skysight-inc/HackerNews huggingface dataset:
I agree with you about the over-negativity, but I have to disagree about the value of the "security nightmare" comments. Nowhere on the marketing page (that I saw) does it say, "prototype/development use only!" In fact I got the opposite impression. It seems to want to be a new framework. It's critically important to surface security issues early and often.

There's already a cultural anti-pattern in the js world of just `npm install`ing stuff and shipping to prod without auditing well (I've heard a number of times, "well it has like 60 stars on github").

If the project marketed itself as a "development only" or non-production framework then I'd agree with you 100%. However as it stands it's dangerous and could lead to extreme compromise of a system if it gets deployed to a production environment.

That said security-minded people are often inconsiderate and horribly untactful in their approach. That needs to change. You don't need to be overly negative to point out a security issue. Something like, "Cool start, but might want to point out that it's not meant for production!" would be a lot better IMHO.
Qualcomm's first 5G modems (the ones that will ship this year) will not be integrated into the SoC.
I think a lot of this will come down to why x86 isn't going anywhere for a while... the tooling that everyone uses from OSes, drivers, etc around it all. Though once you've added a case, psu, ram, etc... I'm not sure you wouldn't be better off with an ITX build. (though it's time for a new nano standard).
Cloud powered? Why would any sane person use this?
But almost everything does. Assumptions like this lead to ~40,000 unsecured MongoDB databases on the public internet [1]

1. https://www.information-age.com/major-security-alert-40000-m...
The whole analysis of justifying 80 characters per line by talking about how many more windows you can place side by is problematic. The problem is that this same logic would suggest that 40 characters per line is even better because we can get in even more side by side views.

I would like to talk about the downsides of 80 characters.

First point is that most monitor configurations are wider than they are tall. When you have 80 characters for line, you are wasting a lot of horizontal space on most configurations. This is especially true with laptops.

Second, at least for me, I am focusing on 1 file most of the time. 90% of the time, I write code in 1 file, with maybe 10%, I look at 2 files. With wide lines, I can see more of my code at a glance without scrolling.

Third, when you break at 80 characters, you waste more space cause you need to indent the new lines that were broken up.

Fourth, if you use languages like Python that have semantic whitespace, you need line continuation characters that just add to the noise.

Fifth, for those cases where you are comparing code side by side, having an editor that does intelligent wrapping to make code narrower is not that big of a deal.
I don't quite understand the fascination of the HN crowd with intermittent fasting. To me it looks like just another "fad" diet: grand claims, a handful of flawed or limited studies, establishing possible benefits, touted as proof the whole thing is rock-solid.

My feeling is it gives off a certain "body hacking" vibe that HNers are attracted to.
It's more like "trying to kickstart the network effect".

It's kind of like how dating services buy and sell portfolios of user accounts so that they can pre-seed their services with apparent potential matches, thus attracting real users who will (hopefully) become the real userbase.
Hi, very cool. What resources did you use to learn Laravel?
MITMing TLS outside the endpoints is inherently nefarious, whether they think it is or not.

If you want to compromise the endpoint, compromise the endpoint. Install your own MITM certificates and terminate the connection in the middle, or install client-side malware. Either way, there should always be a giant warning sign on the client that end-to-end security is compromised.
Yes, they should be troubled by whether they should even bother to explain why they have rejected it, and removed the QuoVadis authorities.

Agonizing over whether to let them in suggests they have let in other questionable entities. "Fairness" is a smokescreen. Nobody honest needs a certificate from a dodgy authority, and nobody with a certificate from a dodgy authority deserves benefit of doubt.
Maybe this is a bit tangential, but speaking of alternative networks, there are some really cool projects like cjdns and yggdrasil, which can be used to create an "alternative internet". A group I am involved with are trying to use it to create a local mesh network, since it's technically trivial to provide access to the greater internet over the mesh. And since you can manually peer with other nodes using the existing internet, you can participate in the network without being located near any existing nodes (though that may be considered defeating the purpose, it's very helpful to join all the meshes together so mesh services are accessible to everyone).
Your compliance with that order is not for that purpose. HOWEVER, your statement which was originally to generate sales went from being truthful to being untruthful.

So now that your warrant canary is false, you are making an untruthful statement supporting sales generation for your company, which is what makes it fraudulent; and in my mind at least, because you've been compelled to do so, that's conspiracy to commit fraud.

I guess they could argue that you weren't compelled to continue operating. You could have shuttered your business. So in that sense, I suppose if they made that argument, the fraud would be on your head and they'd get off on that technicality.
People with low integrity do this drag others down thing. People with high integrity don't.

There are always going to be low-integrity people in the world. Obviously I agree it'd be great if there were a lower percentage, but the point is you're always going to have to seek out good people to associate with.

Luckily, low-integrity people usually make this way easier than they realize because while a few are subtle and crafty, most of them are not and have lots and lots of obvious tells. For example, if you want to know whether they will lie to you, watch what they do with others, and you'll see that many dishonest people not only lie but their lies aren't even very believable. Essentially, I'm saying you can use this tear down others behavior to your benefit: they are handing you information you need to decide who to (and who not to) trust and who to associate with closely.

On a side note, if you were raised in an environment that valued virtue, watch out for the trap of becoming judgmental or self-righteous. I know I had to face this in myself. Social groups praise people for being virtuous, and this is a legit social means to encourage virtue. But if you're not careful, you can catch yourself chasing virtue not for its own sake but for praise, to bolster your self-image, or to gain/preserve in-group status. Look at all these great things I do -- over and above what normal people do, in fact -- so I must be a great person, right? Or, look at all these great things I do, so you guys accept me, right?
Taking this further, wouldn't this imply that WebAssembly is only for the Web?
Then those applications are correctly getting the behavior they desire: either they get a secure connection or they don't connect at all.
I think it just means you have to do more than simply make things efficient. You also have to have some way to minimize total costs.
"Cutting off your hands linked to greater distress than never having hands to begin with"
No hah :-) I grew up in the the Donny Darko era of pastels and nanny state 1950's era abstinence of the late 1980s and early 90s which resulted from AIDS and the war on drugs. Grunge/alternative/Nirvana was the first "real" cultural experience I had. Saying no to materialism by wearing overalls is the visible expression of questioning authority and the status quo.

I miss many aspects of the 90s and what they stood for. But I'm inspired by today's youth and how they will pierce the veil in their own way.
I'm curious. Why would you possibly want to do this?
I think any user should be responsible for vetting their tech choices. Why would the author put a disclaimer instead of fixing the issues?

In this case, the project is clearly too new/unstable/insecure to use in any real sense. It's presence as #1 on HN says more about the audience than the project itself I think.
I vaguely remember a study in the past that suggested that, at the extremes, high IQ people were more likely to stake out an easy life for themselves in place of a highly successful one.
Ask HN: Has anyone curated a list of hidden interview questions?
For example
Uber in-app hacking challenge
https://danonrockstar.com/uber-hacking-challenge-decf3276207a

Googles foo
https://thehustle.co/the-secret-google-interview-that-landed-me-a-job

I remember finding a really cool one all over network requests at one time but can't remember the company. What are other great hidden interview processes?
HAM radio can do this but I like the idea of a wireless postal service hitch hiking on vehicles doing their rounds.

Reuter’s got its start by using carrier pigeons to bridge the gap between two telegram networks.
Technically speaking gin is just flavored vodka, though the flavoring mechanism is different from what most people think of as "flavored vodka" (flavored via distillation rather than addition of artificial flavor).
Nice how in the diagram only LISP appears under HLL, VHLL and UHLL.
Your opponent told you to use the die he brought?

He was probably on to something.
What are the semi-useless features you wouldn't want to see stuffed into it?
Rules reduce expense, leaving resources to deal with exceptional cases. Applying rules to exceptional cases makes a mockery of both the rules and the organization applying them.
Related, on d6's: http://variancehammer.com/2015/07/31/musing-on-custom-dice/
FTC Brings First Case Challenging Fake Paid Reviews on an Indie Retail Website
John Oliver had a section on it in Sundays "Last Week Tonight". Had me triggered because I have a case in my own family who is drawn into the Astrology/Psychics bullshit. It went so far that she lost a lot of money at a time she was most vulnerable and she would meddle in other peoples lives by predicting horrible stuff (which sometimes happened because of projection) ... So I did an Ask HN here: https://news.ycombinator.com/item?id=19254698

-> I don't want to hi-jack this thread but did want to point out the John Oliver story and my general bewilderment wit YT not demonetizing these channels - no need to block or censor but just give them no money for their traffic.
Samin Nosrat visited this soy producer as part of her Salt, Fat, Acid, Heat show... the Salt episode is dedicated to Japan, where she also tries traditional miso (which is apparently similarly complex in its original form). Very interesting to watch if you haven't.

Joining the fray of the discussions above, I think we can acknowledge both the pros and the cons of the mass-availability of things that used to be hard to come by. It's true that the $150/bottle, traditional balsamic vinegar, in its special glass bottle (aged for a minimum of 15 years), is pretty far removed from even the good balsamics that can be found in most grocery stores. If you have a chance to try it, you'll gain a deeper understanding of what made balsamic vinegar special to begin with, and a better idea of why _some_ version of it is now available to everyone.

But, as others have said, that's not to say that commonly available balsamic vinegars are uniformly _bad_, either. There certainly _are_ bad mass-produced balsamic vinegars, but also plenty of mass-produced good ones that are perfectly appropriate for cooking or dressing a salad (or even having on their own, though for me they tend to me a bit too acidic-tasting to really enjoy, whereas the $150 bottle isn't) without breaking the bank.

I think the lesson we can learn from top-quality traditional balsamic, top-quality traditional soy sauce, and the like, is that these ingredients did use to have a deeper, much more complex flavor, and that we have traded some of that away -- out of necessity -- in order to make them available to a larger number of people at lower cost. I think there's a place for both versions, but also that we should acknowledge that they are _not_ the same; they're just optimizing for different goals.
I looked up your story ("whales don't die of cancer" on duckduckgo), and found it: http://www.bbc.com/earth/story/20151031-the-animal-that-does... .
The D20s that come with Magic products are spindown dice, not normal D20s. The faces are ordered for ease of lifetracking and are _not_ optimized for random rolls.

Because the dice aren't evenly weighted, they have a strong bias. IIRC, Spindown D20s crit somewhere around 30% of the time.
It's like a hipster's Nintendo DS
Technically, this isn’t true since there’s no way to prove or disprove such a phenomenon, currently. It’s beyond the limits of science. Further, it’s certain that some subset of professional psychics and their clients do believe in their powers. this says nothing as to whether there’s shared delusion occurring.

This isn’t to discount the reality that many psychics are knowingly conning their customers.
Current understanding points to the fact that caffeine has no adverse health effects; in fact it might even yield some benefits.
Interesting work. I currently utilize Bench (https://bench.co) for my outsourced bookkeeping needs in my solo consulting practice. I'm quite happy with them, but if you're not aware of them it might give you an idea of what you're competing with when it comes to potential users like me. Good luck!
> If you want to experience the entirety of Asian cuisine in only one stop, make that stop Singapore

I have to disagree with that. Genuinely good vietnamese, thai or even japanese food is pretty hard to find in singapore, and believe me I tried. Its specialities are dictated by its influences - southern china, malaysia of course, india, to some extent indonesia. The rest is decent of course but I just don't think there's an adequate population of, say, vietnamese in the city to sustain a general standard of quality comparable to what's available back home. Just try and find a good pork Banh Mi in singapore, I dare you.

If I had to name the city with the best general variety and everyday average standard of asian food - believe it or not I'd probably say Sydney.
An even dirtier secret is that you can have great data like Facebook but still serve incredibly irrelevant ads that everyone ignores. Google and FB presumably know massive amounts about me but I've never been shown an ad on either service that's worth clicking (on the off chance I even bother to look at them).
Unfortunately, if "people with high credit scores have less insurance claims," then preventing insurance companies from taking this into account is a deadweight loss to society.

People who are more likely to have more insurance claims should pay more for insurance (that's the whole point of underwriting), otherwise people who are less likely to have claims are being unfairly overcharged.
It's cool to see a full-sized replica, arguably looking ~like the original did. I wonder what the weather's like in Maryhill. If there's not too much freeze-thaw, it might well last thousands of years. I mean, some Roman concrete has.
As someone new to the concept - what are the goals of fasting? It does not seem like weight loss is a primary driver for most people on this thread?
It's a fad diet. Like paleo or keto or god knows what else people come up with.
Yeah, let's just make it harder for banks to protect your money so that nobody can figure out your Facebook password in 10 years.

EFF: "Everything sent over the network should be a secret! Nobody has a good reason to inspect traffic, it puts users' privacy at risk!"

Bank: "We keep trillions of your dollars. Inspecting our own traffic is how we make sure nobody is stealing it. We're a pretty big organization, so this stuff costs a lot of money, and is complex and takes a long time to get right. Can you give us a way to do that in this new TLS standard?"

EFF: "No!! Privacy!!!"

Bank: "Ok... I guess we'll have to make our own standard, then...?"

EFF: "Don't ANYONE use that standard, it will cause REAL HARM!!!!"

Bank: "..... Nobody else was going to... except us....."
Offtopic but how do I subscribe to the paperback copy of Increment magazine?

At the time I got a free sample of their 5th issue - Programming Languages - and asked about getting a copy of previous issues and subscribing to future ones but never heard back from them.
Now.. I have no qualms in calling out fraud where I see it. But care in throwing it all out.

We, earlier this week, read about someone who attended a meditation retreat left in handcuffs because meditation did crazy things to the mind. I mean, he was just eating and sitting and sleeping silently. We have holes in understanding of consciousness, and can't even tell if something is sentient or thinking.

And then, we have people feeling emotions in areas. These emotions can be shared. many people can feel being stared at.

The hole seems to be the intersection of: consciousness, mind, and emotion.

Can we point at emotion? Can we throw it against a wall? Can we describe anger without emotions? How do we measure it? Why can some people feel the anger in an area? Same for mind and consciousness - show me an example. Quantify it.

What's confusing is that your declaration of "They're just wrong, and are confused by confirmation bias." is that the very statement is confirmation bias of sciencism. Either there is proof (positive or negative), or there is not. Do not confuse lack of proof as proof of lack.
i have that ideology, and I grew up from a very poor background.

though, i personally dont see much merit in thinking much about things i cant control, whether they are real or imagined. i do it sometimes, but I always try to remember what Ronon (stargate atlantis) said, if it helps you: use it. if it doesn't, put it out of your mind. something like that.
I know, but I also think there's a deep-ish meaning that is literal. Contempt of court is, historically and functionally, about contempt... which breeds disobedience. Respect has its own implications.. including obedience, in certain contexts.

Also, I was just writing it because it sounded good att.
Backfire: Widening freeways can make traffic congestion worse
> Can an attacker actually exploit the vulnerabilities to do bad things? The answer for almost all of these CVEs is "no".

This is a really dangerous way of thinking of container security.

First of all, if I give employee A a list of 500 "vulnerabilities" to fix, and employee B a list of three real, serious vulnerabilities to fix, employee A is much more likely to wait for the problem to go away and employee B is much more likely to find the issue approachable and get it resolved. It sounds like a big difference until you understand that actually employee A was given the same three serious vulnerabilities plus 497 "unexploitable" vulnerabilities, and just didn't know which was which because the three serious vulnerabilities got lost in the noise. You need to instill a zero-tolerance culture to make sure that you don't let serious vulnerabilities stick around. Compliance regimes acknowledge this which is why they're ultimately reasonably effective at getting large, lumbering enterprises to be secure.

Second of all, while much of the open-source software inside your container may not be directly invokable without an exploit, the fact of the matter is that virtually no organization is subjecting every release of software produced in-house to rigorous security auditing. Yeah, your software needs to be pwned before those vulnerabilities matter, but Murphy would like to remind you that your software was being pwned while your wrote your comment and that the attackers have exploited the other software in the container while you were reading mine. And maybe it makes a difference, for example, if your containerized service runs under a limited-privilege service user but a vulnerability in adjacently installed software permits the attacker to escalate to root within the container.

You're right in that most orgs probably have lower-hanging fruit that provides better bang for the buck to improve their org's security posture. But adopting an attitude of "meh, not all CVEs are really CVEs" is irresponsible at best.
Actually, what you should normalize is operating costs, so probably power consumption is the better figure to normalize by.

... on the other hand, that's more difficult to measure, and TDP figures are not what really happens.
"Dry fast" means you consume neither food nor water, correct?

How can a human possibly go "8 to 10 consecutive days" with no water?
there is also the saltwater float test for lighter plastic dice.

https://www.youtube.com/watch?v=VI3N4Qg-JZM

Anyone know of an easy way to do metal dice?
Well, of course it's disruptive. That's the point. You are trying to force a change in someone's behavior. But it doesn't have to be adversarial. You can have disagreements but still try to work together. In fact, I would say it is extremely important to try to do that in almost every circumstance. Even if you are confronting someone who is not an ally, it's best to try to do it in a way which is strong and firm but also doesn't make them into more of an enemy any more than necessary.
Well it is 609.41 KB / 506.33 KB transferred and like 395kb of them are a font, good use of caching as well, not bad
Well, parent's arguments were kind of dumb. "OMG keyboard and lisp" is not the same as saying that one can achieve the same thing in a tool one's more comfortable with.

> Use the too, you’re comfortable in and you’ll be way more productive than dropping everything to learn something new.

That's not true, and this kind of thinking can be dangerous to your productivity - especially if the tool you're comfortable in is one of the new breeds of popular applications or SaaS. Each tool has a productivity ceiling. Software like Emacs or Vim has that ceiling somewhere in the stratosphere; a typical web-based tool has the ceiling ridiculously low, barely letting you stand up. On that spectrum, dropping everything and learning a tool that gives you more space to grow does pay off very quickly.
Your list is exactly what one would expect. Growing up poor is stressful and immensely worrisome. It doesn't teach you high-status social codes, and it does make you cynical about attempts to turn you into a "team player" - because someone else is more likely to benefit from team effort than you are.

At the same time, you only have to look at the shocking performance of British and US politicians born into privilege to see that not everything you say is true.

The UK is currently trying to work through an unprecedented crisis of entitlement and narcissism caused by those from privileged backgrounds whose chief character attributes are self-importance, entitlement, and historic, world class levels of incompetence and tone deafness.

These people are certainly successful financially. It's certainly true in their case that indicators of privilege correlate with success - but it's also true that it's clearly not because of professionalism, hard work, or outstanding native talent.
Unbabel Delivers ‘OpenKiwi’ to the Global Machine Translation Community
More specifically, in the spindown each number is adjacent to its predecessor and successor. In a regular d20 the numbers are more spread out, and opposite faces add up to 21.
The only time I used a D20 in magic was for keeping track of life totals. If you're rolling to see who starts, it doesn't really matter if it's biased if you use the same die.

I guess some cards use a dice roll, but that's pretty rare.
Only if your data is already on the GPU. Otherwise, this little computational work is swamped by the cost of I/O back and forth to main memory.