skysight-inc/HackerNews huggingface dataset:
The prevalence of planets around other suns. The exchange of physical material between planets. The recent visit by an extra-solar asteroid, which if it had been involved in a collision could have ended up in part on our planets.
The frequency of protein and DNA precursors in ordinary organic chemistry.

I think of the early history of our own planet. Sun and shade, heat and cold, tides causing wet and dry in phases unsynchronized with the other effect. A tiny random chemistry lab on every grain of sand on every beach for a billion years. What are the odds that life wouldn't happen? A more interesting statistic in my view.
What are the alternatives to Amazon? I'm sick of having to deal with fake reviews and potentially fake products. Nowadays I don't purchase anything critical on Amazon due to these sorts of problems.

Amazon doesn't seem to be at all interested in tackling these issues - it's only a matter of time before it degrades completely into something like AliExpress.
I guess that was supposed to be a joke as many expect no more books (of the series) are to be published
Predicting a value is not the same as accounting.
> Also, serving a 3rd party script from the 1st party's domain gives the 3rd party permission to make ajax calls to the 1st party domain, which may open up security holes.

What do you mean? The 3rd script served from 3rd party domain will still execute under 1st party domain in the client's browser and that's the origin that the server sees. It doesn't prevent the scripts from calling 1st party server.
Right. I think anybody reading comments in these review sites can see if students are ranking professors well for being "easy" or if they're ranking them well for being great educators.

The universities I went to for my undergrad and graduate programs both had an informal rating system for professors and I definitely encountered some of both.

One of the most highly rated professors I encountered was also one of the best educators at the school. He had a reputation as being a brutally hard grader. But most of the students who left his classes with some bruises and (what would have been in any other class) a mediocre grade, ached to take more from him because you felt the immense value of his teaching.

I had other professors who taught poorly, tolerated cheating, or gave non-sequitur exams on material they never covered and so on. There was absolutely no recourse or way of providing feedback on these professors and even ones who received universally poor reviews at the end of the semester stayed on and even attained tenure in some cases.

The only real recourse was for students to rank professors amongst themselves and simply starve out poor professors with lack of registrations. That's the only signal universities seem to respond to.
I've never particularly cared or been much knowledgeable about poetry, but thanks for introducing me to this beautiful one. :)
I don't agree with it but cross promotion of products a company sells is at least a little more reasonable.
I'm starting to shop more at other online retailers. Stories like this drive me further away from Amazon. I'd rather buy directly from a vendor.
I like when I get downvoted for asking a question
> That's not how life expectancy works.

Well, actually, the linked article highlighted an increase in suicides as a factor in the declining life expectancy.
> is very similar to having non-HTTPS connections in your website

I am very into the idea of doing integrity checks on web pages, I think that it's an important direction for the web to move (for multiple reasons) and will improve security a ton. I'd love for browsers to start adding 1st party support for stuff like that; I've even thought about trying to build an extension or something for my own personal use. 100% on board.

But... nah, I don't think these risks are comparable. Removing HTTPS is much more dangerous than shipping code without an integrity check. With an integrity check, you're just checking to see if the code has been changed. Without HTTPS, it's not just the code that could be changed -- anything on the page including your actual requests can be captured and changed. Plus all of your data can be read as well.

With HTTPS, the only fear is that the website itself is compromised. That's a valid fear, but it's so much smaller than the fear that anyone along the entire chain of you to your router to anyone between you and the website server could be compromised.
30,000 empty homes and nowhere to live: inside Dublin’s housing crisis
Agreed, and increased connectivity and social media has only exacerbated the problem. People are all too eager to spend too much time measuring themselves against others instead of putting that effort toward introspection and improvement.
You can sign up for an account to see the bug report status. The patch has not yet been backported.
Yes, it's not sold directly by Amazon but by a 3rd party named "BREED". That should be your red flag.
Amusingly, if a European citizen is not in Europe, they are also covered, so IP banning Europe will not help you.
I don't know what your comment was. My reply was a preemptive response to the inevitable course this topic always takes. It's always a nice take on academically Missing the Point.

>acknowledge the important role it has played in our collective history.

It has played an important role. Just not with the connotation you're thinking of.
Soft Silicone Pneumatics Are 3D-printed in a Tub of Gel
WordPress 5.0 Release Candidate
Why do you think he "only" downloaded the source ? He wrote:

I got 1.2 GB of data to go through. The data-set
contained:

Wordpress configuration files (yes, they use Wordpress)
including hashed user credentials for the backend login

Database passwords for production databases

Log files

A lot of PHP source code
(who could have guessed?!)

much more …
> "SRI has been available for two years and it still isn't being used enough."

Two years is relatively fresh. There's probably a significant amount of customers with browsers that don't support this.

Can't we just implement a simple poor-man's SRI ourselves? Download the 3rd-party script, hash it, check hash, proceed to exec() if all is well? This should be supported by much older browsers.
Really, so, you are truly allowed to serve code from random CDNs??? That's really something. I never could've imagined that.
With driving people think they are in control and that safety is determined by their own skills. When you sit in a plane you are at the mercy of the airline and the pilot. I would more compare it to buying a car. And there are a lot of safety regulations on cars. When you buy a car you know that the steering or brakes won't fail randomly.
Does this count?

https://efficiencyiseverything.com/time/
It seems like they could add a parenthetic which is more specific to help those of us who actually understand the question gauge for others who ask.

As it stands if my mother asked whether this means her password is protected, my answer realistically is "No". Her passwords are not great (it is, after all, not a great sign that I'm saying "her passwords" meaning I know what they are) but they're not in the Pwned Passwords list for example, still a reasonable brute force of MD5 would get most of them. Whereas if they said they had even a crummy salted and pessimised hash, say PHK-MD5-crypt, I'd feel comfortable saying that "Yes", nobody is going to break her password. Which isn't to say nobody could in theory, just that salt means they'd need to target her and pessimisation means it'd cost money, and so why her?

I guess the reason not to is that it invites Monday Morning Quarterbacks. "Oh, why did they use PBKDF2 with this many rounds? Why not Bcrypt? Why not not Argon2?" and so on.
Open your own brand store on eBay and ship stuff yourself. Lots of smaller e-commerce retailers do it. Many current Amazon sellers also sell on eBay. Unless you're relying on Amazon to hold your inventory it doesn't make sense not to sell on every platform you can.
The others I get but what is the problem with Apple?
I know what I'm about!
Any good literature how a proper Linux only landscape is maintained?

Previously I had an AD domain running (to integrate Win7 machines) via Samba4. When I switched the Win7 machines to Linux, I found usage awkward (performance, strange user names such as name@domain.local, slow shares). I switched to local users and sshfs instead of shares. This would make for a more convoluted onboarding of new users (which is not a use case for me). However I'd be interested how this would be solved in an Enterprise environment.
Aztec Protocol WP: Zero Knowledge Privacy Protocol for Ethereum [pdf]
This isn't an engineering failure, but a failure of management. Non-technical management has no clue how expensive it is to properly maintain a system and design it for security when all they can see is an output of a widget. In almost every case, it is non-technical management who decide when work stops not the engineer tasked with building it.

With that being said, the only way change will come is either through government intervention (but they barely understand the internet, so good luck) or through organized labor movements that then codify it into law. However, there is a large anti-union block within technology so that has it's own challenges.

Realistically, nothing will happen within our life time unless there is a crisis that changes the norms or a particularly likable person makes it their life mission.
If no mitochondrial DNA is inherited from the father, why should it matter who anyone's father is?
And how do you know the browser plugin source code have not changed?
Roald Dahl wrote James and the Giant peach when he was 45, and the rest is history.

https://en.wikipedia.org/wiki/Roald_Dahl_bibliography
With a bank balance on a computer.
How to Protect Your Privacy on Linkedin
I still find value in specific things, like subscriptions for common household items; however, I am inclined to agree with you on most tech items and other goods that are easy to counterfeit. Not worth the risk and hassle vs spending a little more to circumvent that grief.
There are a ton of regulations for dangerous workplaces. Without them we would still see people get killed by machines in factories or poisoned by vapors.
Can someone explain the link of the lowered life expectancy to flu and pneumonia? I thought that these were deceases that were only fatal for people with compromised immunity.
Very roughly without knowing details: probably the Julia implementation can be tuned to get close to 3 GFLOPS; it's not that the language has limitations to get above this 100MFLOPS whereas in Python 4MFLOPS might potentially be the best you can get.

Care to share your code and see if it can be improved upon?
I think we've reached the point of diminishing marginal returns to health care spending. That means when we spend more money on healthcare as a percent of GDP, life expectancy starts to fall. We are already at 16% of GDP spent on healthcare. That's double the amount that any other country spends on healthcare. We also have worse life expectancy vs. countries that spend much less as a percent of GDP than we do.

One of the most disturbing trends in American healthcare, IMHO, is that the suicide rate has been steadily rising since 2000. It's now back to where it was in the 1980s before SSRIs.
Given your problem with serializability, why not use a database which supports it better than MySQL?
> "a university does not prepare for work! it prepares for research!"

This is what universities have always believed that they are for. PhD courses in particular. There used to be a separate category of school that was both technical and employment focused; in the UK these were called "polytechnics", in the US they would be things like the Texas Agricultural and Mining College. For complex reasons due to both the class system and the set of accidents of history that caused a lot of startup founders to come from places like Stamford, they have become a "unfashionable".
Ah! Now I get it. And its very hard to be confused about who the mother is...
BEAST and the GPU Cluster
And the people working in factories and mines are protected by regulation. The owners didn't improve safety voluntarily.
I suppose that snapshotting will cause old versions of the data to be thrown away, once the old versions start taking up too much disk space. Then I suppose the ransomware can take advantage of this and simply perform so many writes that the unencrypted versions of the data are thrown away. And isn't this what happens anyway when a disk is nearly full and you start encrypting its contents?
Was Cython given a consideration for this project?

I see that you are involved with the Pythran project, so could you tell us the shortcomings of Cython? As I understand it, before Pythran didn't support Python 3, but seems like that has changed
MinaOTP Shell – TOTP authenticator implemented as a terminal tool
Have you looked at AWS Lightsail, I think it a better alternative to using Heroku given the level of your experience with setting up infrastructure?
uMatrix is great because it doesn't just block scripts. You can block iframes, images, etc... You can also turn off stuff like webworkers. It's not perfect (I've noticed a few holes around how it manages cookies, for example), but it's really good.

Removing scripts is nice, but if you're trying to prevent obscure attacks[0] or even common tracking techniques from 3rd-party sites, it's not enough. People look at Javascript like it's the primary insecurity on the web; in reality any time you can conditionally make a request to a server for any reason from anywhere, that's a vulnerability.

So with uMatrix you don't just get the ability to say, "don't run scripts", you get the ability to conditionally and granularly blacklist/whitelist domains themselves.

[0]: https://www.mike-gualtieri.com/posts/stealing-data-with-css-...
Which are routinely, famously flaunted by both management and labor in mining and manufacturing to increase output and thereby pay/profit.

I'd favor mechanization over 'rational human' for sure.
HN title is clickbait and doesn’t match the article. (HN title: If your Tesla knows where you are, China May too)

Tesla vehicles sold in China report location data to the Chinese government.

> But other countries that are major markets for electronic vehicles — the United States, Japan, across Europe — do not collect this kind of real-time data.
> The Nim team has decided to reward the best (fastest) player on Nim leaderboard

Does this mean the fastest developer (first to submit a solution?) or does it mean the fastest program in terms of runtime performance or something completely different?
JWT Authentication and Authorization Module for Spring Cloud Applications
In case of documentation PR's the doc team is openly accepting properly written (technically, grammatically and so on) plain text documents and takes the burden of writing the proper docxml patch on them, simply get in touch with them vi Problem Report or IRC or mailing list :)
As I said, it is probably fine. But it does introduce yet another small risk. Perhaps the best solution is to just send a user to the payment provider rather than keeping them on your site.
The decline is mostly the product of an increase in drug overdose deaths and suicides (likely also related to drug abuse[1]). Cancer mortality is continuing to decline which is nice to hear:

"Earlier this century, the steady and robust decline in heart-disease deaths more than offset the rising number from drugs and suicide, Dr. Anderson said. Now, “those declines aren’t there anymore,” he said, and the drug and suicide deaths account for many years of life lost because they occur mostly in young to middle-aged adults.

While progress against deaths from heart disease has stalled, cancer deaths—the nation’s No. 2 killer—are continuing a steady decline that began in the 1990s, Dr. Anderson said. “That’s kind of our saving grace,” he said. “Without those declines, we’d see a much bigger drop in life expectancy.”

Drug-overdose deaths skyrocketed between 2015 and 2017,
particularly for adults between ages 25 and 54. The main culprit was fentanyl and other synthetic opioids that became pervasive in illicit drug supplies in the U.S. around that time.

Deaths from synthetic opioids rose 45% in 2017, while the death rate from heroin, which had risen sharply after 2010, was flat."

[1] https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4499285/
You're attacking a strawman.

mtDNA can be used to track lineages. It's the dating of when branches occurred that is off because it assumes all differences are due to mutations and not paternal contributions.
So since redundancy & horizontal scaling are goals of Gitaly HA am I to understand that right now GitLab.com is run on some ad-hoc setup like what I described, and you can lose data if you're unlucky enough with a machine or two disks going down at the same time?
Can't edit on my app, but the first question was for the blog post writer and my second to the submitter
It’s remarkable how much of the article narrates a tale of opioids and suicide, whereas the obvious elephant in the room seems the be the poor, or lack thereof of a public health care system.
Wow, maybe (not being sarcastic) eating a monocultured food diet and living as sedate humans in sterile environments has a bigger effect on our immune systems than we'd like. This must have been measured? Compare immunity in farmers vs office workers or some such?
To the second point, I was thinking of checking what came over the wire after AJAX calls from 3rd party JS (which may or may not have been loaded with SRI).

I'll have to concede the first point... I was thinking that you can whitelist entire URLs to be fetched as opposed to domains, but on second thought, I don't think that'd be a meaningful change.

Thanks, this has made me think a lot more on this, however :)
Predicting the Stock Market, P-Hacking and Why You Should Be Bullish
This seems like a case of temporary circumstances and statistical creating a doomsday picture. The temporary circumstances seem to be the suicide rate brought on by the still recovering economy and glib life prospects. Partly related to this is a new deadly drug that is gaining popularity.

Add to this the statistical factors like the anti smoking and healthy living campaigns hitting their peak effect a few decades after improvents in modern science hit their peak effectiveness.

To me, it seems like life exectancy will improve again as the economy improves and governments find ways to fight fentynal.

Improving life expectancy maked great advancements in healthcare and sanitaion and lifestyle in the past. As these improvements seem to have peaked I dont know that life expectany is still a good indicator of progress in rich nations
The company I work at has an ad for "Senior Full-Stack Developer" and if 5 amazing candidates show up they'll probably hire all of them (or if just 1 shows up and gets hired the ad will remain online).
> feel their sovereignty is threatened by Facebook

That’s kind of like saying that coka-cola feels threatened if the CEO reports an illegal lemonade stand that’s blocking his driveway.

The scales are not just different, they are absurdly different. UK is NOT afraid that they will lose sovereignty because of Facebook. Thats just ridicules.
Wasn’t this first discovered in 2002? Unclear why it’s currently taking up two top spots on HN, with headlines like “Plot Twist” and “Huge Shock”.
Kudos to the family owned business.

Amazon is taking a page out of Walmarts playbook. Both are juggernauts and won't fail overall. My hope is they help create new markets in the areas where they do fail.
Facebook exempts news outlets from political ads transparency labels
Do you have student-staff meetings? It seems some schools do that, and others have never thought of it.

Basically the idea is that a representative of a group of students comes together with other such representatives and school staff (I don’t know the English words, basically the managers of a school) and discusses the good and the bad of what’s going on. I have heard some positive experiences with this method.

If you’re not doing these things, perhaps pitch it to people. Or poll other students and ask someone at the school for an appointment.
No, they are not. They are likely to be much more dangerous for those groups, but the flu or pneumonia can kill anyone.

Some strains of the flu are believed to be more deadly to the "strong" patients, due to a phenomena known as "cytokine storm" - where the strong immune system response directly contributes to death.
Articles that conflate worth and market cap should be flagged as clickbait.
This November’s Top Social Media Industry News
I was thinking of making a website for this. This post is actually a way to test if there is any interest.
Can computer bank balances store fractional cents right now? At least before, this was not possible.
No, ebay as the auction site does not. ebay.co.jp does
> They use "Deutsche" [...] as a shorthand throughout the article itself, too.

No. They do not. At least the version I am reading.
I dont disagree that public healthcare would improve life expectancy but it wouldn't cause a decrease in life expectancy as healthcare is not any less accessible today than in the past
If everyone got a "free" bike when you bought a computer then the people who didn't want to use their's and so bothered to sell it would probably sell it for $10 or so?

You can get £20 books for 50p, because either the person has finished using the book, and there are lots of books; or because the person got the book free (as a gift generally) and didn't really want it; or because they bought a copy and got a second copy gifted, etc.
PCI is a specific set of requirements. We've met those requirements and our certified auditor agrees.

Which specific part of PCI do you feel third party libraries violates?
I'd guess that drug addicts having compromised immune systems are increasing deaths from these.
Show HN: Android App to fall asleep gently by the sun. True sunset
Whatever.ms/login? Mont-fricking-serrat? Well that's all but screaming FAKEFAKEFAKE.
It is as if the author did not know this is shorthand and not the complete name of the bank. Kind of taking bank out of “Bank of America” vs “The CapitalOne bank (...)”
Rent seeking behavior in the app and service marketplaces.
Except, in the west anyway, almost nobody is working in factories any more.
I bet I could find some cheap parts of the Netherlands. Although I guess it depends on your definition of cheap.

Looks like there are some cheaper areas here: https://www.koopwoningen.nl/nieuws/487:de-20-duurste-en-goed...

Now, compared to cheap places in the US, the house price is still somewhat high. But cheap areas in the US, you often have to live in a detached house, as apartments are often very uncommon, or even non-existent, whereas in the Netherlands multi-family housing is much more common(1). And in the US, cheap places you almost always need to own a car, which is inherently expensive, whereas in the Netherlands you can get by with just walking and biking. Plus, the safety net means that even if you're poor as shit, you're taken care of for things like healthcare, to a greater extent than the US.

1 - Looking at the example of Delfzijl, you can rent an okay-sized 1br apartment for ~600 EUR/month: https://www.iamexpat.nl/housing/rentals/delfzijl/apartment

Factoring in extremely low transportation costs, that makes for a pretty damn cheap lifestyle.
> github turns software social, with all the anxieties that come with it

And there is your problem. Maybe the social functions of github are not helping?
Devember: code for the whole of December, every day, at least 1 hour a day
How worth and market cap different things ? Isn't market cap reflection of worth ?