skysight-inc/HackerNews huggingface dataset:
I think of articles like the following when I see sentiments in support of lampooning "anti-vaxxers" for being "anti-science" http://healthimpactnews.com/2017/harvard-immunologist-to-leg...
The FDA usually peruses issues of false health claims, so I'm guessing the latter.
The title is bogus, as the article eagerly admits: "To be perfectly clear, while the new tax is being referred to as the “rain tax,” it doesn’t actually tax the rain itself ..."

In a perfect world, storm sewers would fund themselves.
a problem fixed under less ideal situations is still a fixed problem regardless.
Not an unknown business structure. E.g.:

I hold a party and charge an entrance fee.

The early arrivals are in an empty room. If nobody comes after them, they won't have much fun. If you arrive after a critical mass of people is already present, though, the value of the party is instant.

I guess the difference here is that people know how parties work in this respect; this business may not have been so clear.
I think this is a good start--some easy modifications could turn it into a 3-color banner similar to the french or mexican flags, which would be both easier to remember and less likely for a scammer to guess correctly. Or you could do randomly generated animals! i.e. "if you don't see a pink bear, you're being phished"
(this will be slightly a rant)

So what? Java failed, for good reason, wasm has essentially solved all the reason why Java failed.

Almost everything of success used old ideas.

It is like saying the Wright brothers that Da Vinci already failed building flying machines; pretending that engines were not a relevant difference.
At the extreme end, people will revolt. When those in power push to far, the workers will violently protest. Just crack open a history book.
people can live in multiple countries at the same time

As a silly American, can you explain how you live in multiple countries at the same time? Do you mean you, for example, live in one country and work in another?
I wonder about this loophole:

Fully public communication, 24/7. Absurd, sure, but could it work? Set up your email so that anybody in the world can read it (not send from your address, though). Have a camera in your mailroom that streams to the internet that's high def enough to read off your letters as you open them (oops, top secret! Too late I already opened it here!). Have all your phone audio streaming to the internet.

Absurd, silly, but a fun thought experiment - is this a way to become "immune" to the type of requests the US government is allowed to make where you can't tell anyone?
If I'm reading this correctly, this means that physical access to any modern machine can be leveraged to root access. Encrypted storage that hasn't been unlocked might continue to be secure; that's about it.
I think it's pretty clear to most people that the US prison system is a deterrent and provides retribution. It's not about rehabilitation.
Apparently not close enough. Thanks for the clarification
The problem isn't the display, it is an __external__ display.
Nothing about Amazon’s abuse of their customers surprises me anymore. Their “Amazon’s Recommemdation” is a joke too, and they’re associating their brand with garbage.

https://m.youtube.com/watch?v=Gflpf0DrCgw

Par for the Amazon course, cheap Chinese knockoffs. If they had anything other than a highly permissive refund system, they’d already be drowning in lawsuits. They must bleed refund money though, and I thought Bezos was all about right margins?
Would be for me.
Show HN: KeyDB – A Multithreaded Fork of Redis
That's a fair point about the NATO! Didn't mean to marginalize it, but there's only so many words to a sufferable HN comment.

It's true that today's EU was only established in 1992/93, but it is the result of a very long process of European integration starting in ECSC in 1951 and the EEC in 1957. Cooperation between Germany and France started remarkably early after World War II. A few years earlier, they could not have been more bitter enemies.

I agree with you and would say that the EU is utterly useless in a military conflict, precisely because there has always been the NATO to fall back on. This might change in the future as the US is becoming less reliable and more isolationist from a German standpoint at least, then again, there might be no political power capable of reforming the EU further right now.

In short, I think the EU helps Europe have internal peace. For everything else, I am glad to sit under a nuclear umbrella.
> a handful of flawed or limited studies

The research on caloric restriction and fasting is wide and deep. I'm curious where you got the impression the research was only a handful of flawed or limited studies?
Crowdsourced reviews are problematic (often but not always lacking context). Paid reviews make them worthless.

Perhaps this is one use of a blockchain which could add credibility to reviews.

Still by and large I prefer independent professional reviews (combined with authentic crowdsourced reviews), the problem with these, like CR, is that they’re not scalable to thousands of new products periodically, so we have to rely on crowdsourced reviews that don’t include a “trustworthiness” quotient.
This is unfortunate, but it simply means that we have three options:

- Block entire domains
- Prevent javascript from running
- Use the internet less, read books, use your local library.

Happily, I was able to get my browser from the default message:
Hello from Google Tag Manager. This text is being added by a tag running from GTM.

To the blocked message:
This content should be overridden by GTM.

But, how far will this game of cat and mouse go?
https://en.wikipedia.org/wiki/Desktop_computer
Tennessee and Kentucky fighting over who makes the better whiskey is as silly as the Hatfield and McCoy war.

Just pour me a finger or two of Old Grand-Dad BiB neat, you drink what you want, and let’s call it a day. :-)
Supermicro Servers Can Be Easily Backdoored After All
He took the risk of creating a botched experience on his platform first. He did not fail and other followed. He was maybe not the single reason why flash declined, but for sure is the one that initiated it.
Sounds like your in a cult not a company. NPR had a piece the other day about how companies are having trouble retaining people. They are offering added incentives like paying student loans. Why do they have this problem? Because they have spent so many years laying off people to increase profits they now have to spent more money to retain people that no longer trust them to provide steady employment and move on to other employers every 2 years. If you really value those things find a company that values them also. You will be happier.
https://www.stitcher.com/podcast/national-public-radio/how-i...
> I can see what you're getting at, but I hope you're not one of these people reporting it as a scam by posting reviews. I think it may actually be against Amazon's terms and conditions to 'review' a product you have not purchased.

I don't post reviews like that, but I totally approve of people who do. I'm not going to fret over the precise meaning of Amazon's terms and conditions if doing so means that innocent people will be more likely to be suckered by scammers.
…and then of course your main investor, your wife, the classiest of them all!
Just think of the the protagonist in "Shawshank Redemption". I don't mean "look, how easy", but I would be surprised if most people don't respect that character in some form. He doesn't hate others, he's not arrogant, he just also doesn't give in, and I would say he holds on to integrity for his own as well as everybodies' sake, not as something he wants just for himself to then judge others with. Even if it ended differently, I think most people would still say "good for him" for how he carries himself. Ultimately, I think communities, at least smaller ones in real life that aren't dysfunctional, are really good at knowing where one's heart is at, and that matters more than anything.
> It has been practiced for thousands of years in religious context

A buddy of mine was wondering when flagellation will be touted as a self-improvement technique in Silicon Valley circles, and it looks like that day is coming sooner rather than later.
Any tips/sources?
I think they mean we should prefer using stripped down base images, then installing ONLY what is needed for your application/ci+cd tasks to run.
Sunday 24th Feb. Predictions and Tips
I wonder if Unity and Electron will be the Shockwave of tomorrow.
"Any programmer can be replaced with a finite number of interns" - Janusz Filipiak, the biggest shareholder of Comarch, Poland.
i3 has much better multi monitor support.
Looks like Alpine-based images were found to be "ok". Not sure why folks would use non-alpine based images unless you really have some odd dependencies?
If anyone's interested in effects of long-term water fasts (sizable study over long time, largest data-point is a 41-day water fast): https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5819235/
Really? Cause I think most of this we have some pretty definitive answers.

What happens after we die? You stop being. The conscious experience of it is the same as before you were born, i.e. nothing.

Does my pain have meaning? Not to the universe, yes to the people that care about you?

Am I special? Live is special, it's the most amazing phenomenon we appear to have in the universe. But at the same time, the "universe" doesn't care about you.

What is consciousness? A physical process happening in your brain.

Will I ever be able to talk to my dead grandmother again? No.

You might not like these answers, but that doesn't have any bearing on them being true or not.
Yeah, this seems like one fairly simple way of adding some competition without having to completely re-architect Facebook itself.

Facebook is already used a lot as an authentication service, after all, by third-parties such as Tinder.
GNU+LinuxBBQ LinuxBBQ.com

GNU+Debian

TAILS

OpenBSD

It's a shame that so many people are mentioning their desktop environments, as if if you were to take this away and leave them with their distro at the command line they may switch or choose something that better fits their use case. My two cents. i3 and NoX user here.
Udacity courses: Applied cryptography, Intro to Theoretical Computer Science

Coursera courses: Digital Signal Processing

and Khan Academy.
True, there are many distractions, but I think I would have learned more guitar and taken on some bigger automotive repairs as a teen if I had access to all of the how-tos I have now.
What astonishes me is that not only did this happen but:

> Incredible as the thought of someone flipping a coin into a Lucky Air jet engine for good luck may be, the final twist is that the exact same thing has happened once before at the exact same airport to the exact same flight. Last May, a 76-year-old woman was briefly detained for tossing coins at the engines of Flight 8L 9960 in Anqing
Slack continues to bike shed their logo
Newton fit models to data that reliably predict outcomes. What makes his work scientific is its method and reliability, not the nature of the explanation.
(Unrelated)

Is there a way to access whois records for Route53? I cannot for the life of me find a way to query their domain records. If I lookup a domain registered through Route53 using another whois lookup tool, it will point me to `registrar.amazon.com` which just redirects to the Route53 landing page. I have crawled through their entire sitemap looking for a search tool but have yet to find one.

Anyone have any info on whois records with Route53? Thanks.
Why wouldn't you want to give away the game?
There are supported linux distributions like Container Linux intended for barebones deployments. Docker images layer, so you can essentially build your own base images from these primitive linux distros, and then have those available for your various applications.
Yeah, ok, now I'm reading your other comments here, and I understand what you're talking about. You're not just talking about "good" tomatoes. You're talking about the tomatoes that are good enough to stand on their own as the centerpiece of a dish. It's hard to describe. I myself have only rarely eaten a tomato that I think qualifies. The cherry tomatoes that I keep talking about here were like a religious experience.

I think tomatoes are kind of unique in this regard, at least among common western-world fruits and vegetables. They're like mangos; the best ones are freakishly delicious, with layers of surprising flavors. It's hard to describe, but I know that's what you're talking about.
> Agreed, and I also agree that maybe it should have a tagline about "not production ready" or even "never production ready".

That's a great idea! It should definitely be implemented.

With that said, what do you make of the point that things that are clearly not suitable for production (and sometimes labeled accordingly) have a nasty habit of making their way into production anyway? Do you think it has salience here? You're clearly a thoughtful person with your hear in the right place, so I'd very much like to hear your opinion.

Again, your point is both completely valid and absolutely correct. Purpose and labeling should be clear enough that no person could possibly miss them.
I wonder what the actual outcome is for sales - fake reviews and counterfeit products have driven me to purchase a certain class of items directly from the manufacturer and not on Amazon.

Maybe most people don't bother with this though?
You can use the LLVM toolchain directly if you know your way around it. I believe the GCC folks were working on a wasm target a while ago but I don't know the ETA for that.

If you are looking for an easy setup of LLVM's own wasm-target (which Emscripten will be switching to eventually), try this tool: https://github.com/appcypher/wasabi
Wait, you were prosecuted for defending yourself from a violent attacker?
Most wasabi sold in the U.S. is green-dyed horseradish.
The Logic of Effective Altruism
Dr. Jason Fung's books: Obesity Code and Complete Guide to Fasting. The first book makes the case for it. The second book was better for the "how-to". Both refer to a lot of research.
Sellers know people do this and plant fake, negative reviews on competitors at the same time they give themselves good reviews.

I noticed this once when repurchasing a space heater I'd bought multiple times in the past. Several reviews mentioned the temperature sensor failing, but this particular heater had no temperature sensor.

That isn't the only product I've seen with suspicious bad reviews, and I've read pieces of investigative journalism that confirm it's fairly widespread.
I think that's an insightful assessment.
I'm not trying to disparage fasting, who am I to say it hasn't helped you, or others?

That being said you call it a health tool, and then say it produces stress, which has been documented as being extremely detrimental to health. You also mention, being unable to focus, and being wired.

I'm glad it's helped you, but this endorsement makes me question the health benefits more actually, and makes me less interested in trying it.
I have been working with a group that is trying to clone this dataset and make it publicly available (https://github.com/jcpeterson/openwebtext), and I have noticed quite a bit of code in the scraped dataset. Future releases of our dataset will be pre-filtered with another LSTM language model that will filter sentences by their probability under more conversational / literary datasets.
> How can you rescue the product that you've spent so much time on and love?

Start a company, get a few hundred million (or a billion+) of dollars together, and buy it.

> How do you communicate with that kind of corporate leadership?

At the end of the day in any situation, you have to learn to speak their language, which is informed by their values. These questions always boil down to "X doesn't have my values, how do I change that?" If you can't make your values align with theirs, the ship has sailed.
The situation hasn't improved significantly in the years since the same vulnerability appeared with Firewire.

There are so many ways to mitigate or stop this, and keep the user in control. Android, at least, knows to prevent privileged device connections with the screen locked.
Ohh nice one :)
No I'm not.

It doesn't matter whether an exploit is locally or remotely exploitable potentially. It matters whether it's exploitable for an attacker.

For example, CVE-2017-5645 is a remote code execution vulnerability in Log4j that will light up your vulnerability scanner like a Christmas tree, but requires you to use Log4j functionality that you will never realistically use in an application container.
Simple ways to reduce your exposure to air pollution outside
Speaking of carriers, some have been known to inject IDs into their users' requests, so that site owners can later buy those profiles from them: https://arstechnica.com/information-technology/2014/10/veriz...

That's one way to get that data.
Ask HN: How do you keep up with Marketing trends, technologies and news in 2019?
Are.na – a visual organization tool designed to help you think and create
My suspicion was that any such applications have a web version.

I'm a bit surprised by Skype for Business (horrible product BTW, it's a gamble to even be able to sign in on a fresh install) though, the rest I would expect people to use web versions of.

I would think that (perhaps coincidentally), the organizations that require these kinds of insights are not the ones that are relying on services that do cert pinning. And if they do, they can but the marketing department/the server running THAT wonky old software from the 90s in a separate subnet.
For industrialized Western nations, far less corruptly.

For countries like Venezuela, probably a lot like the US.
> I guess which is better depends on organizational fit and personal taste.

The assumption is that we're talking about big-enough orgs here. If you're running a small enough org, take a weekend, put your system in distroless containers and be done with it. Container scanners don't add much value to small orgs to begin with, their whole value proposition is "you run so many containers that you can barely keep track of them, so here's a tool that helps you understand the true state of things." Process and compliance are practically a given.

> either (a) updating the vulnerable base image or (b) switching to a different base image

Non-trivial in practice. Hopefully your org has standardized on a single base image which the org maintains and takes responsibility for, so (b) is a non-starter. If you could just update the base image fleet-wide overnight without issues then we wouldn't need containers in the first place; if you tried to do that twenty years ago you'd instantly cause rolling outages (now you'll roll back after your canary dies, but it's a moot point, you still aren't de-facto instantly updating). Containerization made it easier and safer to deploy services, but it didn't give you a "click here to magically update everything with no risk of rejection" button. Vulnerable services have often been vulnerable for long periods of time, with complicated update paths, possibly needing in-house patches, etc.
"We built a fake network card that is capable of interacting with the operating system in the same way as a real one, including announcing itself correctly, causing drivers to attach, and sending and receiving network packets. To do this, we extracted a software model of an Intel E1000 from the QEMU full-system emulator and ran it on an FPGA."

I wanted to call that out; that's nifty!
London - Currently dead
https://www.meetup.com/HNLondon/
I use English most of the time, but the AWS translations from English to German got really good lately.
As a german who used to do front-end, I'd have loved to delay those problems in to the first i18n.

A "Cart" is a "Warenkorb" or an "Einkaufswagen" and both can't be shortened at all. Oh and did you know the correct spelling for a price would be "1.999,00 €"? (with a space (which even germans find ugly), comma/dot swap and the currency behind the number).
Google Summer of Code Mentoring Organizations Announced
No paper, no code, no comparison to other models - hell, they didn't even label the graphs. This is just Google PR spam.
Drowned out by the algorithm: Pro-vaccine advocates struggle to be heard online
Hmm, seems that plenty at intel haven't been thinking about security at all for a while... sleeping at the helm?
Yes! I've experimented with server-side changes, but unfortunately the request length leaks information too, so the client needs to do something similar.

In real terms, I think the consequence of the rapid mass-migration away from CBC made the passive attacks far easier; instead of building graphs and de-fuzzers, analysts can identify content using combined request and response length signatures. All of that happened purely at the cryptographic layer, and it's unfortunate.

In general, it's hard to ask HTTP servers and applications higher up the stack to take it on; the folks writing those ton'd tend to be cryptography or SIGINT experts. It's still easy enough to find subtle CRIME-like compression attacks against servers and applications that mix compression and untrusted input, which is some sign of how effective we all are at chasing down similar kinds of issues at those layers.
Check out Luke Smith. He has a few good tutorials on i3. He’s at lukesmith.xyz
TensorFlow Datasets
A fluidised bed setup? (Would generate some pretty bad dust, but it might beat mercury vapors)
> main point here is that most interviewers are (in my opinion) looking to screen candidates out for pick-a-reason. If you volunteer information that doesn't help you get the job, it can only help you get the boot.

Yes! Exactly this. That’s why I always have a cup of chai tea in my hand. I use it as a filter for when I need to keep my mouth shut or keep my answers short, sweet and to the point. During interviews it’s easy to start rambling and telling too much information.
I echo your sentiment. And I am mostly of the same opinion of you. It's just... if you look on a long enough timeline, there is no way that the humanity will not end in a dramatic and sad way. Preferably very very far in the future, but not necessarily.
What prevents NSA from requesting Cloudflare, under the table, put a false message?

If I owned Cloudflare, I wouldn't mind lying to my customers if it was related to the national security or if it gave me some kind of unfair advantage or special treatment against my competitors.
How radical ideas turned Curitiba into Brazil's 'green capital' (2016)
That's fascinating, thanks a lot! I have a medical background, so I was familiar with how vaccination works, but not with the specifics of adenovirus!
Not sure how much the negative reviews are useful.

It's not uncommon to hear about folks targeting competitors with lower star reviews as just getting 5* reviews isn't enough to stand out.
You may be inspired by "Fork yeah" - https://news.ycombinator.com/item?id=16839529 - bcantrill on Solaris.

But that was a situation in which an earlier version was already open-sourced. You could consider reimplementing the system as open source, if IP rights and non-competes don't prevent it.

But accepting that the owners killed the system is likely to make you happier.
People have experienced positive effects from prayer, meditation, and fasting. I don't know if we can add flagellation to the list. Needs more studies.
I have two bash scripts that set things appropriately -- laptop.sh and desktop.sh. Xrandr, xinput, xset things. There's probably a better way to handle this but it's not inconvenient enough to make me figure it out (or duckduckgo it).
He rode into Alabama a tech savior, then swindled millions
I see that Snyk is still trying to claim credit for "discovering" zip directory traversal vulns.