skysight-inc/HackerNews huggingface dataset:
Somewhat related : are there any guides/tutorials about how to do secure file uploads in webapps and how to avoid obvious security pitfalls?

Reading the Django docs https://docs.djangoproject.com/en/2.1/topics/security/#user-... , specifically,

>Django’s media upload handling poses some vulnerabilities when that media is served in ways that do not follow security best practices. Specifically, an HTML file can be uploaded as an image if that file contains a valid PNG header followed by malicious HTML. This file will pass verification of the library that Django uses for ImageField image processing (Pillow). When this file is subsequently displayed to a user, it may be displayed as HTML depending on the type and configuration of your web server.

is a little concerning. They recommend serving images from a different domain and whitelist file types. Is that enough? Anything else needs to be done to improve security? Does handling uploads alone give attackers an RCE oppurtunity or is it safe to handle files in the server and then upload to aws s3?
I used to work for a bankruptcy attorney, you have no idea. Everyone is drowning.

PSA: Evaluate your spending habits and make sure you have an emergency fund.
Brexit and myths of Englishness
In the future identities will belong to groups of people, not individuals. It will be like that episode of cracked where everyone is one of the characters on friends. Something weird is happening with society where as the internet connects us there are ways of doing things that win out on huge scales. It's like we're outsourcing our personalities, hobbies, likes and dislikes, etc. Powers that be want more control. They don't want us to be individuals. They want us to be neurons. We're taking a sick turn that's a hundred times worse than anything Orwell could have imagined.
> You live in a society. Your actions have consequences, and if you can ignore that to get your fat paycheck then I can certainly judge the shit out of you, without a very high chair.

My actions don't involve the harm of others, outside of their fragile egos and obsession with what they think should be their rights. I couldn't possibly care less about your judgement.

> The fact that you claim rational discourse has ended when people invoke the lessons of Nuremberg - “because Godwin’s law” - is a stain on, and reflection of your own character.

The fact that you think an argument about a subject with a variety of opinions deserves comparison to one of the most horrible events in human history is a reflection on your character.

> Godwin compares people to Nazis sometime himself you know, when there’s a call for it. When this many people are calling you on it, maybe you should be listening a little better..

It's valid when their behavior is something akin to Nazism. Not very many people are calling me on it... on the contrary, my post is getting upvoted. Because the reality of the situation is, targeted advertising is a topic that needs discussion but it has no place in a comparison with the death of millions of people because of their heritage/religion.

It's pathetic hyperbole people use when they can't win an argument on its merits.
It should be said, despite the massive stupidity of how AOL handled what they bought, that their primary motivation might have been to use it as a bargaining chip with Microsoft: "play nice, or we'll make Netscape the default browser for AOL". At the time, that would have made IE a minority browser again, IIRC.
Admittedly I only read about half the article and skimmed the rest, but this seems like kind of a nothingburger, in the parlance of our times. So a couple of bombs were set off in space for research purposes, in an environment already permeated with radiation. Is this supposed to be morally worse than setting them off on the ground, where people actualy live? What's the actual controversy here?

Please consider answering my question rather than mindlessly downvoting. I'm genuinely curious.
I don't know. Maybe lawn care professionals know more about the best tools for lawn care than us hipster bloggers, engineer coders and Atlantic Media editors. Maybe people who have never pushed a broom or a mower for a living or, in fact, done a single day of manual labor in their lives should be a bit more circumspect in their advice to those that have.

There are a lot of good discussions on HN but this one is so clueless, condescending and elitist it leaves me cold. Its like running across a thread in a lawn care forum complaining that programers are lazy and stupid for using an IDE and decreeing all coding henceforth should be done only with vi, make and in assembly.
This is really interesting and I hope it does well! Are you considering refining the domains at all, like say splitting development and technology into machine learning, devops, webdev, etc?
Isn’t this similar to the Theranos tech?
Programming – copying data from spreadsheets into SQL
There is one additional perk to exercise as opposed to tasks. Work tends to involve straining physical repetitive labor. Dedicated exercise can be more targeted and fits differing constraints. Of course vanity is part of the reason for that optimization - just like a full body tan is more 'fashionable' than a farmer's tan working out can focus more on 'mirror muscles' than practicality.

Just look at Olympic weightlifters - they tend to look plump but they certainly are well strong as Olympic weightlifters.
Thank you so much for letting me know!
AOL was Goto's biggest customer. Later renamed Overture Services. That was well before 2004.

Goto/Overture owned the patent on search advertising, which Google eventually settled legal proceedings regarding. And this is how Yahoo, when they bought Overture, got a bunch of Google stock if memory serves.

Anyway here is the AOL search advertising deal, or one of them. 2000 and they certainly knew of it before that:

https://www.ectnews.com/story/4194.html
Fcc-git-nomic
If you find this kind of stuff interesting you may like this blog series on creative development for Moon (2009): http://www.gavinrothery.com/they-never-went-to-the-moon

Lots of interesting insight into production tricks used for a modern low-budget sci-fi film. Including graphic/motion design, sets and visual effects.
Steve Yegge: Jeff Bezos, Jack Ma, and the Quest to Kill EBay
I've found Hashicorp's support to be superior to paid AWS support. YMMV.
Here’s a start: https://mobile.twitter.com/olemoudi/status/10239768976618700...
> If you have a neighbor overusing them then that is an issue to take up with them directly.

To be sure, a problem between one individual and another is probably a matter for individual rectification. However, as the other comments here indicate, this is a systemic, not an individual, problem; and it is for precisely such problems that regulation is meant.

(Regulation also answers the question: whose problem is it? If my neighbour wants to use a leaf blower, and I think it's too loud, then we might find a compromise. If some external company wants to use a leaf blower, then good luck negotiating a compromise with them; they have no sense of neighbourliness or community to which to appeal. Regulations provide a well defined sense of who is (legally) right, and so a replacement for that missing sense of community.)
Most people seem to do #4 first; which includes a "how much do you want to spend" but then is easily passed to "how much can you afford" then to 1,2,3.
If each of you had the chance to blow around piles of leaves with a Stihl BR700 for an hour or so you’d recant these blasphemous internet comments.
Judging by the github contributors page there were really only 2 major contributors (including the author), so slim pickings to find a new leader.
For the reward. Cruise produced the movie in bigger part. The more money they spent, the bigger write off they got. At least I was explain it that way by a friend who happens to direct in Hollywood for about 12 years now.
I don't want to ban leaf blowers, but I want to ban leaf blowers.

Maybe it's different elsewhere, but in California it seems our obsession with landscaping is pretty out of hand. It's normal for people in SoCal to hire workers who use multiple leaf blowers at once, and just walking by them is unpleasant to almost all the senses; the exhaust smells, the dust is dusty, they're loud as, and totally distracting from the scenery we should be enjoying. Property values must be maximized, thus all hedges must be cut to 90 degree angles with no rogue twigs or leaves. Let's not even get started on lawnmowing.

Oh god, the noise! One of the reasons I found it hard to consistently work from home was the fact that gardeners are basically present blowing leaves somewhere nearby every day. I could never escape them... I'd decide to take a break from work and shoot some hoops at the park down the road, only for there to be more gardeners there blowing leaves and mowing lawns.

Are a few leaves or grass trimmings here and there really so offensive to people? It's nature, and after a few days the wind or foot traffic will kick that stuff to the side. If the leaves must be blown, can the landscaping be at least limited to one day of the week so the other 7 days can be free of extra noise and dust?

If only we spent as much money collectively on the homeless problem and picking up actual trash as we do on the sisyphean task of blowing leaves.
Yah this is ridiculous - 99% of the price change in bitcoin is entirely unrelated to the money supply. At most 1% and almost certainly significantly less is related to it. Bitcoin's price change is due to speculation plain and simple.

There is a good amount of what's posted here about the financial system that is true, and a good bunch isn't.

Bitcoin has gone up thousands of percent in a few years, gold has barely moved. Trying to claim Bitcoin's movement is due to money supply reasons makes zero space.
Super cool! That being said, Raspbian latest update have been killing my wifi cards...for some reason none of my old realtek usb wifi dongle works anymore. I had to flash one of the older images (June). Anyone else have this problem?
Bitcoin Crashes Below Energy Cost
>Q: What's a portal?

Alexa, Ok Google, App Stores, AMP and it's relationship with carousel widgets, etc.
If interest rates go up causing people not to be able to afford their payments, those condos will sell -- after the mortgages have been foreclosed. Was in London in 1992, just before the pound was removed from the European exchange rate mechanism. Very instructive.

Now is a particularly dangerous time to overextend yourself on a mortgage. For any realistic scenario, interest rates will never be lower than they are now. People ridiculously short terms on their mortgages (like 5 years or less). On top of that they are encouraged to take floating rates to shave a little bit off. If you end up with $1 million in debt and the interest rate jumps up to 5% (or 10%... or like London at the time I was there -- 18%!) what will you do? Of course you will have no choice but to default on your loan. House goes into a fire sale, but nobody can afford it with the higher rates, so it's sold for 10% or 20% or even 30% less than the original mortgage... And now, that's the price of houses -- Virtually everybody is more than $100K underwater at that point meaning that if you miss a payment, personal bankruptcy is probably your only hope.

Of course, it may not happen in our life times. That's the tricky bit.
30 minutes, if you're lucky. In SoCal, one set of gardeners might be done in that time, until another set rolls up another one of your neighbors yards and begins the process all over again. As I mentioned in another comment, this is one of the things that's made it tremendously difficult to work from home.
Oh! Good to know. Thank you!
I'd say that a whole generation of effects people took the Star Wars prequels to heart as to how too much CGI sucks.
AI Art just got awesome
Programming – how to delete old files with Powershell
China is creating concentration camps in Xinjiang
As an author of a book on a niche technical subject, the profit motive was not actually in the revenue from book sales, but rather the prestige associated with being the author of a book on something.
Why isn't there any public blowback regarding unequal pricing for public goods and services? They are mostly funded from income taxes which are not proportional to the amount of service thr payer gets at all.

Property taxes would actually be different. The more you own, the bigger the effort the state has to gear towards you to guarantee you your ownership. Laws, law enforcement, judges, fire department in case it catches fire etc.

Income taxes are the largest most discriminating schemes ever.
The model shots as CGI reminds me of RoboCop's "thermal vision". Renting an actual heat sensing camera was too expensive, so they just filmed people in black spandex covered in fluorescent paints under a black light.

It's clever, but I don't think it really holds up:
https://youtu.be/Md14H_qD8iQ

I always thought that shot looked weird, but I never questioned the wireframes in Escape From New York.
Doesn't sound like you broke it successfully. Hit me up if you want to talk, I've been there.
Venmo Caught Off Guard by Fraudsters
I have no idea where you would get mercury from a hydraulic system on anything. This story kind of sounds like urban legend, or the crew had no idea what they were taking apart.
>The crude little two-stroke engines used by most commercial backpack-style blowers are pollution bombs. “Simplest benchmark: running a leafblower for 30 minutes creates more emissions than driving a F-150 pickup truck 3800 miles,” Fallows writes. “About one-third of the gasoline that goes into this sort of engine is spewed out, unburned, in an aerosol mixed with oil in the exhaust.”

uh no
We tend to think that the state of technology is the main driving force enabling this to happen, but if you look at history it is far from the truth. For good or bad, the tolerant and complacent condition of modern life means that all those previous efforts by governments or ruling classes were unsuccessful and deemed to failure. Every time a system of oppression that restrained universal rights reached a critical point it eventually met with a greater force that eradicated it -- ironically many times spawned and fed by the very same apparatus devised for control that backfired.

Naively thinking this time it will be different is not understanding human nature.
There's a quote (attributed without evidence to half a dozen prominent historical figures) that probably applies here:

> Socialism never took root in America because the poor see themselves not as an exploited proletariat, but as temporarily embarrassed millionaires.
Ohh thank you! I suspected the one I saw was longer than 1 hour. Here's the link to the HOPE X one you mention:

https://www.youtube.com/watch?v=rOzrJjdZDRQ
Lots of previous discussions: https://hn.algolia.com/?query=integer%20sequences%20points%3...
Which is perfect for the government because everyone will change their behaviours to match what the government wants.
The Unabomber advocated disbanding industrialized agriculture which would starve most of the worlds population to death
HR platform recommendation
what's the best HR platform for a 10-people startup?
On the Potential and Limits of AI – The Facts Beneath the Hype
newton's method?
>...the system working as intended.

You raise a good point, but I’d still be wary of both possibilities. Or some hybrid mix where it’s the worst of both worlds simultaneously.
I can't help but think of the episode Majority Rule from The Orville, but more sinister and less campy...

https://m.imdb.com/title/tt6845666/
TLDR: Different kinds of wheat in the flour (softer, with less gluten). The soft wheat flour is sort of hard to get if you aren't a commercial baker, but you can get it on Amazon, although it's $10 instead of $2.50 like regular flour.
This reminds me of Blank Reg[1], from 1984's Max Headroom.[2]

The Blanks were people who have no record in the system.

Now that was a prescient TV show if I ever saw one.

[1] - http://www.maxheadroom.com/index.php?title=Episode_ABC.1.6:_...

[2] - https://en.wikipedia.org/wiki/Max_Headroom:_20_Minutes_into_...
>...so good that nobody needs to do such things anymore.

There is a lot of CGI that just looks fake. I would even say most, at least to me. I go back to Star Wars (ep 4). The physical models still look good. The original Blade Runner still looks good. I've also noticed that CGI movies look okay in the theater, but once they hit the high compression formats like Blu-ray or streaming, the CGI really becomes noticeable. The practical stuff still looks good in these formats. Go back and watch Hunt For Red October, and know that during the submarine underwater scenes are just physical models in rooms of smoke to simulate underwater. I really notice when they do 100% CGI characters like Spiderman and Hulk.
I recommend using Breathwork to make the difficult feelings of withdrawal “bigger”, to engage with them deeply.

You can do this on your own but I would suggest getting experience and practice with a guide.

This is the manual DIY version of psychedelic therapy that is so useful for healing the trauma beneath addiction.
Alzheimer's vaccine aims to cut dementia in half, may see human trials
Show HN is for sharing your own personal work. We got a complaint saying that this is not the submitter's work, so I've taken Show HN out of the title.

Posting as a Show HN something you didn't create is effectively taking credit for someone else's work, so please don't do that!

Please read the rules: https://news.ycombinator.com/showhn.html.
Exactly. I'm very happy with this turn of events. In repeatedly turning down the British Parliament's request to testify, Zuckerberg displayed a stunning level of arrogance, and brought this upon himself.
Also, 90% of sites these days try to access canvas, and don't break if disallowed - which probably means they try to fingerprint; this fingerprint is a '0-party' cookie, in that it correlates but isn't even stored on your machine.

Firefox has a setting to stop that in about:config, if you are interested.
Also there will be no way to organise one because the government will drop your social score for even thinking about it of talking to anyone else with a low score.
I appreciate the offer and you are of course right. I broke it but I did not get enough time in the "addiction-free" state before I returned to the circumstances that caused the addiction. Something like 1% of the time. I think I would need to be in at least 20-30% of the time to break the addiction.
> You know what you did wrongly to lose points, so that you can avoid it next time.

Except if you don't agree with the definition of "wrong" and "good".

THAT you can't correct.
Thanks for that, great read.

I think for my use case going with s3 will be easier and better for security. So how do I actually do it? Let users directly upload to s3 and have a lambda function call my server to store the url? If the image file is maliciously crafted, how does using s3 help, especially when serving the content? How can I set the headers when serving images from s3? And is there a way to identify that a specific user uploaded this file, so that I can have rate limiting? Is it possible to generate a signature or something to identify a user that I can decode server side to say "ok, this user uploaded the file and he is who he says he is". Maybe sign using the cookie that django sets for each user?
I imagine the author is talking about particulate emissions and unburnt VOCs, two things that won't make it out of the F150's tailpipe, and is asking us to ignore CO2. Under those constraints he's quite right.
But stocks have gone down considerably also. There are many things that cause volatility in crypto, but bear in mind stocks lost more than 2 trillion dollars in october. Several times the entire "market cap" of BTC.
Can bamboo be processed into regular rectangular shapes? Would be cool to see bamboo 2x4s. The specialization required to handle unique bamboo canes and the design constraints of its shape seems like it would cancel out its cost savings.
Trump climate report says damage is ‘intensifying across the country’
I think it does post-processing on the HTML once it has been generated.

ASP.Net works by generating an assembly from source files (like .cshtml) that essentially amounts to a whole bunch of `Response.Write("<HTML>")`. If it (Razor in this case) could be made aware of insignificant whitespace, it could omit the writes for whitespace.
Welcome to Capitalism 2.0.

Every consumer interaction now rates you as a customer. Amazon will drop you if you return too many things. Uber/Lyft have ratings systems. etc.

Until we start making the holding of personal information the equivalent of holding toxic sludge, nothing will change.
No need to use capital letters. I fully agree.
I certainly didn't wish to imply that abuse and trauma don't exist (don't we all have friends and family with horror stories?). And it seems obvious enough that trauma and abuse has hideous effects on people, including addiction.

I certainly can believe he was sad at 2 months old, for the reason given. I just find it unbelievable that that sadness became "buried trauma" that could be held in part responsible for neglecting his family later in life.

I originally said "if we look for trauma we can find it" which I wished to be the main point.

Dealing with trauma generally involves intensive therapy - maybe attention and help are the key - not finding "buried" trauma. E.g. the facility I am obliquely familiar with has a patient to staff ratio of 2:1, and is intensely into talking with patients.
PyTroll [1] (the parent org of SatPy) is one of my favorite examples of a project enabled by the open source model. There are only a handful of folks in each Scandinavian meteorological office that write software for processing satellite data. Open source let them work together without needing formal collaboration agreements (though those did come later).

[1] http://pytroll.github.io/
Its just that that's not how markets work. Prices go down in a competitive market ,and they go down over time. Cases where it doesn't go this way are usually monopolistic/rentist positions.
In the movie 2001, the computers feature flat screen displays because they were actually displaying rear projection film. This accidentally gave it a more futuristic look than later sci-fi’s such as Alien and Blade Runner which featured bulbous CRT computer screens.

Also, like in OP’s tweets, there were no actual computers involved in the production of 2001. All of the displayed 3D wireframe models were films of physical wireframe models.
Envelope analysis: signal analysis for detection of machine faults (1997)
> But all of those ancillary issues were about defending slavery as an economic and cultural institution.

It's insane how often this is disputed when the Confederate states explicitly asserted this in their various declarations of secession. Mississippi's, for example, begins[1]:

> In the momentous step, which our State has taken of dissolving its connection with the government of which we so long formed a part, it is but just that we should declare the prominent reasons which have induced our course.

> Our position is thoroughly identified with the institution of slavery - the greatest material interest of the world. Its labor supplies the product, which constitutes by far the largest and most important portions of commerce of the earth. These products are peculiar to the climate verging on the tropical regions, and by an imperious law of nature, none but the black race can bear exposure to the tropical sun. These products have become necessities of the world, and a blow at slavery is a blow at commerce and civilization.

[1] http://www.civil-war.net/pages/mississippi_declaration.asp