skysight-inc/HackerNews huggingface dataset:
Cow shit fertilises the pasture and feeds other creatures/life in the ecosystem ultimately taking its part in creating an environment for the animal. Moreover the seeds the animal disperses will be lost if you abscond with their excretions.

There's a very real way in which a cow, say, feedsback in to the environment. It's less direct than stealing bee vomit, but still a part of the feeding cycle.

The reason I compared them though was primarily that collecting animal faeces of large mammals would probably be an overall negative (cf. bat guano) unless you artificially confined the beasts?

It seemed to me that the necessary interference in the animals natural cycles would be akin to good beekeeping (where an apiarist can prevent hive death, increase food availability, etc.).
Why not? Just go by traffic. Youtube default to VP9 on Chrome, so yes it is vastly used. Netflix can't even display 4K on the desktop properly.

If you watch in the living room (on TV) you are not watching it on the iOS device. By that I mean the screen of the iOS device. Being in the living room, watching on TV, means you have no battery issue. Watching on your device means literally that, watching it on your device with your devices' screen. Not some casting or streaming to other displays.
It’s only vastly used if you mean “YouTube transcodes all of their H.264 into VP8 so you can hear your CPU fan”. It’s exceedingly rare to see a webm file without a corresponding MP4 file.
I could be mistaken, but it sounds like they messaged an admin, and did not publicly disclose it. (Other than messaging someone else about it?)

Honestly, it sounds like the person here isn't highly familiar with vulnerabilities or disclosure. They probably saw the ID and thought "huh I wonder if I can change that" and then tried two different numbers there. As you state, they should have stopped after one, but they probably didn't expect it to even work the first time.
From the article “There is no good epidemiologic evidence that North American wilderness waters are inherently unsafe for consumption,...”

Right - and there isn't any evidence that wilderness waters are 100% safe either. I don't gamble in Vegas and I don't gamble with what I drink. Water can look fine, but is there a dead deer just upstream? No thanks.

Filtering is cheap and easy, a great insurance policy.
I hiked over 600 miles of the Appalachian Trail last year, and just about everyone filtered their water. Bacteria and protozoa[1] in the water can make you very ill, and even cause longer term health problems if you’re unlucky.

Filtering water in the backcountry is extremely easy with products like the Sawyer Mini ($25), which you just screw to the top of a standard water bottle and drink through. It’s stupid to take the risk when the precautions are so easy and so cheap. And it’s unbelievable that people in civilization, with abundant access to clean water, would actually pay a premium for dirty water.

Yes, primitive people drank water straight from streams. They built up resistance to a lot of the pathogens, but they also had lots of parasites and diseases, and didn’t regularly live into their 80s, so I’m not sure why you’d model your food and water safety on theirs.

[1] Viruses are a problem in much of the world too. Thankfully, streams in the US don’t generally have viruses in them, and the most popular filters for hikers don’t filter out all viruses. But for the extra careful, chlorine dioxide drops and some pump filters do.
How easy is it to take code written for an FPGA and transfer it to run on an ASIC (e.g. code written in Verilog). Are they so different it would need to be rewritten from scratch, or could it be done with the equivalent of a a recompile? Do people often use FPGAs as a stepping stone to a custom ASIC design? Would learning how to program FPGAs be of any use when it comes to designing ASICs?

I'm interested in getting into FPGAs, but I can't help but worry they are a bit of a dead end as any sufficiently popular use case will eventually be replaced by an ASIC.
TL;DR comments in this thread: People use their own anecdotes as proof that 1) PCs don’t suffer the same decline, 2) Macs don’t actually decline that badly

YMMV
Well. It's perhaps a fitting remnant of our species as we destroy our planet's chances of supporting us? Perhaps a 20' high Starbucks disposable cup would have been more fitting?

But you know what? I think, and hope, that the more humanity ventures back into space the more we may start to give a shit about this planet. Every interview with astronauts I've ever seen has something about their realisation of the fragility of life on Earth. So, I believe, it was forgivable.

The dual touchdown was a thing of beauty.

Now, where's our moonbase?
You're not the target demo.
The gateway is a proof of concept for the "Web Thing API" https://iot.mozilla.org/wot/ that will let you chat with all the things in your home. It is an open alternative to the closed HomeKit and Android Home ecosystems.
Yeah sorry, I wasn't really objecting to the parent comment. My sister used an iPad from 2007 until earlier this year, when she upgraded to an iPad from 2016.
From my pithy mentor: "There are no randomized controlled trials demonstrating the efficacy of parachutes." Similar logic here.
I'm not sure what the original commenter meant; however TLS is useful only when talking with your own server. What about other connections? NTP, DNS etc are all unencrypted (read: unsigned). Google "DNS client CVE" for instance. Or what about SSH? It may not be accessible from the Internet, but still exploitable from an infected host in the LAN. Someone has to keep all that software updated.
In those conditions, I would never connect a RaspberryPI or similar to my door / gate / car / ...
Again, who benefits from this? You’re talking about duplicating a ton of work simply to have approximately the same quality.

You can contrast this with AV1 which is also a lot of work but which delivers better quality at smaller sizes. It’s not surprising that they picked that option instead.
>I don't even know what it's about, and I don't care

That's obvious.
Driving a "Green car" vs cycling
I think i heard this on "Survivorman", but also from many thru-hiker friends.

Dying of dehydration is a whole lot faster than giardiasis. If you're in a survival situation and are reasonably sure of a rescue in less than 14 days, go ahead and drink that water! Otherwise, don't.
Another anecdote:

When I was in scouts, two separate groups of us went to Philmont, on different trails. Both crews had a variety of purification methods but ended up using a specific model of filter the most because it filtered really quickly and didn't taste off. Halfway through the trip one crew became seriously ill. That was when we realized that the 'fast' filters were fast because they were assembled incorrectly and weren't filtering at all.

So yeah, backcountry streams can be totally fine. If you want to play the parasite lottery, be my guest, but know that it is a lottery.
I find it fascinating that SpaceX manages to pull off one of the most amazing things in the history of humanity and the top comment thread here on HN somehow manages to get bogged down in discussing race, gender and sexual orientation as it relates to the "hosts" of the live stream. These are important issues to be sure, but the self appointed thought police of generation "I'm offended" who feel the need to instruct everyone on how they should behave, write and think are beginning to get on my tits. I clicked on here hoping to feel and read everyone buzzing about this great news and instead I just switch off from HN and think "meh". Disclaimer: I'm a privileged middle aged white guy.

Edit: grammar and rephrasing to allow for the inclusion of the phrase "beginning to get on my tits".
If the ice forms under high pressure would the crystalline structure remain intact under normal pressure?
> Most code, #1 is irrelevant. Most code isn't in the inner loop of performance-limiting execution.

Just because your code isn't in a tight loop doesn't mean you shouldn't think about performance. If you waste CPU resources then the rest of the system that is in a tight loop will have more switches to do. If you waste memory then the code in the tight loop will have memory evicted from it's precious memory cache. Just because your process is not CPU bound does not mean you aren't having an impact on overall system performance.

If you're running your own servers do whatever you want, but if you're making consumer software then don't pretend you're software is the only thing running.
The person reporting the bug is not a professional bug hunter, he is a user.

About 1) - an incognito session wouldn't have had any impact on the situation. It's still the same IP the request comes form. Or a proxy? He's a user, not a security expert.

2) He did report it to Sentinel directly over non-open communication channels: https://www.reddit.com/user/notarealhacker/comments/7vpfdl/i...
This is also clear from the text, I don't know where you got that from.

3) He didn't dispute that 21 people were affected. He disputed the number of 2000, because he tried numbers over 6000 - and since the id is apparently just an increment (which in itself is already a problem) the number is likely to be false.

From my POV he didn't do anything wrong. He noticed a possible bug, verified it and notified the company.
Quite on the contrary - if he _had_ used a proxy and the authorities would've started an investigation to follow all requests it would've looked a lot worse for him.
For general SQL injection attacks I can kinda buy the idea "you can't break past something that doesn't exist", but in this case specifically the SQL injection was used to break a login form. The login form definitely both existed and is something I'd consider security measure.

A contrived analogy, but it feels like acquitting a burglar because instead of picking the lock he just smashed the door in.
The risk is somewhat correlated with elevation, since higher elevation water is less likely to have been contaminated by humans or animals. But it is no guarantee and not something you should rely on.

Filtering water is extremely easy with products like the Sawyer Mini ($25), which you just screw to the top of a standard water bottle and drink through. It’s stupid to take the risk when the precautions are so easy and so cheap.

It is unfathomably irresponsible to let other people’s children, in your care, drink straight from the stream.
Can't you make a shortcut for Fidelity on the "desktop"?
Snapchat's new update makes this not true. Your friends tab is ranked by an algorithm, and is no longer in reserve chronological order.
I did not see a discussion about science based on non-repeatable observations.

Are the neutrino observations of SN 1987A not science because it's not repeatable?

"To the surprise of everyone involved, they were able to replicate only six of those papers—approximately 11 percent."

Oddly, that publication is not repeatable. More specifically, I think they described only 3 of the 53 experiments they tried to replicate.

Under the author's own definition, we should not accept the results of that paper.
In the past few years we've gone from not even having a reusable launch vehicle to synchronized spaceships as performance art. (Oh and sending a car to Mars for fun.) What a time to be alive.
So true. We switched to MQTT (abandoning websockets and other protocols) to save (a lot of) network bandwidth.
I think the issue is that it's hard to know which sources are actually safe and part of the reason people are so serious about disinfecting water is that it's generally just so easy
I must be not visionary enough. When online shopping, I have rarely wished to see more of a product but rather missed more tactile engagements: are these clothes soft, thin or thick? Do these shoes fit my unusual shape feet? And so forth.
I don’t mean to ignore your observation - it is valid. Bsb is a build system that works with a specific form of packages. What you suggest could work too. The only (small?) challenge is that people have bsb JS projects, and they aren’t configured for jbuilder/Dune etc. Because of JavaScript’s immense popularity, the largest number of people will start with whatever build tools integrate well with the JavaScript ecosystem and work from there. This plays out quite predictably. Just as an example, the most important thing to web developers is that each Reason input file becomes a commonJS (or es6) module. That allows integrating your Reason React app with existing web apps easily.
So since people start with whatever tools integrate well with the JS ecosystem, they then reach for the easiest tool available to adopt native compilation.
Signals are definitely a pain point on Unix - they're decently easy to implement on the OS side, but you just have to think there was a better way. As one of the commenters on the article pointed out, at this point the best/easiest way to work with them is to just process them on a separate thread and then turn them into events you can handle in your main logic (via the 'self-pipe-trick' or similar ideas). I've done this before and it's not too bad.

That said, `pselect`, `ppoll`, and others do make it doable. Just setup your handlers and mask all your signals. Unmask them when calling `ppoll` or `pselect`, and use non-blocking fd's for everything so none of your other calls like `recv` can block. In general this is one of the recommend ways to do things anyway even without considering handling signals.

The author also has a bit of a misunderstanding of how to use `pselect` and similar calls in the small addendum - it's not necessary for libraries like ZeroMQ to expose a `precv` call as long as they expose access to the underlying fd (or fd's) that makeup the connection. The whole idea is that if `pselect` or similar returns that data is ready in that particular `fd`, the call to `recv` should not block and thus you don't have a problem. This is obviously true when using non-blocking fd's (It won't block ever, even without using `pselect` first), it's is less true when not using them (Through it is still better then nothing. The calls will only block if you request more data then is available in the buffer).
It's not quite our generation's "one small step for Man" moment (I'm saving that for when we actually land a human on Mars) but it's damn close.
> Netflix on an iPhone? Probably not. At least not holding it in your hand for 2 hours.

Do you have data to support this or are you just assuming that your personal tastes are universal? I see quite a few people watching videos on phones or tablets – ever see parents loading up their kid’s iPad before a flight?
What I didn't put in my comment above was that a sufficiently competent engineer might be considered negligent if they failed to allow for say people typing any old rubbish in.

Have you ever jumped up and down on a bridge or other structure? You probably weren't deliberately testing its strength, just idly messing around. You certainly didn't want it to fail (but what if it did?) I'll put money on it that you have done this at some point in your life because we all have at some point.

Were you a hacker? Are you a criminal? What makes adding 'or 1=1' a hack/crack and mucking about? and at what point is it criminal to not be able to filter out crap on input?
> If you upgraded that decade-old computer to a secure OS then it will almost certainly run terribly.

If I chose to put Windows 10 on my 9 year old desktop, it'd run better than Windows 10 on the laptop I bought a year ago as a netbook-style machine. Anything that can run Windows 7 well can run Windows 10 well, and machines that would be well-suited to Windows 7 weren't uncommon a decade ago.

But that's all beside the point. The point is that having a single source for software to run on a piece of hardware, and not having control over access to your software, puts a hard upper limit on how long a device will be useful. It's more practical to do something useful on the 18 year old Windows 98 machine I've got at home than my iPod Touch that's half that age. My Android tablet is just a couple of years younger; it's still a useful device because I can keep around backups of apks, download software from project pages, or add one of several app stores that still provide working software.
I still hold to my plasma TV like an obsessive fan, as a cinephile I find its color rendering still miles ahead compared to any modern smart-TVs.
> Exactly right. If you're plane crashed in the Sierras and your trying to survive until rescue can arrive, I can see you risking it (after all a lack of water will definitely kill you, water with Giadarsis in it will just make you sick). But If you are hiking/camping and you have the opportunity to bring something that can filter out that stuff, you will avoid some seriously nasty bad times.

It's a bit of a trade-off. If you're off camping for a long weekend and your purification system fails but you're in an area with a body of fast moving water, then you might be better off drinking from that source and hoping for the best because symptoms won't hit you until you're back in civilization.

If you're stranded, and you're uncertain when rescue is going to come, then catching a parasite from a dirty water source can drastically reduce your chances of surviving until you're found.
Indian Govt sends notices to 10M cryptocurrency investors
Apple does support hardware decoding, just not of webm.
I'd say that's a very accurate description of an inevitable future, assuming we don't extinct ourselves or wipe our our technology progress by nearly extincting ourselves.

One way or the other, for example, automated cars are coming. We can say "but trolleycar problem!" Sure, we need to worry about that! But, no matter how hard we gripe about all the problems and scary things about the new tech, it is coming. It will happen, because there is profit to be had there and it is more efficient than having humans drive and a million other reasons that more than overcome the obstacles.

So, an IoT lightswitch may not be as inevitable as self-driving cars, but IoT valve meters sure as heck are, or IoT lightswitches for an oil rig, or IoT smoke detectors... in fact, some of these might become legally required, once they get robust enough! (similar arguments have been made that it may become illegal to drive a non-autonomous car without lots of training/licensing)

So, people like you and me, that prefer zippos and straight razors and automatic watches over quartz watches and fountain pens and manual-transmission cars, we'll still be able to have our mechanical switches, we just won't live in a world where everyone wants those things.
Would UV light help mitigate that small spot's infectiousness?

After reading this thread, I'm writing to MSR about whether treating their Guardian filter with my ozone generator in a small box to 1 ppm for half an hour after I get back would void their support. I don't touch it now, but I'd rather kill the bugs than leaving them to desiccate in storage.
Hey, thought police, there's just one small problem: your reply is boring.

Unless there's a crime that's been committed, that is.

Then, it's safe to say the culprit should be dragged through the street and hung by the shoelaces of his converse sneakers.

Otherwise, your bias toward boring us to death with your tedious puritanism is like Chinese water torture; although I could have just as easily have said, Swedish meatball torture, or English bangers and mash torture if that were to please you better.

We'll all have to check with you before we post to make sure, Big Brother.
> That's a killer UI, and I'm happy to admit it's incredibly good for what I've seen/used of Qt apps over the years... but it's not the norm.

It's the norm for Qt apps since 2011 - 2012 when qml was introduced (of course, older apps use the older tech - and honestly, sometimes it makes more sense : at least all the colors, fonts, etc... will respect your desktop theme unlike "modern" toolkits). Here's how some QML code looks: https://github.com/jcelerier/TodoMVC-QML/blob/master/Main.qm... ; as you can see, it's far from bloated (mostly due to the language being based on reactive semantics).

For instance a consequent part of KDE has been rewritten in QML and more is underway with Kirigami : https://dot.kde.org/2017/01/12/kde-releases-kirigami-ui-20
tl;dr: "the biggest contributor to the Uber gender gap, accounting for almost half the difference, is the higher average speed for male drivers ... Men in Chicago, the study found, drove 19.5 mph, compared to 18.8 mph for women."
You mean “me”. This is not a mainstream issue which normal people care about: they use a browser or app, click play, and it works.

Very few people care about what format that uses.
Meanwhile, my longtime hiking partner (of over 20 years now) thru-hiked a big chunk of the PCT and ended his trip with giardia, which caused him significant digestive issues for quite a while afterward (over a year altogether).

And I've occasionally taken unfiltered freshwater from streams over the years but have generally been picky about where/when/why and have accepted each time that I was foolishly rolling the dice.

And and, a popular recreational "lake" in the area was recently found to have a major problem with e. coli after it hospitalized a young child with complete renal failure.

Cattle are grazed all over the backcountry, people poop out there (and it lasts a -lot- longer in the wilderness than you'd guess, especially when people use TP and leave it out for the squirrels to gather for nesting material), and people do the same on snow which melts into streams at high elevation.

If there's a 1 in 20 chance of picking up a parasite from drinking unfiltered water in a backcountry area (minimum 20 miles to civilization), then the average person will be lucky enough to get away with it their entire life and then tell other people, "but I did it and I'm fine!"
How is SSH exploited from an infected host within the LAN?
The main advantage of building on the OCaml language is that it is possible to totally encapsulate an FFI binding in a way that doesn’t virally infect the code path that calls into it. In pure languages this may not be the case. OCaml is not a pure language and so neither is Reason.
Their developers apparently haven't gone through any kind of WebDev or UI/UX 101:
https://i.imgur.com/SssYkif.png
> Most probably their Java code was FUBAR.

And so what? If a language's natural form leads to FUBAR code, what else is to blame?
The sprinklers in the hollywood studio where they are filming this went off.
It depends on the resolution. YouTube stopped offering 4K H.264 encodes about a year ago:

http://www.streamingmedia.com/Articles/News/Online-Video-New...

Apple might never add VP9 support but 4K video from YouTube will work again once YouTube starts encoding to AV1 and Apple adds AV1 support.
"We do have access to the legal system which is freely available."

It is readily available but sadly we have to disagree on what "freely" really means.
So, I just searched for "security" in that page you linked to and... not a single mention.

As I see it the problem with IoT isn't features, it's the absolutely abysmal security record. I mean, it's abysmal in home ADSL routers, what are expecting of companies just churning out one-off IoT things?

Maybe they should start out by mandating an update policy[1]? ... but then of course nobody would join, so what to do...?

[1] I'm not talking about a concrete schedule, just a documented human-readable policy of what their usual schedule would be (if any), and how severity levels work (for them), etc.

-------------------------------------

EDIT: HN won't let me post again "too soon", so here's my reply to "st3fan":

> Ok, what does this actually mandate and how many actual devices adhere to this standard? What is the motivation for any particular device manufacturer to adhere to this "standard"? (etc. I'm sure you can come up with your own questions.) Also, shouldn't this other standard at least be mentioned in the IoT standard and match the key word "security"? This whole IoT thing is an omnishambles.