skysight-inc/HackerNews huggingface dataset:
You will fall on your butt more times than you would like the first time you try it. Knowing this plan accordingly. Schedule your first lessons for a day with good, firm but not hard snow, snow that is a bit like solid styrofoam. Falling on snow like that doesn’t hurt, but beware of a fresh dusting of flakes over hard packed icy base beneath.

I found that once you’ve learned snowboarding that it works really well on many conditions from icy to powder, groomed and ungroomed. The trails do make a difference though. Skiers can manage narrow trails or catwalks easily no matter the slope. Snowboarding these tails can be difficult because boarders need to maintain enough speed to make it though the flat spots (no poles!) while not having much room to burn off excess speed by traversing the fall line, especially when there are lots of skiers traveling at a modest pace with their poles. Also moguls aren’t much fun for me on a board. Skiers have a tighter turning radius and the resulting mogul fields end up difficult for me on a board (I’m sure good boarders handle them just fine, but I can’t).
If this were an drone should we expect burns? It seems feasible for a small lithium ion battery to be damaged by an such an impact. If a damaged lithium ion battery got stuck in the nose cone things could get dramatically worse dramatically quickly.
“Backplane” refers to the rear interior surface of an equipment cabinet, where there’s often a maze of electrical conductors for routing power/data around the various rack units or cards it can hold. Examples include blade servers, very serious routers, and theatrical lighting dimmer racks.

The system can be expanded and serviced (without interruption) by installing and removing modules, but the backplane is forever.

A hot SaaS startup purporting to be your backplane is about as backwards as it gets. Smart companies are using cloud services in exactly the opposite way: as temporary, interchangeable capacity slotted into a backplane they own.
Reddit's robin [0] experiment did this - the communities grew until they decided not to anymore. The stakes were a bit higher, you had to vote quickly or fall apart, but I think this could've made for a really novel way of organically growing healthy communities, and I wish they'd explored the idea more. Someday I'll revisit it and maybe implement my own, and see how it does.

[0] https://www.reddit.com/r/joinrobin/comments/6398yp/what_was_...
Clang (tested with v7) however does issue a warning even with no flags set.
Activist built $1,200 Tiny Homes for homeless: LA authorities then seized them
The company I work for was heavily invested in Adobe BusinessCatalyst, which Adobe shut down.

The difference is that Adobe have money, so it's not a two weeks notice, but two years notice - which is reasonable!

Unfortunately, new customers where still annoyed and chose alternatives.
I got my figure from this part of the entry:

> AC759 reached a minimum altitude of 59 feet (18 m) above ground level, comparable to the 55 ft 10 in (17.02 m) tail height of a Boeing 787-9, two of which were on Taxiway C
The OP here doesn't have the word cable in it at all.

I've gone through the whole article again and see no accusation against any cable providers
Maybe related to this, as a guess?
https://www.sqlite.org/c3ref/c_dbconfig_defensive.html#sqlit...

SQLITE_DBCONFIG_DEFENSIVE
The SQLITE_DBCONFIG_DEFENSIVE option activates or deactivates the "defensive" flag for a database connection. When the defensive flag is enabled, language features that allow ordinary SQL to deliberately corrupt the database file are disabled. The disabled features include but are not limited to the following:
The PRAGMA writable_schema=ON statement.
Writes to the sqlite_dbpage virtual table.
Direct writes to shadow tables.
This time I wonder if some businesses are moving out of China due to the instability of the relationship with the US and China, not to mention the future instabilities to come.
Jail time for a small amount of weed. Payouts and bonuses for killing people in the name of money. America.
Probably they found the vulnerability through Chromium, then extended that to "everything that uses SQLite". Hard to tell anything without more details though.

But if that is the case this is huge. SQLite is used in many places nowadays: Websites, browsers (Chromium and Firefox, I know of), various software including some Android apps. That also probably means the attack vector is some procedure where input is sanitized (assuming SQLite provides that, I never programmed against the C API).
Can't fight a trade war like a cold war. I actually think Trump is doing it right. I mean, if you're going to fight a trade war, you have to do the kinds of things he's doing. Now the problem is... economic reality. If the other guy just has the bigger market long term, especially if they can grow their market without you, you're just at a disadvantage. I think we can get some short term wins, but in the long term, we would have to prosecute this trade war flawlessly to come out on top.

That's just the reality of large markets looking to de-link themselves from global carbon energy resources. Long term, if we're all intent on ending the age of oil and coal, there's just nothing to keep everyone cooperating with each other.
Fusion is a materials science problem and materials informatics (machine learning methods for improving properties and / or devising new alloys) will help immensely once a new generation of digital-native scientists comes into the working force. Fusion might not become economically viable for a long time yet, though, so investments could very probably be moved elsewhere sooner than later. Healthcare for aging populations in the West and a new space race from China come quickly to my mind as powerful “distractions” from ITER part II, in the case part I ignition goes well by 2030. Smaller, more efficient reactors would not solve the energy problem even if they go successfully past the laboratory stage, in that being out of question imho.
Any compiler should because as a definition, int foo() { } does in fact inform us that the function can only be correctly called with no arguments.

Formally, this is not introduced into the scope as type information according to the language spec, but that's no reason not to warn about it informally.
As a sibling comment pointed out, it seems it does appear to be supported? I have the same machine:

Chipset Model:	NVIDIA GeForce GT 750M
Type:	GPU
Bus:	PCIe
PCIe Lane Width:	x8
VRAM (Dynamic, Max):	2048 MB
Vendor:	NVIDIA (0x10de)
Device ID:	0x0fe9
Revision ID:	0x00a2
ROM Revision:	3776
Automatic Graphics Switching:	Supported
gMux Version:	4.0.8 [3.2.8]
Metal:	Supported, feature set macOS GPUFamily1 v4
Personally I think we view education entirely too much as an individual responsibility. The worker isn’t the only one who benefits from the education. Companies, investors and society at large does too. So to push that cost entirely onto the individual and force a possible lifetime of debt is unreasonable. And that’s only possible because of debt.

Housing and cars - I’d agree. But for me the problem with debt is it seems like a ploy to squeeze more and more out of people who don’t realize the deal, or who because of encroaching levels of debt don’t have a choice in society.

If debt were purely opt in and people could simply not get into it while still having a first world life then I wouldn’t disagree with you at all. But as it stands debt is a requirement that permanently endentures far too many of our citizens.
An RCE in a non-networked component is interesting (in other words, obvious hyperbole). Either this is your usual corruption bug/vuln triggerable in some/many programs using SQLite, or an actual bug in SQLite itself, e.g. query preparation (a fix/workaround being committed to SQLite doesn't necessarily imply one or the other). Whether the RCE hyperbole is justified remains to be seen.

Edit: Apparently the exploit vector is due to WebSQL.

And my guess as for the vulnerability area are "strategically corrupt databases", because there have been numerous commits related to this in the relevant SQLite releases and some seem like they were added relatively late in the process (e.g. after changing the VERSION file but before releasing).
I think of China as epicenter of a gargantuine deflationary hurricane. The cycle goes something like this:

1. Chinese economy slows down.

2. Chinese leadership realizes it's only one real recession away from existential threat.

3. Chinese government floods the market with fake money.

4. Chinese factories expand and export still more goods, despite weak demand.

5. World inventories pile up, depressing prices across the board.

6. Factory orders dry up around the world, sending host economies downward.

7. GOTO 1.
WebKit; worse off, WebKit and Chromium expose SQLite almost directly through WebSQL! Drive-by malware!
You can choose to live outside the city and commute in.. there is light rail and the metro bus park and ride system. That + work remote makes it pretty reasonable. I imagine they will expand the light rail too.
My girlfriend loves Scrabble but hates the list of nonsensical but allowed two letter words, so in our version they aren’t allowed.

An exception is made for “qi”, just because. Mine is not to question why, simply to regularly lose.
UCLA can't walk out and Elsivier knows it. A University which lacks a library containing the currently published scholarship is going to have a really tough time attracting PhD students. How are they supposed to cite relevant work without being able to read the work?

The UC System should work with other schools to mandate open publishing. The only way to fix this is by removing Elsevier's power.
I don't think this is the case - check this link:
https://knowledgebase.progress.com/articles/Article/expected...

The intra AZ latency according to AWS is sub millisecond!
It's inline with what our customers see.

Since all of the numbers in the blog are above a millisecond, the result does not change.
>I don’t feel that the lack of “diversity” has negatively impacted my development.

Well it certainly has impacted some Poles, considering they can't help but chant 'monkey' when they see a black person[0]

[0]https://edition.cnn.com/2012/06/08/sport/football/poland-rac...
They mention the example of browsing to a web page. Not quite a fully fledged remote execution bug but close enough. I think what they're really saying is they're aware of remote execution cases. An example of that might be a web services that's backed by a SQLite query.
The correctness or lack thereof really depends on how you account for the externalities.
> we are just not exposed to races other than ours, so it pretty hard/weird to be a racist).

The US is not mono-racial by any measure, and has a long and troubled history with race relations.

So even taking the questionable argument that Poland isn't "very racist" at face value, it's wouldn't be applicable to the US anyway.
Python ships with a sqlite3 module in the standard library.

Does this mean Python needs to ship a security path? What should Python users be doing about this?
Reading through https://www.sqlite.org/releaselog/3_26_0.html which they linked to, I'm presuming that it is tied to items 3 and 4. Which is highly suggestive that the problem is that ordinary SQL is able to write to internal virtual tables in a way that corrupts the database. And presumably from there, once you can introduce corruption you can get it to exploit a payload that you provide.

The fact that Chromium also saw fit to patch this suggests further that there was likely some way that it could be tricked into issuing queries that did this, allowing some compromise of the browser. If this could have been triggered by a web page, then that explains why they are light on details.

It should be noted that a lot of applications embed SQLite internally. If one as well studied as Chromium could be tricked in this way, I'm sure that others can as well. And since the upgrade has to happen to an embedded component, we're probably going to hear about this one for a while.

Please note, this is all educated guesswork from knowing the software ecosystem and reading release notes. I have absolutely no knowledge of the vulnerability.
Without school’s library access to articles, I wouldn’t be able to complete my paper this semester. I did find and cite articles from Open Access so I am all for ditching paywall publications.
What's the frequency response of air, with respect to sound propagation?
It's too late. If we really believe the predictions [0] then we need to go all-in on fission like 10 years ago. Yes, there are risks to nuclear power. I'll take risks of localized disaster over the certainty of a global catastrophe.

[0] https://www.rifters.com/crawl/?p=8433
> Chinese leadership realizes it's only one real recession away from existential threat.

That's true for at least 30 years now.
Apparently “ok” was recently added.

https://www.bloomberg.com/news/articles/2018-09-24/score-scr...
Turns out to be both more common and mean something a little different than I thought: https://books.google.com/ngrams/graph?content=quixotry&year_... https://www.google.com/search?tbm=bks&q=quixotry
> Does this mean Python needs to ship a security path?

Python binaries (e.g. the Windows installers) may need to be updated. For Linux distros Python would depend on a system package.
>>How are they supposed to cite relevant work without being able to read the work?

Sci-hub?
They are giving time to more SQLite users to patch and waiting the CVE to be assigned. Looking at the chromium patch, this has something to do with ALTER TABLE. Looking at SQLite release notes they clearly are hiding the real nature of the issue there.
For instance, see this: https://www.sqlite.org/lang_altertable.html

"Compatibility Note: The behavior of ALTER TABLE when renaming a table was enhanced in versions 3.25.0 (2018-09-15) and 3.26.0 (2018-12-01) in order to carry the rename operation forward into triggers and views that reference the renamed table. This is considered an improvement. Applications that depend on the older (and arguably buggy)..."

A problem that (well tailored) enables a RCE is just "arguably buggy" in their view?
The Chrome update only bumped to 3.25.3, so it's likely a commit between 3.24.0 and 3.25.3:

https://chromium.googlesource.com/chromium/src/+/c368e30ae55...
Does python use it's own sqlite3 or system sqlite3? In the latter case, patches would be the package maintainers' responsibility.

Of course, on Windows, it's going to have to use its own sqlite3.
You really think the president and CEO of the SIPC is a... freaking clown?? Sorry if that tone is harsh, but that statement appears completely ludicrous on its face to me. Can you provide a little context on why you would trust startup lawyers over the chief executive of a major government organization?
> "Would you (partially) blame facebook for their death?"

No, because doing nude pictures of yourself and then distributing them, no matter where, is just stupid. Parents should educate their kids to know better, or seek counseling if that mistake was made.

You're also talking of a hypothetical situation. When planes crash, people die, guaranteed. And yearly there are more than 100 plane crashes.

> "Genuine question but what policies are the reasons for the epidemic of the three death causes you just mentioned?"

The recommendation for a diet high in sugar, high in wheat and other grains, high in vegetable oils / polyunsaturated fats (e.g. Omega-6), low in saturated fat, low in dietary cholesterol, low in salt.

Children were fed in schools, diets were set in hospitals, foods where preferred in supermarkets according to these guidelines. That's not a debate I want to get into though.
I think the idea is that these journals should be secondary sources, rather than primary sources, for papers. Sure, your paper is in Nature, and that's neat and all and gives it more visibility, but people should be citing the arXiv copy that came out either in parallel to, or before, the for-profit journal copy did. Journals should just be serving as aggregators of content, not hosts of content†.

It's the same idea as how public companies' earliest issuance of any potentially-stock-affecting news, has to be through equal-access public channels that investors can subscribe to for equal-timeliness reaction to news (rather than, y'know, Elon Musk's Twitter feed, where Twitter gets to control who sees what when.)

People should be able to follow a citation from one paper to another, without having to pay to do that. Not being able to doesn't just discourage reading papers, it discourages ad-hoc peer review—the precise point of having journals in the first place. (Specifically, it discourages the part of ad-hoc peer-review where you check a paper's citations to see if the claims you find hard to believe, but which are cited, are actually backed up by something you can believe in the cited paper.) When the citation is to a closed-access journal, you have to happen to coincidentally have a subscription to that journal in order to be able to find out what the citation really says. If the citation's source journal is both for-profit and obscure, then you probably don't have that subscription—so the given citation could have been entirely made-up, and you'll never know.

† Journals being aggregators of content also implies that a paper should be able to be published in as many journals as want to carry it, because none of them "own" the resulting content anyway. In that sense, scientific papers would be a lot like news-wire releases: something that any distributor can pay for the right to print a copy of.
Can confirm bingos are luck. My only win against my mom in scrabble was a 1st turn bingo that she challenged and lost (EJECTOR, she was less than 50% sure that the "or" was wrong, but didn't want to concede a 1st turn bingo that was questionable).
> I'm not clear on why you think a hyperloop between major cities (eventually replacing the current high-speed lines)

Why would you replace perfectly good existing infrastructure that is used not just for high-speed rail in Switzerland with an entirely new, untested, incompatible system that will provide little incremental benefit while severely crippling the existing rail network?

High-speed rail lines in Switzerland aren't isolated, different-gauge networks like Japan, they are largely part of the same rail network, just with higher speed limits.

Take the new Gotthard Base Tunnel, while it has an operational speed of 200km/h for passenger rail, it is also extensively used for cargo trains (at lower speeds). Building it didn't just reduce the time for trips between Zurich and Milan, the main Nort-South route, but for anyone travelling from the north side of it to the south side of it, as current trains can run through it just as any other railroad.

Particularly, it has a massive impact on cargo, as it was designed from the beginning to reduce congestion in trans-alpine cargo routes. It provides massive network effects not just to Switzerland, but to all of Europe.

Replacing something like this with Hyperloop isn't just a bad idea, is a complete disaster.

Switzerland is probably the last country in the world to need something like a Hyperloop. No wonder we thought about it 50 years ago and shut down the idea:

https://en.wikipedia.org/wiki/Swissmetro
These discussions on the evilness of Elsevier and others usually have two components that sometimes get mixed:

1. Output of publicly funded research should be open access;

2. How research is done (how peer-review works, how editors are chosen, how grants, tenure and other awards are awarded, etc) should be modernized.

Goal 2 is not well defined and some ideas for goal 2 are contradictory, it often leads to endless discussions with many "ifs". Goal 1, however, is very clearly defined and I believe the community should focus on solving goal 1, because goal 2 is still not well defined and doing anything about it will meet massive inertia.

Here is a proposal that tries to achieve goal 1 without trying to change anything about the structure of academia and its inertia. There should be a free or ultra-low-cost platform (typically operated as arXiv) that would let any team of editors of non-open access journal duplicate the journal by a few clicks. With a few clicks, current editors of pay-walled journals should be able to create a copy-cat open-access journal, transferring all editors, all associate editors, to the new platform -- no change in humans, only a change in the platform and the name of the journal (for instance, prefix the original journal name with "open"). The change should be effortless for all academics involved in the former pay-walled journal. Once the editors of the former pay-walled journal. The next step is to use the pressure of the involved academics to make sure that no other academics in their field join the former pay-walled journal as editors, associate editors or referees.

If we want academics to move away from paywalled journals, duplicating these successful journals should be as easy as creating a blogpost, without changing the humans involved.

Edit: By the way, the platform used by Elsevier to manage journals and peer-reviews is terrible from a UX perspective. It would not be hard to do better and some teams of Editors/Associat Editors may welcome a more usable alternative.
Google Chrome Showing SSL Error on Google.com
How many seasons do those things last?
I thought about buying some, but the i felt like the batteries would die over summer, and I'd be lucky to get more than one season out of them.
We generate 1T of logs per day. Doing this with PostgreSQL would be hilariously bad.
The Palm Pilot Has Rivals but No True Competition
I don’t think so, not yet anyways. Trump is probably a one term president, and most companies are thinking longer term. 1989-90 was much much worse.
Yeah, that's obvious nonsense. Merely using SQLite in your app does not open a port. How, exactly, are you going to be "vulnerable to remote code execution" when you don't use any network connections?

And the phrase "uses SQLite or Chromium" is pretty close to gibberish. Those two things... are not really related.
Ding ding.

Even if they don't actually achieve the 3% APR checking accounts available ("sorry, it's actually 2% like the rest"), they still got people to sign up and they won't not register because they'll convince themselves "oh I got a debit card, and brokerage account, etc etc...who cares this is still great")

#growthhacking
To your first point, seems like they'd say anything to try to save face.
It's expensive but I did it in college when I made a spare $250 a month.

Old Volvo 240, used gear, waterproof running pants with sweats underneath that I already owned. Total cost of entry was a few hundred dollars.

It's much better with expensive top-notch gear but so is everything else. And it's still cheaper than skiing.

Twenty years later cheap gear is radically improved and there's a much bigger used market. And if you live near Seattle you can hitch a ride with me to Stevens whenever.

If you don't want to pay for lift tickets you can get used split-board and avalanche gear and take an avalanche safety class for about a one-time $1500 expense and walk up mountains for free instead, even at resorts.
I actually suspect these attempts at material savings are one of the things leading to ballooning costs. Spending 200 engineering hours to cut $5k worth of steel is still a net loss.
Technically the projective coordinate (3,2,1) should be exactly the same as (6,4,2), and every nonzero multiple thereof. So it’s not really correct to say that (x, y, 0) represents a vector, or that adding these projective coordinates is vector addition. Vector addition is represented by an identity matrix with the x, y coordinates in the rightmost column.
Thought I'd dig out a Walt Mossberg classic from '98.