skysight-inc/HackerNews huggingface dataset:
On Reddit ret2got quoted the EF on why they don't consider this a geth vulnerability:

DNS rebinding to bypass SOP is an old and known issue. There is nothing
particular about geth being vulnerable to this.
* The RPC api is not the primary protection against theft of ether, users are
encouraged to have a long and difficult password, presumably difficult to
bruteforce.
* Although I cannot find the ticket right now, we're already considering
being even more strict on Origin, so that geth would not accept
POST-requests from non-whitelisted Origin:s (by default).

https://www.reddit.com/r/netsec/comments/7s7cz9/dns_rebindin...

I'm not sure about the first bullet point. You have to unlock your accounts before calling any balance-changing methods but I don't know if there is a default time after which the accounts get locked again.

Even if there is, isn't there a time period while your accounts would be vulnerable?

As this seems easily mitigated by a simple security token, I don't see why they shouldn't implement this.
https://agfundernews.com/
People can do this with regular elevators, too.

Imagine you’re in a building with 22 floors, and your event with a few hundred people just ended on the 18th floor. The elevator has three bays with cars that only carry about 20 people at a time.

While you’re in the crowd waiting to go down, you hear elevator cars race to the top of the building, then when they come back down, the doors open and you’re met by a car that is already packed with people. A lot of the passengers are avoiding making eye contact, and wait a second, some of them look like people you just saw leaving by the stairs in the fire escape!

Apparently, the elevator algorithm is trying to be efficient by starting at the highest floor with a request. Do you wait where you are, take the fire escape up one floor, two floors, or just walk down 18 floors moderately disgusted with the situation?
Seems obvious to me: you have a square with four sides of length n, and when you fold the paper, the four-sided square with a circumference of 4n becomes a slit of length 2n.
Isn't it a reasonable assumption that you won't run untrusted code on your computer without sandboxing it properly?
I tried this a few years back and really wanted it to work. Ended up ditching it though. My foot is too slow.
> In my experience, real-world concurrency issues (that you are talking about) are always hard to find in manual/automated testing

I agree, and I don't have a good, generic, strategy for that. I didn't give the best example.
PIPECAM: THE LOW-COST UNDERWATER CAMERA
Yes, I didn't mention fission for 2 reasons #1 anyone who looks into nuclear already knows this and #2 anyone else is usually just confused by it.

I don't spend every day on HN so I just missed that story and dont have time to look into it now, but almost every article I've ever read till now had ways the energy was displaced and not actually reduced or at a plateau. Also why would you not want more energy? You can do more things, better, faster, etc. The only reason not to want energy is because of externalities, which is reasonable but needs to be weighed in the context of what your giving up i.e. convience, efficiency, productivity, etc.
Apple reveals redesigned MFi logos
I think emacs needs it more than vim. :)
Do you need to double clutch before shifting a row?
The shape of technology is more important than how much room it takes up. There's a reason why we all have rectangular phones and not round, triangle or square ones!

Your argument that "the technology [must not] take up more room than needed" is simply false. I can point to plenty of Apple products where the technology was fit into a bigger box than needed so that the box didn't look misshapen.
It sounds like the "out-of-the-box" expectations created by the admin app are the problem. I mean, hey, Django makes exposing data models in the admin interface trivial! You can certainly create more complicated forms for relational data, but in those cases you can't rely on Django's default functionality to do as much for you. I've written or worked on more than a few serious apps including those with more complex user facing data and Django's worked beautifully. Happy to answer any specific questions you might have.
I'm still working on generating the MATH eBook, but the 3-in-1 book (MATH+MECH+CALC) is available here: https://gumroad.com/l/noBSmath Chapter 1 of the 3-in-1 book is essentially the same as the No Bullshit guide to Mathematics.

You can see a preview here: https://minireference.com/static/excerpts/noBSguide_v5_previ...
I recently discovered downloading library books onto phones, have you looked into that?

I live in a city and don’t have enough cash/room for hundreds of books in my apartment and don’t usually have time to reach a library branch. But this way I get/return books instantly and I don’t have to lug anything around on the subway. I read ebooks faster for some reason, too. No way to drop the book in a puddle or pour coffee on it. And finishing a library book on my phone is one of the rare times I feel like I actually used my phone to get something done.

I love tech when it cuts down on the number of objects I need to own or schlep.
AI Curated daily bullish news for Cryptocurrency market
One thing I miss from Italy are real shutters:

https://blog.therealitaly.com/2007/08/09/window-technology/
If this was a scientific experiment, then what you consider 'very reasonable explanation' I would call a lot of hand-waiving to explain away the difference between the theory and the experimental outcome.

He gets away with it because he doesn't need to convince his fellow scientists, only a bunch of pupils. But it is nevertheless quite unscientific.
There's paternosters in Babylon Berlin, an awesome show BTW
Since you already use HAProxy you should get that almost for free. Your app would talk to the databased by communicating through HAProxy, which would direct traffic to the single-writer; HAProxy's health tests would detect who the single-writer is, and would adapt in the event of failover.
If you're in it to pump up the value of your coin holdings and then dump them, this is absolutely true.
I think he's talking about literal dollar priced masks or giveaway sleep masks which are usually just a tiny piece of fabric around something more solid, which attaches to you by means of an elastic band; the band however resists falling/slipping by pushing on your eyeballs.

It sounds like your mask is a bit better, and probably more expensive that the parent means. I've gotten such cheap masks as giveaways and the few I tried were indeed unbearable for sleeping as it felt like someone was crushing my face.
As someone without a Chemistry background I am just really surprised that they managed to write an entire article about other studies, without ever referencing these studies?

Also just about anything is a "chemical", and there is a plethora of cleaning products, what agent exactly in cleaning products do they speculate causes this damage?
Stuttgart's Rathaus has two. Uni Stuttgart had one that I know of, but last I heard it had been stopped.

I always make a point to go to the Rathaus and ride them when I visit.

The floors fold up where the lift's floor meets the building's floor to prevent crushing your foot. It also has a switch which immediately stops the paternoster and sounds an alarm. I had not realized that and stopped the system while showing it to my son.
Not writing JS is not the only purpose:

---

Ferro uses an object oriented programming style. You instantiate an object, that object in turn instantiates more child objects and add these as instance variables to itself. And so on, producing a hierarchy of object instances. This is called the Master Object Model (MOM).

When an object is instanciated in the MOM, Ferro will add an element to the webbrowsers Document Object Model (DOM). The MOM keeps a reference to every DOM element. This erradicates the need for element lookups (jquery $ searches). If you need an element you know where to find it in the MOM. Getter methods are automatically added by Ferro for easy access to instance variables.

- Some advantages

Easy naming conventions: CSS classnames match Ruby classnames

Easy naming conventions: every DOM element has same ID as the corresponding Ruby object. Useful when attaching javascript libraries to elements

- What we DON'T need when using Ferro

HTML

Javascript DOM finders (like jQuery, Zepto, ...)

Javascript libraries/frameworks that extend html (like Ember, Angular, JSX, Vue, Stimulus)

Shadow DOM Javascript frameworks (like React)

- File size

Total size (Html+JS+CSS+AJAX) for a full application should be similar to a traditional application. All javascript for the linked website, including Opal, minified and gzipped is 89Kb. Compare that to jQuery: 73Kb, Ember: 111Kb, Angular: 111Kb, React: 35Kb.

---

AND YES, writing code in Ruby rather than Javascript is seen as an improvement by many. Or must we necessarily wait for WebAssembly and C# ported to the web before we can enjoy a better programming language without feeling ashamed for avoiding JS?
Sounds more like they are admitting its a vulnerability but downplaying its impact
> "Retinol A, rapidly increase skin cell turnover but I've never heard of a mutation risk associated with it."

Interesting, do you have a source you like for this? This would indicate major problems with that model.
It's totally a thing: https://www.emacswiki.org/emacs/FootSwitches
It’s literally two swipes or less to get to Spotlight from anywhere in iOS.

Also, it’s only two taps to reply to an email in the Mail app. What a chore!
Cryptocurrency Mining from Home by Using Minergate
Even though I would probably never go though the effort of it, I am impressed and love the idea of it. One philosophy that I hear a lot of VIM users prescribing to is don't make too many custom changes to the bash file that you can't use someone else's computer. I wonder if you got used to this setup if you would find yourself pounding the floor on someone else's computer. I drove stick for years and still occasionally find myself with phantom clutch syndrome.
It is not, check my answer to @krapp.
> The 1Password authors have been pretty open about how distributed their team is, and how no one single government would be able to convince them to do those kinds of things — the other developers would find out and then the game would be over.

Your options are:

A. Go to jail for contempt of court, which is a crime for which you receive no due process or appeals.

B. Give the control over to the government. Yes, your coworkers will find out about it, but you can always get another job.

Are you actually confident that all of the 1Password devs would choose A? Only one of them has to choose B.

I admire Ladar Levison for shutting down Lavabit rather than running a compromised business, because his bravery is the exception, not the rule. There are far more companies out there who have simply handed over the keys to the government when placed under minor duress, and I'm not sure on what basis you're assuming 1Password is going to be one of the exceptions.

> They are also open about the crypto algorithms they use.

Look, I'm sure the 1Password guys are nice, upstanding people, but implementing crypto correctly is hard, really hard. Sure, they are probably telling the truth about what algorithms they use. But did they implement them correctly? Would they tell you if they hadn't, given it would hurt their business?

> As for KeePass or KeePassX, which version do you use? Which of the dozens and dozens of different implementations do you use? Which database format do they support? Do you build the binaries yourself with trusted compilers? Where do you get those trusted compilers and how can you be sure that they haven’t been compromised?

Obviously security is relative, and you can point out ways in which my process is insecure. Indeed, you missed some (my computer could have a virus that keylogs my passwords--my password DB is on two drives which I connect via USB). But literally all of these apply to 1Password as well, so I don't think any of this proves that KeePass is just as insecure as 1Password.

And very notably, these are all security tradeoffs. I get something for every decrease in security I've accepted. The only thing you get for storing your passwords on someone else's computer is that they store them for you and let you access them from multiple devices, which is not something I want or need. I'm not sure you get anything at all in exchange for your password manager being closed-source--that's entirely for 1Password's benefit, not yours.
Clearly what is needed is not a foot switch, but a true clutch a la piano/sewing pedal.

The farther down you press, the bigger the text size.

Great for presentations on stage too.
In case a future reader stumbles across this thread.. today I read someone else's description of exactly this. From https://www.kapwing.com/blog/unexpected-challenges-of-making... (https://news.ycombinator.com/item?id=16542603):

> 8. Customers are bad at telling you how much they would pay: Before we added the paywall, we asked a sample of users if they’d be willing to pay a fee to remove a watermark. The majority said they wouldn’t be. But when we actually added the paywall, several people who said they wouldn’t pay did. After we launched, some people have told us our product is cheap and plenty have said it’s too expensive. Takeaway: The easiest way to tell if people will pay is to make them an offer and see if they cash in.
Ask HN: Are there any studies about engineering productivity and office layout?
My office is in the midst of a complete redesign.

An open design is a foregone conclusion, but I'm concerned about where they're placing the different teams. Engineering being placed in a high traffic central location, with sales off in a nook.

My theory is that engineering needs to be isolated as much as possible so as to reduce distraction.

Are there any studies/research/blogs/papers available on the topic of office layout that either support, or contradict me? I'd like to present my opinion to the people responsible for these decisions in my office, and would like data to back me up if at all possible.
People don't like to hear this, but blockchain tech isn't ready for a general app platform. Bitcoin could easily be extended to have an EVM if it was a good idea, but there are lots of unsolved problems, gotchas, and overheads that make it a poor choice. I don't think that's the perpetual state of things, but I do think that every 'dapp' platform out there today is bad foundation, and largely that's because it's too early to be making general platforms.

The approach that a couple of currencies have taken (including the one I lead) is to make a separate blockchain entirely dedicated to their app. And I think that's a far better choice than anything out there, though it comes with the glaring downside of needing to build and run your own blockchain, which is a very difficult thing to do.

Most of the apps we are seeing today don't make any sense anyway. Very much smacks of the dotcom bubble, where people who suspected that the Internet would change the world were absolutely correct, but then the companies and ideas they put their money behind were missing the mark by miles.

We've got the same issue today. Most successful ICOs are going to fail very hard, due to known impossibilities, known poor uses of the technology, etc. It's just a general fever that has a lot of new entrants in the space innovating in the wrong direction.

It will get better. Dapp platforms will appear that make sense, have good foundations, and are easy to setup and use. But it's not around the corner, it's probably 3-5 years away.
> Your task is to create a lasting representation of the struggle and beauty and plight of the human race.
> Your task is to bring meaningful, sustainable, and relevant hope and quality of life improvement to society.

I'd be curious as to your opinion on the shape of this curve in history. Did we peak at some date in history? Perpetual downward slope? Perpetual upward slope?
A lot of books listed here can be used to scare anyone away from maths. Too dry for starters.

I would say you must start with Rozsa Peter's Playing with Infinity http://a.co/6MMCE5g to quote an Amazon review

> This book is a gem. I read it as a highschool student, and it
played an important role in enticing me to become a
mathematician. Its emphasis is not on practical applications
or on solving funny problems: instead, it is an inspiring
introduction to some of the great
intellectual challenges in the history of mathematics.

Another in a similar vein https://en.wikipedia.org/wiki/One_Two_Three..._Infinity

You can go and study the textbooks after.
CrawlBox – brute-force web directory
Well, everyone's entitled to their opinion of events they didn't witness, I suppose. There's exactly zero chance I put this together later, I know the student's name, he got in trouble for saying it, it's a big part of the reason our teacher freaked out, and there were many witnesses. I find it fairly strange you would decide you know what happened based on your logic alone.
Google claims it’s going to build its proprietary AMP using Web standards
Trump had 2% odds of winning and unlike all other politicians he wasn't funded by US corporations, he was funded by the Russians.

Stick to your script.
Judging from the comments, the majority just read the title, interpreted it wrong, and commented accordingly, so yes, I thought it was necessary to avoid misinformation for other people coming here.
Might be more appropriate to compare with "ssh" and a Tatu Ylönen-effect in the case of ssh. Although openssh certainly became a significant fork.
Learning how to put the video game down is just as big a life lesson as many of the things the actual gameplay teaches you.

I think maybe 4 is a little young to ask a kid not to let their emotions drive them. But by the time they get to ages 6-10, video games can be a valuable tool for teaching time / life balance. Better to figure out at a young age that you have cravings to screw around when you should be doing something else, and you have to resist or bad things will happen.

Better they figure it out as a kid when "Bad things will happen" means "Parents will be mad." It's a lot tougher on them if they have to figure it out when they're a young adult, and "Bad things will happen" means "Flunking college" or "Losing a job."

Too many young adults can't deal with managing free time when they're first out on their own, and there are actual consequences to it at that point in their life.

Source: Was a kid once, was a young adult once, saw a couple other young adults wash out of college because nobody'd ever taught them how to stop playing video games when it starts to interfere with what they need to do.
I found https://artofproblemsolving.com/ to be invaluable and I was at a state you were a few years ago when I found it. The online problems and the workbooks with the PDFs where awesome. I really like it tho it can be cheesy sometimes it really covers all the way through to calc very well there’s online quizzes/work problems as well as ones in the books/PDFs and it comes with a video series
Yeah but I can predict pretty accurately which of my posts will get downvoted and they all have the same thing in common; they challenge the left-leaning groupthink common here.

Some might claim they get downvoted because they are "low quality" to which I'd retort why spend a lot of time crafting a "quality" reply when you know it's going to be suppressed?
I was going to say, what's with the Mac Pro tower?!
Picat: A Logic-Based, Multi-Paradigm, Programming Language
I don't know exactly how inter-provider billing works, but I assume the sender's network pays the receiving network. The sender caused the traffic, why would anyone else pay for it?
The best option I found is Twitter.

Pick any industry, follow it's key leaders and journalists, and follow their followers, and you basically have an RSS feed of that industry's news.
China officially scraps term limits on presidency
Sort of OT, but this reminds me of a question I've not been able to find an answer for on blue light and sleep. (OT because the article says nothing about blue light).

One way light affects sleep is via the intrinsically photosensitive retinal ganglion cells (ipRGCs). These are a third kind of photoreceptor in our retinas, distinct from the more well known rods and cones. These are most sensitive to blue light. They signal the suprachiasmatic nucleus (SCN) in the brain with information about the amount of light they are receiving. The SCN controls circadian rhythms, and uses the changes in light as the day ends as reported by the ipRGCs to do things like to keep things that should be synchronized to the day/night cycle in sync.

Blue light in the evening can mess this up because it makes it look like it is still daylight, as far as far as the SCN can can tell from what it gets from the ipRGCs.

What I have not found anywhere is whether this is based on absolute or relative amount of blue light. Does the SCN look for blue light to fall below a certain fixed threshold, or does it do something like note the peak level of blue light during the day, and then look for the blue light to fall below a certain fraction of that?

The reason this matters is that more and more of our devices that we want to use in the evening supply blue light. We try to counter that by adding features that change the color spectrum in the evening to something with less blue. But that doesn't always work. Computers usually can do it, and often so can tablets and phones. I don't think many TVs have such a setting, though.

If the SCN works with absolute levels, fixing the devices (or wearing blue light filtering glasses) might be the only answer if you aren't able to stop using your devices in the evening.

But if it is based on relative levels, keyed off the peak daytime level...then instead of fixing all the devices it might be possible to address the problem by greatly boosting blue levels in the middle of the day, so that your evening device levels will be far enough down from the peak to not affect anything.
What's the worst case scenario for Uber? Economic destruction of taxi medallions, company gets shut down.
What's the worst case scenario for Swarm? It takes out a satellite, causes economic destruction, and gets the military-industrial complex all mad at you.
Sounds similar in operation to a Shabbat Elevator (https://en.wikipedia.org/wiki/Shabbat_elevator) which visit every floor automatically, but still have traditional doors and don't run on a looped circuit.

The debate over whether such devices violate religious rules is pretty interesting. I have to imagine if there's an omnipotent deity looking upon on his followers from on high, he'd be thinking something like: Very clever, humans, but you know exactly why I made the rule, and it wasn't so you could win on a slight technicality by not pushing any buttons.
Sure, but in my experience most people's idea of sandboxing does not include whitelisting access to specific IPs.
Read a job application from Steve Jobs from 3 years before he cofounded Apple
>Most of the pain was in realizing we didn't have enough UI regression tests. Every 'incident' sparked a new set of tests and over time the incidents stopped happening.

I noticed a process similar to this where bugs from production would appear to 'migrate' from tested scenarios to untested scenarios.

We'd start off with UI tests on a browser, for example, and then the bugs would be clamped down on there but would seem now to crop up in API interactions or untested browsers. Then we started accommodating the tests to handle different browsers and mocking API interactions and the bugs would start cropping up somewhere else.

What was counterintuitive was that, even though code coverage metrics were really quite low, most bugs cropped up in areas of the code with automated test coverage. "Environmental" coverage seemed to matter much, much more.
Css padding (Css tutorial)