skysight-inc/HackerNews huggingface dataset:
This kind of stuff is a good candidate for Zooniverse. Have a look at some of the ship log projects, for example.
I live in Illinois, while I accept and can deal with the weather, I neither agree with, nor accept any of the corruption. I generally vote against every incumbent at every election.
I don't see why not - at least if you're comfortable with client-side code on the website having access (implicit or explicit) to the token. Certainly nothing you store on the client side is secure against an untrusted user, so you should only store the user's own secrets, not things you wish to keep secret from the user. And anything you intend to make use of fro the client side must be usable from within the website, so anyone who can get code execution on the website (e.g., via XSS) has already gained access to whatever you're trying to protect.

I see a handful of blog posts on the internet arguing that HttpOnly cookies are a more secure storage place than web storage, because HttpOnly cookies are only vulnerable to CSRF attacks and not XSS and CSRF is easier to defend against. This argument is, as far as I can tell, completely flawed: if an attacker is able to execute XSS, they're then able to use that XSS to execute same-site forged requests - they no longer have to bother with the "cross-site" part of CSRF. They can just fetch your anti-CSRF token with a normal XHR after having executed an XSS, and then they can make arbitrary same-origin requests against your website, each of which gets sent with the HttpOnly cookie.
Using Trusted Web Activity – Google Developers
Not in a domestic (USD) transfer...
there's a good chance they were put on that task in order to keep them from improving efficiency in other areas
Agreed, there is no public or private api we are just bit twiddling. Monkey patching might also be a good borrowed term.
"use strict" was also highly contentious for a time. "use versionNumber" would have similar issues to the battles the web fought over DOCTYPES and "quirks" modes and browser compatibility.
Any of these will get you started. These are the Amazon searches for "manifestation" and "law of attraction".

https://www.amazon.com/s/ref=nb_sb_noss_1?url=search-alias%3...

https://www.amazon.com/s/ref=nb_sb_noss_2?url=search-alias%3...

If you really want to go off the deep-end you can research Yogic Siddhis.
As small hospitals ally with big ones, do patients benefit?
> The closest we can get to seeing the original Smalltalk environment in action...

There is a "Personal Use License" for Cincom® VisualWorks® 8.3

http://www.cincomsmalltalk.com/main/community/product-portal...

"Squeak is an open source implementation derived from Smalltalk-80 Version 1 by way of Apple Smalltalk. VisualWorks® is derived from Smalltalk-80 Version 2 by way of Smalltalk-80 2.5 and ObjectWorks."

http://www.cincomsmalltalk.com/main/about-us/smalltalks-past...
Our CTO whipped it up as a pet project.
Apple plans gaming subscription service
>As far as I can tell it didn’t work.

Glad you're a good sport about it now :).

Very cool to read this, thanks for sharing. If you did want to share any more, I'm curious as to what the initial symptoms were, thanks.
Fwiw, in South Dakota, where generally most winter days would be <0F, we've abnormally averaged well above that this winter. Our average is probably something closer to around 25-30.

Now, Wednesday, we'll be < -20F, which is cold, but nothing we haven't dealt with before and nothing entirely out of the normal. If anything, winter has been abnormally warmer for us.
Averaged? 1.9 per day, 700 yearly. https://nationalhomeless.org/wp-content/uploads/2014/02/Wint...

Throughout the US from 1999 to 2011, an average of about 1,301 per year (but not exclusive to homeless). https://www.cdc.gov/mmwr/preview/mmwrhtml/mm6151a6.htm https://www.cdc.gov/nchs/data/nhsr/nhsr076.pdf

Also there was an average of 658 deaths per year due to heat or humidity (again, not exclusively homeless). https://www.accuweather.com/en/weather-news/prolonged-exposu...

These deaths are mostly preventable by just giving people a room to sit in that's warmer/colder than the outside air, for a very small number of nights/days. An outreach program during these periods of extreme temperatures could have a big impact.
I wonder to what extent holding scientifically accepted beliefs about free-will alters ones experience of this phenomenon. I could understand how it might be terrifying to people with judeo-christian beliefs, but what about someone who is already a secular neuroscientist? I wonder how many people may be experiencing this without being perturbed or feeling the need to seek medical help.

Also, it isn't clear to me whether people with this condition are "missing" something, or if they are in some way perceiving their thought processes with greater fidelity than the rest of us. People have plenty of biological features that aren't necessary for survival (male nipples, tailbones, etc), could the illusion of free will be similar?
I'm from the midwest and it's been pretty darn cold the last few days. This week is supposed to have a low around -30. I live pretty far out in the country, so I've stocked up my truck with extra hats and coveralls (which I call my bunny suit), and an extra set of boots.

This morning I saw a few cars in the ditch after some ice last night, so stopped to see if anyone needed a ride or just to get out of the cold. In these temperatures, I try to be a little extra mindful of neighbors in need and helping people who are stranded.

Good news though, it's going to be much warmer this weekend, so something to look forward to!
as you note with your edit, most usages aren't going to be dropping from >24V.

> Also that's peak current from the radio, which for IOT things is generally very short.

this is the interesting bit, though.

if you're releasing an open source board design, to have customizable firmware dropped on to it, what do you really know about the radio usage when you're designing the circuit/board?

safest is to spec it for maximum draw on any controller/radio. write the BOM to call for one of the three-terminal drop-in switching regulators ($5), and if somebody knows what they're doing they can put in the original linear part and save $4.50.
The obvious answer is "because ChromeOS is spyware."

But the really fun possibility is having an OS where "Web" and "Posix" are equally-placed personalities that the OS ran, not only preventing rogue web pages from touching the posix system, but also preventing rogue posix processes from touching the browser (except where the end-user intentionally joins them through the system-provided Open File dialog or by opening the case and removing the debug pin to unlock cross-VM debugging). ChromeOS sort of implements that today, by running custom Linux environments in containers, but I'd rather trust Xen than Docker as the underlying isolation layer.
In the context of a single core, this happens. Multiple cores make it harder because on top of an interrupt taking locks, other cores now also take locks and you can no longer rely on various promises that a single core gives you.

While the Linux kernel can do this, it's not easy to write from scratch, especially because Linux is in C so the compiler doesn't complain about weird things you do.
So, you know of 5.

That's exactly my point.
And that isn't even the full story. After Kite was forced to come clean about their Atom extension purchases, they were caught with yet another unrelated Sublime Text plugin that was phoning home to an IP address for an entire year. Their explanation? They forgot they were doing it!

https://news.ycombinator.com/item?id=14902630

Their only redeeming move could be to open source their project, and build a business model around that. Otherwise I don't see how will they ever gain back our trust, since they have repeatedly demonstrated a willingness to deceive users.
For killing millions of people quickly, you'd have to use a thermonuclear bomb (Hiroshima bomb killed about 100K people over the period of several months). No nuclear accident has ever happened that done anything like that. Chernobyl accident - where a lot of things went very wrong - killed about 40-50 people. Fukushima Daiichi incident so far has one known victim. To kill millions "pretty quickly", something very extra-ordinary - and probably impossible with current nuclear station designs - should happen, to the term of explosion of most powerful military device purposely built for mass destruction. In other words, you'd have to put an actual hydrogen bomb there - by which time, where you put it is less important.

Don't get me wrong - there are dangers in nuclear energetics. And the long-term effects of radiation incidents are still hotly debated. But as you just demonstrated, the dangers are way overestimated in public imagination and discourse. You use as an argument an imaginable incident that is at least five orders of magnitude worse than any accident that ever happened, and that is pretty much impossible given current technology, and are comparing it to very real dangers of the alternatives.
You may want to consider getting a tall stool for the hour or so you stand and then just swap chairs. I did that for a bit because I didn't like adjusting the desk constantly, and it was nice because I could have someone sit next to me without needing to find another chair or stand. The stool didn't take up too much space either, so it was nice.
Yet most of us here do this same thing to some degree. Whenever you program something based on requirements you're basically going through a similar set of questions and answers. Abstract thinking is a wonderful thing.
Interesting to see that almost all of non-US top hits are seemingly Latin American.
I've used a tool similar to what you've described here called https://www.pullrequest.com/ for code review, though it's fairly new IIRC and not cheap.
Nice references:

- Animorphic Systems, best known for HotSpot JVM {

-- David Griswold,

-- Gilad Bracha (Newspeak, Dart),

-- Urs Hölzle (Google Data Center)

-- Robert Griesemer (golang)

-- Lars Bak (V8,Dart)

-- Steffen Grarup (uber)

-- Srdjan Mitrovic

}

- David Ungar (Self lang)

- Craig Chambers (Celcil, Diesel lang)

- L. Peter Deutsch (ghostscript)

- ...
US Charges China's Huawei with Fraud
Meanwhile, in Oz, we are having one of the hottest Summer on record.
> [...] but I would guess that those cases are less common than than the cases of "seemingly valid" Rust code that is in reality problematic if it were accepted.

I would guess that most people starting to try out Rust are hitting the latter more often than the former. "Valid" Rust code that `rustc` rejects is uncommon (and for the most part, a bug), but wanted to acknowledge it happens. A "common" case of it would self-referencing structs, but that is considered a bug to be solved. I've only personally experienced problems with valid code being rejected when expressing complex trees involving associated types with their own independent lifetimes[1][2][3].

[1]: https://github.com/rust-lang/rust/issues/55756

[2]: https://github.com/rust-lang/rust/issues/54378

[3]: https://github.com/rust-lang/rust/issues/54895
That won't fit in cookie space... this is really for redundant controls for session/access tokens etc... anything large like that you're better off using caching and a service worker to handle repeated requests. Also, cookies are sent with every request to the server, and I don't think you'd want the user sending 10MB to your server for every request.

Also, if you are storing larger strings in local/sessionStorage, websql or indexdb, you should use lz-string[1] to try to minimize storage impact.

Aside: if you want something with a nicer interface for underlying storage you may want to look at pouchdb[2], which has a localized couch interface and supports remote synching to coudchdb, which is pretty nice.

[1] https://github.com/pieroxy/lz-string
[2] https://pouchdb.com/
Correct and in my own project I want to achieve 100% memory safety for non-primitive drivers (Disks, GPU, Ethernet, USB Devices) and 100% memory safety for any non-privileged code of primitive drivers (ie, PCIe bus, SATA, USB, etc.).

Any privileged code can then be written with those 95% and that's the only weak point left.
Hey - I'm the other guy working on Fuzzbuzz

It's similar to oss-fuzz in terms of functionality, in that it lets you integrate fuzzing into your dev workflow by automatically pulling your latest code, fuzzing in the background, alerting you on bugs, running regression testing, etc.

It differs in that while oss-fuzz is only for select large open-source projects, Fuzzbuzz lets anyone sign up and begin fuzzing their code. We also support more languages - the usual C/C++ as well as Golang, Python and Ruby, with more in the pipeline.
You eventually quit. That's only one purchase decision compared to many. Even if you evaluate the decision every time a show you like gets pulled, that's still less financial decision making than paying per piece of content.
1.6 grams of sodium (about the daily limit) in a hundred grams of Parmigiano-Reggiano. https://www.parmigianoreggiano.com/made/nutritional_features...
If you're not transferring very large amounts, https://theswapsy.com/ is a pretty good P2P alternative specializing in USD <==> CNY exchanges.
Facebook liked to call it "Friendly Fraud" when they were stealing from children, the phrase suits a lot of shitty company behavior.

https://news.ycombinator.com/item?id=19002596
LA is using ride-hailing startup Via to shuttle people to public transit
Thats what I wanted it for. Then a single license magically turned into 5 enterprise licenses, became impossible to cancel, and drove me away from the company forever. I mean...$750/yr to sync files?

Please dont mess up HelloSign like you did with the parent company!
I created the software myself. There is at least one solution out there that I found but it didn't even come close to meeting my needs.
Edge AI in a Smarter Chick-Fil-A (2018)
Yeah. Science has a (some would argue) slightly more sophisticated approach to bounties in the form of grants. The inconvenient part is that many things ending in "Foundation" in open source have no resemblance to things like the NSF.
Not really. All I want is an isolated box where I can enjoy silence and being sure nobody will ever see my screen while walking by. Sense of being watched (even occasionally) is what totally kills my productivity and silence is what helps me to concentrate. Nevertheless, as long as I'm sitting my back to the wall so nobody can see my screen and as long as there is not too much noise, friendly strangers hanging out around feel nice (kind of like a human aquarium) so I enjoy working in StarBucks during their low hours occasionally.
> You can opt-out of sending these analytics by changing a Kite setting (https://help.kite.com/article/79-opting-out-of-usage-metrics).

Shouldn't this be opt-in according to GDPR?

> * Line-of-Code Completions - Kite's completions engine can now predict several tokens of code at a time, powered by the most sophisticated AI code models available.

Won't this result into copy-paste-like functionality of StackOverflow? This seems great for small projects, but doesn't look useful at for anything else it seems. I'm skeptical that Kite provides anything of value compared to all of the other tools I have.

The website has mentioned that other languages "are coming soon", though it has said this since the last Kite scandal. Are these just empty words?
I was under the impression that more and more founders (and even investors) are speaking out against the idea of legal fees paid by the founders. Is that only at the seed stage and acceptable at Series A?
gmx.de, comcast.net, freenet.de, mailbox.org, posteo.de and tutanota.de come to mind as counter-examples as well as various universities, the German parliament, various Dutch government domains, and a couple of thousand self-hosted SOHO domains. But DNSSEC is axiomatically evil, so I must be wrong...
Right. MN here. Forecast is for -33, windchill -60. I've been here > 20 years, and can only remember twice when it got to -20s. I'm not sure my car will even start on Thursday morning.
If you know your types are Send and Sync, then you should implement Send and Sync for them. That's how you "tell rustc to just shut up about this."
Indeed -20F to -40F is very cold. I think this would be the more impressive headline. Over here we do not go much below 0F, maybe -10F, so -40F is difficult to imagine.

About the south: I used to stay for a while in Austin, TX. During winter we had temperatures below freezing (just ice, no snow). The locals told us that this happens at least every other year. For this some were suprisingly unprepared though, in particular with regard to driving skills, water pipes and building insulation.
Been using a Fully Jarvis L-shaped desk for a few months now. Self-assembly was unpleasant (not really Fully's fault - it's a complicated build no matter what). But the desk is huge and sturdy. No complaints. I think I paid $1500 or so.
For number 3 we already have very cheap solutions to carbon sequestration by artificially triggering algae blooms. The real questions is what kind of unintended consequences will come after.
This also applies to human resources.
This. After Dropbox acquired and then unceremoniously killed one of my all-time-favorite apps (Umano), I greet most of their acquisitions with dread.
This wasn't an ElAl flight, so I don't understand why they care.
A user might have their browsers set to clear cookies on close, but not other saved data.. in this way most sessions are closed. This works around that case.

If a user clears all app data for a site/domain then it will be cleared. If you want to work around this, you could utilize resources/assets from other domains in conjunction but it will be more complicated. I find that most of such cases are abused for unscrupulous tracking.
Is the advisory page loading for others?

https://www.talosintelligence.com/reports/TALOS-2018-0758 404s
"That AA is a religious sobriety program" - exactly that. It is a suggested spiritual sobriety program with an emphasis on "suggestive". It's not a religious program what-so-ever. They use the word God to incubus whatever "higher power" a member chooses (or chooses not to) believe in. I'll give you that God was an EXTREMELY POOR choice for the word, but it's what everyone could relate to at the time. In any case, don't let the fact that God is mentioned in the book confuse you, it's already confused most.
There is two types of memory safety that you talk about there, I think.

One is the memory safety that the rust compiler wants to hold and the other is the memory safety you program into a system.

Those can be entirely different with incompatible guarantees, depending on the mission statement of the software.

Some things a kernel must do are unsafe for the rust compiler. Dereferencing a null pointer, for example, is basically a crash in most operating system's userland.

In kernel space a null pointer may be valid memory that points to real data you need to use.

Setting the page tables is unsafe as well; it's almost impossible to guarantee that the following instructions can run in a static manner. You have to validate the page tables you're about to load at runtime and even then the result could be a process crashing.
If only I could convince my boss of that...
I used to work in the same co-working space as them in London in 2012 when it was just 3 of them and 3 interns. If I remember correctly, they managed the whole thing on excel sheets balancing out their EUR and GBP accounts with the frantic interns settling transactions manually.

Always interesting to see tech companies that going on little to no tech! Congrats to them!
No that’s the PSU block. It broke on 2/3 desks in our office within two years or so. Ikea will replace it if it breaks (10yr warranty as another commenter noted).
Same thing on Linux with Firefox 64.0 at 3840x2160
And again, a project being open source doesn't prevent the parent company from siphoning your data, all it does is (usually but not always) shed light on such practices.

A few years ago there was a scandal where Chromium was downloading an encrypted payload at build time, this was discovered by the Debian package maintainer for Chromium, and it was only found during the build. Open source isn't a panacea to ward off all evil.
Mine also does not wobble in the slightest.
Can't overstate this. It's disheartening that the article contained this tidbit:

>"This study shows that, when used in excess, screen time can have consequences for children's development. Parents can think of screens like they do giving junk food to their kids: In small doses, it's OK, but in excess, it has consequences."

Yet later on it says that the results of the study don't show causation.
TransferWise is a great business. It's the rare case where it clearly saves money for both parties without sacrificing convenience, ease of use or security. In fact it's probably much easier to use than the often clunky and semi-broken bank web interfaces. The pricing model is transparent - you know what you're going to pay and there's no ongoing fees or lock-in.

Sometimes I compare TransferWise to the 'original' WhatsApp and how disruptive it was to SMS messaging. Hopefully it doesn't go the same route and get acquired by a big bank!
The sustainability of your project, or the sustainability of open source?

I don't mean any disrespect, I'm genuinely trying to get to the bottom of the concerns around funding. There's no lack of funding mechanisms for open source (see oss.fund) and certainly no lack of money flowing into open source (see COSSCI) but arguably the 30M+ developers on GitHub don't see much of that.

The argument I often see floating around is that this isn't a new problem, there's just more of us and more money and from a different source this time around (VC) and yet open source has been "sustained" as a model.
Though websql, where available, is often faster. It's one of the more common overrides for pouchdb to override the user order in favor of websql where available.
Yeah, this wasn't a great post. What I intended to convey was that I found it interesting that some of these, at least categorically (time flexibility, detachment from self, and dream-like reality) are central to Awakening. Of course, in Enlightenment, there is conscious control over all of these elements, so that being experiences none of the negative aspects described here.
> If something is popular, there are experts who know how to deal with the issues.

Just because a lot of people use it, it does not mean that any good people do.

Some technologies are very good in selecting novices only, and some others in selecting experts only. The first ones will always be more popular.

In fact, the average "expertness" of the documentation for the tech and its ecosystem is one of the things I pay most attention to when selecting tools. I've said "expertness" here because I have no better term for it, it does not mean extensive, correct, complete, or any such usual quality. It's more related to "are advanced uses documented?", "is it at the correct level of abstraction?", "are the examples for doing hype or real things?", "do the descriptions pose the proper point of view so they become simple?", and stuff like that.
I heard they all had unlimited vacation. In which case you don't accrue PTO.
I'll just chime in and point out you can buy the Uplift standing desk frame separately and use your own tabletop (i.e. from Ikea). I made an awesome 2.5' x 7' pine desk this way.
Ouch. Have you used something in that space that is better?