skysight-inc/HackerNews huggingface dataset:
As someone who didn't have any kind of health insurance growing up, and had both parents working for hourly wages, I would like to add that it is a little more complex than "irresponsibility".

My working-class parents would have certainly felt the impact on their budget spending ~$50/person for a shot that might not even work that year, not to mention the money lost by not working to go get the shot.

I think people should get their flu shots, but am a bit more hesitant to judge those who don't.
The most likely candidate is that the local server would need to require authentication with credentials that a browser would be unlikely to have. Maybe write a key file to the local filesystem since both the game and the update daemon would have access, but browsers wouldn't without explicitly asking the user.

DNS rebinding vulnerabilities are an authentication/trust problem. Authors assume that 127.0.0.1 (or other private IP blocks) are safe and therefore no additional authentication is required, or that they can rely on the same origin policy to do certain things and, e.g., reject requests with the Origin header set, or as in this case, rely on the same origin policy to restrict updates to the `Authorization` header without a preflight OPTIONS request.

If you want to watch an interesting DefCon talk about the same idea, but attacking routers, this [1] is one the most entertaining/interesting talks I've seen overall.

[1] https://www.youtube.com/watch?v=FV7SQd-3Ytk
That's false. Any website was able to send requests to 127.0.0.1 since that new thing called always. DNS rebinding has been a known vector for 10+ years.
> A competitor to Bitmain just finished their prototype 12nm Bitcoin mining chip and is moving forward to their target 7nm mining chip

Huh, maybe the dark fibre of Bitcoin will be cheap silicon and subsidized fab research.
We actually know that elephants have extra systems for controlling cancer and we haven't really looked carefully [1]. We have also learned a little about these systems in bowhead whales [2].

I think we are a bit further along with understanding cancer (we haven't found a major oncogene in a while), but I do agree we still have a way to go, especially on the treatment/prevention front.

1. https://www.nature.com/news/how-elephants-avoid-cancer-1.185...

2. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4536333/
Yes!

I wonder if they happened to come from Eielson AFB.
(Not expecting you to know that, but it makes me smile knowing that it stuck)
Reeves AN/MSQ-77 Bomb Directing Central
I believe the point stands. If a penniless, homeless child has a worth of 0, and I have a house valued at 80,000 with a 90,000 mortgage, am I really worse off than the child without a home? Assuming I have a job and can make payments.
Coinbase booked $1B in revenue last year, has told hovering VCs to back off
The parent's account appears to be new and largely used for political and ideological discussion. I'm not a moderator, but I'd encourage you to read the community guidelines as that type of behavior is specifically prohibited: https://news.ycombinator.com/newsguidelines.html
Zodiac is definitely worth a look. They did a pretty good job of predicting our long-term user’s future revenues. Also all of the academic papers around it are good reads.

That said, that didn’t solve our problem because what we really wanted was predictions of our new customers. So we could quickly see whether or not their quality was changing. I just wrote something up about where we landed. https://engineering.ezcater.com/early-prediction-of-customer...
Yeah so like men thinking with their ...
You're comparing PowerShell to Bash -- I'm comparing it to any language written in the last 20 years.
On the other hand, I can now easily write web pages that let people query and view the results of large CFD simulations in interactive 3d.
Can anybody from recent batches comment on the extent of actual advice and mentoring received during the program?

E.g. do you typically work closely with your advisor(s) on near daily basis, or is this more like booking a meeting with your university professor occasionally, when you need to discuss a particular topic?
Just seeing the picture of the machine brings back the melted plastic smell. I remember trying to collect each one at the Milwaukee zoo, and inevitably breaking the head off of them before long.
Better library support - the state of HTTP client and server libraries is a lot better than the state of other random RPC libraries, and developers tend to be more familiar with it these days too, so it's likely to get you a better product. And very few HTTP libraries support HTTP over named pipes or UNIX sockets.
Distribute porn. Play video games. Or some other thing that has subjective value that you might not agree with.
This is the craziest thing I've ever read. Well worth the relatively short read.
Does the flu vaccine count as exposure?
It seems these large players will do everything in their power to make sure this bubble does not pop. I do not know the size of such investment, but it seems to me that these players have the ability to keep the price from crashing and keep the bubble from popping.
Apply that to energy efficiency research as well. The monetary incentives are too strong for it not to happen.
I got a set of Reolink Argus cameras during their kickstarter project, and have been pleasantly surprised at how well their 'intelligent' alerts work. One of their cameras is mounted where we have some screen blinds flapping in the wind and also where our cats tend to traverse a lot, and in the 6 months or so that we've had these cameras, never a false alarm trigger for those, and it picks up people moving through the area really well.

Only downside so far is that one of the cameras seems to go through batteries faster than the others (who all are close to the 3 month promised battery life). Also, their cameras seem to be fussy as to which SMTP providers they work with in order to send email alerts, but once sorted out, works great.
> Any website can simply create a dns name that they are authorized to communicate with, and then make it resolve to localhost.

So if I understand this correctly, websites can now bypass all firewalls and send traffic to any _local_ port at will? It also seems that this same trick would apply to local/intranet IPs (e.g. have domains that redirect to 192.168.0.x) allowing interaction with things like printers. While Blizzard has a bug, it seems to be the browser that has the real vulnerability here.

Edit: The replies have good explanations with more detail why this would be difficult to fix -- the host doesn't have enough context to differentiate between "intended" and "unintended" IPs without a bunch of pernicious edge cases.
Unfortunately, these chips are designed explicitly for the SHA algorithm BTC uses. I wonder if there would be a way to make an algorithm based around protein folding that could be verified like a hash?
Yes they should. It's nice to have a (ultimately) data-center-wide scheduling platform with unified role-based access control, monitoring, utilization optimization and reporting, cost control and even exotic features like hardware validation. Just because earlier Kubernetes versions weren't good at everything at once doesn't mean it's doomed forever to be unsuitable for something.

Moreover, the use case he's discussing is quite unusual: Gravitational takes a snapshot of an existing Kubernetes cluster (including all applications inside of it) and gives you a single-file installer you can sell into on-premise private environments, basically it's InstallShield + live updating for cloud software. So, running everything on Kubernetes opens entirely new markets for a SaaS company to sell to.

This level of zero-effort application introspection hasn't been possible prior to Kubernetes, so that's another reason to use it for everything: it promises true infrastructure independence (i.e. developers do not have to even touch AWS APIs) that actually works.
The posting says that the patch is not very good, but that's a separate issue.
Sure, but it also wasn't a transaction.
Worse than that: they were telling the press that “computers were rebooting _more_often_than_normal_”
You're sounding like a propagandist - like you want to just argue your talking points, rather than actually have a conversation where you listen to what the other side is actually saying. It makes you a real pain to talk to.

Just in case you're actually trying to engage in good faith, though, I'll try this one more time. If I have a compiler that is less-than-100% standards compliant, I may not be able to use a few features of the standard. That means there may be a few ANSI C idioms that I can't use. Of those, the number that I would choose to use on that size of processor is very, very few. So in practice, there is no "challenge".

Why would I use very few of these features? Because on a processor that size, you're not writing a huge app. You don't use all the functions in the standard library, you don't use all the keywords, you usually don't push the language very far at all. At worst, you might have to develop one or two idioms of your own. It's... mildly annoying, rather than the big deal you're trying to make it.
And in the case of workplace or family, are likely covered by the same insurer. There's probably some patient n with diminishing returns for the modern tech workplace, where, if they live alone, commute alone, visit no family, and have no onsites.
It's the opposite -- the insurance company saves money by having people get the flu shot:

1 flu shot reduces probability of flu to ~70% of what it was before.

0.7 * Cost to treat average flu case + Cost Flu shot < 1.0 * Cost to treat average flu case

Insurance companies have pretty good stats underlying that sort of decision. At CMU this year, they were paying you to get a flu shot (in the form of a $5 gift card, with the flu shot being free).
For applications, I've heard more devs are going back to web first, but I'm mainly familiar with the game scene, and indie game developers have had a lot better luck with Steam, the Vita, and most recently the Nintendo Switch than on mobile for the past several years.
>"The insurance company is trying to SAVE expenditures of doctors and hospitalization"

Interesting point (not sure how far down a rabbit hole this can go...), so you are claiming that the introduction of flu shots has reduced insurance costs? Is it even possible to assess this or are there just too many confounds?
> Not only spot, but also invests the energy in calling it out and explaining it.

> Many business failures i've witnessed happened ultimately because nobody had the energy to cut down the bullshit forest that constantly regrows around a company.

The sad thing is that people have unironically labeled Linus "toxic" for calling out crap very bluntly like this.
Think of it this way: If the vaccine is, say, 30% effective, then a single person vaccinating themselves will bring their risk down by 30%. But if there are N people between that person and patient zero, and all those people are vaccinated, the risk is brought down by 1-0.7^N.

For the virus to propagate through a chain of 3 vaccinated people that comes out to 66%, an effect more than twice as effective as that of just the person getting the vaccine themselves.

(It's more complicated than that, especially since getting the flu isn't binary, but it should give an indication of how the effects scale.)
It'll be interesting to see what propagandic angle the lobbyist and purchased politicians take if ISPs sue states over this. When it was anti-NN, the language was "Defeating Federal Overreach to Allow an Open Internet."
Amazon changes seller fees and raises the cost of some Prime memberships
Lots of routers are vulnerable to this. One of my favorite DefCon talks [1] (favorite talks in general, actually) goes over this vulnerability.

Generally, I think browsers handle this as well as they can. DNS rebinding preys on a feature that's useful for being able to fall back on redundant servers if a primary fails, which is important.

IIRC from the talk, browsers have implemented policies that prevent rebinding to non-public IP ranges. The talk below touches on how that's not quite sufficient for routers, because they also happen to have a valid public IP, but often don't properly filter or NAT packets from the LAN NIC, leaving them vulnerable because the packets still come from a private IP, so the source-IP-based security lets them through.

[1] https://www.youtube.com/watch?v=FV7SQd-3Ytk
10% is awful. ICOs desperately need sensible oversight and regulation.
https://foldingcoin.net
Travel Photography – Free Downloads
its pretty routine and accepted policy.

you should see the conditions San Francisco city attaches to its contracts.
Such high feeeeeeeessssssssss
Nothing to see here ... move along please. Any industry, anywhere, anytime, that has even the slightest threat to their existence from bad news coming from scientific data being published to the mainstream will always have industry players and their respective lobbying groups making various attempts to block, downplay, twist, blur, and other manipulate the storyline. Why? It's simple... if sugar were determined to be a "sinful ingredient" to the health of the masses, the sugar industry would be ruined.

We've seen it over and over again in so many industries (not the least of which is tobacco) that its almost expected and in fact, if you merely attempt to look for these kinds of player actions in any industry, you will absolutely find them.
There is one alternative: https://youtu.be/l2bU_tOREos?t=2m13s
If you have some time to spare and want to learn something new, just try to get postmarketOS on one of them. Here are some loose ends to start with (not only iPod related, Apple in general): [0]
If you get stuck somewhere, the community is happy to help you either in the matrix/irc chat[1] or in GitHub issues[2].

[0]: https://wiki.postmarketos.org/wiki/Apple_iPod_Touch_1G_(appl...

[1]: https://wiki.postmarketos.org/wiki/Matrix_and_IRC

[2]: https://github.com/postmarketOS/pmbootstrap/issues
I suspect it's only a matter of time before there is a bunch of people that go in and empty the place out. Unfortunately, you can get rid of cashiers but you can never get rid of security.

BTW, if you ever wonder what jobs will survive the coming automation era then look into security. Jobs in security will never go away. They will change but they will never go away.
Edge in particular was missing, I don't think that uses "iexplore.exe".
NN is technically anti-business, if your business happens to be "large nation-wide ISP".
https://curecoin.net/knowledge-base/about-curecoin/what-is-c...
Sure, but I don't think that's what they were talking about. A BB gun or a paintball gun or a can of spraypaint on a stick can also disable a camera.
Moore’s Law will find a way to continue
Yeah, California and New York will implement this ina flash if they can which will force NN in major isps.
This is something I expect them to reach fairly quickly, not necessarily through new content: Netflix has steadily carried less and less content from other companies as long as I've been a subscriber. They carry least-common-denominator content in the back catalog plus a few limited time recent movies to keep people hooked.

What I've realized is most well-regarded, award-winning film cannot be found on Netflix. They will easily reach 50% original content, mostly because they'll just continue dropping everyone else's content over time.

Thankfully, their original content alone is pretty much worth the price.
Similar anecdote here. Everyone living in our house got the shot, with the exception of the newborn infant who was too young to get it. The infant was the only one who got the full-blown flu (very scary, but they are fine now). Everyone else who had any symptoms just got a case of what seemed to be a bad two day cold.

I've heard differing opinions as to whether the shot really helps cases be less severe if you do get it, but I've heard a lot of similar stories recently.
Why not try PWA. I built a marketplace app and used gravity forms and you get camera in the browser. Unless you need device hardware, you can get away with PWA. The web is much larger then app islands with 30% fees. Then the bi-weekly updates. Then you get a message " this developer needs to update their app for iOS (latest version) jesus.
Knowing that cops will arrest on regular traffic stops if it's too cold for a breathalyzer, creating an arrest record and thus creating challenges to employment etc, makes this all the more gruesome to learn about.
$ErrorActionPreference="Stop"

You're welcome.
An Oligopoly, After All This?
Interesting. First time I've heard that someone actually does that - cooks with ancient recipes. Cool.

> fish sauce

Garum?

https://en.wikipedia.org/wiki/Garum

Edit: Okay, saw your other comment here:

https://news.ycombinator.com/item?id=16205619
Note that all those difficulties in the article only apply when you a high-availability setup. While usually appropriate for services with a defined service level, you can get away with single-replica DBs for a lot of things.

At work, we run OpenStack on Kubernetes with Postgres for persistence, and it's entirely okay if Postgres fails for, say, an hour, because we don't have a defined SLA on the OpenStack API. The important thing is that the customer payloads (VMs, SDN assets, LBs) keep working when OpenStack is down, which they do.
My father spoke German and French, but it was the ability to receive French FM broadcasts on our southern coastal hilltop in England, which I think is the difference between my ability to understand the spoken languages. I was later, from high school on, exposed to far more German and Russian than French. As anecdotal as my experience is, possibly having Russian radio stations playing around the house might be helpful.
When you do a Fourier transform of sound, you'd usually apply a windowing function: multiply the sound with a function that descends continuously to zero at the boundary of the "window", so that there is no discontinuity there. That function is chosen in such a way that it should affect frequencies of interest in the transform's output only mildly.
Ask HN: How to conduct my first interview?
My company asked me to do a coding interview. This would be a first. I'm fairly junior myself.

What pieces of advice would you give a 1st timer?
If Google were making you upload the patches to fix some huge problem in every Chromebook, you wouldn't get the beginners treatment. If it was some universal bug fix or optimization I doubt the Google connection would matter.
It could also be an attempt at actually integrating with a regular web browser on regular web pages. Perhaps for things like launching a locally installed game to join a multiplayer match by clicking a start button on a match-making website, by triggering the local http server with a cors request? I know that at least spotify has something similar for interfacing with your locally installed desktop client on a regular web page.
The correct response to showing one of these cards should be "Oh, so you know the law and you still broke it? Maximum fine for you."
From the source itself,

"And, of course, Andy and Bjarne Stroustrup are responsible for putting STL into the standard."

"The support of Bjarne Stroustrup was crucial. Bjarne really wanted STL in the standard and if Bjarne wants something, he gets it. He is as stubborn as a mule. He even forced me to make changes in STL that I would never make for anybody else - I am also stubborn, but he is the most single minded person I know. He gets things done. It took him a while to understand what STL was all about, but when he did, he was prepared to push it through. He also contributed to STL by standing up for the view that more than one way of programming was valid - against no end of flak and hype for more than a decade, and pursuing a combination of flexibility, efficiency, overloading, and type-safety in templates that made STL possible. I would like to state quite clearly that Bjarne is the preeminent language designer of my generation."

http://www.stlport.org/resources/StepanovUSA.html
Former Uber, Google exec announces run for office
Thanks for that. That Wikipedia entry uncovered these additional discontinued products

Microsoft Forefront Threat Management Gateway
Microsoft Forefront Unified Access Gateway
Microsoft Forefront Identity Manager
Microsoft Proxy Server
Windows Essential Business Server
Microsoft Robotics Developer Studio
Microsoft BackOffice Server
Content Management Server
Microsoft SNA Server
Microsoft Site Server
Microsoft Merchant Server
Microsoft Groove Server
System Center Capacity Planner
Microsoft Commerce Server
Microsoft SharePoint Workspace
Microsoft InfoPath
Microsoft Office Document Imaging
Microsoft Office Document Scanning
Microsoft PhotoDraw 2000
Microsoft Photo Editor
Microsoft Schedule Plus
Microsoft Virtual PC
Microsoft Vizact 2000
Microsoft Data Analyzer 2002
Microsoft Ofice Assistant
Microsoft SharePoint Designer
Microsoft Office InterConnect
Microsoft Office Picture Manager
Microsoft Entourage
Microsoft Office Forms Server:
Microsoft Office Project Portfolio Server
Microsoft Office PerformancePoint Server
Office Live Small Business
Office Live Workspace
Office Live Meeting
That may be true for many people, but what about young children and the elderly?
Maybe if the address in the URL bar doesn't resolve to a local address, block access to local addresses.

Might break some enterprise stuff, but better safe than sorry, put an opt out of this behind a flag.
Why are some languages confused for others?
1) I personally need a certain amount of focus to be really productive. Pure focus on one thing with enough "cadence" brings me in the zone.
2) Employers often have the idea as well. Although part-time jobs grow year-over-year, the ones getting promotions are still usually the employees dedicated 40 fulltime. I don't know if this is just a matter of perspective or based on tangible results (e.g. proven better productivity).
3) The "10 000 hour rule"

I should emphasize that the 40 hours should be spend well and the employee should use enough time for relaxation, rest and leasure. 40 hours for e.g. a head of family in busy waters may quickly be detrimental.
> ... not sure developers make money on iOS ... it’s now larger companies

So, just because the company is large, doesn’t mean an AI is writing the software. The large company developers make money on iOS, as a steady paycheck instead of a fingernail biter.

Given comparison between film and iOS industries, it’s a little like working for Peter Jackson and Weta Digital instead of hoping to pull of the next Alive in Joburg at home.
Also worth noting:

Please do NOT come back to work just because taking medication made you feel better. Too many people load up on daytime meds and show up to work exposing their co-workers needlessly to their illness. Don't be that guy, seriously.
Wouldn't that hasten and worsen the inevitable pop?