skysight-inc/HackerNews huggingface dataset:
Horsefeathers. To name two examples. The Einstein-Podolsky-Rosen's paper on entanglement “Can Quantum Mechanical Description of Physical Reality Be Considered Complete?” (Einstein et al. 1935) ignored as trash for decades. The Casimir effect was predicted from quantum theoretical calculations, but again, no-one did the experiment for decades because they felt it was a trash prediction that couldn't be true 'cause it ignored basic physical laws that everyone knew had always held and always would. Empty space just couldn't do that. And on and on and on - I've just covered this century a tiny bit, not all the time since Newton. Dark energy anyone?

Knowledge of the mechanisms behind X doesn't always precede discovery of X (why would anyone think it would always do so?) Lack of a known mechanism was why John Newlands version of the periodic table was greeted with contempt, and Mendeleev didn't find it easy sledding at first, either. But the contempt was unjustified. Birds were able to fly before the airfoil was discovered or airflow understood. Electricity was a broad field of study (Maxwell's equations, etc) long before the electron was discovered. The how usually trails the what in the history of science.

I won't be shocked if the Emdrive is a wrong turn, but the idea we could know that in advance is sciencism - the satanic inversion of science - not empirical science.
If virtual particles are the ones I know from Feynman diagrams, then momentum is still conserved at every vertex (interaction element). Unless the person who speculated that meant something else by "virtual particles," I don't see in the slightest how they could be used to obtain momentum or squirrel it away.

Besides, virtual particles have to go away at the end of every diagram... They can act as conduits between other particle fields but if a new particle remains after the interaction it will be just another reaction product (nothing virtual or spooky). Some go so far as to say that virtual particles don't particularly exist, but that's a philosophical statement I guess (they do indeed lack many properties of other things that exist). However I can't say much about that as the arguments for this-or-that nonintuitive ontology usually emerge from advanced theoretical research that is beyond my knowledge. (I.e. in momentum space virtual particles don't even remotely seem to exist, but maybe the picture seems more reasonable when you write it all down some other way.)
Coincidentally, Germany also has the world's largest model train exhibit, which even has a fully functional airport (with functional departure board, of course) and a full day/night cycle. You can watch a short tour of it at https://www.youtube.com/watch?v=ACkmg3Y64_s
There's a bit of an explanation of this in the article describing the other XSS that's recently been found in Signal[1]. Basically, since the Electron app itself runs under the file:// origin, 'self' can be bypassed with varying degrees of difficulty depending on the platform. On Windows, it's trivial because you can use UNC paths to a SMB share containing a malicious JavaScript file (i.e. file://1.2.3.4/payload.js). On other platforms, you'd need to find a way to place the file on a path accessible via file:// first, for example by sending the file via Signal itself and hoping the user accepts the download.

There are ways to lock down the CSP further to mitigate this, but no one really expects script-src 'self' to be unsafe, especially when it's what their documentation recommends.

[1]: https://ivan.barreraoro.com.ar/signal-desktop-html-tag-injec...
It's really up to Intel to start funding education for architecture and HDL design.
I assume the fuselage drag is mostly parasitic (=wasted) drag, not induced (=lift-generating) drag.
I hope Moxie learned that programming his people/team is as programming his software. This tarnishes Signal, regardless of how good the Android app is.
Assuming the effect of the EMDrive were real and practically exploitable, what does that say about the Fermi paradox?
> feels out of place in a relatively public setting. I'd rather have a coffee or beer with them if I know them well

To follow up on gppong's comment, these are often people who don't know anyone well ("lonely or powerless"). So the fact that it's people you don't know well who post things like that is kind of obvious in hindsight.
Just wondering why can't people hire some illegal immigrant girl to watch babies ? It is like one of the simplest job ever.
> Desktop applications are incredibly risky, far more so than iOS mobile apps are.

Ok, I'll play.

I get to choose 10 arbitrary apps from the Apple App store for you to install on an Iphone model of your choice.

You get to choose 10 arbitrary apps for me to install from the default Debian repos (which I believe excludes nonfree). Let's say Sid to make it interesting.

Who is going to be in worse shape after installing those apps?

Edit: typo
I’ve always wanted to play around with raw SMS PDUs. You could construct MMSes “from scratch”, for example; or send “ephemeral alert” messages that (at least by the standard) don’t get stored in SMS conversation history, just popping up and then disappearing instead.

Does anyone know, then, why Twilio and its like don’t let you construct/send raw binary PDUs? If it was a matter of cellular network security, well, that was already out the window once you let people with rooted phones into the network. Why not give virtual “phones” the same capability?
What about the folks who write flight control software? I'm not aware of those jobs requiring applicants to pass the PE exam (there is one for software but it's the least popular):

https://en.wikipedia.org/wiki/Principles_and_Practice_of_Eng...

Whereas the CivEs overwhelmingly need this certification
I’ve started using SpinalHDL, https://github.com/SpinalHDL/SpinalHDL. It’s a Scala DSL that spits out Verilog or VHDL for traditional synthesis tools. But, unlike Chisel or MyHDL, in my opinion it’s a great experience. And, now it has seamless integration with Verilator for simulation, and the open-source Verilator project is very capable—they claim it beats commercial simulators: https://www.veripool.org/wiki/verilator. Since Scala is quite a bit faster than Python, the simulations run much faster than something like Cocotb too!

I have my hobby project in SpinalHDL up at https://craigjb.com

Edit: also, GTKWave is pretty good! It’s a simple and straightforward waveform viewer that works on all platforms.
Understanding Victimhood Culture
I wonder if amd could produce epyc with tsmc and xilinx.

xilinx is a much better choice in fpga
With such an obviously "DON'T USE THIS" method name as dangerouslySetInnerHtml, I'd expect that we'd see something like // eslint-disable-next-line above it.
I'm right there with you. I wish I had the energy to even write more
Well, if anything, Europe has a history of labeling authoritarians as progressives. Whether that's something to be proud of is something history will decide.
How an Idea Grew from My Kitchen to Winning the Top Award for Coffee Brewers
I've worked with a startup that handles Application Tracking System before.

The reason company ghost-ed candidates is because they want to keep them as an option.

Say that they don't get a "good" candidate, they have those "lesser" candidate as backup in case they need someone fast.
I'd imagine Google assistant and duplex are two completely separate systems that share some common machine learning components so talking to your Google assistant doesn't mean anything useful necessarily.
You're absolutely right. It's too bad this opportunity was missed. Comparing such an act to weev or aaronsw (RIP) is not unreasonable, but aren't we all ready to make such a sacrifice?

We need to be.
coconut oil was in one of my tissue culture protocols (sorry forgot which plant) so I thought, what the hell I'll try it as tooth paste. It has a known mild anti-bacteria effect and oil is hydrophobic. It coats your teeth well and stays there. There were other people from a google search that use it, it just worked for me. If its good enough for a petri dish then its good enough for me.

hell, here's a crackpot theory website linking to a study saying its the best possible toothpaste known so far...
https://www.davidwolfe.com/coconut-oil-is-better-than-toothp...
Show HN: Python library for near 100 extra higher-level functional tools
Not really that surprising, since there is no way to apply the correct aria-selected and aria-expanded attributes using just CSS. (You can apply the correct ARIA roles in the HTML though, just not save the change of state.)

It's a shame there is not a native HTML tab construction, since you really shouldn't need JS to make tabs. Using the radio buttons to set active state is a clever hack, but it's not what they were intended for.

Ref: WAI-ARIA section on tabs: https://www.w3.org/TR/wai-aria-1.1/#tab
People crave silence, yet are unnerved by it
When I read this I just started cackling like a mental patient.

The first thing that comes to mind is if this is on a well known framework, I want to know because those security defaults are awful.

However if these guys rolled their own API auth system and messed up something this simple, or deliberately modified framework defaults... I can't even imagine what conversations happened at their offices this morning.
As the old saying goes, "if you could have invented a secure open source desktop chat app, you would have developed a secure open source desktop chat app."

In practice, empirict results win over theoretically optimal designs.
There's an excellent book, The Checklist Manifesto by Atul Gawande, that explains several transfers from aviation best practices to hospital best practices (primarily checklists and CRM, crew resource management). Captivating read if you're interested in aviation and not dying needlessly in hospital.
One of the most stunning illusions of perception I have ever witnessed.

Not feeling so loquacious just now but if you want to dig deeper the threads to pull are perception as bayesian inference and the sampling hypothesis. Olshausen and co are a good place to start.
You're not wrong in this guy's case, especially since his software is on the App store. However, for most open-source projects, the installation process is sufficiently obtuse that you would be hard pressed to claim you were 'tricked' into installing it
I have a different problem in that the captcha will not get validated for me! I tried registering, but it seems that no matter how many times I try the captcha code shwos invalid. I'm not a bot, I swear! :)
It's a pointless technique as noted by others.

Along the same lines though is OPAQUE PAKE, where the server doesn't need to store a password hash, only a salt, making server compromise far less dangerous, it's quite elegant.

There's no implementations so far I believe.

https://eprint.iacr.org/2018/163
Great article! Thanks for sharing.

Really makes me wonder how guys like Abramovich get started. Did he used to work for the telecoms and knew how things worked? Or is he just one of those insanely motivated hacker types to just poke around the internet and find opportunity?
> One thing I noticed was that rude language or sexual references were kind of used as a calibration technique to try to gauge people.

https://www.folklore.org/StoryView.py?project=Macintosh&stor...
People are allowed to make up their own opinions, even ones not based in fact, and take actions on things they own regarding them. That is a fundamental human right, last time I checked.
Um .. most of Europe? Australians? Melbourne has the largest tram system in the world, and every over half the capitols (all except Hobart, ACT and Darwin) have train networks of varying sizes.
Angry Scorpion Family Jungle Survival
Dive into life of wild scorpion! Raise family, fight with predators for survival while playing Angry Scorpion Family Jungle Survival. Survive in dark jungle and save your family from jungle predators with the help of your surviving techniques.
Oh sorry you are right! I was reading the comment ( https://news.ycombinator.com/item?id=17097501 ) which said that the issue was caused with $.html
You will be in worse shape than I will be. It's possible, in that insane proposition, that your Debian machine will be conceding remote code execution to the whole Internet, while my phone will just have some crappy apps on the home screen.
Sounds a bit like you think the talent is turning its back because they are very pessimistic about finding causes and solutions within our lifetime... sad if true; I'm seeing interesting progress and think we're close to real breakthroughs.
Software is eating Astronomy.
You make a fair point.
> You see the same thing in Vermont, New Hampshire, Maine, Massachusetts, etc.

For comparison, Sweden is about the size of California, with roughly one forth of its population.

> In the US, on average if you want to see a better form of political discourse, you have to move toward more local politics (whether state, county, city, town).

In my experience, local politics tends to be... More entertaining. Maybe because it's a lower barrier for entry.

> Sweden = local politics. It's a small nation. 25% of their population lives in just four cities.

The majority of its population lives outside of the largest four cities. There's a lot of difference between those four cities as well.
You totally need to go visit it now. :)
Ask HN: Is there a nice, native iOS HN client that supports “Mark above as read”
I'd really prefer to use an iOS app instead of RSS if possible, and currently RSS enables me to "mark all above as read" on stories and not re-read the same ones when looking for new content.

I know there are a bunch of third-party iOS apps out there, but can anyone recommend a nice one that does this? It's OK if it's just for that one device, not synced through iCloud or some other cloud service.
There's no reason for anyone even moderately saavy to use a commercial private VPN. It's really insecure and expensive. Just use Streisand on a DigitalOcean droplet, AWS, etc.

https://github.com/StreisandEffect/streisand
Intel to Remove Legacy BiOS Support from UEFI by 2020
I hope this truly is a breakthrough and does more good than harm. As a child I had near daily migraines. In 2002 I entered into an earlier CGRP blocker study to extremely ill effect. I took two pills morning and night. After two days I woke up completely blind. I was lucky it only lasted for three days (I was instructed to immediately discontinue use of the drug, preventing any long term damage). The trial was called off shortly after - if memory serves, out of ~100+ participants in my age group, about five had the same symptoms.

As the article mentions, there’s a risk around toxicity. The approved distribution, dosage, and delivery seems to be an entirely different process from 15+ years ago, so here’s to the best. But, there’s really not a single measurement of residual peptide buildup throughout the entire study.

I worry about long term buildup of proinflammatory mediators that could eventually strike back fast and hard with long term ocular nerve damage; a similar effect as the earlier drug iterations of a higher toxicity.
For some reason the field of AI has become an area where famous men who have no expertise in the field feel they have an obligation to tell us all about their opinions on it. Equally oddly, prestigious outlets then decide that these opinions deserve to be published so we can all read them.

What the actual opinions are is not important - since they're not based on any actual understanding of the capabilities or limitations of the technology, even if sometimes some of them are accidentally correct, that doesn't make them interesting.

(I guess as long as Nathan Myhrvold is pontificating on AI at least he's not spending that time on patent trolling, so there's some upside.)
I think politics is as critical part of group of people as breathing. I don't think you can separate the practical tradition from the theological one, as most practicing religion are familiar with only the practical aspects.

The more people respect and believe you, the more political force you can amass. Hence, a popular religion weilds quite a lot of political force. As such it would be totally misguided to pretend this political context would not exist, or worse, use it in catastrophic ways. There's a good reason churches did not approve of heretics when people were uneducated and easy to arouse into a mass hysteria. There's also a good reason to co-operate with the state so that the political interest of the church and the state are aligned - as opposing large political factions have an almost natural tendency to create turmoil and chaos, like hydrogen and oxygen, even if their leaders werent terribly ambitious (there are always easily exitable factions on both sides).

The fact that bible survives, and is at it is, for example, is the result of a political process as much as anything else. Thus the interpretations as well are mostly done within a political context.

I agree from the philosophical point of view - "meek shall inherit the earth" is pretty much as revolutionary concept as it can get - but from practical point of view this has most of the time meant that you must meakly obey your landlord.

If we understand revolution as a practical political concept - I don't think there has been much revolutionary about christianity en masse, as I wrote in my previous reply.

I think for the most parts the historical inheritance of christianity is net positive, especially when we get to the literary tradition spurred by protestantianism.

"The deeper principles of total forgiveness and relinquishing of individual claims to righteousness are the core, in my view; if not globally unique"

I might be totally off base, but I understood one could claim those principles to be at the core buddhism as well.
There is a limited subset of things for which gene therapies can work in adults. For example, thalassemia is caused by continued abnormal production of hemoglobin. If you fix the one defective gene, future hemoglobin will now be the correct variety. However, the old hemoglobin does not magically correct itself, and it will take time to clear. Meanwhile the damage it may have done to the liver and spleen will persist.

Gene therapy can also fix other conditions. For example, many complications of cystic fibrosis are caused by abnormal cilia not clearing mucus properly. You can switch the gene on to restore cilia function and clear the mucus. Sounds good so far, right?

Well, not quite. Cystic fibrosis can also cause men to be born without vas deferens -- the tubes that connect the testicles to the urethra and allow sperm to leave the penis. This happens because normal male development requires working cilia at the time the vas deferens is forming -- sometime in the first trimester of pregnancy. Once you pass this point, restoring normal cilia function will not make the organs that failed to form magically spring into being. That was a developmental event that does not happen again. There are no second chances for many stages of development. We have a long way to go before we can successfully treat genetic disease before the embryo starts to form.
I think the parent's reply is a good one. We could probably debate some of the finer points, but I think when we get some time to see how it all shakes out in the end we'll have a better vantage point.

But to answer your question about the right to erasure, here is the law: https://gdpr-info.eu/art-17-gdpr/

I can't find it right now (and I have to get back to work), but there is a reasonableness requirement for requests. So things like backups might be covered by that. I wish there was some direction on that because it's a problem for me at work as well.

My opinion is that the directive's view is that all personal data retention should be temporary. There should be a defined point where the personal data is deleted. Either that's when it's no longer necessary for the contract, or when you no longer have a legitimate interest in it, or when the user asks for the removal.

Up to this point, most of us have been building databases with the intent of retaining the information indefinitely. So we never thought about this. Although I'm a fan of this law, I admit that it's going to be troublesome transitioning from where we were to where we need to go.

And as the parent briefly stated, immutable databases are going to be a serious problem.
Great news! I think Amazon should provide more specs on those NVME drivers. what kind of R/W latency/max bandwidth/low and high QD throughput I can expect?
it's always seemed to me that a likely endgame of automation is government bureaucracy continuing to make more and more busywork jobs in order to keep people doing something for their income. I think it's a more likely outcome (although distasteful to me, personally) than universal basic income, given historical political trends.

This is all assuming we'll reach a level of automation where the majority of humans don't actually have to work to produce goods.
Introduction to Machine Translation
That's the legacy reverse zone, the state of the art reverse zone is ip6.arpa.
I get why Pluto had to be demoted to minor league status.

But they should at least have retired the number. Pluto will always be Planet Nine.
I've been intrigued by the idea of running databases on EC2 instance storage for a long time. (You couldn't use RDS though, at least not today.) Putting your db on something also called "ephemeral storage" seems risky, but maybe not much riskier than putting it on plain HDDs. The big issue to me is that most instances don't come with much space. If you need more you have to scale up the whole instance (not a separate dimension like with EBS), and if you're already on the biggest instance type you're just out of luck. I guess it could be worthwhile to use separate tablespaces so you could have some data on instance storage and some on EBS. But so far I've gotten acceptable perf by RAIDing over gp2 EBS volumes (12 TB in my case), following the approach here: https://news.ycombinator.com/item?id=13842044
If I remember correct, all old ec2 instance support local storage. Then as the growing of EBS, they disabled local storage. Now it's back again..
I always refer back to the original agile manifesto when I read about how badly things have gone.

http://agilemanifesto.org

What a beautifully simple document, written in clear and plain language.

Now consider a paragraph like this one:

"How are matters improved by Agile? The benefit of Agile is that, by splitting the project into sprints, we have more opportunities to tweak the project vector, to exercise governance, altering the project’s course. Each sprint offers new control points (during both planning and acceptance), at which we can amend direction. Splitting the project as a whole into a series of such sprints offers us a corresponding number of opportunities to reorientate. Each iteration offers more chances to retune the project. We have much greater granularity of control, and more opportunities to exercise that control."

This blog post is, frankly, full of this sort of language. "tweak the project vector". "exercise governance". "control points to amend direction". opportunities to "reorientate" (reorientate? yes, it is a word. it means, according to the OED, reorient).

I'm kind of curious, this is HN, there are dev here. Does this sort of language make you eager to sign onto a development team?

I understand that lots of things have gone wrong with "agile", but the language we use to talk about it seems to have degraded badly, and in many ways, this tells the story better than almost anything else.
I've been thinking about this recently. I like passing a struct if all/most of its attributes are used. But if the struct has, say, six attributes, and the function uses only two, it might be clearer if the function only took those two as parameters... While it might not be the most ergonomic solution, I think there's something to be said for clearly marking which parts of the struct are actually used in a function.