skysight-inc/HackerNews huggingface dataset:
One common test of a die's fairness is floating it in salt-water, which allows any irregularity in the weight distribution to show itself. From that, intuitively I would assume that zero resistance (as much bouncing as possible/needed) would result in the unfairness making itself most apparent. Meanwhile, zero bouncing would cause the die to stick where it lands, making any unfairness the result of how it was thrown, and it's easier to cause a lot of randomness in that regard.

That said, I'm not sure that's generalizable to more realistic amounts of bouncing ("only a bit of bouncing" as opposed to "none at all", and "kinda a lot of bouncing" as opposed to "effectively zero resistance").
This is the first time I've seen the NY Times hiding articles if you're browsing in private/incognito mode.

https://imgur.com/a/Tlv6Kn3
KPCA: Projecting data to higher dimensions to extract features
The power company where I used to live did something like this for it's online dashboard, but with images (I think it was Delmarva Power). Every time you entered your username to log in, it would show you a simple image/line-drawing and a message saying that if the image ever changes, you're being scammed, so don't enter your password. I've never seen anything like it since.

As far as colours on emails goes, if everyone starts doing it, nobody will remember which colour goes with which company. It needs to be something more distinctive than just a colour band.
roughly 80% by population
Fun fact: These are more specifically called "numeronyms".

https://en.wikipedia.org/wiki/Numeronym
I agree 100ms is bad :-). I think even 10s of ms sync error is readily jarring for most people, at least for A-V. Subtitles may be more forgiving.
I find a useful definition of "enterprise" is this: products or services whose customers are several levels up the org chart from their users.
You have a point. If I were doing higher volumes at retail, the thought process would be much simpler. Make up a 60% starter on 8kg of flour in the evening. In the morning, empty a 16kg sack of flour into the mixer, chuck in 500g of salt and 12kg of water at an appropriate temperature to finish at 21C. Mix on first speed for to a shaggy mess (about five minutes), then about 8 minutes on second speed to moderate gluten development. Bulk ferment in a cool part of the bakehouse for 3 hours, with 3 folds 40 minutes apart, scale off large and small loaves, shape, prove until slightly underproved (4.5–6 hours) then retard overnight. Back in the bakery at 4 the next morning and, bake everything off and get it to market by 8am.

But today, my customers want 9 large multigrain loaves, 4 small ones, 3 really small soup bowl loaves, a dozen large white sours, 5 small and a couple of dozen bun loaves. On Friday they will want substantially different quantities. If I want to keep selling 95–100% of everything I bake, then I need accurate quantities, and I’d rather offload that essentially trivial calculation on a tool that gets it right every time. Five minutes after I arrive in the bakehouse, I have an accurate production sheet with the right quantities on it and I can concentrate on the far more important task of actually making the bread. I’ve spent maybe a couple of days, over the last year and a bit implementing the production planning software. Time well spent, I reckon.
> This is a really dangerous way of thinking of container security.

Isn't "really dangerous" a bit hyperbolic here? I'm describing a process by which you figure out the actual risk of vulnerabilities before treating them further. You can find quotes in my comment to make it looks worse than it is,
but I was not expecting to find the process I described to be controversial.

But yes, it's true: I'm advocating a risk-based approach to such vulnerabilities rather than a compliance-based one. I guess which is better depends on organizational fit and personal taste.

I'm also confused what to do with your example of "fixing container vulnerabilities" in this context of base image vulnerabilities. Both employees A and B would have to fix their set of vulnerabilities by either (a) updating the vulnerable base image or (b) switching to a different base image. Fixing base image vulnerabilities is not the pick-and-choose versus all-or-nothing affair you seem to be describing.
I loved the e-ink readers, but they were to small and held too little text on one screen so I usually use a 10' tablet. But a dual screened e-ink reader would be amazing.
Education is a cult in and of itself — most follow its scriptures in just as similar a fashion as they would a priest. People just don’t think that hard about things outside of their specialization (and often enough, not even then), and end up trapped in all sorts of belief systems, including “education” and “science” (have you ever taken a look at “I fucking love science” fb pages? Its called science, and its followers believe in science, but that group has nothing to do with it. Its just a bunch of rituals that eventualy produce an effect, with any arbitrary reason given)

Its not a fix on its own, just accidentally more (likely to be) correct than psychics, from the perspective of the believer.
As far as I know continued bouncing would give the d20 more time to find its center, so it would be less random. That's pretty much the whole idea behind Gamescience dice. They aren't tumbled, so the edges are sharp and sometimes there's exposed mold flashing, but they stop rolling faster, meaning they're less likely to find their center
Amazing! Young hackers I know have been so blocked by this problem. I don't think most people remember how suffocating it was be a high school student -- this will be a big change for so many young hackers I know.
Do we know a one company that gone out of business due the security related problems with their products?
> "has never turned over their SSL keys or customers’ SSL keys to anyone;"

How would they be able to give up customers' SSL keys?
AWS Inter-Region Latency
If you use your laptop in another country, you'll also be able to purchase geo-locked content with your foreign IP address. (Unless they reject foreign credit cards, but that's more to prevent VPN's, and you're just a false positive.)

The way copyright gets licensed per-country is pretty dumb in the age of the internet, but it's not correct to blame individual retailers for this. They would love to have a larger customer base.
Do you honestly think it is developer's "inconsiderate" behavior that the root cause or even a main factor in the "repeated data breaches"?
Not sure how to do fasting with exercise.

I follow the Russian Sheiko powerlifting training plan, eating around 4500 calories a day. Not sure how my body would react to skipping entire days without eating. If I miss my second late night snack I wake-up famished.
"It's difficult to sift through all the bad information about nutrition."

True. I tried, got spectacularly confused and gave up. So now I just eat lots of fruit, vegetables and some meat.

I don't eat candy, crisps, fat food of any sort, and nothing processed. No alcohol.

I eat when I'm hungry, and I drink when I'm thirsty (couple coffees in the morning, then only water).

Nobody has been able to convince me there's a better way to eat and drink.
>Killing someone in a bar fight is third degree murder, so I've already covered that

So in the space of a minimal online discussion you've gone from 2 classes of murder to now 5 classes (3 degrees of murder + negligence + under threat).

Now continue this exercise for the next 250 years and you will eventually have a codification of the classes of murder which roughly mirrors our current laws. Which is to say, it will get progressively more complex.
Thanks for the info. Maybe this will let me reclaim something from the negative conditioning!
> Oh, also since you didn't configure it we'll change (the defaults) on our next release

That doesn't really matter, since I'll only use the next release for my next release, and the previous prototype has either been thrown away or turned into a proper stack.
> …and we can sometimes fail to appreciate that.

I've never met a Linux user who failed to appreciate that.
That's unfair to Petzold. He was always a pretty good writer, though not always on very interesting themes.
Turn your tweets into messages to Politicians
It means the ones they use for the customers site, versus the ones they use for their own site.
How do you feel about dried basil? It arouses visceral hatred in a lot of cooks, but sometimes we have no fresh, and parsley only goes so far as a replacement.

FWIW, there's nothing sacrilegious about your short simmering time. Folks who simmer their red gravy all day are making an entirely different sauce. Gravy can be magnificent stuff, but it's a different food from, say, Marcella Hazan's lighter sauces, the lightest of which is literally nothing more than tomato and butter.

I think your recipe strikes a nice balance between the two.
That's fighting words about Tennessee whiskey where I'm from. ;)

Also, yes, the legal qualifier I forgot (because I just assume it, given where I'm from) was the post-Rectifier term "straight Bourbon", which has:

1) Stricter Age requirements. Which most Tennessee whiskey likely doesn't meet, though without age statements who is to say, eh? Charcoal goes a long way to cover immaturity, which is why it was in the Rectifier playbook in the first place. None of the mass labels today are probably dumb enough to sell anything Rectifier bad like 6 weeks old charcoal vodka, don't get me wrong.

2) Straight Bourbon also has very strict additive rules, which Charcoal definitely doesn't meet.
Thank you. Added these to the reading list.
I wonder how many missed maneuvers like this can be missed before the thing runs out of fuel and tumbles back to earth. Awesome use of retro techniques though.
Tumors can be seen as made of cells which eschew cooperation with the rest of the body, and instead selfishly multiply, to the detriment of the whole and ultimately themselves.

It is my belief that advertising is a cancer on the society; it's exploiting - and in the process, destroying - every vulnerable individual and social heuristic. It involves uncooperative behaviors like manipulating people and lying to them.

The analogy here is that since entities making up the advertising industry eschew cooperation and embrace exploiting others for short-term gains, they're not going to magically start playing fair and cooperating within the industry. Therefore, to the extent you expect advertisers (including adtech) to scam you, they'll scam each other just the same - as seen in this article.

This, fortunately, somewhat limits the effectiveness of that industry.

I came up with this analogy few years ago, when I read accusations that Optimizely designed their A/B testing suite's UI in a way that promotes drawing statistically unsound conclusions from A/B tests, misleading you to believe that the tested intervention worked - and thus making you think Optimizely is successfully helping you learn things. My own personal observations from working alongside one social marketing team also confirmed the soundness of this analogy.

EDIT: that Optimizely debacle I'm talking about:

https://blog.sumall.com/journal/optimizely-got-me-fired.html

https://news.ycombinator.com/item?id=10872359
Experts move one step closer to demystifying the quantum world
California IS a sanctuary state......
Customers on some plan can upload a certificate of their choice, and generally have to provide the key along with it. Keyless SSL exists, but isn't widespread.
> Finally, the order imposes a judgment of $12.8 million, which will be suspended upon payment of $50,000 to the Commission and the payment of certain unpaid income tax obligations. If the defendants are later found to have misrepresented their financial condition to the FTC, the full amount of the judgment will immediately become due.

That's an interesting way of structuring the penalty.

I wonder how enforceable it would be.
Yep just like scientists couldn’t find a link between smoking and anything either. People laughed at the doctor who washed his hands. They said Earth is at most 100 Million years old. And so on.

That was physics and biology and here you are talking about correlation studies??

My comment was designed to stimulate discussion about this exact issue. Not because I really had a strong position. What if studies show one thing and other studies can’t reproduce the effect? What if something IS true despite current studies “debunking” it?
In the journalism world, that's kind of the same thing if you've been working on an article for a while and have to publish early. My main question is, was this always the day they planned to release this?
This guy seems not to know about the speed of light.
Plenty of bodybuilders do fasting, especially intermittent fasting. Make sure you get the nutrients you require before and after a fast and combine with resistance training and you have no reason for concern (IANAN)
Just curious: wouldn't this then show overwhelming health benefits or decreased mortality in people who regularly skip breakfast, and simply eat lunch and dinner?
Pak Warns of “Surprise”, Calls Nuke Authority Meeting After Indian Air Strike
Nah. I just have a tiny capacity and a very variable order book. If I baked the same thing every day, the wastage would kill me.
They totally failed to monetize it for advertising purposes. Taking cases like $300 per single person location, paid by bounty hunter, is arguing in a bad faith, and has nothing to do with ad-tech.
Welcome to the life of all the non-engineers out there either up to their eyeballs in debt or otherwise unable to earn a living wage. How many secretaries or data entry workers or webmasters were made obsolete because you were paid to destroy their job?

However, you don't have to worry, free open source tools and off the shelf B2B software will make your job obsolete long before AI is actually a time saver when writing code.
Widely accepted mathematical results that were later shown to be wrong?
a follow up thought experiment:

how long to walk that distance, VS how long to read the image from the SD card......

answer:

walking the perimeter (aprox 2 miles): aprox 30min

reading 1tb (assuming sustained speed of 20mb/sec): 14.5hrs

next: consider WRITE speed...
Not necessarily at runtime.

OS/360 (IBM z nowadays) and OS/400 (IBM i nowadays) work kind of this way.

The whole userspace is based on binaries deployed in a bytecode format.

They are than AOT compiled into native code at installation time, or anything there are system relevant changes, via a kernel JIT service.

Whole mainframe hardware migrations are possible without changing a single thing on the userspace, just doing a system refresh.
Beware WHO is posting in your local news group
That's pretty cool to quickly put together a POC app. There should be an "eject" command that would export everything to a "real" Node application, with package.json and so on, so that the POC can be converted to a real app easily.
Rust's regex library also doesn't have this issue [1], and is easily usable by other languages [2]. If you're concerned about this issue in your code and your not using go it's probably easier to use this than the go one.

[1] https://docs.rs/regex/1.1.0/regex/

[2]

- C (and thus everything with a FFI): https://github.com/rust-lang/regex/tree/master/regex-capi

- Go (heh): https://github.com/BurntSushi/rure-go

- Possibly somewhat out of date Python: https://github.com/davidblewett/rure-python
Science does not give any answer, satisfying or not, to those questions (and one could argue it probably can't).
By 'flamewar' I mean the kind of internet discussion that gets angrier and shallower as it goes along, typically on divisive topics, typically repeating things that have been said many times before, with people trying to defeat rather than connect with each other. There's no intellectual curiosity in those arguments, so they're off topic here.

Also, they're tedious, except to the minority whose passions happen to be inflamed on that topic, and people tend not to know when to stop. These are the sorts of thread that make HN worse, and which all users are asked to have the discipline to refrain from. I know it's hard sometimes.

I'm sure that some of the replies you're getting are also breaking the guidelines, but we don't see all of those. Flagging them helps bring them to our attention. If there's anything particularly abusive you can email us at hn@ycombinator.com.
The Google Opinion Rewards app seems to ask questions related to this all the time. Anybody know more about that?

5 out of 10 "surveys" go like this: Which of the following places did you visit recently? Yes? How did you pay? (Credit card, debit card, cash, made no payment, …).
I'm not familiar with Docker infrastructure but what is the alternative to "pulling in a complete debian or fedora installation and then removing things"? Compiling your own kernel and doing the whole "Linux From Scratch" thing? Isn't that incredibly time-intensive to do for every single container?
I think Ponzi scheme is used here to just mean fraud
Hmm, I always heard to do the opposite, to eat breakfast even when not too hungry (which I never am in the morning).
Do you usually wake up hungry when not fasting?
Yeah, I'm not sure if people who recommend IF ever tried to exercise while hungry.

My lifting weights go down by at least 10-15% if I haven't eaten anything that day. Tried lifting in the morning before breakfast - didn't go too well either, just put me in a bad mood because I felt too weak.
Tiny new moon discovered around Neptune
A Java subset runs on almost every SIM card, credit card chip and Intel ME out there.

So no, it isn't closer to lua than Java.
Looks like deification of technology to me
Ah, so you're an optimist
"Digesting food matter is a great way to get sick and maintain sickness."

So our bodies doing what they have evolved to do is a way to 'get sick'?
I have very fond, if somewhat hazy, memories of shockwave.com too. For some reason, I have much warmer feelings for the Shockwave brand than Flash, which I mostly think of as a resource hogging nuisance.
nate_meurer, for some reason I cannot reply to your sibling comment, but I find dried basil to be OK. Fresh basil is certainly better. When using dried, I make sure to add a lot, gotta make up for the lacking volatile flavors.
>Which system is identifying the 10x engineer?

The compensation scheme at companies that employ them.

>What generates that gap in pay?

All companies are different but it's typical a difference in grade or rank.
Why would you immediately "make an impact" as soon as you switch jobs though? If you're not taking that new position, somebody else will be and I'm not sure you're that unique enough to do something totally different from the job done by that other person. Plus, it's usually the case that the longer you stay, the more influence you gain, and I don't think you can effect changes in a new organization rapidly, unless you're hired as a CEO or something. Maybe the only thing you get by switching jobs is to actually have products that you touched reach more users, but I don't think that equates to "improving the lives of others". Have you actually switched many jobs and felt happier afterwards? I can't really get your reasoning.
Ask HN: What are your experiences with pair programming?
Is there a consensus on its usefulness? Could be some bias on my part but I don't see it recommended as much nowadays and it is almost exclusively all or nothing (everyone pairs).
"Repeat after me" ... how sadly ironic. I trust it isn't lost on you ... is it?
> ultimately the only study that matters is the n=1, yourself

Isn't this flawed reasoning? You can try a diet, feel good but still be unhealthy in a way that will kill you earlier that your life expectancy.
http://troubles.md/posts/wasm-is-not-a-stack-machine/ wasm is already tainted by the legacy of javascript. It was intended as a replacement for asm.js and carries the burden of being too intended to be with javascript and as a way to get "faster javascript" due to how poor javascript is at executing efficiently.

The result is what I'd consider a poor mans java bytecode. The legacy of java was bloat connected to the runtime and its massive standard library coupled with nasty Sun then Oracle burden. And Oracle again being Oracle with what feels like more more lawyers than engineers to threaten.

So we tossed out a standard library and made a poor man's java virtual machine model.

This is java again, it just has massive hype because its better than javascript at actually running efficiently. But it can still be worse than any given other virtual machines out there.
Speaking from an engineering perspective, this is part of the reason I've never been comfortable with warrant canary or "extra-warrant" compromise canary.

Let's say you run some kind of service for which you offer privacy/security assurances, but, at some point, you're compelled in some extra-warrant way to violate those assurances. Or you're simply compelled by warrant, while also being compelled not to implicitly signal that by canary. Or you discover a compromise, previously without your knowledge, and are compelled not to disclose it.

I could easily imagine that many of the same official powers (public or secret), or de facto powers, that would enable the compelling wouldn't see the legal arguments of some lawyers as showstopper barriers to keeping the canary intact. If you think that kind of scenario is plausible, then touting a canary is arguably doing a disservice, from the start.

At least half of engineering is honesty and specification, so the introduction of a canary, in an environment in which you can't be sure you can comply with it, and perhaps can't disclose when you realize you definitely can't comply-- doesn't seem like good engineering.

If we're not sure we can honor canaries, then perhaps it's better not to do canaries at all -- and perhaps to instead specify our assurances better, including broad exceptions we anticipate we can't cover. Maybe lawyers and C-suite ultimately determine it makes sense to qualify the assurances with language like, "conceivably could be compelled by [particular government where company is based]" and "conceivably compelled not to disclose".

Personally, some of the hypotheticals are way outside my expertise (and stomach), and I'd rather focus only on engineering good solutions. But canary-type situations and assurances sometimes involve engineering, and sometimes we can foresee potential future problems that we should discuss with the appropriate people in our organization, before it becomes a problem. Then, hopefully we work with people who use all the information, from engineering and other sources, to do the best thing.

(BTW, I'm in the US, and I think, for example, that a practice of warrants is a very good thing, in principle, and I have some trust in the mechanisms and checks&balances of our system. I appreciate that different countries and people have different situations and perspectives, and that things are very complicated and imperfect, even in my own country.)
There's a decent size (albeit a little bit - but only a little bit - specialist) wholesaler in sydney. The boss is a tech enthusiastic, and the whole thing is somewhat glued together with various bits of perl and other stuff.
I believe that's called "an investment" -- you put resources in, hoping to get them back again plus more. The possibility of losing your principle is called "risk".

It's about as much of a Ponzi scheme as, say, a day at the track.
Partly yes. They certainly have a professional responsibility to write applications that resist well known attacks, such as directory traversal, xss, sqli, etc.

This isn't new, and not knowing how to deal with it is like a builder not knowing how to safely stand up a wall.
The Compose key works great for this (I use WinCompose on Windows). Most of the time I can guess the key combination. I think × is Compose, x, x.