skysight-inc/HackerNews huggingface dataset:
I agree, but there's not much, and it's usually for decent reasons:

* the "time" package hooks into the Go scheduler.

* the "reflect" package needs type information out of the runtime.

* the "net" package hooks into the Go scheduler a bit. But way less than it used to. I think you might even be able to do this all yourself outside of std nowadays.

What else?

Our rough plan going forward is to actually move a bunch of the stdlib elsewhere but ship copies/caches of tagged versions with Go releases. So maybe "encoding/json" is really an alias for "golang.org/std/encoding/json" and Go 1.13.0 ships with version 1.13.0 of golang.org/std/encoding/json. But if you need a fix, feature, or optimization sooner than 6 months when 1.14.0 comes out, you can update earlier.
Mere acceptance of insurance doesn't mean there won't be an exorbitant copay, anyway.
This is the most complicated upgrade guide I've ever seen: https://babeljs.io/docs/en/v7-migration
This is important. Because the discussion around HTTPS tends to train users into think that HTTPS = Web Security.

I totally agree that it's important, and I understand the attack vectors. But what about your outdated WordPress/Joomla installation? What about your default password on your admin site? Those I think are more serious issues, but of course harder to tackle.

To exploit a MiTM you need to be on the same network, this could be achieved through your local-cafe's WiFi or by compromising an internal system of a local network. Not a trivial task I would say. If you manage to pull it off, the impact is contained to that local network.

If you compromise the insecure site directly, you can have an much wider audience and HTTPS won't help you in this scenario.
You can even formulate the standard model on a curved background metric that arises from GR. Just don't try to make the metric itself dynamical.
$700 cheaper, less weight on your head, increased field-of-view, 6-DOF tracked controller, eye tracking, and support for two focal planes.
They survived the cold by building shelters and houses with the materials they could find, for example; native american longhouses. In warmer climate, I heard the temperature under trees, in the jungle, while being humid, is much more tolerable.
STDs continue rapid rise in U.S
There are ethical issues surrounding brokers like Zerodium, Grugq, et. al. Specifically, that 95% of the time you know that bug is going to NSA, CIA, FBI, DoD, GCHQ, BND, Mossad, etc.
> despite having a religious nonprofit-sounding name

They came by the name honestly, but it is indeed a shame the way it has gone since the St. David's Foundation partnered with HCA.

The hospital(s) were originally founded and run by St. David's Episcopal and were one of the first and foremost hospitals in Austin, with very high quality care and good service to the community.

After operating them for nearly 75 years, and growing to an enormous enterprise, it became clear that a church congregation simply couldn't and shouldn't be operating them any further and they were spun out. Some of the profits are still sent back to the foundation for community health care grants.

This particular wealth extraction strategy would never have occurred under church leadership.

(disclaimer: I was a member of the church during this period and hold it in very high regard)
On Linux I set the vm.min_free_kbytes on my laptops so they crash something instead of swapping until pull the plug. Maybe XNU has an analogous knob?
Where'd you hear that? It's absolutely not true. The LHC itself has been upgraded several times during its life and there are several designs for next generation colliders (such as the Future Circular Collider).
>I didnt think infinity wars was THAT good.

REVOKED!
Counterpoint: coming from a Java background, I find totally freely-definable interfaces for some features used by core container types to be a little worrysome.

In Java, I can't count the number of times I've debugged either correctness bugs or 'merely' horrible performance bugs based on incorrect implementations of Equals or Hashcode methods. Implementing a non-commutative Equals method is a colossal footgun, and incredibly irritating to debug, and yet somehow it happens time and again.

And there are other, subtler, arguably "correct" and yet but extremely unwise things one can when do given Java-like maps implemented on the Equals and Hashcode interface methods. For example, one can define two types T1 and T2 which both claim to be (commutatively) equal, and define some interface TX which is implemented by T1 and T2. Using a Map<TX,Object> and inserting members by T1 and T2 now has an interesting form of semi-defined behavior: if inserting "equal" keys, whichever type was used first will be persisted. Imagine doing this in some concurrent map, and imagine that T1 is 8 bytes and T2 is 400 bytes; enjoy debugging those occasional OOMs.

I've been very happy not to ever have this particular problem when defining the key types in my Go maps.
I don't understand why promoting Go to be the next Java is a good thing. Let's just use it to do what it's good at, and if you need generics, go use a language that has generics. We already know what a language that can do everything looks like, and it's a mess.

Plus, are they going to rewrite the entire STL? Are we going to get a library of Algos and DS when we have generics? Generics pretty much changes the entire look and feel of the language. Might as well make it a fork than an iteration.

So much for simplicity and copying. :) RIP Go 2009-2019
>Sounds all fine and dandy until you realize that these charges will just be made up for by people that aren't able to get NPR to publish a story about them.

Sounds a bit like getting support from Google.
You're right, I oversimplified that. But having a "ResultErrorType" is not really context, not by itself. The interesting context would be additional fields recorded in that type.
That's different - Yahoo has completely different owners now whose main business is in a different sector.

Headline should read:

"Verizon after acquiring Yahoo disregards normal tech-company conventions and snoops on everyone's emails like a scummy ISP."
Also, over similar temperature differences, AC is more energy efficient than heating.

With AC you only move the heat, so spending 1 unit of energy you can move 2 or 3 units of heat. More, if the system is highly optimized.

With heating, you need to spend 1 unit of energy to create 1 unit of heat.

(Unless you heat with a heat pump. But even then, pumping heat for heating operates on less favourable temperature differences than pumping heat for AC.)
My father had a heart attack 4 months ago, and he’s been in and out of the ICU for 3 of those months. Everyone likes to think “oh, I’m insured. I’ll be fine.” But let me tell you, you won’t be fine. 3 months of ICU at Robert Wood Johnson was billed for $4Mn. BCBS-NJ only paid out $750k. The headache begins there- from a personal financial standpoint, and Tri-party incentive standpoint. Ignoring the difference of $3.25Mn “owed” to the hospital (technically, this $4Mn is an exaggerated number by RWJ to recoup as much as they can), the insurance company is essentially denying basic/reasonable services. The doctors have been fighting with insurance to get him to an LTACH, but the most they’ll pay for is a nursing home.

Insurance is a business. They aren’t looking out for you, or your loved ones. I hate to sound cynical, but boy, these past 4 months have shown me the deepest, ugliest side of commerce that inevitably results from aligning incentives with profits.
For most California engineers, moving to Germany with the same salary would effectively reduce their taxes. California taxes for high earners are very high, even by European standards.
Holographic imaging of the human brain using lasers.

It seems this was announced at the TED talk, I don’t think journalists have picked up on it.

The PR is refreshingly low key at conveying how impressive this is. Or maybe it’s because I studied lasers

To quote the aliens “6EQUJ5“
> It's really a shame that something we tell young adults is so necessary leads

We tell them it's necessary because it is for most people. The decades of data made this an indisputable fact: people with college degrees earned higher salaries, had better jobs, enjoyed much lower unemployment rates, and were generally better off than their under-educated peers.

The problem is not that we push people to attend college, the problem is entirely the cost of education.
I had a Cat Genie and ended up throwing it in the trash. The DRM was annoying but it was the least of the problems with this device.
The biggest problem is that the scooper doesn't always remove all the feces from the litter, and then when the heated air starts blowing on the litter to dry it, a very impressive smell fills your house. You haven't lived until you've smelled baking cat shit wafting through every room of your house.
The machine has lots of other problems (sensors that require frequent manual intervention to clean, etc). The bottom line is that this device removes an everyday quick chore that's slightly unpleasant but replaces it with 30 minutes of sheer unadulterated horror at least once a week.

I've tried all the other robotic litter boxes too, and they all suck. I clean cat boxes by hand now. The robots are not yet up to this task.
Ask HN: For SaaS, what are the current best practices and channels for traction?
I have a SaaS product that comprises a web app, iOS app and chrome extension. What are the current best practices for getting traction? Where can I learn about SEO, paid marketing, getting high quality leads, etc? Some examples of websites that have good traction of late?
Not going to dispute that. If I spend time optimising code, I might do it as well in an environment like Swift/Metal instead of Python.
Poor design has nothing to do with generics. If anything they make API cleaner and safer to work with.
Not quite. You'd need to write new `handle err { ... }` blocks for every new context, like how they have one in the for loop. In effect you're just moving the handling of the error away from the place it occurred, which is not optimal. As someone who writes Go every day I don't see this strategy effectively cutting down on boilerplate core or adding clarity.
Just cut the gordian knot and nationalize the system already. It's a political no-brainer. There are very few Americans, even conservative ones, who are in love with the intricacies of paying medical bills. The only people beholden to the status quo are those paid to defend it.
Yea, but to hire a medical billing advocate, you need: 1) knowledge/information that they exist and that hospital bills are BS, and 2) money to pay the advocate AND the reduced bill. If the final bill is $800 and the advocate gets a cut of the savings, how many people in dire straights are likely to be able to afford that? Keep in mind, most Americans don't have 1k in savings, living pay check to pay check because they have no choice. Facing a 100k bill, people are more likely to wait for the collector to show up and then declare bankruptcy, facing damage to their already poor credit, garnishment of already subsistence wages, etc..

I'm much less worried about the folks who pay it anyway than I am about the folks whose lives are destroyed by an industry predating on people in the worst of circumstances.
I wonder if the local county this school district is in, also provides only a "self-funded" plan to their employees. Are all the government employees getting screwed or just the teachers? It's a quaint ethical puzzle which is worse.

So the last line, "less than half what Aetna paid", does that ostensibly mean the hospital is definitely charging an unreasonable price, and by having been paid twice what is reasonable by Aetna that ostensibly this teacher shouldn't have to pay a dime? It's just a contractual reason he owes this money?
>> But is there really a need for people to live in places like Houston?

No, if we can all live without food. Plants love the hot parts of the world. The prairies bake in the summer.

I'm reminded of President Bush visiting the John Deere factory. He asked a worker about the most important innovation for combination harvesters. Without hesitation: "Enclosed cabs with air conditioning".
"Folks are having troubles connecting to their workspaces. We're looking into the cause and will have updates shortly.

10:30 AM PDT"

https://status.slack.com/2018-08/389f96c3886d7d56
When there's enough competition, all hospitals will be cheap. He won't price shop at illness time. He'll know which hospitals close by he can afford. There'll be three or four equivalently accessible ones and he'll already know which one he's going to go to.

Surgery outcomes in Indian top cardiology hospitals are better than in America. And they're cheaper. And more available. And perform more surgeries per week. Competition is good.
And here's a handy list of all representatives and how much they took from healthcare lobbyists.

https://www.opensecrets.org/industries/summary.php?ind=H&cyc...
> assumptions about who is responsible for data security.

The chief assumption appears to be "anyone but the browser vendors". Let us consult the article:

BeEF
This, to me, was the most impactful demo

Quite the endorsement. So what's BeEF's angle?

"...examines exploitability within the context of the one open door: the web browser."

There could hardly be a clearer expression of contempt for the browser vendors' offerings. But remember, the "open door" is nothing to do with them, it's all your fault for not serving via HTTPS.

Welcome to Clown World.
not sure though what you mean by "very powerful code" in that context ;-)
In light of this article, new genres like glitch/aesthetic/simpsonswave are just versions of generative art. All that stuff takes some simple code to augment images, then MS paint comes in to superimpose an 80's car, some green lines, and a statue of david, haha.

I really enjoyed reading about the newer AI methods though.

Here are some of my drawings :)

https://www.instagram.com/p/BY_yHsuB8nF/?taken-by=kolmogorov...

https://www.instagram.com/p/BklsIsBlmij/?taken-by=kolmogorov...

https://www.instagram.com/kolmogorov_smooth_jazz/
He shouldn't have to submit for a "discount" based on his "household finances" anyway! What if he doesn't qualify after all? Does he owe $100k if he makes more than $70k/year? Actually what level of income should be the low threshold for having to pay $100k after insurance for your life-critical health event?
Considering these cell-site simulators are often used at protests this seems like a recipe for disaster. What happens when another person is shot[1] at a protest and there's no way to call 911?

[1] https://www.theguardian.com/us-news/2017/apr/25/milo-yiannop...
The same argument applies to littering. It's only going to harm strangers, and you're unlikely to get caught, so strictly from a cost-benefit perspective it seems like a good idea. But if everyone makes that "rational" decision then we all lose.
Arduino Released Arduino Command Line Interface (CLI)
Even if your uptime is 99.99% people sure do feel it when you go down when you're as mission critical as Slack.

https://get.slack.help/hc/en-us/articles/204113126-Service-L...
Really? Have they been given an alternative? Not an electron app, a real desktop alternative, that syncs with the mobile native client and gives an in-desktop experience.

Nobody did that, ever. It's simpler and cheaper to ship an in-browser solution, so everyone does that, that's all.
Doesn't gmail scan your mail for data to target ads?
And what's your solution - not let people use AC in their houses as they see fit? Good luck with that. Even Californians balked on that idea.
Are Google results actually worse for "conservatism"? Like if you go on Bing, Baidu, or DuckDuckGo, you're going to get better results? I'm really dubious about that.
I'm not sure that using advanced AI to kill people is much better

bright minds worked in the US and other nuclear programs, included soviet ones, to keep geopolitical balance with minimum deaths. And with AI you want the brightest minds working on it: it doesn't matter how compassionate and good willed you are, there's always going to be another state actor willing to use it against you. And you can bet they'll employ their brightest. Assuming anything else is naive and suicidal.
Working as intended.

Here is the thing: This hospital is a vampire. They WANT to send you to collections. They WANT to take your house and everything you own.
I added a note in my article to clarify this. My strategy here is short-term. You want to withdraw your capital eventually, not hold forever. Maybe you are saving for a house in a few years. If you suspect that rates are still rising when you let your ladder burn down then this can be a good approach. I agree that for long term investments (ex. a retirement account) this is probably not the right approach. Thoughts on how I can make it more clear?
sounds like an opportunity....
It's also a public versus private API issue. Most databases consider their journal a private implementation detail and don't recommend programming directly against it, as implementation can change as the developers change internal details from database software version to version, or even on a runtime whim as the system's query optimizer/write buffer state/etc needs change over time in some of the databases.

For instance, Microsoft SQL Server has a built-in public change tracking API, which you can tell is a leaky abstraction over top of the journal, but SQL Server makes an API guarantee when using that specific change tracking API whereas (at least the last time I looked) it will never make API guarantees about anything lower level than that that accesses its journal. The Change Tracking API documentation even warns you that it locks the journal into certain deoptimizations and that there are clear performance trade-offs, which also hints that using the lower level journal API more directly would likely hit optimization problems and data loss issues.

As a dev, it's rarely a good idea to program against APIs your vendor intentionally deems to be private/implementation details that can change between versions/may be unstable in runtime operation. If the database doesn't offer a public journaling API, then yes, sadly, sometimes the best or at least least-worst answer is to build a sub-par journal inside the database itself, with of course its own tradeoffs in performance.
Of course, you're right. My phrasing was not the best. The rogue CA would need to perform a classical MiTM as all the other mortals do, having access to the signing keys does not give you special MiTM powers, other than when you actually are able to conduct a MiTM through other means, you'll have valid certs to intercept the connection.

Totally agree with your point about trust being a very hard problem to solve, that's why CAs first came in to place, and now we have CT (which is not widely adopted yet). It is a problem that has no clear and definite solution yet.

Edit: Also, CT is no magical solution. It's just another "node" in the graph of trust we're establishing. As many other things have in the past, the CT system itself could also fail.
That probably rules out every state and federal politician. Either way, this was on the hospital. Insurance paid $50k for an operation that costs $25k, and still the hospital charged him $109k.

>UPDATE: Monday, shortly after publication and broadcast of this story by Kaiser Health News and NPR, St. David’s said it was now willing to accept $782.29 to resolve the $108,951 balance because Drew Calver qualifies for its “financial assistance discount.”
The first annotated set of scanning electron microscopy images for nanoscience
> what's the problem with "list of 30 random npm packages" as a starting point?

The dude starting with rails will probably be done with the MVP before you decide _which_ 30 random npm packages to use.
How is this different from other chat apps?
My point is that using this to wrap context around errors is even more verbose than what's available/common today, since you either settle for one wrap for the whole function or you have to define multiple `handle` blocks.
I looked up VFITX. It looks like they pay distributions (i.e. dividends) that are roughly proportional to the expectation of the interest rate over the average maturity of their holdings, so you need to take this into account when considering "what-if". They have paid approximately 1.4% in dividends during 2018. That makes their total losses around 0.6%.

This doesn't fully explain the underperformance of VFITX compared to a 3 year bond (which should have made 8 mo/12 mo * 2% = 1.3% in interest and lost around 0.7% on rising interest rates), a net gain of 0.6%.

So VFITX underperformed a three year bond by 1.2%. 0.13% of this is their management fee (0.2% * 8 mo/12 mo). I'm not able to explain the last 1% of difference.

However, in theory, a bond fund loses just as much value on an interest rate rise as the bonds it is holding lose. In my example above, the bond is worth ~$99 after the increase to a 3% rate, just like the fund. The only difference between the bond and the fund is the choice of when to liquidate or roll.

It's possible that VFITX got unlucky on the timing of their bond rolling (see cousin comment).
You're absolutely right. Many good, wonderful, amazing people consider that an ethical concern sufficient to stop them in their tracks!

It's perhaps possible that some people, in some scenarios, might be willing to compromise on the ethics of their situation in exchange for a significantly higher chance of a much, much higher payout.

EDIT:

To expand slightly, anyone in a position to pay out for bug bounties should consider carefully what they are willing to do to shift incentives towards ethical behavior. The ability to attack your systems is worth money to those who would do so. It should be worth more to you than to them. How much are you, hypothetical person making such choices, willing to spend?

It's perhaps unfair to expect highly skilled people to take a 90%+ discount on the value of their work in order to be more ethical. Ethics are incredibly important! But it can be difficult to argue that successfully in the face of a breathtaking ask.
Plenty of folks use Yahoo, especially for secondary accounts. Also, when the iPhone launched, the only outside email provider that had 'push' privileges was Yahoo. I remember having a Google > Yahoo email forwarding setup just so I could get my gmail forwarded to me in real-time.
Sadly, it's working just fine for me. There are reports coming in however [1]

Appears to be mostly people using their Electron App.

[1] - http://downdetector.com/status/slack
It appears that if you already have an existing session open, then all is well.

But, if you try to login again, it will fail (e.g. after I restarted my linux workstation, Slack no longer connects).
> I really aspire to become a mentally unstable transgirl that nobody wants to hire or do business with.

From her blog last week

http://sandboxescaper.blogspot.com/2018/08/my-greatest-ambit...
Are you suggesting that Google took a stand on principle and voluntarily gave up gathering more data on users of its free services out of respect for privacy?

Or is it perhaps more likely that Google gets enough info from users via others means that it simply wasn't getting enough value out of email scanning? Or maybe starting a trend against email scanning hurts competitors more than it hurts themselves?
Unfortunately you can't really get a heart arteriogram done as a checkup and anything else is actually guesswork.

Both MRA and CTA are really expensive.

Bloodwork can point to problems but there is still a plenty of differential diagnosis involved... You need a bunch of history (main factors are currently age and family history) to reasonably evaluate risk using e.g. European joint guidelines.

You can perhaps guess better based on local doppler USG of some big extremity artery or of carotid. Doppler of heart is not precise enough to show anything useful.