skysight-inc/HackerNews huggingface dataset:
None of what you're saying is wrong, but remember the context here when using the historical performance of markets to talk about these kinds of hard-and-fast rules. The period for which we have market data also spans: the period with the fastest growth in global population, including population growth in developed markets; the outbreak of extended peace between world powers; and roughly tracks human exploitation of fossil fuels.

Which is not to say that this is for sure coming to an end (hopefully not peace!), but it's impossible to know that there will be similar growth going forward. Population may level off (in advanced economies, this appears to have happened), and while we may well find new energy sources and technologies, it's not likely any will offer the massive productivity gains seen in the advent of fossil fuel and the the internet.
Please don't quote text with code blocks:

> The task scheduler service has an alpc endpoint, supporting the method “SchRpcSetSecurity”. The prototype looks like this:

long _SchRpcSetSecurity(
[in][string] wchar_t* arg_1, //Task name
[in][string] wchar_t* arg_2, //Security Descriptor string
[in]long arg_3);

> Tasks created by the task scheduler will create a corresponding folder/file in c:\windows\system32\tasks. This function seems to be designed to write the DACL of tasks located there, and will do so while impersonating.

> However, for some reason it will also check if a .job file exists under c:\windows\tasks and try to set the DACL while not impersonating.

> Since a user, and even a user belonging to the guests group can create files in this folder, we can simply create a hardlink to another file (all we need is read access). Because of the hardlink, we can let the task scheduler write an arbitrary DACL (see second parameter of SchRpcSetSecurity) to a file of our choosing.

> So any file that we have read access over as a user and that system has the write DACL permission for, we can pivot into full control and overwrite it.
You forgot the 15-inch, so make that six.
Mino  Games (YC W11) is hiring gameplay programmers in Montreal
Retail cost for Lactated Ringer's solution, injectable (basic saline fluid for IV) was over $40/liter in qty 12 liters about 3 years ago. I can imagine it has gone up since then.

The use of the health care system to extract every single excess dollar from the middle class extends to many, many layers of the supply and service chain. It may be that the saline was "merely" marked up by a factor of 2x.
This is why I plan on moving to Texas: creditor protection.

At any point in time I could require medical services and have medical service providers simply decide that I owe them a truly massive amount of money. The only route I have to mitigate that risk is through creditor protection laws.

In Texas, wage garnishment is limited to child support, unpaid taxes, and some other limited categories that medical billing doesn't have access to. Creditors can sue you, but they can only seize bank accounts, brokerage accounts, and the like - your primary residence is completely exempt, as are employer-sponsored retirement plans and IRAs.

So my emergency medical debt plan is to liquidate all taxable investments and close out bank accounts, send the cash from that to pay down a mortgage, and tell them to pound sand. The only real consequence is having to head to Walmart each month to cash paychecks and mail out money orders to pay bills.
Belgian eID is similar. But the state crippled the ability to sign with it, because they wanted to have control over authorisation.
Sales Performance Improvement
Exact same thing happened to me. I went last April and just now got it all "fixed". I ended up negotiating with the hospital, the contracting company for the hospital's ER department, and my insurance on the phone at the same time to reduce the cost to what the contracting company's ER doctor on staff would normally bill the insurance company and paid that out of pocket.

I guess you have to ask if the doctor who may or may not see you depending on what you're in for also takes your insurance? I don't even know.
Exactly, it seems way too complex. I don't know why my insurance company can't give me a 9-digit number that is HASH(SSN + member_id) and tell me to use that instead of my SSN.
I don’t think many people get the fact that VSCode isn’t just a code editor. It does a lot more than just edit code. Language servers provide deep intellisense, refactoring, code lens, overviews etc. debug servers provide debugging functionality. Tons of plugins built on top of the extension points. Vscode itself is a light weight IDE with a bunch of extension points.

Emacs, vim, sublime are mostly text editors. If that’s what you really want: edit code with a whole bunch of shortcuts use that.

If you want a light weight IDE use vscode. Code editors are a subset of IDEs.

Two different things.
Yeah, try "US inventors" and the list of faces at the top you need to get to #9 before they're not white males.
Cary Fukunaga Doesn't Mind Taking Notes from Netflix's Algorithm
Heating via electrical resistance is 100% efficient. All energy goes into generating heat. There is no loss.

Gas heating is something like 90% efficient now.

People, stop. Downvoting doesn't change facts.
Doing so well, that one of the companies faced by a lawsuit from Segway just bought them (Xiaomi now owns Segway).
Netflix definitely found greenfield with their business model, however the next few years will be decided by who can create the best original content. Netflix has spent billions on content: signing popular writers / show runners to long term contracts and picking up movies in the indie scene for distribution. However I still don't think they've had a massive hit, nothing Netflix has made can touch Game of Thrones or the Sopranos for cultural impact, and critically even Amazon Studios has had an Oscar nominee (although I think Beasts of No Nation was robbed for not getting a best actor nom).

Disney is rolling out their own streaming service and I'd bet that eventually they will roll ESPN+ into the deal and maybe even ESPN entirely itself. I think once sports gets into the mix the entire streaming domain will radically change.
Why I Always Eat Pizza Hut in Beijing – Eater
But one can add checks after the design/features settle; it's not all or nothing. Using the mechanic analogy, if you are requesting a custom car, the mechanic can shape the look and feel first, and then verify everything once you made up your mind.

Most CRUD (such as tracking applications) is just marshaling attributes around and about, not really doing much math on them. Forced type checks can be repetitive busy work and hogs screen real-estate.
> How useful is a drone that relies on GPS signals that to this day are easily spoofed or jammed?

https://en.wikipedia.org/wiki/Inertial_navigation_system
IMO it's really the only compelling argument for HTTPS on sites that don't deal with traffic worth intercepting. Other than that, I agree with you re café Wi-fi, etc: the man-in-the-middle risk is so small and localized that it may as well not exist.
Hi Marijn, I rely on CodeMirror for a SaaS I run (from Berlin). I will donate what I can. Just one question and please don’t take this the wrong way, but can you provide an insight into how you got to 80k as the target amount?
and doesn't default to crashing your program if you forget to add a handle block

Is that a good thing?
The Boy Who Heard Too Much (2009)
Global market-cap weighted equity investment has done fine since 1989. And anyhow, Japan's lost decade is more of a central bank policy failure than anything else, and one that is unlikely to be repeated.

The pre-Soviet Russian stock market is probably a better example.
Actually, compressors use very little energy if you keep them running.

They use a lot of energy when they turn on initially, after that, its very little . Ive been working on smart thermostats that take advantage of this phenomenon to lower HVAC costs.
This is a govt arbitration headed up by a state committee that regulates insurance in the state.

It’s not forced arbitration at all. You can still sue them.
Remote code execution by hijacking an unclaimed S3 bucket in Rocket.Chat
> Health insurance companies are supposed to compete with each other based on their premium prices

It's not a market with particularly robust competition, due to small number of players, and barriers to entry, both natural (two-sided network effects, practical capital requirements) and regulatory.
> I guess I wish their original programming didn't skew so heavily that direction.

no it really did.

"Shipping" is a classic trope where 2 characters have a will they won't they relationship for several seasons. It is always a good B story to fill otherwise empty space with when writers run out of material.

The name literally implies what it is, you are "shipping" a script. quality is slightly irreverent
I'm curious if you learned anything from studying monoco-editor from VS Code? Do they use a different approach?
The article says that DDG was profitable since 2014.

I wonder just how profitable it is, and how soon would it be able to return the investments. A high investment load means that a company strives for an exit. I won't like DDG to be bought by whatever party.
Also the process of updating the snapshot should be dead simple!
I was very pleasantly surprised to find Hololens able to accommodate my glasses. Agreed wrt Rift.
I think it is an example of great preconditions for starting a company, even though it will be very challenging to make it work well. Basically, our technology is advanced enough to do this, but it so complicated that the percentage of people who can use it, rounding to the nearest, is 0%. I see it as similar to the situation with Dropbox when it was started, where it was possible to accomplish the same thing yourself -- if you have expert level ability in that specific area.

Observing how people get along with cryptocurrency wallet software, key management is a hurdle that many will fail to clear.
I'm not quite sure what this is exactly, but it sounds like they are providing a security "service", so all the "real identifiers" will be stored on their servers?

Why should an entire country trust them? I'm not saying they wouldn't be an improvement over Equifax, but it still sounds far from ideal. I think a hardware token would be preferable.
If you can, try getting a Sales/Partnership role for an early stage B2B startup. Pitching to CXOs of different bossinesses would push you to be coherent, concise, and confident about what's coming out of your mouth.
The not well-respected ones do a poor job that might look good from the outside, take your money and then disappear before you can sue them to get anything fixed.
Yes, 100% is inefficient because you can get higher ratios if you use heat pumps. The loss is that you are using more energy compared to how much energy you would use if you had a heat pump instead.
(disclaimer: I work @ VGS)

We are actually evaluating more recent advances in zero-knowledge systems. Stay tuned on more news soon in that front :)
You had me at "cloud providers". If you store the data on some cloud provider, then you are just as bad as what your prospective customers are doing.

I don't want any of my sensitive data stored on "some cloud provider".

Also, your security strategy apparently boils down to "we'll be REAL CAREFUL, pinky swear!"

That strategy does not work, and has never worked before. The whole reason why you think your product is needed is because your prospective customers do it just like that.

I'm stunned you found investors with this proposition.
Other examples of us trying to rationalize and systematize chaos: "the heliocentric model of the solar system", "physics", "economics", and "science."

I'm glad we try to understand the world and bend it to our will.
Not only this, but how credible is a government that explicitly operates only in the interests of particular identity groups? Why pay taxes if you are the outgroup?
Some products in Europe do use glucose-fructose syrup, but in general things like Coca-Cola will have sugar (sucrose) in them. If the sauce is imported from the US, and isn't specially manufactured for European markets, I'd expect the composition to be the same.
I have not built a house, but I have done enough renovations to know a few basic pointers:

* Buy extra materials than what you actually will need. If it's your first time doing a specific task, mistakes will happen, some will be costly, some, minor.

* Ensure you are building up to code. Make sure you read what your local residential building code specs are. Having things "not up to code" can be costly and fail inspections.

* Buying equipment over renting equipment: This is a personal preference, but I have exceeded the rental time limit and ended up paying more than to actually buy the actual equipment. This does not apply to all equipment. Preferably, it would be better if you know someone that owns the equipment. You won't have issues reselling used equipment.

* Don't be cheap on electrical wiring or water piping. Water or fire damage is obviously costly.

* Personal Tip: Consider space for a backyard and landscaping. Landscaping can be the best cost-to-return investment you can do in a property.

* Get a "contractor membership" at your hardware store of choice. You can end up saving some money with its discounts.

_Take my pointers with a grain of salt, this has been from personal experience and lessons learned the past 2 years._
Can it edit the files on a server directly or you have to do that part yourself? Or are there any projects that I could self-host and let me edit the files on a server folder? Thanks.
> Except the insurance market doesn't work like that. You get a job, that job determines your insurance.

That's not really the source of the lack of competition, as employers are motivated to minimize rates for what they ger, whether they are seeking to fulfill a government minimum-coverage mandate or provide a competitive benefit to attract/retain staff.

(It is a source of some other problems, just not the one at issue.)
That is not the only difference. Exceptions travel through calling functions if there is no catch clause. The check construct does not.
What about this market seems free? The entry barriers for competition are so high, the only players are the well established, and much more importantly, well connected. And they can freely abuse the system with almost zero market or political repercussions. On a side note there is no industry more heavily regulated than the medical industry. Coincidence?
> I've suddenly started seeing this take all over the place and I have no idea where it comes from because it doesn't make sense. That the insurance companies profit margins are restricted means rather little because executive pay isn't capped: if they earn too much money, they can simply pay bonuses to raise their expenses. Or cut shareholders a check. Or. Or. Or. Tangentially, this is why "non-profit" doesn't mean what people think it means.

This is not correct, as I understand it. Under the ACA (Obamacare), health plan providers had to ensure that at least 80% of premiums were paid out for patient services. That leaves 20% for overheard, including profit and compensation.

The "trick" here is that service providers (doctors, hospitals, MRI facilities, labs, etc.) are not limited in this way (except by "usual and customary" terms where applicable), and there are LOTS of layers of providers. So in the end you can get many multiples of actual costs by simply washing the underlying treatment or service through 5 or so layers of providers.
I’m talking about your traditional rails app with classic templates views and controllers (no SPA) vs. react + node (express) stack.
From last year, but I compiled some objective metrics of higher education standards eroding: https://medium.com/@simon.sarris/higher-education-erodes-a7c...
This is the default behavior of the new check system. If you don't handle it at the bottom of the stack it is propagated up the stack to the caller automatically. Not sure how easy this will be to debug since it doesn't capture a stack trace at the bottom and it won't be obvious where the error started.
I wonder how this differs from the usual McMaster Carr table which has the benefit of an actually smooth/consistent surface https://www.mcmaster.com/#6124T5 and in general just seems like a better deal.
Did you try that code? I tried it in the browser console on this very page and it throws a security error in Firefox. It throws a null error in Chrome, so I modified the code so that the form actually has a method and an action, but it still fails. Chrome throws valid error messaging if the iframe action is not https but the actual page is. Otherwise Chrome still throws an error, but the response is not intelligible if the domain has no HTTP content security header. If the site has a content security header then the error message is valid:

Refused to display 'https://www.cnn.com/' in a frame because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'self' https://*.cnn.com:* http://*.cnn.com https://*.cnn.io:* http://*.cnn.io:* *.turner.com:* courageousstudio.com".

Cross origin still applies. This is not something the browser will let you bypass.

Here is the code I tested with:

var f = document.createElement("iframe"); f.style.display = "none"; document.body.appendChild(f);var f_doc = f.contentDocument; f_doc.getElementsByTagName("body")[0].innerHTML = "<form method='post' action='https://cnn.com'></form>"; f_doc.getElementsByTagName("body")[0].getElementsByTagName("form")[0].submit(); f_doc = null;

I know everybody on here is a CCIE, CISSP, and a client side JavaScript expert, but I promise none of these violations work. If they did work the malicious actor would be stealing far more than simple form data and the web would be completely broken.

HTTPS is important because it prevents data from moving across the wire as plain text for everybody to see. It isn't magic.

https://en.wikipedia.org/wiki/Content_Security_Policy
Sounds like a good plan. They should add that to the bottom of the bill "Pay with <credit card co> and get a free ticket to Fresno!".
It never existed and was never going to exist, except as marketing and investor hype. Same with their fiber-scanning display, and everything else that doesn’t add up to, “like a Hololens, but with a much dimmer view of the real world and more useless patents.”

https://www.kguttag.com/2018/08/27/palmer-luckey-founder-of-...

Quote from Palmer Luckey in that blog: “The ML1 is a not a “lightfield projector” or display by any broadly accepted definition, and as a Bi-Focal Display, only solves vergence-accommodation conflict in contrived demos that put all UI and environmental elements at one of two focus planes. Mismatch occurs at all other depths. In much the same way, a broken clock displays the correct time twice a day.“

Downvotes aside, are there any actual counterpoints to be offered to this critique? It is like a Hololens, it does have a dimmer view, it doesn’t match their many promises and early patents, it is slightly cheaper and has a slightly better FOV than HL, but it’s also wired to their Lightpack. All in all I’d say the investors should be carrying pitchforks and torches.
Very much so. Netflix was strong when they ran the DVD business as they could show almost anything simply by buying a copy. But the licensing deals have obscure time limits (and once the licensors saw how Netflix was doing they of course raised the prices, held back key content, shortened the windows etc).

They downside of showing only your own content is that you need a pretty high percentage of winners (diversity of viewers increases your odds, but still). A "drought" can kill you. And as a result, Paramount, 20th century Fox, MGM etc are irrelevant to the viewers' choices.
"But if the medical costs increase without a corresponding premium increase, the insurance company won't see any profits."

That almost never happens.
How true is that? Poor people just don't vote, period. They're overworked, politicians don't listen to them, and in many states there are institutional barriers to casting a ballot even if one wanted to.

And it's not necessarily true among those who do vote either:

https://krugman.blogs.nytimes.com/2007/09/24/bubba-isnt-who-...

It's an old article and I don't doubt that 2016 has messed with the numbers, but the narrative of poor rednecks screwing themselves over every election is largely unfounded and smacks of classism.
> No response so far from the official channel of Chinese government.

So? Do they ever respond to anything? At the core of a communist regime is secrecy. They seldom respond to any request for information or allegations, and when they do respond to anything, it is usually by way of exerting (physical) force or a war.
What you're saying is precisely why I'm saying it's a usability problem, not a technical one. We have the technology, yes. This company is not that technology. The company we should fund is the one that solves the usability problem, not one which moves the goalposts to a different centralized point of failure.

The ideal solution would look like the ApplePay protocol - there is a PKI and cryptographic authentication, but users (and receiving vendors) never need to know what a digital signature even is. I agree with you that trying to get users to handle their own key management is a complete non-starter.
Who said anything about bribes? A politician runs on a reform agenda. Some hospitals put together an advertisement where concerned doctors say that the plan is "Not right for America". People trust doctors more than politicians so the reformer loses the election. Politicians know this so they don't try any reform that will reduce profits too much.
No, I did not know of Scheme's original goal, and we had never heard of the actor model when doing Erlang. And we wouldn't have cared either. :-)
I strongly agree with everything you said except forcing everyone to healthcare.gov. A free market for insurance can and should exist without the need for a government run website/market
I stayed away from Core because of the issues you mention, but it's gotten a lot better recently.

Did a POC for an API that wouldn't break anything if it had to be reworked, and it was a breeze.

Of course, if Node works for you, then it does :) but my recent experience is that Core has gotten better and merits consideration.
Just donated what I can for now. I've used CM in a number of projects over the years and it's quite enjoyable once you get used to it, the feature set is comparatively large, and the defaults are quite good. If you're willing to go the extra mile, the customization runs deep. Good luck on v6 guys, looking forward to it.
Why certificate pinning with HPKP is a bad idea
If an organization is deciding between interacting with VGS hashes/tokens having to proxy requests or deploying a secret store like HashiCorp vault what are the pros/cons?

> When it’s time to bill your insurance company, their “reimbursement” code goes through VGS which “reveals” the token and sends the real version to the insurance company.

Forgive me if I am wrong, but that means all 3rd party integrations that require the sensitive values must be implemented by VGS correct?
Is this person trans? I didn't know until you said something..
The default handler just propagates the error up to the caller.