skysight-inc/HackerNews huggingface dataset:
> I'm surprised you didn't notice it.

Sorry, they were probably too busy reading about The Pentagon Papers, The Watergate Burglary, Iran/Contra, Monica Lewinsky, WMDs, etc. to notice that The Post had taken a new interest in reporting on The Whitehouse.
Another main lesson you could be taking is that this paper is flawed and doesn't actually prove anything about self-assessments in general, so don't automatically second-guess anyone's word for it, even your own. Find the link elsewhere in this thread titled "what the Dunning-Kruger effect is and isn’t".
I'm curious - where was your friend sent?

I grew up (and recently moved back to) Boone County, in north-central Arkansas. My school experience was... suboptimal.
Yes, and I'm also covered by the excellent Australian Consumer Law. They ran me around for 6 months, sent invoices and logs with the wrong name on it and I eventually gave up.
That's super inappropriate to share at work. You don't consider this agit-prop, especially when rebroadcast by a global media brand like buzzfeed?

https://img.buzzfeed.com/buzzfeed-static/static/2014-01/enha...

I think a lot of people would take issue with a snotty teenager telling them they are ignorant if they don't agree that they have privilege. I would also think that a professional setting like Google would not allow garbage like this in official company communication channels.
The change in coverage occurred before Trump was president, when he was still a candidate competing for the 2016 Republican nomination.

This wasn't just 'a new interest in reporting on The Whitehouse'.
Which justifies precisely nothing. Morality is about what you choose to do.
It doesn’t have to be spaghetti. You are right. However, when you change state in multiple places, they either have to be aware of each other or you need some kind of state management. The benefit of libraries like React are that they abstract view rendering and take care of DOM diffing. The benefit of frameworks like Angular is that it manages state in addition to what React does.

On simpler projects, JQuery is more productive. But my main point is to program where it is comfortable and practical. The better academic choice is not necessarily the better choice. View your programming resources as people and make the pragmatic choice.
From the Meltdown paper:

Jann disclosed the issue to Intel in
June. The subsequent activity around the KAISER patch
was the reason we started investigating this issue.
Yes, we still are food when we step (or swim) into the wrong environment. Our predators aren't nearly as concerned about our suffering either.
The thing is marketing a game does not justify death threats, rape threats, doxxing or even personal insults. Poor user reviews, not buying a game, refunds and civil complaints should be enough to signal that a game isn't good enough. If making a game to the best of your ability, marketing it, and not quite hitting the bar for a subset of gamers justifies abuse then I'd recommend developers stop making games. There are better job options that don't subject people to that level of abuse. If you made abusive comments toward startup founders because the MVP doesn't live up to the hype of the landing page on HN you'd get banned or at least heavily downvoted, I don't see why game developers should tolerate that kind of abuse.
Wow, I haven't peeked at the commit history for some time. Thanks for the info!
Where is the logical connection between being a billionaire & shutting down a publication in a vindictive manner established?

ANYONE disagreeing with negative press about themselves will do everything in their power to do so. From politicians to people accessing reputation management services [1], in general, people with shut down negative opinion against them. So, the "logical" fallacy is in attributing wealth to reputation management, when everyone, from the very poor to the very rich, and otherwise powerful behave the exact same way.

Disallowing people from becoming billionaires by using punitive taxation is NOT logic.

[1]: https://www.reputation.com/
That description seems correct, if the bank has $100 in deposits (which are a liability for the bank, it owes that money to depositors) on the asset side it will have loans for $90 (the money owned to the bank) and the remaining $10 will be the reserves.
They may not even know that you have it. So it’s like giving money a natural right and enforcing it.

A very odd mindset, but one I encounter frequently.

They did this class in my kid’s 5th grade where someone came in and said making tapes was illegal. And asked about parents who copied stuff. I was so pissed but the school got a tv or DVD player or something stupid.
No, I can test that.
I'm not a financial advisor but you can get them on Binance.

If you look at the market tab of this site, it gives you an idea of current and old exchanges for that instrument.

https://coinmarketcap.com/currencies/stellar/#markets
Moreover none of their actual apps (web, desktop, mobile) have adopted this aesthetic, so what's everyone on about?
At what point in embryonic development are these magnetite crystals formed, and how? Amazing
> And in the event that we were wrong, and you weren’t interested in seeing the tab, we eventually throw the uploaded layers away.

No comment on the increased CPU usage/effect on battery life this might have. I haven't tested it yet, but it seems like it could be significant. I hover over way more tabs than I switch to sometimes.

I currently have a lot of tabs open (in Chrome) and I switch frequently. However, I hover over a tab only to read the title, rarely to click. I'm interested in checking out Firefox again soon to see the new performance gains (maybe including this one), but does it affect battery life?

What if the false positive ratio is nearly 100%, like I suspect it would be for my patterns? Does this affect other performance like scrolling or typing if I've also been hovering over a lot of tabs?

Interesting work!

Edit:

> Maybe this is my Canadian-ness showing, but I like to think of it almost like coming in from shoveling snow off of the driveway, and somebody inside has already made hot chocolate for you, because they knew you’d probably be cold.

How sure are you that you won't end up with a whole bunch of hot chocolate that nobody wants? What is the waste factor when the extra work is done unnecessarily?
This is just the is-ought problem, or naturalistic fallacy.

That my cat, or any other animal, kills things in order to eat them in no way obligates me to do so.
How about: there's this wonderful new drug, but the only way to get to the dispensary is to walk 1km.
Program Synthesis Explained (2015)
I'll do you one better. People who work in an office are actively damaging their health. No unemployment required. We know that walking around and being active all day is better even if you also ride a SoulCycle bike for 30 minutes a few times a week.

In the short term, I think there is actually more awareness today of exercise and its benefits than e.g. the 1990s, although there is a large discrepancy between socioeconomic classes and between metropolitan and rural areas.

In the long term, we may be able to reproduce the benefits of exercise. There are a couple drug compounds that are in investigation. This will likely require at least a two-orders-of-magnitude better understanding of the human body--I seriously doubt that targeting a receptor will do the trick.

Alternately, we can just solve the ability to summon willpower.
> ..but we're spending that time in increasingly sedentary hobbies/interests.

And work. Don't forget work.

> As a physician, does the idea that manufacturing and robotics will completely eliminate our need to work scare you at all?

Suppose a robot assistant could replace 60% ~ 80% of your time in the office as a physician. You would then have more leisure time to spend as you wish.
If Twitter, Google, and Facebook were to use their dominant market+tech positions to systematically eliminate some speech, without highly-public visibility of the manipulation -- should one also eliminate stories about such illiberal paths of the major technology companies?
For the record, I am pretty sure Caddy will be unaffected by this. Any programs using xenolf/lego as their ACME client should be fine as well, as long as one other validation method is still available. (lego also uniquely supports a wide variety of DNS providers for automated negotiation of the DNS challenge. Caddy supports them too, as long as they are plugged in and configured.)

I've been asked if we'll turn off TLS-SNI in Caddy and the answer is no; as their announcement says, some accounts will still be able to use TLS-SNI for a limited timeframe until it is turned off completely. Caddy won't try the TLS-SNI challenge as long as the ACME server doesn't advertise it in an exchange.
While on the topic of things to remember, also remember that they're making compromises in order to keep things hidden from users.

The Signal protocol may be sound, but as we've seen with today's WhatsApp news, there are still implementation-specific compromises being made. Not to mention that many of those companies ship a closed source product. They could publish a spec of what should be going over the wire to make it auditable without needing to go all open source, but they don't do that either. Things are really kept closed. I am not sure whether it's a net positive or a net negative when another user joins WhatsApp or a similar service, versus Telegram where encryption is opt-in but at least it's open source and not leaking metadata to BigCorps whose profit model is knowing you.
Try it and look at laws vs non-laws.
I second the sizing question, but I'm on the opposite side of the spectrum at 6'5".
The servers can federate.
Happy to see this. I was very critical of their plan to re enable Tls-sni and I’m happy to see they reconsidered. They made the right call here.
Anyone else find the invasion into the people lives of consenting adults chilling? This feels like a puritanical purge.
"Preloading" instructions already exist, e.g.:

http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc....
Uhh, yeah because Alabama isn't west of the Mississippi and didn't just almost elect a religious and racial bigot, and accused child molester for Senate rather than vote for a Democrat? Sure thing...

Abhorrent behaviors happen all over this country, it's probably best to focus on exposing them and holding people accountable rather than trying to claim these problems happen over there but not in my backyard.
It looks like Let's Encrypt has come up with the best plan possible for the goal of balancing mitigation of the security risks with compatibility for users.

If their plan works out as they've laid out, and as certain recent commits in the boulder source code would suggest...

It would seem they intend to:

1. Allow renewal of already-issued certificates to same account holder to revalidate via TLS-SNI-01 for some limited time period.

2. Whitelist certain shared infrastructure providers who have lots of LE certs in force and who have demonstrated that they are not vulnerable. I'm betting especially for those that manage the whole certificate retrieval and deployment process. It's not clear if this is temporary but longer than #1 or "temporary" but very long term or "temporary" until we come up with another inband process.

3. Otherwise TLS-SNI-01 is gone.

Meanwhile, they'll work with the ACME WG to see if they can't figure out a better TLS-SNI method which would not be vulnerable. That looks less and less workable absent some special TLS extensions or ALPN and server support for those.

For those who have options, it's worth pointing out that the purely DNS based validation methods are literally closest to the facts that the CA's validation process wishes to prove. Domain Control validated means that you're showing effective control of the domain. Nothing says I control the domain like the ability to add and remove data from the authoritative DNS servers for the domain label (and children thereof) in question.
As does "freedom of speech", I guess. But both of those things mean something more specific in the context of US constitutional law, of course. It's that more specific meaning to which I'm referring. Sorry for the lack of precision.

Anyways, my only point was that Citizens United was not exactly a clear or obvious application of the First Amendment, and offering up the integral role of cases involving the Fourteenth Amendment as examples.

I guess merely mentioning that the decision was 5-4 would've been enough and prevented this now rather long thread.
Job search sucks for many reasons and for the most part it's the hiring companies to blame for. However, this is a given situation which will not change any time soon. Instead of ranting, candidates should put some time in researching what the companies they're applying to are looking for and act accordingly - e.g. personalize their resume to match job descriptions, anticipate interview questions and do mock interviews. Some resources that can help in the process:

[1] https://www.glassdor.com (to find out interview questions asked by companies)

[2] https://www.jobscan.co (to optimize your resume against job descriptions)

[3] https://www.pramp.com (a peer-to-peer mock interviewing platform for software engineers)
BeyondCorp: How Google Ditched VPNs for Remote Employee Access
> We haven't done extensive research in populations outside of the United States, but for the last 50-100 years the US (and Europe) has been leading the charge

I'm confused, I thought that over the last ten years a lot of the medical research formerly conducted by U.S. pharma companies has been outsourced to SROs, who in turn test their drugs on poor people in India or whatever. Is that not actually the case?
An official company party is not the private lives of anyone. That's the whole point of the article. It was an official company party.

Edit: for what it's worth, there's also no consent possible when there's an external power dynamic at play.
Just FTR, your critique is answered by Stefan Lucks, Norina Grosch, and Joshua Koenig's paper[0] from last year's langsec workshop at IEEE Security and Privacy. They define a formalism, calc-regular languages, to handle length-prefixed strings.

[0] http://spw17.langsec.org/papers.html#calc-regular
Lobsters are long-lived, advanced crustaceans and I welcome treating them as well as possible under the circumstances.
But just from the experiment as recounted in the post (crabs leave a burrow to avoid electric shocks) I don't think it's necessarily clear what sort of sensations they are exposed to due to the boiling.
I once heard a well-known ethologist (and animal welfare advocate) argue that since the crustaceans have not evolved with fire and other extreme temperatures as a common hazard, they don't have the same sort of sensory responses to it as terrestrial animals.
They leave areas with temperatures which are harmfully high for them, but the experience for them may be more akin to us seeking shade on a too hot day than us being scalded.
So cooking may actually be a comparatively humane way of killing them.
If better data about the crustacean minds contradicts that, his assessment needs to be updated, of course, but just from what we see from the BBC I'm not convinced that is the case.
xenolf/lego arguably has the widest support in the sense of ACME verification methods, but autocert might get other methods too: https://github.com/golang/go/issues/21890
Welcome to the cyberwar.

I think the basic problem with brakdown of static analysis tools like this one or optimisations like speculative execution is that they were built in a different time for significantly different requirements.

When the theories were developed, the main concern was to prove correctness and protect against accidents. Yes, the OS isolated processes from each other and protected memory boundaries - but this was added to keep a crashing process from corrupting other processes and bringing down the whole OS. It was not developed to contain an actively malicious process.

At some point the paradigm changed and the idea spread that an OS shouldn't just protect against misbehaving code but also against misbehaving programmers. That lead to the current practice of compartmentalizing a machine in different areas of trust and tightly restricting what a program can do - and at the same time permitting increasing amounts of "untrusted" code to run because we trust the boundaries so much.

I think the general paradigm shift has some worrying sides, but more importantly, it was never explicitely discussed and it was never discussed if the current tools of software and hardware development can even support that new paradigm.

So yeah, in short, I think we are currently discovering that our houses are in fact not built to withstand a 20kton TNT blast set off at the front door. So far this hadn't been a problem as random violent explosions used to be a rare occurence. Somehow we got ourselves in a situation where they aren't rare anymore.
I'm not sure I'd want to work for a company that makes compromises at every turn and works together with companies that have their user's privacy definitely not at heart (but claim to by using this encryption publicity stunt).
I think one of us is confused. Your link says they can loan out money that people have on deposit even though they technically owe it to depositors. They only need to reserve a fraction of what people have deposited (so better hope they don't all withdraw at once). It doesn't say they can loan out MORE than had been deposited.
Sia has cluster management software to let the hoster dynamically set prices with respect to the exchange rate.
Google didn't respect the embargo for the financial sake of Intel but for both it's own sake and the sake of all of it's users, as well as most computer users out there regardless if they use Google services or not.

Sure Intel put a PR spin on it, but any company would do that, but at least the patches were ready from the get go even tho the information started leaking a week prior to the official embargo date.

Would you rather having to wait 2-4 months without any mitigating solutions other than turning off your PC?

People are focusing too much on Meltdown, it's not the worse variant of Spectre, Variant 2 is much worse, and the possibility of future variants is even scarier.

I don't see anything wrong with companies spending 5-6 months on coordinating mitigation and fixes as well as building knowledge that can be used for future research and prevention of similar vulnerabilities.
SpaceKim
It doesn't matter what they believe. What matters is the power structure and incentives/disincentives to which they are subject once they have the job.

Regardless of what they believe, a politician's first priority is reelection, and it is partisan campaign committees that hold the reigns to the resources required for that. Even if you are independently wealthy and can finance your own campaign, you can't accomplish anything in office if you get ostracized by everyone who doesn't have that luxury.

Cooperate with the cartel leadership, or you'll be denied funding, voter data, and committee seats.
Data from the top 20 fastest growing communities in crypto over the last month
BTC/ETH can also be traded on Stellar's Distributed Exchange. One of the easier to use exchanges that provides a bridge for this is Stronghold.co (US/SFO based)
someone needs to do independent audits in the form of a zero knowledge proof to say “ok I understand why the wizards and warlocks are at battle”. Used to be that we would say to ourselves, “we should consider It likely Obama flipped once in office because he saw confidential stuff that would make you sick”, which is a more cosmo view
Makes sense. In Europe all smartphones I had had FM Radio application. It requires headphones, but it works.
I was really disappointed to see YC involved with 'glowing plants' a few years back, which predictably failed (non-science founders, among other reasons). Color me skeptical.

Biology is a very different field; stuff that is wonderfully promising can get help up for years based on trivial mistakes or simple strategic errors. And on top of that, 95% of the stuff that sounds great won't amount to anything, and you can't tell until a few years have passed.

Our understanding of molecular biology isn't nearly as plug-and-play as many would like it to be.
MJ was offered as an example of a suit that was filed despite the fact that the speech was clearly legally protected, and where the cost of the suit was rather outrageous despite this fact. It establishes a) that people sue maliciously even when they know their suit is baseless; and b) that these suits are none-the-less expensive to defend.

It's fairly obvious that (b) is concerning, and also fairly obvious that it takes an actual suit to put a price tag on this problem. That's why the MJ case was presented.

But all of this is obvious and explained in the comments above, so this is getting very pedantic, and I don't see a) what point you're trying to make, or b) how that point is at all relevant to the overall thesis of the root comment.
Of 21 Winter Olympic Cities, Many May Soon Be Too Warm to Host the Games
Very cool. Do you know if it behaves correctly with caching (e.g. Forward/Back buttons)? Generally speaking, Javascript modifications to a page cause inconsistencies with what the user sees when Back is pressed (and it seems impossible to avoid this?), so I'm wondering if this is a caveat here as well.
You just need a shared cache.
This is not true. Would you consider James Damore conservative? His views certainly weren't religious.

The rise of "social justice" means that anyone who doesn't agree with those tactics is now conservative. I think you'll find many atheists in those ranks. In fact, their community was one of the first battle grounds in the current culture war.
Stories about Google's search results that recently started to include false denunciations of conservative websites are also being flagged -- aka shadow-banned.

Another way stories are shadow-banned is that they are simply not shown to other users, while the poster doesn't see a '[flagged]' tag (but there is no 'discuss' link).

Since these stories are being flagged, it is likely that comments on the same topics are also being flagged.
They don't compete, they compliment each other. Cryptopanic gives you manual user ratings, Hodlfeed gives you text sentiment ratings. It's a perfect combo, especially if you add in another site like http://solume.io
US Marshal selling forfeited 3813 Bitcoins
Maybe if you're concerned about that, don't hold what is essentially a public party that will inevitably have a member of the press show up and cover it. You have to be pretty stupid to set up something like this and then get all whiny about it being exposed. If you want it private, then actually keep it private. There is no effort here to keep it private, if anything it's flaunted as if everyone else is the fool for not noticing the intentional exploitation that's going on routinely in the industry.
It’s quite lame. Think about how there aren’t even Facebook 3rd party clients and they actively block any scraping. Google also isn’t developer friendly for using the stuff they don’t want you to. Few APIs to their sites.

These companies are pretty different than the old school put up an api.

If DNS was designed by Facebook or google it would make a dedicated client and refuse some people who used too much.

It seems the war of protocol vs systems is going poorly for protocols.
A bit disappointing that this article has seen limited activity. As a community, we should remember those in other communities who have brought people together in an effective manner. In some sense, so that we can encourage the leadership of the future, especially in fields related to rights and access such as Aaron. Failing to recognise such contributions discourages people from doing so in the future.
Clove oil works well, according to Dave Arnold: http://www.cookingissues.com/index.html%3Fp=5731.html