skysight-inc/HackerNews huggingface dataset:
> I regularly encounter users who don't accept that websites can access services on localhost or their intranet," Ormandy wrote. "These users understand that services bound to localhost are only accessible to software running on the local machine and that their browser is running on the local machine—but somehow believe that accessing a website 'transfers' execution somewhere else. It doesn't work like that, but this is a common source of confusion."

does this mean a malicious site can query data from a running service, such as local MySQL? If so, isn't that a big deal? I know lots of places that run things open locally because they're behind a firewall.
if you provide someone every means of helping themselves and they still die I wouldn't feel guilty about it. Take their kids away though.
I disagree... everyone should have special rights to their birthplace.

Not supporting those already results in the exactly the kind of gentrification that people are complaining about. CA is desirable land, the people that most support it (aka homegrown Californians still in place) should be the ones living there. Let the incoming masses pay a toll to provide for the people of the state they wish to live in.

Are you guests, or conquerors?
Oh come off it. This is a company, not a person. Uber has an official and public business model that relies on breaking the law. Laws that constrain anti-citizen business practices like tax evasion and labor violations should be highly enforceable, and the system described in the article is expressly designed to impede that enforcement. This is bad for everyone -- not a freedom issue.
It also conveniently gives Uber more time to cover up whatever illegal activities they may have been up to.

This is the whole point of why police conduct raids:

...to use the element of surprise to arrest targets that they believe may hide contraband or other evidence, resist arrest, be politically sensitive, or simply be elsewhere during the day.

https://en.m.wikipedia.org/wiki/Police_raid
But the question was about personal growth. Bad luck more usually triggers/catalyzes personal growth, doesn't it? Makes you think, reassess.. So maybe it's luck to have so much bad luck. (Read the stories of the wisest, greatest, most..personally-grown - the most embiggened - they've had more than their share of bad luck.)
Regarding Browsers
In general, sure, but the context of this thread is drug cartels.

Their unregulated businesses use capital to aggressively expand into other markets, destroy competition, and oppose democratic regulations - behaving similarly to legal capitalist corporations. Though, granted, they conquer with guns and gangsters instead of legal loopholes and lawyers.
This is an ignoratio elenchi - the parent discussion was regarding the destruction of the Walls of Benin; other matters of British occupation of Benin as a whole are irrelevant unless related.
No, people served with court orders have to obey those orders. All people have to show is that the orders weren't complied with.
It's mentioned in the BTC whitepaper.

https://bitcoin.org/bitcoin.pdf

Scroll to section 7 "Reclaiming Disk Space"
The analysis is also missing the option value in being able to decide whether to extend or cut short your employment based on the value of your unvested RSUs.

Suppose you get paid $100k in RSUs. If the value declines by half to $50k, you can try to job-hop to another place where you get a different RSU grant that's worth $100k again. If the value doubles instead to $200k, you can park your butt and vest the whole balance of RSUs instead.

This is true even with selling your employer's shares immediately on vesting (which you absolutely should do).
Tesla seems to be focusing on consumer cars. Until sensor prices drop to well below half the cost of a car I can’t see them going all out.

The vehicles that Waymo, GM and Uber are trying won’t be affordable for the average consumer in the short term, and they seem to be focusing on the ride share model.
AWS Lambda Supports Go
from the article: Uber built a whole system and gave it a swaggering name. It takes the procedure just one step further, but what a step.

Actively building a specific system to counter a warrant is probably going to go a long way to prove its obstruction. Uber's less than lawful reputation won't help here.
This shit won’t even be a distant memory in 100 years, unless it’s a object lesson in greed and groupthink.
There's not a single Google index; rather, it spans multiple tiers. Perhaps those pages fell through the cracks, in the figurative sense -- perhaps there is not enough capacity in the tier(s) they are in and the cutoff is too aggressive. There are internal tools to debug this, but of course nobody that has access to them will report here.

Uh, five minutes after I first tried, now the review is the first hit for [lou reed "rock n roll animal" tim bray] and a bunch of variations. Enough people searching for it might have changed the state of the system.
That's not a stable situation. The EU forced Microsoft / IE to unbundle - Google's day of reckoning approaches.
You know, I really appreciate this response and perspective; because it makes total sense. It's human to want to stick to what you know and only natural to be hesitant of the unknown, especially when you have the tenure to have seen it all over the course of a career. That experience is valuable and it's why in many cases I do lean upon this senior guy for input on specific topics I know he is the best resource for.

That said, in this specific context of tech (or at least in my wheelhouse of Ops), this is surmounted by creating and fostering a culture where it's okay to experiment and fail.

Where we've been handicapped in this regard is specifically not doing that, and the particular individual who makes this difficult having the mentality that any new approach spells doom and actively working against initiatives to put us in a better posture of experimentation in environments that don't sacrifice stability and reliability of our stack (hence the sarcastic comment about giving up my first born child for server immutability--I don't even have kids, haha).

But that said, I think you're absolutely right. I'm not quite greybeard yet-mostly because I yank out every grey hair I see trying to establish residency on my chin, but nonetheless your point is accurate, well taken and definitely that has immense merit.
Microsoft does this too. I have a massive mailbox going back 15 years and O365 doesn’t handle it well with full text search... you need to scope it to a person.
What keeps your country from doing admirable X so that it can be more like mine is a loaded, patronizing question. It's also ahistorical and therefore unsubstantive, as if one simply chooses to make things better and then they are. That argument is disrespectful to make about another person, let alone a whole country. Also, to my ear, prefixing the whole comment with "well" is a trivializing gesture, as if to say: "well, what's the matter with you? Pull yourself together and you could be more like me."

I realize the comment didn't land with you that way, but I can guarantee you that it would with others, and that is how we get nationalistic flamewars. Moreover, the account has a pattern of making ideological comments. Such accounts are by far the most prone to flamewarring, so when we see signs of that we err on the side of replying.
1. I wouldn't count Tesla until they make big changes to their hardware and general strategy. They've got an Elon-knows-better-than-the-experts-who-work-for-him problem.

2. Fully autonomous cars will be Robotaxis for the forseeable future. They're not for sale. I'm actually baffled as to how many people there are that don't get this, it's been in the news daily for years. They're far from being idiot-proof enough to put in the hands of private owners, they need careful maintenance and oversight, and cost north of $150k apiece.

GM is moving aggressively, and with confidence. GM acquired Cruise Automation, and they've been developing their Autonomous OS since 2013, it was money well spent. They're the most vertically integrated company making real progress on the self driving problem, and only Waymo is ahead of them. The problem with Waymo is they can't make cars and don't have a legit partnership with anyone who does.
100% Agreed. Gmail doesn't seem to want to find stuff that is there.
C++ is definitely in top 3, along with Java.
The 787 air quality is better for two reasons: it has a higher humidity and it contains less VOCs. The reason for both of these factors is that the 787 is designed to take cabin air directly from the atmosphere rather than from a compressor bleed valve as in every other aircraft.

This was a radical design decision for Boeing because bleed air usually has three key functions: it is hot enough to cause toxic ozone gas to decompose, it is at high pressure so can pressurise the cabin and it is hot so it can heat the cabin. Without bleed air Boeing had to do all these things with new components, they have an ozone filter/catalyst, an electrical compressor and a RAM heat exchanger to heat up the air (basically slows down the air increasing its temperature). The system is more complex but according to Boeing uses less energy [1] and makes servicing the engines easier.

For passengers, external air contains more moisture than the bleed air (air becomes less humid if it is compressed and heated) so the inlet air humidity is around 7% compared to 2% on other planes. But this is still less than the humidity in a typical cabin which is about 10 to 20%. Some of this is residual moisture that is recirculated but most is from passenger respiration and transpiration [2]. Even so the higher inlet humidity coming in can significantly slow down the loss of moisture over a long flight. In addition VOCs and other bleed air contaminants are minimised [3] which Boeing claims means we feel better after a long flight.

[1] http://www.boeing.com/commercial/aeromagazine/articles/qtr_4...

[2] http://webserver.dmt.upm.es/~isidoro/tc3/Aircraft%20ECS.pdf

[3] https://www.faa.gov/data_research/research/med_humanfacs/oam...
It's by definition. If you fail to comply with a court ordered search, you're in contempt of court. You go to jail.
There was a job when I was still green where they had fired an architect and they were bringing in more hands on people with a hope someone would step up. Someone opined that architects have a half-life of about 12 months. I ended up splitting lead duties with another person and she and I split the architectural oversight.

Since then the same patterns (alas, minus the diversity) have worked out a number of times and I’m adamant that adding another lead is far better than consolidating that under one person, at least until you have half a dozen leads.

In fact my most useful mentor and boss said to me look, I trust you guys to sort this out. I want to hear the plans and ask questions but I only need to be involved when you can’t come to an agreement. And then I can be your tie breaker.

I think a lot of things would go better if folks in these positions would audit and break ties and worry about bigger picture stuff most of the time.
Well that's exactly what both cryptocurrencies are currently working feverishly to solve.

Bitcoin's idea is to use Lightning Network to keep the extreme majority of transactions from ever having to hit the blockchain. And it's also why the blocksize shouldn't be increased like some forks are doing, because in 100 years (or even 5 years) the size will be unmanageable.

I believe ETH has something similar, but I'm not knowledgeable enough about that ecosystem to say either way.

It's clear to everyone that the blockchain as a "data structure" isn't scalable to anything resembling "widespread usage", and that it will be a hard requirement to figure out how to either quickly and safely "prune" information from a blockchain, or get most of the transactions to stay off of it somehow.

Also, I'm sad that most of the replies to your comment are jokes or comments about how it won't matter, or how you are dumb for even asking the question. It seems when it comes to cryptocurrencies HN is just as bad as other forums online that everyone resorts to insults and "witty" one liners.
Or there is a time bound or other resource bound that they are willing to expend under the current circumstances ( are you a free user? Paid user? Internal user? Mobile? Web? Etc )
*Bitcoin Cash, not BCash.

If you're not Satoshi, don't try to enforce an imaginary trademark. It looks petty and detracts from serious arguments.
IPFS mirror: https://www.eternum.io/ipfs/QmTVbQsQrf8AmzUZxm4DvYW2sFEdsaPr...
Seems like these articles are becoming more common. Someone claims new meta-ai alg will change everything. In reality, just another team's hyper-param optimization setup.
Announcing Go Support for AWS Lambda
at the current rate of ~55GB /year, running a full block client shouldn't be too hard, even on SSDs
To the extent that the science says it is one way (and it’s legitimate science and you interpreted it correctly), I take your view. I still find it totally ybsatisfting as far as actually understanding the source of stress and dealing with it in a healthy and long term way.

Thanks for the jab. Makes me hate you a little.
What is the inflation adjusted value of the trade/goods extracted from India in the same intervals?
The sad thing is that this was all known decades ago. The actuaries at social security predicted when the ponzi scheme would go belly up, and that prediction has not really changed at all. At this point, the only thing they can do is inflate the money supply, further penalizing savers.
The power usage are wildly different. Your standard full-ton pickup gets about 10-12 MPG towing a reasonably sized trailer.

GGE for #2 diesel is 37.5kWh @ 50% efficient(which is better than gas) gets you 1.875kW per mile or 562kWh battery pack if you want 300 mile range before charging.

Current Model S packs are 1,300lb per 100kW so you'd be adding over 7,000 lbs just for a battery pack of that size.

For short-haul commercial stuff that's something you can plan for but I don't see a consumer who infrequently tows to variable locations making that work.

For reference your average 30MPG commuter needs only 0.33kWh per mile(and is almost exactly what our Model S does).
You're getting downvoted... but this did happen, and is likely to blame for polio's continued presence in western pakistan.

https://www.scientificamerican.com/article/how-cia-fake-vacc...
Thank Orrin Hatch.
So, about where a junior programmer would be? And this would be a good course for them if they needed to implement database systems?
about 1k a month, per adult - thats the idea - its meant to replace most of minimum wage.
I will agree that getting someone else fired for your own benefit is deeply selfish, but I also expect people to fight for their own interests when livelihood is on the line. And a job is closer to 'food on the table' than 'new discount TV on black friday' (it's closer to the bottom of maslov's hierarchy).
Sounds basically like Benjamin Franklin's method, detailed in his autobiography. He ruled up a page with all the virtues he wanted to see in himself down the left side, days along the top, and putting a black spot for each virtue he'd lapsed in that day.
Is poverty a moral failing?
> AFAIK the only place where it remains endemic is Baluchistan in Pakistan

In 2017 there have been 13 wild cases in Afghanistan, 8 in Pakistan and it's still considered endemic in Nigeria (last known case in August 2016)

https://en.wikipedia.org/wiki/Poliomyelitis_eradication#2017
you make a system that is impossible to abuse short of creating fictitious people - means testing is what allows the existing system to be abused.
Because when you have kids, you will all have the same name. Otherwise, one of you will have a different last name.
This isn't a useful comment in any sense of the word.

If you think cryptocurrencies are just a fad, that's fine, but you don't need to inject your feelings into any discussion of it.
Like most automated machine learning, this looks incredibly intensive/expensive computationally. I look forward to the day it's within reach for more researchers. Until then, it's a weird kind of news that has little impact on how most NNs get tuned.
> Moral hazard would be Nigerians driving Ferraris purchased by Melinda and Bill.

The Nigerian kleptocrats have effectively externalized their healthcare costs so that they can buy their Ferraris or more likely a fleet of pimped out G-wagens.
I imagine this is a symptom of their parallelism. Sort of like the app engine datastore being eventually consistent, they operate optimistically. Presumably this reduces their costs and increases responsiveness. As for gmail, I noticed, when trying to archive a bunch of stuff, of search, select all, not operating on the theoretical full search set many years (at least 3 I'd guess) ago.
Is Houston really red? Most of its political representation seems firmly in the urban liberal left. That the city sprawls like crazy is more of a red Texas artifact.

The population densities of Texas and California are about the same overall because they both have vast amounts of unpopulated land. If you look at the density of cities, however, California is much more dense than Texas in general.
So you think we'll still be using 19th century style fiat in the 22nd century?
In the article:

> the team developed an algorithm that automatically generates neural networks

Title of the paper:

> Optimizing Deep Learning Hyper-Parameters Through an Evolutionary Algorithm.

I don't know how to feel when things like this happen.
I doubt it's malicious
I didn’t, I responded honestly and completely to a ridiculous question. Your distaste for the answer doesn’t bother me.
That helps. Even if you go to the advanced search, https://www.google.com/advanced_search, and use the box "all these words", you need to quote the words for it to take you seriously. I didn't give a good example, since there are no matches for that search (except reflections back to this discussion), but in other cases there are legitimate results that only appear after pages of invalid results.
In fact my most useful mentor and boss said to me look, I trust you guys to sort this out. I want to hear the plans and ask questions but I only need to be involved when you can’t come to an agreement. And then I can be your tie breaker.

I had a boss like this and very much believed in that sort of autonomy, only getting involved-as you said to be the 'tie breaker', but still lead a great engineering team and was a great source of knowledge and mentorship.

I say 'had' for a reason. That reason is mentioned in the post that started this comment chain. Now what's that tell you? Heh...heh :(
I used to agree until I was forced to use an eventually consistent system.

Both have their place, but I think you get better architected, more reliable software with an eventually consistent system.

In and eventually consistent system, the programmer must consider what to do in the case of data failure. I think this is a good thing. When building a user authentication system, who better to decide what to do when you can't access the user database than the person writing the user auth system? Should it fail open or closed? Well if you're a bank, you should probably fail closed. If you're Netflix? Fail open. The programmer should know the business case better than the database, which will alway fail closed.

Sure, in a consistent system the programmer could think about that, but they aren't forced to, which I think is good.

Also, it means that joins must be done in your application. Sometimes its good to have the programmer deal with that too, because it means they will have to really consider what data they need and be much more familiar with how much data is needed to create the join. If you're just relying on the database to do the joins, it might be hiding a lot of load from you, especially if you inadvertently create multiple table scans. In an eventually consistent system, you know if you created a table scan, because you have to pull back a full table's worth of data (or not, because you saw that issue and fixed it).

I just feels like the programmer gets better insight into what is happening to the data and can make better decisions on what to do when they are closer to the business cases the software is being built for.
The site is very spotty to load for me. Is it just me?

EDIT: Yeah, the TLS handshake takes 20 seconds for me. I don't know why. Everything else works fine.
I wouldn't call it "unfettered capitalism". The fact remains that the these organizations are exploiting a law against a certain substance. A law that was initially put in place due to "moral" concerns.
>Yes, truly how terrible they are to spend money encouraging the eradication of polio.

Yes, that was what the loan was for. Even if it all went to its intended purpose, that doesn't excuse apparently not budgeting for any repayment. I expect that money is currently lining someone's pocket in Lagos.

I'd have been more impressed if they spent the money directly to tackle the next challenge and letting the politicians answer personally to Japan regarding the whereabouts of their money. Instead they are encouraging more loans and more corruption.
Yep.

An interesting bit of data that highlights just how profitable this industry can be comes from the wikipedia page for McKesson Corporation[1]:

> On June 24, 2013, The Wall Street Journal reported that McKesson Chairman and CEO John Hammergren's pension benefits of $159 million had set a record for "the largest pension on file for a current executive of a public company, and almost certainly the largest ever in corporate America." A study in 2012 by GMI Ratings, which tracks executive pay, found that 60% of CEOs at S&P 500 companies have pensions, and their value averages $11.5 million.

[1] https://en.wikipedia.org/wiki/McKesson_Corporation
The eth devs are busy working on sharding - the same idea as traditional databases like Mongo where a primary key decides which node the data will reside. The main problem here is that a contract residing on shard A might reference a contract on shard B (much like a join between 2 shards). They are approaching this by using "transaction receipts" that would be passed from shard to shard. https://github.com/ethereum/wiki/wiki/Sharding-FAQ
There’s been quite a few cases, but the Lavabit [0] Case is probably the most famous. Another one that comes to mind is a guy accused of having child porn claiming he can’t remember the password to his data and being held in jail for 2+ years without being convicted [1].

[0] https://arstechnica.com/tech-policy/2014/04/lavabit-held-in-...

[1] http://blogs.findlaw.com/third_circuit/2017/03/man-held-in-c...
It wasn't the last time. Pakistan is an extremely large nation with 40+ years of substantial vaccination efforts by the US and West in general. It'd be fair to say that at least 99.9% of that effort was entirely innocent.

The CIA doing what it did should have never happened obviously. That simultaneously doesn't excuse non-vaccination, which is extraordinarily inexpensive and could be performed by Pakistani government persons as a compromise.
I have also noticed that google search results, especially in the last few months, are incredibly weird and jumbled, as if they so desperately want to show me the $current_chosen_web_winners of news/ecommerce that they sneak in results from them no matter what the terms.
Eh. What about the 200+ other countries who didn't give Nigeria a loan (or gift) towards the goal of eliminating polio? I don't think lending money to a willing debtor is a bad look.