skysight-inc/HackerNews huggingface dataset:
Is this an established challenge? Is water allowed? 4 out of how many potential contestants think they can do it?

This doesn't sound hard on the surface, but then again neither does 7 saltine crackers or 1 gallon of milk.
These comments remind me of how much a bubble hacker news is. None of my friends would know what the hell a neural network was, and would laugh out loud if they heard that comment.
Assuming the client and server HTTP implementations don't have any bugs, and there aren't any network devices (proxies, etc.) in between, sure. Are modern clients able to start at HTTP/2, and gracefully degrade through HTTP/1.1 with keep-alive down to HTTP/1.0 if necessary? That would be really cool if so.
> Professional security engineers do not, as a rule, encourage software engineers [..] to only use open source software because "you can inspect the code for vulnerabilities."

All else being equal, I'd certainly have more trust in the FOSS version. Yes, i won't audit it myself, but source we can compile ourself is still easier to audit. As such I'd hope more people will have eyes on it than without source access.

Same for a hash of the executable I download being generated by an reproducible build. And I prefer to download and run the same installer as everyone else than someone offering a custom download link just for me.

Non of that means I don't have to trust the project/maintainer. But it is a bit of extra safety I want in some cases, e.g. for a password manager.
Battle Against One of the Worst Ebola Epidemics Ever Is in Trouble
Mirror https://web.archive.org/web/20190307231618/https://securityd...
There are tons of people over their heads, everywhere, of all races and sexes.

But as the other person who replied to you noted, people now are openly stating that they want to avoid hiring white males.

>Sadly I've had to bring up my genetic background recently as a pure survival mechanism because people keep telling me to my face that they don't want to hire white men so I need to let them know I'm not white so I don't get instantly filtered out.

In recent times, I have not heard that more frequently about any other race/sex combination. To me it's undeniable that the hiring climate has changed drastically.
You can deliver unsigned Mac apps too, just not on the MAS.
Do you think cost should ever be a factor in patient care? Looking it up, generics usually cost 80-85% less than brand drugs. They are tested and contain the exact same active ingredients. Is it worth the patient and/or the insurance company paying 5-7x more to keep the coloring agents etc the same? I understand that sometimes it may make a difference, probably especially for things with complicated delivery mechanisms like time-release drugs, but in those specific cases the doctor can explicitly request brand if it's important.

Usually the patient copays are substantially higher for brand drugs than generic ones. And the insurance company paying obviously isn't free money either, it's from premiums that people pay every month (and/or taxes). At least in the US, people often don't get medical care because of the expense, so anything that inflates the cost further can be expected to cause real negative health outcomes by pricing more people out.

I agree it would be better to not change even minor things if a drug is working. But I think that problem would be better solved by (as a condition of drug approval) requiring companies to disclose coloring agents, binders etc to generics makers once the patent expires, so they can make the exact same drug that was used in the initial clinical studies, rather than overpaying for drugs by 5-7x.
Good. Then we're in agreement that hiring for diversity is of no detriment. Incompetent white people are hired because of subconscious bias and incompetent people of color are hired because of diversity goals. We've achieved equality.
My family cared for 50-150 layers who were given free range during the day to go wherever they wanted and a safe coop at night with plenty of room for everybody with cool roosting spots.

Even in this configuration, the chickens were massive assholes to each other. Chicken rape is the worst too, the hens scream and run like crazy. Feathers fly.
Datadog Log Management from Zero to One
So, I still have an unused apartment where I go collect my mail every month. Once I move out at the end of this month, I plan on sending most mail to a virtual mailbox. I may have more important things sent to friends in San Francisco.

The other big annoyance about living as a full-time nomad is laundry. So far I've managed with a mix of laundromats, laundry shops, and the occasional hotel laundry when it's reasonably priced (rarely).
> For example, the way dual numbers are used to extend the reals for automatic differentiation doesn't have a deep connection to duality in vector spaces.

They don't. Because certain operations are hard to reason about in linear spaces. Such as optimization.

Don't get me wrong, I'm not shitting on vector spaces. All I'm saying is that some problems are hard to do in vector spaces, that are easy in the smooth spaces and vice versa. Like having these two APIs to the same space much more powerful, because again, you generalize over the conversions between the two spaces. You use whichever API is more appropriate in the particular context.

In some sense the linear spaces deal with things like infinity, the smooth spaces deal with cyclical things (signals, wavelets, modular arithmetic).
Responsive as in ms delay from click to action or responsive as in mobile/tablet visual scaling?
Is a policy which discriminates against cash usage the best way to screen against the "behavior" of being dirty/smelly? Why not just ask him to leave if he loiters too long?

Instead, this policy clearly screens against a group of PEOPLE (those without access to electronic means of payment), which may or may not overlap with those participating in the undesirable "behaviors" I agree a restaurant should have the right to not tolerate.
Sears is sued over 'Craftsman' brand
I've heard the term biblichor used as a name for the smell of old books. This is derived from the words
Biblos: book
Ichor: the fluid that flows like blood in the veins of gods

This was inspired by the term petrichor.
For FAANG I'm pretty sure it's in the $300-400K range. If you include all tech jobs (including startups and old-line jobs at eg. IBM, HP, Oracle, National Semiconductor, etc.) I could see it averaging out to $150-200K, but only because the previous-generation companies don't give equity and equity in many startups is worthless. The flip side of this is that if you pick the right startup (AirBnB, Lyft, Uber, Stripe, etc. when they were startups), your equity is worth millions.
Their money is arguably safer and they have recourse if their card is stolen.
Honestly, I cannot imagine how you get anything done. I’ve tried doing programming on my phone, but the time from my head to being able to execute my changes is just too long.

I need a real screen, with a real keyboard to be any kind of efficient.
Apparently "LDS" is out, "Church of Jesus Christ" is the new name. They are even abandoning the LDS.org TLD
Is it tho? It's so far the best model we have of how ~reality~ forms and molds around us.
Fair point, however I've seen no evidence Chrome is doing keep-alive on Linux or Mac OS - it always seems to send a FIN ACK after the response from the server to close the connection.

Firefox most definitely is utilising it fully, and obeys the Keep-Alive params specified, which I can't see any of the other browsers doing.
Salaries are determined by supply & demand, not by how engineers feel, what they "realize", or what they create in terms of value.
A lot of skepticism and resistance here. @tonyspiro, all the best at this. I do follow what you're doing and see the benefit of this in comparison to and also regardless of WordPress. At some point most things will be operating via APIs, and via hassle free SaaS services anyway. I, for one would not want to deal with installs, updates of any kind. It sounds like you've got some good traction that can hopefully continue. I will though acknowledge a few concerns:

1. A proper import / export tool for risk management

2. A slightly more refined message / call to action

3. Why the JS centric name/brand? Can it be used outside of NodeJS based tech stacks?

4. The price poice does seem high for small teams. You mentioned that this is normal for SaaS for some companies you listed. However, until you're established, it sounds a bit high. Can you perhaps go for a discount for the first X amount to time to entice potential customers?

Best!
- K
reading and math and education in general aren't meaningless values in zero sum games, they enable the creation of wealth. The purpose of attainment of education and skills is not to differentiate yourself, it is to enable you to do things that you were unable to do before.
If all a programmer required was patience and attention to detail then we could have machines do it.
This is really interesting work. Looking forward to seeing how this plays out. Someone below mentioned that it won’t play nicely with mobx - can you point to more details about the limitions that we will run into?

Also just wanted to say a quick thank you to the whole React team for the work you’re doing. After some initial scepticism about the necessity of hooks, we’ve been really enjoying the mental model they bring to implementing more interesting behaviours in our components.
But NOBODY has to employ ANY developers (full time or not) to have a Wordpress blog / web site.

You guys are a solution in desperate need of a problem.
Well, no. It's clearly a choice, but a rational choice is one where...

Sorry, that sounds like a bunch of ideological gobbledygook to me. As you say, "No real decision actually did this." Parents already choose schools for their children, often doing their best to be rational based on incomplete information. That's a situation called "life."

If the problem is too many rules, then you don't need limited special providers exempt from the rules, you need to remove the unnecessary rules entirely.

Nope, you're strawmanning here. Again, you can have more rules for the failing incumbent players and fewer for the new experiments. No contradiction there, if the increased rules are determined by the failing track record. If the new experiments start to fail, they can have the same rules as well.

because it rests—even further than is already the case—quality of education on parental skill in evaluating quality of education

Parental skill in evaluating quality of education worked well enough in the 1st half of the 20th century. (Granted, public schools also worked better.) Polish, Italian, Hungarian, and many other immigrant groups arrived and scored lower than the US median on IQ tests, but had caught up and surpassed the US median by the 1950's. There were similar gains in socioeconomic status. A big difference is that there were no perverse government subsidies applied to those groups to enable 73% of children to be born out of wedlock. A big difference is that there wasn't a glorification of antisocial and anti-learning attitudes and behaviors throughout the media, making it uncool to study hard and get good grades.
Tesla Reaches China Bank-Loan Agreement for Gigafactory
What's funny is some people complain that ebook don't have that smell

Personally, that's a pro for ebooks
Same with chickens. Get too close to a chicken's young and they will stand their ground and chase you away.
We appease them by making sure they have a plentiful food supply of well manicured grass.
Lol yeah, that's them not even bothering making up an excuse to pester you. They're literally just trying to snag a hook on you for nothing.
React trades simplicity of certain things such as dom manipulation, and makes it difficult to fetch external (ie noncompiled) html and include it as react dom nodes, and ad serving is pretty difficult too because most ads use document.write and this paradigm doesn't work with react, as well as single page applications and the rendering of contextual advertising requires server-side rendering too.

State management solutions like redux; nobody i know or have seen does it exactly the same, its really tricky to use and takes a long time to get the hang of.
at a macro level? sure. At a micro level, had I been convinced that my pay was fair (it was enough to cover my needs and save) and not asked for more, I’d be making upwork money.
The fact that the company shutdown their website is a little bit sketchy.... I wonder if it was a legit operation.
Personally it's never seemed like a valuable resource in that regard to me. How do you go about this and how much success do you see?
It depends on the confinement, the overcrowding of industrial production may be unadaptable. There are still enough instincts programmed that unfamiliar males would rather avoid each other.

I do not beleive that industrial breeding is selecting for anything that makes such prison life tolerable. Birds in production generally aren't reproducing, so nothing in the henhouse is affecting evolution.
IIRC this was one of the studies whose name list was criticised for having a lot of class differences as well as claimed race differences: when the authors sat down to invent white- and black-sounding names, they picked high-class and low-class names, thus injecting their own stereotypes into their data.
Yes but the article is about the latter.
Unsecured MongoDB in the default configuration.

Why am I not surprised...
On the other hand: the company was charging $13/pill for a long time. Shkreli hikes it immensely, and only two months later a competitor starts selling it for $1/pill: https://www.cnbc.com/2015/11/30/express-scripts-imprimis-to-...

Arguably, Shkreli's actions incentivized competition (like the parent poster talked about), and at the cost of only two months of unaffordable prices, patients were left much better off.

Personally I still find his action abhorrent, but the facts do have some weight.
why is our technology miserable? do you know of a better benchmark out there? if not I would assume this is the most advanced technology <ever>
Time to advise your friends to be extra cautious against phishing attempts.
ArrayBufferBuilder isn't, but DOMArrayBuffer seems to be a GC managed type [1], right? And, before the patch, the DOMArrayBuffer held a "refcounting pointer" potentially targeting raw_data_'s reference counted ArrayBuffer, right? I don't see any immediately apparent use-after-free with this, so I assume raw_data_'s ArrayBuffer is being messed with elsewhere? As someone who worked on the code, do you have an idea/hunch about where the invalid memory access actually occurs?

https://github.com/chromium/chromium/blob/ba9748e78ec7e9c0d5...
There needs to be a wall of shame
> Professional security engineers do not, as a rule, encourage software engineers (or end users more generally) to...

And many 'professional security engineers' ignore core security (e.g. auditing protocols, connections, user access, etc) to push AV software, 2fa tokens, NIDS, version/patchlevel compliance infrastructure, and other 'security tools', because this is easier and comes with 'vendor support'.

I don't argue that these tools are a 'meme' however simply because there are a few people that don't understand the whole picture.

I could just as easily argue:

"The idea that most people can reliably identify security vulnerabilities in the systems they use just because it's protected by vulnerability scanning tools is laughable. They might find trivial low hanging fruit or obvious malicious activity, but they won't have a better picture of the overall security posture just because they can read the audit report."
I would prefer that they implement it in the same way go has with channels.
Totally agree about leaving luggage with the porter between early check in and checkout. On top of the predictable check-in, check-out, security, and elite membership benefits like 4pm late checkout, free waters/lounge access, keycard recovery.
Ran steam. It deleted everything on system owned by user. (2015)
I strongly believe that we should be keeping our email addresses as secure as our passwords. It’s a really important attack vector as it’s often the starting point for any targeted attack, and although it’s not usually considered as a factor, it is the 2nd factor required for most logins (email and password). Triggering important security processes (eg reset password, social engineering attacks) are trivial once you know someone’s email address.

It’s clear from this hack that the owners of the hacked site didn’t see emails as something worth securing (stored in plain text on a wide open mongo server)

If you want to keep your email address private (you should), generate a new, random email address whenever you give yours out (the same way you use a password manager). If you have your own domain you can use a catch all/wildcard address, eg. *@mydomain.com, if you use gmail you can use their plus support, e.g. John+uniqueidentifier@gmail.com, if you use neither or want more security I’ve recently launched https://idbloc.co which aims to help deal with this.
Especially for a program that caters to developers. People will understand.
You were stating that "things have changed" in response to my statement that white males are often hired because of subconscious bias. That there are recent diversity hiring programs does not mean that white males are no longer hired because of subconscious bias.

Clearly, diversity hiring programs are new things that did not exist decades ago.
Is a domain name worth US$ 10M?
I saw a domain name for sale with a price tag of US$ 10M. One popular dictionary word, .Com.

Is it crazy or is it just me?
I use Syncthing right now to achieve the effect of having a shared file-system across all my devices. It works really well and since it doesn't rely on any sort of cloud or client-server architecture it even works offline if you're on the same network.

https://syncthing.net/
> Recruiters at my company aren't explicitly told to hit certain quotas, but they are given larger bonuses for diverse hires and they do have targets for certain percentages of diverse candidate.

If 'diversity' means age, sex, race, or religion, this is straight up illegal discrimination.
CVE-2019-5786: Google Releases Security Updates for Chrome Windows/Mac/Linux
Component reuse would be a selling point. But what about stateful components that change colour or what not, do they still run on the client side? And what about a todo-list like the one on the react start page, will it "magically" use hidden forms and make http posts to update the server state ?
What is he doing? I'm pretty sure mruts doesn't own a pharmaceutical company.
Amazon Suppliers Panic Amid Purge Aimed at Boosting Profits
And more importantly, distract everyone from the real perpetrators with special interests.
[WAS: If I'm reading the Wired article[1] correctly, the haveibeenpwned.com database of email addresses has itself been leaked?]

EDIT: Replies have corrected my misunderstanding, thanks! Troy was saying that his own personal email was also in the dataset.

Hunt says some of his own information is included in the Verifications.io exposure. "The main takeaway for me is that this is just another case where someone has my data, and hundreds of millions of other people’s data, and I’ve absolutely no idea how they got it," Hunt says. "I’d never heard of the company until now and I certainly can’t ever recall consenting to their use of my data. Of course, it’s entirely possible that buried in some other service’s terms and conditions it says they’re allowed to pass my data around in this fashion, but that’s not really consistent with my expectations of how my data should be used.""

[1] https://www.wired.com/story/email-marketing-company-809-mill...
I have encountered an instruction set which supported 16bit, 32bit, 48bit and 80bit encodings.

Was basically Thumb2 but with more flexibility, and it still felt like RISC.
Also, knowing what to build helps a lot too. Many of the most successful companies and projects didn't come about just because there was a good developer/programmer involved, but because they identified a market with interest in it and built what said market wanted/needed.

A lot of people will just build stuff they find interesting/fun to build, but no one will care. What they will care about is whether it solves their problems, and they'll often go for a hacky, poorly done solution that does if need be.
The opportunity here is not just convergence but multi modal. We have bits and pieces in the current world but frankly it's a big stinky mess that is poorly integrated. Most of this stuff is just horribly limited and single vendor walled gardens.

A good positive example or how things should work is spotify. I regularly switch between my desktop, laptop and phone and the spotify instances seem to be aware of each other. I accidentally started playing music at home while at work today because my laptop spotify was still targeting my home desktop. Just works.

What matters here is that spotify is available on multiple platforms; it moves files around for you as you need them. All you do is sign in and it will serve you your music, playlists, etc. In the same way I can continue reading a e-book on my phone that I was reading earlier on my Kindle. Browser state is replicating across platforms as well.

The logical next steps would be devices where after authentication, your apps and data are just available and adapt to the device in a way that makes sense. Right now setting up a new laptop is a chore. You have to worry about installing stuff, configuring stuff. signing into stuff, backing up stuff, etc. Ideally all that goes away and you basically just pick up a device and start using it with zero effort. Or better even, the devices are integrated into the environment and simply adapt to you being there. Some apps won't make sense in all form-factors but many do.

Ever walked into a hotel room and after briefly fiddling with some alien hotel entertainment system simply watched netflix on your laptop? I watched netflix on a recent transatlantic flight and ignored the entertainment system 20 centimeters from my nose it's just better and I charged it using usb-c from my laptop. So, I walked out of the plane with a fully charged phone. What if those devices in hotels, planes, etc. would basically provide you all your stuff after a simple signin? Walk into a hotel and all your digital stuff is already there by the time you walk into the room?

And yes there are all sorts of concerns with privacy, security, etc. All solvable problems.

For device manufacturers this would liberate them from selling only one or a handful of devices per person. You could turn phones into fashion accessories. They pretty much are already but why just have one phone when you could have one to match each pair of shoes? Why fiddle with your phone when you step in your car that these days might have a huge touch screen and plenty of computing power. Convergence is much broader than just your phone + laptop.
Yes, but there's an easier way: use a mirror. Depending on how far you place it, you're looking at yourself in the past.
I have worked at an electricity utility. "Distribution substation" is the term of art for a 250KVA padmount transformer and associated HV and LV switchgear (or even just a 50KVA pole mount transformer). A 50MVA installation is what we would refer to as a Zone substation.

5KVA per residential lot is not an uncommon allocation rule. The network is simply not designed to supply every house 200A simultaneously (the same is true of water services: the maximum flow rate of your connection to the water main cannot be sustained if every house in your neighbourhood tries to consume at that rate).
‘Pokémon’ Mobile Titles Earn over $2.5B Globally
I don't believe there is anybody who believes the government does useful things and wants it to be stupid.