skysight-inc/HackerNews huggingface dataset:
Python is handling every bit of IO in your application. You're at the mercy of the implementation to handle it safely.

Sure, but that's true of any programming you ever do in any language.

It's certainly low traffic compared to something like a browser, but there's plenty of bad stuff[1].

Would any of those vulnerabilities be a concern if you're using Python for local scripting and automation needs or the like, though?

Obviously if you're running untrusted code or processing data from external and potentially hostile sources then you may have a different risk assessment, but Python is used for far more than just things like writing the back ends for web apps.

I'm also not sure why you're slinging around IT practice (a month is extraordinary, IMO, but CI testing updates is industry standard around here). What's wrong with good backups?

My point was that many organisations already defer installing updates in far more vulnerable areas, such as their Windows machines, for up to a month (because Microsoft chooses to bundle them into monthly patch releases barring the occasional very serious exception) and then typically larger organisations will test out each update in a lab before deploying it more widely, causing further delay. In the meantime, that's a month or more that every machine on the network is potentially vulnerable to whatever exploits might be out there that the patch will eventually prevent. This is standard practice in Windows-based environments, and yet the risk involved is surely far higher than anyone exploiting the Python executable you've kept installed because you have a decade of useful Python 2 scripts around and don't feel like rewriting them all because someone declared Python 2 was dead.

Likewise, a large organisation getting hit by ransomware can obviously be crippling and the best defence is having back-ups as recent as possible so you can immediately restore any encrypted data. And yet, again, most organisations don't have that sort of infrastructure in place, and again, this is surely a much greater risk than having Python 2 around to run all your old Python 2 scripts.
> Psychopath is a clinical term.

No, it isn't. "Antisocial personality disorder", "dissocial personality disorder", "unspecified personality disorder", etc - these are all clinical terms. Neither psychopathy nor sociopathy are clinical terms. They are colloquial terms used variously for many things, and unfortunately people tend to use them inconsistently.

> And I don't really want to discuss this any further with folks nitpicking my comments.

It's not nitpicking to point out actual inaccuracies. This isn't pedantry, and thus far you've defended your points by citing 1) "true crime" television, 2) an intro to psychology class you took "years ago", and 3) your experience as a parent.
i always see the scammiest ads on instagram (free yeezy'z)
I live in Maryland, and can't imagine getting flak for storing water. I wouldn't call them disasters, but every few years or so we get a major snow-storm that basically traps us in for a few days. I can't imagine the idea of not having supplies to last out such a semi-routine event.
Journey to freedom
Is this another round of investment, from Magna, or has this already been accounted for in the previous raise?
I was thinking of Uruguay etc. rather than the U.S. when I made the statement, but given the political climate in the U.S. over the last couple years, I'm not so sure anymore. At this point I think I'd give better odds to Google breaking up the U.S. than the U.S. breaking up Google.
What I find when doing dev work, being able to vary the temp as needed helps a lot. Like trying to solder the ground pin on a test connector that has was too much thermal relief. (Six layer board with a thermal relief on each layer? Good luckski)

Also a 5X binocular microscope is really good to have. Time goes by. The eyes get weak and the parts get smaller.
Also, Corporate America hosting more of their data with Amazon is not helping.
According to this article, apparently, the other executives hadn't been "informed of the breach" when they sold their stocks.

My bullshit detector is going off the charts.
ICO = IPO without all those pesky regulations and gated access.

Which is both good and bad, of course.
Since the google debacle I've been using RSS Owl on my Macbook pro. It works.

http://www.rssowl.org/
Damn. Was my favorite finances tracking app. What else do people like?
Homeopathy cancer paper withdrawn after arrest of lead
Being completely ignorant of your business and noting that all businesses are different, here are some generic considerations around each of the points you raise.

1) Do customers prepay for a month or pay after services have been rendered? Cancellation terms and prorating? There are accounting nuances to each which of course can matter greatly or not very much depending on the particulars of your set up.

2) Running expenses through a company credit card certainly makes things easier but the same considerations as above can also apply...do you prepay for any services? Have long term service contracts even if you pay monthly?

3) Speaking of taxes, do you have a payroll? That's a whole rabbit hole onto itself.

As with most things, context is everything here. Having a proper set of financials that adhere to generally accepted accounting principles (GAAP) are absolutely needed for any fundraising or M&A activities you might do. At minimum, a more precise set of financials can help with understanding the nitty gritty of the business when it comes to forecasting and at-glance health of the business.
The article avoids all the interesting technical details. In case you re wondering if this is possible and how much of this is an exaggeration, the title of the research article is "The Landscape of DNA and RNA Methylation Before, During, and After Human Space Travel (Twins Study - Mason) - 09.27.17" https://www.nasa.gov/mission_pages/station/research/experime...

Methylation is an usual process that can be used for enabling and disabling genes expression. It's reversible, somewhat permanent and somewhat inheritable. If you like a bad analogy, it's like making a change in the bios setup of your computer or updating the configuration of the wifi router. It's not a firmware update or a hardware modification. More info: https://en.wikipedia.org/wiki/DNA_methylation
https://en.wikipedia.org/wiki/Pilot_1000
Yeah, aliases are great for those of us who have had the exposure necessary to learn about all kinds of flags and features. But I think the default `git log` view could do with a lot of improvement to help out newer git users.
Why can't they just charge for it?
That depends heavily on what your day to day problems are.

If you work in a complex or rapidly evolving domain, I cannot think of a better choice than Lisp. If you are doing a lot of text processing or writing CRUD apps, then you will probably not get much benefit.
I liked the bit where they tried to use the "women in tech are oppressed" narrative to cover her ass:

> Tim Draper, the founding partner of Draper Associates and Draper Fisher Jurvetson, appeared on television on Tuesday—not for the first time—to defend Holmes and Theranos. In an interview on Closing Bell, the world’s most loyal V.C. said Holmes has been “totally attacked,” and that she is “a great example of maybe why the women are so frustrated.”

Same narrative that was invoked in defense of Ellen Pao in her game of thrones with billionaires.

There are people who are fighting for a noble cause, and then there are parasites that use it for their selfish gain.
I highly recommend the Static Analyzer that clang already uses. I use this frequently in the C project I am currently working on, and it's very good at spotting memory leaks and other potential issues. I've had more than one occasion where I've looked at an issue it's reported and said, nah, this is a false positive...oh, no, wait.
Well... Sort of. The 'weakly interacting' means it interacts via gravity and another force no stronger than the Weak force. As per Wikipedia [0]: "There exists no clear definition of a WIMP, but broadly a WIMP is a new elementary particle which interacts via gravity and any other force (or forces), potentially not part of the standard model itself, which is as weak as or weaker than the weak nuclear force, but also non-vanishing in its strength."

[0] https://en.wikipedia.org/wiki/Weakly_interacting_massive_par...
Inside a Classic: The TRS-80 Model 100 (2008)
He was not remorseful. He probably should have acted like he was remorseful if he wanted to get off the hook. He was also disrespectful of the court, I guess.
Building a Hybrid Environment Using VMware Cloud on AWS
Nothing against your comment in general, but some companies do tell you. On my first day at my current job I had to complete an insider trading training module and I'm just an average engineer.
Those benefits are "observable".

Not yet, they aren't. In fact, the exact opposite has been observed here, many times already. This is my point.

As you say, I'm sure we all hope that the situation will improve in the future, and then maybe the sales pitch for Quantum will start to look a bit more realistic. Until then, sad as it makes me, Firefox will remain relegated to primarily a testing tool on my system, because today other browsers are simply better in every way that matters.
I once visited a career office at a community college that I wanted to hire out of. What I saw was crushing - a small office run by a student volunteer with nothing but a few binders of reading materials.

I'm excited for private companies like this to help students who want to put in the work.
Amazon isn't that centrally planned, though, is it? They are mostly a middle-man between either publishers and consumers (for books and other media) or between buyers and sellers (for all of the goods on the marketplace).
It's apparently a Microsoft research project: https://www.microsoft.com/en-us/research/project/checked-c/?...

Very interesting to add additional compiler support to am existing language, in a sense. Sanitizers and static analyzers have made C/C++ much more bearable, and this adds to the pile!
Those are pretty much the same people who know enough insider info to even be in a position to trade on it....

When there's insider trading happening, it's almost always a C-Level person or someone closely connected to him.
It's frustrating how so many people redefine "psychopath" just to make a stronger statement about someone they don't like. When everyone is a "psychopath", no one is. If the word is supposed to mean something, it needs a narrower definition.

There are many mental disorders. Psychopathy is just one of them. Not every crazy person is a psychopath; not everyone who harms others is a psychopath. Psychopathy is a specific type of a disorder, not an umbrella term for "everything I dislike".

The best book I found on this topic is "The Psychopath Code" by Pieter Hintjens.

In real life, I met 2 people I would bet are psychopaths, in the clinical meaning of the word. I won't try to provide a short description, because short descriptions are not good enough to explain; if you didn't have the same kind of experience, you would probably just round the words to something else you are already familiar with.

A real psychopath is something like a spider in a human skin, with very good human-role-playing abilities. Your first experience is most likely going to be "this is a charming person". Only after longer interaction you will unconsciously start noticing patterns that feel somehow weird. But when you express doubt, there is always a good explanation and you will feel guilty for doubting afterwards. Only when they attack you, you will find yourself in a conflict with a non-human intelligence. And then you know that if you try to explain to someone who didn't have the same experience, they will never understand.

Psychopaths seem like masters of manipulation, so it makes sense to ask why this doesn't translate into a huge evolutionary advantage: why they don't already make 100% of the population. But it seems like an important part of their charm is being unknown. When you meet your first psychopath, they can manipulate you as they wish, because you have no idea what you are interacting with. Meet the second or the third one, however, and you have a chance to recognize the pattern. So when they exceed some fraction of the population, normies probably learn to recognize them and start killing them. But when they become rare again, they again get the advantage of being unknown.

A psychopath is simply a person who only has a certain subset of human emotions. That doesn't define what they will do; just like being a neurotypical humans does not define how one behaves. It just makes certain predatory behaviors more likely, because it removes some reasons not to do them (such as empathy) and adds some skills, such as being a better liar (humans are usually quite bad at lying, because they unconsciously display little signs of their emotions; but this does not happen when you simply do not have that kind of emotion).
Βγαίνει και η οχτάδα του Γιουρόπα Λιγκ
> She committed a much larger fraud and lost people huge amounts of money. She is spending exactly zero days in prison. She is getting a $500,000 fine - which Theranos is probably paying for - and a slap in the wrist[1].

1. Holmes is not out of the hot water yet. DOJ could still press charges and seek jail time.

2. What makes you think Theranos is paying her fine?

3. Holmes also loses 18.9 million (probably worthless) shares.

> Meanwhile Shkreli - who's "victims" lost zero money - is going to spend 7 years in jail and has lost at least $10 million because the government decided to take it over.

1. "no one was hurt" is never a valid legal defense. Not if you break into a company's networks. Not if you break into someone's house. Not if you sell drugs. And not if you commit fraud. In the case of fraud laws, the reason for this is actually obvious and rational: deterrence. No one ever thinks they're going to lose it all. If we only punished fraud that didn't work out in the end, the law would not have its intended deterrent effect.

However, "no one was hurt" can act as a mitigating factor in sentencing! However...

2. Character and remorse also matter in sentencing. As does settling. Who knows how much lighter Shkreli's sentence could've been if he settled. Or at least managed to just go home and shut up during sentencing.

Some of these observations might be troubling (e.g., being punished for exercising your right to a trial; going to jail for an extra year because you're an asshole in public) but they aren't gender issues.

> I would love to see people complaining about gender gaps addressing the huge gender gap in our justice system, because cases like this are a slap in the face.

This is a real problem [1]. But if you want to push the dial on this, maybe find someone other than Shkreli as your victim figure? (Also, the best way of closing this gap is probably less time for men, not more time for women.)

[1] https://www.law.umich.edu/newsandinfo/features/Pages/starr_g...
Rhetorical:

So now - what is Stage 3; once everyone has a railroad - then what?
> Sociopath is a clinical term, it's just not in the DSM because it's not, per se, a disease or disorder. Being a sociopath doesn't, by itself, cause impairment as defined by the DSM. But that doesn't mean it's not a clinical term. Ask any psychiatrist or psychologist what the defining characteristics are of a sociopath and they could immediately recite the Hare Psycopathy Checklist.

Sociopathy is not a clinical term, despite Robert Hare's research into the subject. I have spoken to psychologists and psychiatrists about this, as you're recommending - they only use terminology like "sociopathy" insofar as they use terminology like "insanity." It helps them quickly invoke a set of peripherally familiar traits when they're speaking to a lay audience, like clients or law enforcement.

The entire purpose of a clinical term is to label a disease or disorder. There's no such thing as a clinical term not being documented in clinical reference material, because that's implicitly definitional. Antisocial personality disorder is the clinical label for traits which are usually bundled together under the colloquial term "sociopathy" because "sociopathy" is just that - colloquial. For the same reason the legal insanity defense doesn't qualify it as a clinical term, psychologists do not actually use sociopathy because it's far too imprecise.

> Sociopath in the vernacular does often connote a serial killer. Fair enough. But there's plenty of literature, for professionals and laymen, that discusses sociopathy in clinical, well-defined terms.

Can you cite literature intended for a professional audience that actually uses sociopathy as a clinical term? Using sociopath in popular science books or books targeted to a lay audience doesn't count. That sociopathy occupies a zeitgeist among a lay audience is exactly why it's not used in a clinical setting. It has too many associations and inconsistencies that do not lend itself to a rigorous analysis, and is often abused to refer to whatever set of qualities someone wants to attribute to another party.

This might come across as pedantry, but I find it very frustrating when words like "sociopathy" or "psychopathy" or even "insanity" are all claimed to be clinical terminology. Claiming they are dilutes the clarity of actual diagnosable disorders in discussion, and somewhat legitimizes ad hominem attacks involving these terms. The terms are fun as a popular reference or for joking incredulity, but there is a serious lack of self awareness among all of the comments in this thread which keep trying to define and redefine terms which have no clinical definition.
Prediksi Real Sociedad vs. Getafe 18 Maret 2018 – Lajubet
> The finance dudes get a clean bill of health, and the tech guy gets thrown to the feds.

Maybe the finance dudes are not so retarded to sell their stock immediately after one of the biggest data leaks in history with no ahead of time sell plan, and after googling what was the impact on the stock price of another data leak.

Pretty bad op-sec for a tech guy. Or maybe he's just financially clueless, and doesn't know the the reason this doesn't happen more often (executives selling after really bad news) is exactly because the SEC it's doing a good job policing it and finance guys know that you need a SEC-proof alibi for any sell.

The reason that many stocks drop sharply 5-10% after some company news releases after being relatively flat is exactly because executives are scared shit-less of selling or leaking the info before that news is public.
> not provide evidence for simulation.... which is impossible by definition.

I disagree.

Science cannot prove that a theory is 100% true, only that it is not wrong by repeatedly testing the predictions made by the theory. The best we can do is say: this theory (e.g. general theory of relativity) is the best explanation for data we have so far and every experimental prediction it has made has come true.

The paper (https://arxiv.org/pdf/1703.00058.pdf) linked on the wiki page proposes four experiments that seeks to test the simulation theory. None of these experiments will single-handedly prove the simulation theory, but if they all pass we can only keep testing and seeking alternate explanations.

If the experiments keep passing and no alternative theories can be found, then we're either in a simulation, or the universe just happens to behave exactly in the way that a simulated universe would, but it isn't. I agree that we can never truly know which is true, but at that point the difference is reduced to semantics. It's like saying electrons don't really exist, instead they're just wave/particles that are exactly like electrons in every way except for some immeasurable quality.

This assumes the entity running the sim will never directly influence it, of course if that ever happens (requiring a _very_ high burden of proof) it'll be proof of the sim.
I’ve never tried Boxes before...will probably update tonight and see if I can get a Tiny Core Linux running in a VM using it.

Since Bluetooth updates were mentioned, I’ll also have to try connecting my AirPods with my Linux box again, since there were a few issues with remembering the connection when I did this earlier.

I switched to GNOME a few months back since having a problem with KDE on my Linux box, and GNOME’s just been great. This is the first Linux DE which I’ve used that feels nice and polished (like macOS). Kudos to the team behind this, y’all been doing good!
Funny I was working on the same thing (time/attendance solution). Square has timekeeping using mobile app...punch in your ID, clock in. It had more features than I needed...I also have volunteers so they don't get paid but need to keep track of their time. I don't think it was the best solution for me.

I ended up just having a sign in sheet....It works.
The tech here is P-wave detection. P-waves are somewhere around twice as fast as S-waves, so if you're 100-200km away from the hypocenter, it gives you that much advanced warning. Powerful earthquakes are still destructive at that range.
CherryCMS, what do you think?
Hey guys, i've just made a super simple CMS for new devs with basic PHP and HTML. What do you think?

https://github.com/gianlucacerutti/cherryCMS
There are ~19,000 incorporated places (cities, towns and villages) in the United States so to say 'tens of thousands' of them see little to no gun violence would be a significant overstatement.
Very ignorant question, but could it be possible to artificially start an earthquake in order to prevent "power build-up" ? Like many small man-made earthquakes spread over a decade instead of a big natural one.

It's how it's done with avalanches: you start them before they get too big and dangerous.
Per the complaint, with my notes in brackets:

Project Sparta [breach tooling team] was kept separate from Project Sierra [breach action team] to limit the number of people who knew that Equifax itself had been breached. Those Equifax employees who were only part of Project Sparta were not told that Equifax had been breached, but were instead told that they were working for an unnamed client that had experienced a large data breach [...]

https://www.sec.gov/litigation/complaints/2018/comp-pr2018-4...
I believe it's because Microsoft case in front of the Supreme Court over emails stored overseas.

http://www.scotusblog.com/case-files/cases/united-states-v-m...
So the Series 3 now has more apple watch marketshare than the previous offerings; that's good (disclaimer: Series 3 LTE was my first Apple Watch; I like it a lot)
What part of a decentralized app gives such a market advantage?

To think that centralization is Amazon's main weakness is, pardon me, quite comical. At the end of the day, much of their power stems from efficient centralization of supply chain, purchaser-side negotiations, economies of scale, and team coordination.

Just because an app is on the blockchain doesn't innately make it a winner. It has to deliver the same value to customers at a cheaper price. Amazon doesn't make much money on most transactions, so saying the "cut out the middle-man to save money" argument doesn't really work.

So where's the logic? I'm genuinely interested, but just not seeing it.
Puerto Rico?
Roughly, I'd say your biggest danger is falling objects, like books, and fire.

Building codes for new construction do most of the obvious now, the walls are tied to the foundation, there are shear panels.

5 to 15 stories is the worst height range, but shorter buildings can be bad if they're very asymmetric, like one with a parking under a two story appt, with one shear wall and poles for gravity support.

otoh, in a big enough earthquake, anything will be damaged.
Couldn't that same argument be used against anything we currently teach in school?

The obvious answer to your first question is: It has severe detrimental effects to our society, and we'd all be better off if people were taught the basics.