skysight-inc/HackerNews huggingface dataset:
Why do you assume he's a Republican? He didn't even mention Democrats. You don't have to be a Republican to see that many people on social media and in social media companies are close minded.

Jones was just the start. Why shouldn't conspiracy theorists have the right to use social media? What's next? Can they have a back account? Credit card? Just a month later, we had a huge purge on Facebook and Twitter, targeting mostly left wingers, libertarians and alternative news sites. Sure, some of these are wacky people, but some provided honest content from a different, anti-government viewpoint, like Dan Dicks from Press For Truth for example. Why shouldn't those voices be heard?
https://uk.pcmag.com/facebook/117908/news/facebook-purges-80...

https://www.rt.com/usa/441140-facebook-purge-victims-speak/

We should be careful cheering social media giants just banning people. It will backfire
Developer attitude towards spending money on software...

"Invented Here Syndrome" when it comes to the choice between writing 50 lines of code vs. pulling in 4mb of client side dependencies to use a giant 3rd party (yet Open Source and therefore Free!) library that incidentally offers a solution to the same problem, after about 50 lines of configuration.

vs.

"Not Invented Here Syndrome" for anything that involves paying money for anything. Such as that API that solves the exact problem that's blocking us from moving forward, offered by a company that does nothing but solve that problem for a living, because we might outgrow their Free Tier and therefore face potentially thousands of dollars of charges. Argued among half a dozen market-rate developers of a venture funded startup that could really do with having launched yesterday. Rather, let's pause to build our own version of that service first. Then build our product.

I tend to notice these things while working as a consultant, and thus something of a bystander in terms of being able to do anything about it.
> Asking for an independent third party verification is reasonable.

Not really, for the same reason they never should have sent the excess data in the first place... Why should he give up his privacy to some 3rd party company to help cover up their mistake?
Army might have found its new rifle in Colorado Springs garage
That's like 20k a year. So you'd need something like a 30k salary (before tax) just to break even. How much income would you be foregoing if one parent just stayed at home?
Wayland is just a set of protocol definitions.

You want to compare Arcan to a Wayland implementation. Like gnome-shell. Or weston.

Or Arcan. Adding Wayland support to Arcan has been a thing.
I can get value from 30m with my manager if he’s not otherwise available. If I sit next to him on a daily basis, not so much.
Hướng dẫn sử dụng thuốc omeprazole đúng cách
I recently asked work to replace my brand new Apple (with the infamous touch bar, 16GB, 256 SSD, etc etc) with a Lenovo Thinkpad X1 Carbon 6th Gen.

Couldn't be happier.

Got a 16 GB, i7, 512 GB NVMe SSD (no NVidia).

Brilliant laptop, fantastic screen, keyboard and the trackpad is very good - although I gotta hand it over to Apple, they do a great trackpad.

What surprised me most of all is battery life. I usually get in to work at 8 AM and by 12 PM it still running (about 10% or so left). I do have a few things running:

- postgres, redis, elastic search and kibana on Docker containers
- Terminator, VSCode, Firefox and Slack open all the time
- From time to time rails and rspec (guard)

Couldn't recommend it more. I'm running Arch + i3.

Good luck
Author of jQuery File Upload here.

The vulnerability is a combination of Apache v.2.3.9's default setting to not read .htaccess files and my mistake of relying on .htaccess to enforce security of the sample PHP upload component.

To give you some context on how this could happen:

- As the project name implies, this started as a client-side jQuery plugin, with a dummy PHP script to echo out the uploaded file

- Over time, I added a couple of sample server-side upload components, including two for Google App Engine (Python + Golang) - which I used for the demo - and one for PHP, which I never used myself in production

- I used the PHP component for local tests with various possible file uploads, including very large files and chunked uploads, which required enabling all file types for upload. My thinking was that allowing all file types for upload is not critical as long as the handling of those files is properly configured.

- Prior to adding the .htaccess file, I mistakenly assumed developers would configure their Apache server themselves so that no PHP scripts would be executed in the uploads folder. It was only added in this commit: https://github.com/blueimp/jQuery-File-Upload/commit/13931c7...

- The Apache servers I tested with always had support for .htaccess enabled, so I never bothered to check that the default Apache configuration since version 2.3.9 actually disabled it

- The original .htaccess configuration didn't even prevent script execution in all Apache configurations and had to be fixed, see: https://github.com/blueimp/jQuery-File-Upload/pull/3381

Looking back, there are a couple of things that I should have done differently:

- Move out the server-side components into separate repositories

- Inform users better about file upload security - see https://github.com/blueimp/jQuery-File-Upload/wiki/Security

- Never assume people actually read information about security

- Never rely on .htaccess for security configurations in Apache

- Make sure that published code is secure in all default configurations

- Never allow all file types for upload by default, even if it is secure in your configuration

- Recommend users to not upload files in the same root as their executable web application

- Always follow security best practices, even if it makes setup for users more difficult

I wanted to make it really simple for users to install a generic and secure file upload service with a great user interface.
Unfortunately, security best practices and ease-of-use are often at odds to each other.

Bonus info:

The client-side component had a cross-site scripting vulnerability in the Iframe Transport HTML site back in 2012:
https://github.com/blueimp/jQuery-File-Upload/commit/4175032...

The App Engine components had an open redirect vulnerability back in 2015:
https://github.com/blueimp/jQuery-File-Upload/commit/f74d2a8...
These days I'm very cynical of the human race, but stories like this create a pinprick of light in the darkness.
Who knows. It was strange for me, too.
Side by side (watch the video, near the end). That increases the amount of room for impacts from the back, but not that for impacts from the front or the sides. I also couldn’t find any mention of airbags on that site.
And if that family does not work out the way old school romance books write about, then you are f-ed along with children. The father is f-ed too for that matter. Parental stress is game change for children who are more likely to become target of parental frustration. The divorce rates for young marriages are higher then those for people who marry older.

High school drop outs with or without children do very badly in this economy. But when you have children while relying on unstable minimum wage income from irregular hours, then it is all triple harder.

Lastly, teenage years are not biologically ideal. Teenagers have more pregnancy complications, including expensive ones and dangerous ones. As in, having child during your twenties is healthier for you and child. Both under 18 and over 35 are associated with more risks.
Something to do with acquiring a P45 as a noun, yes. P45 isn't itself a verb that means firing as I infer the OP to be saying.
I disagree with "I still feel people are looking for as much personal freedom as possible while maintaining high personal safety". If we're talking about leftists, not (classical) liberals, it is abundantly clear that they don't want personal freedom, but government control
Hawking backs assisted suicide
It's interesting that in hindsight, those were the times when US was most staunchly opposed to communism - yet everything written in this article makes me think of the way USSR treated its citizens. Yes, there were laws that protected you, yes you could appeal to courts and at least in theory your rights were always protected. In practice, it was the same as the situation in Texas - people put in charge of prisons or judges answered to absolutely no one and the laws were completely arbitrary and could be dismissed without any reason. The targeting of lawyers and demanding they be fired from institutions that employed them looked exactly the same under communist rule. In any case, what is described here seems more like a torture system, not a prison system - no wonder it had such poor rehabilitation rates.
Inside the poisonous British fight over transgender acceptance
If I knew then what I know now, would I ever have started a Makerspace?

I've been running a small space for the last 4 years, and it's lost a lot of its magic for me. I used to have high hopes of inspiring others to create. It's very rarely like that. Many times it's cleaning up others messes, or fighting to grow with no resources.

Once in a while though, someone's eyes light up when they see the possibilities in the waterjet or laser or 3D printer...

Sometimes it's worth it. Most times it's not.
5 practical operability techniques for teams
Sorry to hear about your ordeal. With my experience of working from both sides of the table, I can say for sure that you get what you pay for. Quality is not cheap. Companies in the west usually think that outsourcing to Asia and Eastern Europe would mean they can hire slave labor and pay peanuts for work that would cost an arm and a leg back home. As I said, you get what you pay for.

I am working with clients in the US, Europe and Australia. I know my limitations and never bid for work that me, or my team, can't deliver. This is why I have clients giving repeat work since last 7-8 years.
Plus it opens up dangerous precedence. "Oops, here's some confidential data you never asked for, let me send a couple guys to scan your hard drives".
Have you used the OneBusAway app? It's accurate for the buses I take. Is it inaccurate for your routes?
Bigbasket’s Experience with Istio
Very inspiring. Why don't someone attempt utilizing all ML advances in driving/OCR to make this work even when offline? This could pre-eliminate lot of cases.
There is a bunch of ML/EEG devices on the market, it is a commodity technology by now, just google "fda machine learning eeg".
PUBLIC Copy of Multi-Site High Availability
It looks great. It could be interesting to use this to transform markdown documents to pdf.
> The list of accidents is so large that the US has to create separate wikipedia pages for every 25 year span.

Actually it has a separate list page for each year since 2000. And the 25-year lists before ("List of pipeline accidents in the United States (1975–1999)" etc.) are huge lists.
Testing Kubernetes RBAC
Previously on HN:.

- Alzheimer's caused by dirty air. https://news.ycombinator.com/item?id=18230932

- Alzheimer's caused by lack of sleep.

https://news.ycombinator.com/item?id=18228627

There's mounting evidence that "health news" is neither healthy nor news.
Sure but you CAN install unsigned drivers if you want.

Windows is pretty open about this, Apple is a walled garden. Safe but boring.
Discipline? Muhaha, I just don't want to be a vegan. Really love to eat meat.
Took me while to find just the TTFs...

Here if anyone else just wants the fonts:
https://go.googlesource.com/image/+/master/font/gofont/ttfs
/

Edit: They don't work with Windows. :(
I probably suck as a manager because I have it much less often. I have about 15 direct reports and there is no chance at all I can spend time to meet each one on one biweekly or similar. However I am quite present and interact daily with all of them so I have got their trust I think.
ORM: We Approve
The problem is coordinating rendering between components. React and similar frameworks optimise performance by batching DOM updates in one big read-compute-write cycle. With web components that don't share centralised DOM manipulation code its hard to see how that would work, and this can be a big performance problem.
Old people often don't use that many resources either at least while they are in good health. Most of the costs are associated with the last year or two of life. SO that expense is already committed to when they born.
Only slightly off topic I recently get to know about a technique in (industrial) manufacturing, friction forging:

https://www.diamondbladeknives.com/Friction-Forging

cannot say if it actually delivers what it promises, but the video is interesting.
Just having a thorough writeup describing how Arcan and Wayland differ in their overlapping areas would be useful in comparing how their architectures differ.

I understand Arcan is larger in scope than Wayland, but Arcan must have a protocol and architecture behind said protocol that can be meaningfully compared to Wayland's.
1:1 are opportunities to share ideas, concerns, mentoring, etc.

The format is important: keep it relevant, respectful, constructive, honest and confidential.

That means: no gossip, no rumors, no ranting, no empty promises, no disclosure of information from other 1:1s. Few minutes of casual talk is fine, but cannot use up all the time.
> I have never assumed that an email address I gave the government would be protected. I would also not assume that the contents of any email I sent would be in any way protected either.

I have similar assumptions, but what about the less technically inclined citizens?

Moreover, I wouldn't be surprised if the ploy described by the OP:

> Could I request this data myself, then start emailing them scam emails "I know you contacted us in June, could you call me on 555-1223 etc"

would work on me. Really, it would take me checking DKIM and/or SPF to notice such an email. And from this story it seems likely the city of Seattle doesn't actually implement DKIM or SPF.
Your bio says "Lives in Kolkata, India."

Anything about life in India as a developer, how the culture is different to western etc. Would be interesting.

Blog about stuff you know well and can share deeper insights into.
When you study the biographies of many successful geniuses (e.g. nobelprize winners) you will notice that many have been selftaught. They arrive at university already knowing everything, because they read important literature much earlier. They might have read books about calculus at the age of 13, read Einsteins publications at an age of 16 etc. . This gives them a big head start and that is why most of them succeed easily at university.
There might be a genetic reason, why people do this. But in addition they also need to have access to important literature early in their life (maybe due to a supporting teacher or parents, but also simply by free access to university and online libraries). Otherwise their talent will be wasted.
When taste and price of any "safe" kind of meat will be better, this issue solved. It's the only way.
Using Kubeless for Kubernetes Events
Think about it: you see your internet connection dying as proof when they could have just as easily booted you from the conference call raising much less suspicion. I see it as proof of the opposite, they had a far easier and more direct means at their disposal to achieve the effect you say they desired. So I really do not believe that it was anything other than bad timing, all that it would take for this to happen is for your provider to reset a router somewhere.

My residential connection here is pretty good, even so it goes up and down at least once every week or so whenever some firmware update is pushed to the router.
I'm still looking for a service like this, but that creates a nicely tagged PDF and conveys the HTML structure in the PDF tags.

Tagged PDFs are a requirement in many processes for accessibility or archival reasons.
I find wkhtmltopdf very difficult to work with, for instance the official documentation is just a man [1].

I discovered the project Weasyprint[2] a few months ago. I find it easier to use, and very powerful when using Python. You can define a custom loader to inject images or styles generated on the fly for instance.

There are still some missing features compared to wkhtmltopdf, such as defining a custom footer and header, but it's a very promising project.

[1] https://wkhtmltopdf.org/usage/wkhtmltopdf.txt

[2] https://github.com/Kozea/WeasyPrint/
People should read up on Galois theory and the story behind it. It involves a french youth, the french revolution, groundbreaking maths, and tangentially Poisson, Fourier and Cauchy, Gauss, Jacobi.

His life should be a movie. :-)
We all know that software devs love Apple because its a walled garden. No competition from F-droid or piracy to worry about it.
Kubehiera – port of Hiera for rendering Kubernetes configurations
Good to know, and yeah, at least someone knows what I meant.
hash@hash alone isn't enough. Keyed hashes, with a secret key might work.

The issue with hash@hash is that it is still possible to see whether a given person sent an email. Moreover, there are probably similar issues as with hashed_known_hosts as described in [1]. In short, the space of possible emails might be small enough to just brute-force search for all e-mails.

[1] https://news.ycombinator.com/item?id=18082033
Georgia Tech courses there are a nice intro https://www.coursera.org/gatech ... in particular the one by Prof Kalidindi for materials informatics once you are familiar with the general, underlying physics https://www.coursera.org/learn/material-informatics and then this for high-throughput experiments if you have your own lab https://www.coursera.org/learn/high-throughput
> if your company is using the emotional path they don't have anything to offer on the rational level.

Stealing this for my “don’t work for a startup” site!
Perhaps try and sell the story with some of the investigative podcasts / blogs? An apparent cover-up gets as much attraction as uncovered corruption. (As well it should).
This is probably why methylene blue works so well to treat it.

See http://journals.sagepub.com/doi/abs/10.3181/00379727-161-405... and http://taurx.com/phase-3.html
We are very excited because FreeWater is only the beginning. My vision is a highly profitable universal income. This concept has the ability to disrupt the entire retail industry because it's more than a business model, it's a new type of economic platform too!

In the beginning, our cartons will be manufactured at Tetra Pak. These cartons will be 70% renewable and are a big leap forward from plastic bottles. However, over time, our packaging is going to evolve into the world's first 100% hemp carton. This process won't be difficult because I have family who has been in the hemp industry the last 50 years. My godfather was the late Jack Heror who was the first person to legalize pot in America. The cap will also be made of hemp. You can read about the uses of hemp in my godfather's book called the Emperor Wears No Clothes. The beauty of making this out of hemp is that we will obtain CBD oil as a byproduct which will also be distibuted for free, but paid for by ads.

This business model is 10X more profitable than any retail company on Earth. Once we get going we are going to go public with a one-year public security offering that will fund our cultivation and growth. My wife is Serbian and it's 100% legal to cultivate hemp in her country. Farmland and labor is cheap so it seems like the right place to farm.

To be perfectly honest, I havn't considered different types of inks yet. Any suggestions?
Guys, it's HIPAA not HIPPA.
Did you actually give them that clone and sign the documents? Or did you give push back like in the article?

It feels to me like they shouldn't have much of a leg to stand on.
Sorry to spoil the party, but this is the old 19th century way of teaching quaternions (and also complex numbers). It is much easier to start with some https://en.wikipedia.org/wiki/Group_theory and then you understand that quaternions are simply matrices of a specific form: https://en.wikipedia.org/wiki/Quaternion#Matrix_representati... . Quaternion multiplication is simply matrix multiplication of these matrices. And that's it. No mysteries, this is just simple linear algebra (you do't even need complex numbers, the real representation is enough and makes the connection to 4d rotations manifest).
Given average Android phone lifespan of 21 months, this leads to $2 per month charge for each Android user in EU. Not big deal for most users. However, interestingly all the fines and taxes on corporations are always passed on to customers. When will EU understand in their quest to tax and fine the shit out of tech companies?
As an individual contributor, I deeply appreciate having 1:1s with an engineer who has taken on a career-mentoring role. It is useful to get feedback and especially to help me formulate plans for how to grow as an engineer.

When I start out with a new manager, I prefer going for a walk around the neighborhood. Now that I have built trust and gotten a sense for how he thinks about management, I'm shifting to setting an agenda several days in advance so that he can think about what advice to give or questions to ask to help me clarify my thinking and debug my approaches to problems.
If you are an IT professional in a tech-hub, do you want to work for a bit IT company or for the municipality?

In a similar vein, do you think the municipality wages are competitive with those from the tech companies?

I could see how being a tech-hub would function to draw a lot of talent out of a municipality.
I don't think it's good enough to say « it's still on the shoulders of the city for choosing the vendors ».

If I write a piece of software which is technically capable of meeting its requirements if you read the manual carefully enough, but in practice the intended users can't figure out how to do so, that piece of software is no good.

Similarly if the market is in principle providing IT vendors who are capable of providing a decent service, but in practice the purchasers can't figure out which ones they are or how to make them do so, the market has failed.
The Australian owner took it international, Gloria Jeans are apparently in 55 countries now. It was interesting to search for Gloria Jeans on Twitter and find most of the tweets were from places like Pakistan, Malaysia, Oman, Singapore & Fiji.

I'm particularly excited that Gloria Jeans is launching 40 stores in Germany soon [1], and also 13 stores in the UK next year [2].

(We don't have Starbucks in my city and I loved Gloria Jeans so much that I bought shares in the parent company, that's why I'm so interested in information about coffee shops & competitors. So far it's been the worst share investment I made though, the shares have crashed 90%!)

[1] https://www.insideretail.com.au/news/gloria-jeans-to-open-40...

[2] http://www.rfg.com.au/2018/05/22/gloria-jeans-coffees-open-f...
You know what, I hate fish and chips. Far too stodgy. The hit of deep fried carbs makes my mind feel fuzzy. It's not worth it for what's ultimately a bland meal. Maybe people who like acidic food can get past that with copious amounts of vinegar or lemon juice but I can't stand either so no hope there.

Maybe I just haven't had decent fish and chips. Most chip shops near me now double as cheap Chinese takeaways. Most have shocking food hygiene ratings.
In the Orthodox tradition, almost half the year—including nearly every Wednesday and Friday—is for fasting, which means vegan plus shellfish. It’s not considered radical at all.

(Incidentally, this is why Ethiopian food is so vegan-friendly!)
When the price corrects back to $0.50 I predict many current zealots will change their tune.
Steve Wozniak on Smart Watches, Motivating Engineers, Siri, and More
Erlang the language is a small part of Erlang the platform. Erlang the language is simple; Erlang + OTP + BEAM VM, which is what Erlang actually is, less so.