -- after all of the config review, etc., already occurred.

I'm not sure what vendor's gear was in use in this particular case, but the configs for a BGP peering session are typically (as mentioned above) large, multi-line configurations. For example, here's the (slightly redacted) configuration for one single BGP session on one of my routers:

neighbor 10.10.10.10 remote-as 65432
neighbor 10.10.10.10 transport connection-mode passive
neighbor 10.10.10.10 description TO CUST FOO BAR INC ...
neighbor 10.10.10.10 ebgp-multihop 3
neighbor 10.10.10.10 update-source Loopback0
neighbor 10.10.10.10 send-community
neighbor 10.10.10.10 soft-reconfiguration inbound
neighbor 10.10.10.10 prefix-list ACCEPTED-PREFIXES-AS65432 in
neighbor 10.10.10.10 prefix-list ADVERTISED-PREFIXES-AS65432 out
neighbor 10.10.10.10 password 7 0123456789ABCDEF0123456789ABCDEF
neighbor 10.10.10.10 maximum-prefix 200
neighbor 10.10.10.10 default-originate

That doesn't even include the associate prefix lists (or filter lists or route-maps or ...). All it would take is fat-fingering/typo'ing one of these lines or missing one to cause some very unintended effects.

Since we don't know exactly what happened, it's easy to say "they should've done this" or "they didn't do that". In reality, however, we simply don't know what they did or didn't do. You've shown no evidence that they didn't do any of the things you mention and, in some cases, you can do all of that and still have things go wrong.
IANAE in identification & authentication systems, but doesn't using a browser plugin for the 'something you have' portion of 2FA negate the principal benefit — that which, the algorithm/app/token providing the OTP is inaccessible to an attacker with access to the primary login interface? Let's say I'm following accepted best practice (ignoring for a moment the current NIST 800-63B draft[0] and its aggressively divergent recommendations about remembered secrets), and using unique, randomly generated passwords for every single account authentication. Being a human, I need a software-based password manager to enable this. This is installed as an extension in my browser. Excellent, so far I have followed the 'best advice' as it's universally given.

Now I have more best practice advice, and I establish 2FA for accounts that support it. Aaaaand then I install another (your) browser extension.

Have I not simply made the entirety of these security precautions vulnerable to a single vector of attack at this point? I grant there's a limited version of this risk if I have, say, LastPass and Authy both installed on the same mobile device (for the record I do not), but the colossal attack surface on a desktop/desktop-browser/human-user/intentionally-minimised-interactions-and-decision-points combo gives me cold sweats.

[0]https://pages.nist.gov/800-63-3/sp800-63b.html
Thanks. This is pretty interesting read.
some of the metoo participant in fb and twitter threads.
Or... there wasn't much of an unserved market, and all seven electricians make $30/hr.
If that is the reasoning that would be very hipocritical of Google.

I know for a fact they use MD5withRSA for some of their own apks including YouTube -
https://www.josephkirwin.com/2016/05/05/humbled-by-md5/

* at least they did at the time that was written.
> After several minutes, the signal is detected by a Band-Aid-like patch that must be worn on the left rib cage and replaced after seven days

And who watches the watcher?
I have an old tablet that doesn't seem to "catch" new updates from Samsung anymore. Perhaps it would be worth rooting or something just to get it current? I would "upgrade" the software if it was available. Buying new hardware isn't something I will do in most situations--the device has to become non-functional before I consider it.
How does it apply to options already vested?
Yes, thank you.

You pretty much echoed something John Scalzi said on his blog:

https://whatever.scalzi.com/2017/11/12/a-qa-for-the-post-wei...

It's a bit long but worth reading. At the end:

"Dudes, don’t be a harassing piece of shit, don’t accept other dudes being harassing pieces of shit, and when women (and others) tell you that someone has harassed or assaulted them, believe them."
It may be worth pointing out that AWS China supports about 10% of the services one may find in other AWS regions--and not even basic features like MFA for root or IAM accounts.
I didn't say it would never offend men, but take a dirty joke as an example, it might offend men, but I'm drastically less likely to be written up by HR if a man is offended. Another one is the level of profanity that the different sexes are comfortable with. Another one would be making fun of someone's clothing, perfectly acceptable amongst friends.

> Even more skeptical if we're restricting the scene to professional interactions.

Not everything in the workplace is a professional interaction, or at least it never used to be. I don't know what it's supposed to be now, you have corporate wanting to do team building exercises and everyone to be one big family, we're still supposed to sign birthday cards and that sort of rubbish, yet you can't talk to people as you would friends and family.
uMatrix doesn't have any predefined lists though, you have to configure each site's matrix on first-visit, and it defaults to deny.
>Incidentally I regularly break some of these rules with male employees, such as remarking on haircuts ("looking good", etc.), but it's different.

Please explain how this is not sexist.
> The flaw is that people are nervous their basis for wealth is tied to a democratized system. There's never been anything like it in history.

Isn’t stock like this? Shares get votes and stuff. Or maybe you’re being ironic?
Training examples are unlikely to contain non-faces with high-noseness to the sides and high-eyeness in the center, but plenty of pictures with nose to the left, eye in the center, nose to the right, eye in the center.

So there are many examples which increase the weights for faceness detector for pictures with noses on the sides, eye in the center, but there are only a small number of examples which decrease the weights for the said pictures.
It is not a tangent. The source is unreliable.

If I must address the article, it is the same kind of ham-handed shilling I have come to expect from them.

"Researchers" say this. "Researchers" say that. Then at the very bottom, regard:

"Note: Working papers have not been peer-reviewed or been subject to review by the NBER Board of Directors that accompanies official NBER publications."

Scam the kids into college! Wait, no, scam them into trade school! Scam them into whatever lego shape industry thinks that it needs at the moment.

That, and the whole "Germany does this, Germany does that" angle is also highly disingenuous. Even skippy at CNBC knows good and well that Germany is a protected market, and that any kind of directed effort towards cranking out more tradesmen in the US of A is going to result in underemployed tradesmen and big discounts for the few places that actually employ them.
Thermite or alkaline metals will burn just fine under water. As long as you have an oxidizer, some combustible and a source of energy to kickstart the reaction, it will burn. Also, I don't see why fire is so important. It was important for us to better digest food, that's a concidence, nothing else.

And so does electricity. If the water isn't saline (why would it be), then it is as good as air from an isolation PoV. I did put a motherboard in mineral oil at some point and it did work until the fan died. Other fluids that could make life possible are also good at being non conductive.

Even in salt water, a circuit just has to be bigger or better isolated to work. electricity takes the path of least resistance. Vast distances in salt water vs a good conductor, at some point the good conductor will still win. We have undersea cables since centuries and they work.

Then, about smelting and complex chemistry, hydrothermal vents provides both a source of energy and of complex chemicals.
There is secure on mobile. Secure is not a binary property, it's a spectrum of options and possibilities which heavily depend on your environment and your threat model.

You either get security updates at the possible downside of sending more data to some database of a known vendor or you get the very possible risk of being part of a slide on DEFCON Fail Panel by some unknown blackhat.

I choose a known advesary over an unknown any day.
It wouldn't change it much. There's a huge difference between life and intelligent life.

I suspect it may be fairly common for life to occur in the forms of single celled organisms - just like extremophiles are rare but not unheard of on Earth.

OTOH I suspect it's incredibly rare for complex life (insects, small mammals etc) to form.
As a former professor I don't see much of an issue with this. Every research institution on the planet will have access to the articles.

Even if you don't have an affiliation (or your school doesn't subscribe to a particular journal), if you use Google Scholar to search for an article you can easily find pre-prints which are essentially the same thing. Additionally, if that still fails then the next option is to just email the author - they actually want you to read their work and will just send it out.

The real issue is that the societies are essentially extorting universities for hundreds of thousands of dollars per year when the writers have to pay to submit and readers have to pay to read. Many of the newer journals are becoming open access, but few of them have been able to make enough in roads to be considered "good journals." This is a completely separate topic than the one from the above article.
Ask HN: Do you write code on the train? What's your setup?
How to program on a train on a one hour each way journeys every day, comfortably?
This sounds genuinely odd, could you be using a add-on that is causing a problem ?

I leave Firefox open for months on end without problem and with several hundred of tabs open, multiple windows too. I do use a tab unloader, that unloads an inactive tab after a while. Its precisely because of this that other browsers are not suitable for me
Cool little utility. Like the fact you can pass SQL in the query string. Have to look for a use for this. Maybe internal use apps that update SQLite periodically from a larger database and just need a view of data. Thanks for sharing.
Search and rescue.
Those billion outdated devices are the low hanging fruit screening me and my fully updated iOS device. I can be confident that casual attackers aren't coming after me, only the higher tier ripoff artists gunning for iOS users and the APTs who are attacking my company specifically.
You seriously can’t think of a use case for an all terrain, all weather robot?
not with sci hub ^^
This only happens if the face is deemed similar enough to the original face data, which is unlikely if it's a completely different person.

Here's the entire quote:

"…if Face ID fails to recognize you, but the match quality is higher than a certain threshold and you immediately follow the failure by entering your passcode, Face ID takes another capture and augments its enrolled Face ID data with the newly
calculated mathematical representation"
Yes. You know media, they like big title.

Sinnet only buy the Beijing equipments to make them a national assets for the regulation compliance. AWS China to open another region very soon in Ningxia, which not included in the deal.
How do you conclude that intelligence is rare on earth?
Does anyone actually have the source to the actual debate? All i've found is clickbat articles.
Desktop is less and less relevant compared to Mobile so it will get less and less attention from content producers.

I don't mind that some people want to keep focusing on desktop products, they have their use. But I think it's not what Mozilla should focus on if they want to "promote internet for everyone".
> I think the idea that you only access personal stuff from your own devices on your own time is unrealistic.

Once upon a time that was the case - "Cyber Monday" as a prime case in point. Some limited amount of non-work browsing is generally still fine at most offices I deal with, most notably checking news, weather, sports scores, etc.

However as a person responsible for making sure there are no breaches (particularly reportable ones) at offices, I'm moving more and more to the "No personal use. Period. No debate." position. I can control the kind of filtering, AV checks and attachments that come into the office via the business email as an example, but if people are checking their personal email on company systems I may not be able to catch the "Huh, I don't remember ordering from them, I wonder what this invoice email is all about?" person. Antivirus is all well and good but it's not 100%, and while I can look at the mail filters and see that there were 400 PDFs with variations of "Delivery Notification" or "Invoice 1234567" blocked in the last half hour to a ton of different addresses, Jane Smith in Billing or Accounts Payable may only see one or two - and on a really bad day, opening just one may be all it takes.

Also, these days a huge percentage of people not only have smartphones but use those smartphones as their primary devices for Internet access. 5 years ago that wasn't the case, but now? George with the iPhone 7 Plus can quite easily check his email or do plenty of other things that would have been much less pleasant on an iPhone 4.
Most of these "oh no, security!" issues can be mitigated by avoiding public WiFi or using a VPN on them.
Yes, would love to watch some actual footage.
being a stoner the hygiene was less than stellar and you got high of the fungus spores from the mold in the trash he didn't bring out in two weeks. no offenxe, just a theory.
Depends on the country but in some places 7% is legal in[others you are lucky to find a 2-4% budweiser brew.
Are travel sites' “dark patterns” so pervasive that they are becoming useless?
I've been trying to book a flight and the travel sites seem to increase the price when I try to actually book the flight. I'm not mentioning any particular company because I want HN feedback.
Any plans on supporting Bitcoin Cash?
Yeah and how many are still inaccessible with scihub or libgen? I have access through my university to most journals but I always use scihub because it’s the easiest and fastest way to access any paper.
Best I can do is 3.50

(Sorry HN “this is not reddit” comments ensue)

(Get a sensor of humor you drones)
Kotlin 1.1.60 is out
Non-paywalled version:
http://m.nasdaq.com/article/amazon-to-sell-china-cloud-servi...
I had a quite high end Android phone from Sony 3 years ago but because it's dual SIM version I maybe receive only one update. I'm running Android 5.0.2 already for 3 years now. My phone works still well but who can count the vulnerabilities I have now on my device...
so now you are a jerk if you have pinups on the wall?
It is not charity. Computing has become a public infrastructure like roads and water supply. So it is by nature a public good. The underlying foundation has to be based on the principle of the commons and not controlled by one entity. In processors just an ISA will not do, there needs to be open and state of the art implementations at every segment. That is the goal of Shakti. For example We also have GPS/NAVIC receivers and LTE modems in the works. Our comm research groups are far large than our compute groups, so no manpower shortage. They in fact came up with a short lived WiMax like standard which saw wide deployment via IIT incubated startups.
1passowrd has a good blog post explaining why using 1password for TOTP is not 2FA [1].

If someone gets into your password vault, then they have both authentication factors: your passwords (what you know) and your 2FA secrets (theoretically, what you have).

[1] https://blog.agilebits.com/2015/01/26/totp-for-1password-use...
> China will likely start opening up more because Western companies aren't as naive anymore and short term profits for long term losses aren't much of an option anymore now that Chinese companies are well developed in all the tech and economies of scale.

Or: China will build local champions who can grow inside a protected region and then, once they have their playbook down and anfat balance sheet, they can go out and buy market share in other regions.
MD5 APK signatures are still supported by Android and are accepted by Google Play when you upload an APK there.

See https://forum.f-droid.org/t/many-old-unmaintained-apps-have-... for more discussion about this in the context of F-Droid. I believe F-Droid was (is) using Oracle jarsigner to verify APK signatures and this is what causing F-Droid to reject APKs with MD5 signatures.
5 years ago you unluckily bought a Nexus at the exact point in time where it had the shortest support window in the whole history of the Nexus/Pixel line.
Best name generator for iPhone
At some point, reckless behavior affects people beyond the individual. I am irritated that people allow their systems, networks, devices etc to become compromised, thus becoming the assets of malicious actors. Most of the people in this category have are not particularly savvy, which doesn’t give them an out so much as it explains the predicament. However, you are demonstrating that you choose to be in this category, despite understanding the problem. You are letting your personal convictions get in the way of good judgement. You now shoulder responsibility for knowingly making the world a little less safe for the population at large.