skysight-inc/HackerNews huggingface dataset:
For background, earlier this month, DarkMatter applied for Mozilla root CA inclusion. There was an email thread [1], with concerns about DarkMatter, and one of the emails[2] was concerned that DarkMatter was generating serial numbers in this exact same fashion using EJBCA. There was a pretty long-winded discussion in the thread about whether flipping the MSB constituted a loss of 1-bit of entropy and an EJBCA dev chimed in[3] saying basically that they are pushing a fix to solve this. This seems to have kicked off this issue. (there's a lot more to it, with DarkMatter's CTO saying that the method did not constitute a loss of a bit, etc, but this thread seems to be where the issue was discovered at least.)

[1] https://groups.google.com/forum/#!topic/mozilla.dev.security...

[2] https://groups.google.com/d/msg/mozilla.dev.security.policy/...

[3] https://groups.google.com/d/msg/mozilla.dev.security.policy/...
Makes me think about the stratification issues I have on my phone these days - some conversations in What'sApp, Telegram, Signal, Riot.im not to mention text messages, email etc.

Becomes exhausting.
My mistake. Thank you!
> and uses badly the word "open" for stuff that is "shared source".

This is my only complaint with what Redis/Elastic/Mongo et al are doing lately.

I 100% support their right to change their licensing terms. Applaud them even - I'm fascinated to see if their attempts at new business models will work out medium/long term.

Doing that and still claiming to be "open source" is wrong. It's co-opting a term that while not solidly defined, is universally understood to mean something different to what they're offering. They're lying to their users and customers.

Elastic are muddying the waters in a grey area - where you can build Apache2 licensed or Elastic's new non-FOSS licensed versions from the same download. I reckon they need to cole clean and make if very clear that they're "partially open source".
Name-calling is uncalled for. It's not "goofy" to not want to bring new life into a world that is slowly dying - it's perfectly rational. Frankly it's heartbreaking to see people suppress their biological drive to have children because of a fear of what the future might hold for them. Please, please, please, try some empathy.
Since I use dictation so much, I hope others don't use it as much, and google uses/prioritizes more of my speech. But I don't use dictation with sensitive data so I don't worry about privacy in this particular instance.
There is no evidence, in these reports, that 'interference' from MCAS had anything to do with it. The fact that the problem occurred when the autopilot was engaged (and MCAS, therefore, supposedly disabled) and was resolved by disengaging the autopilot, suggests a problem with the autopilot, not MCAS. The captain's report speculates about possible causes, but MCAS failure is not on the list, even though, as we know, the captain was aware of MCAS and its failure modes.

From the reports:

Synopsis

B737MAX Captain reported an autopilot anomaly in which led to an undesired brief nose down situation.

Synopsis

B737 MAX First Officer reported that the aircraft pitched nose down after engaging autopilot on departure. Autopilot was disconnected and flight continued to destination.
People who choose not to have their own children can still adopt and raise educated, moral people.
> unfortunately it is a corporate yard that is already taking steps to "monetization"

For me, this is a real shame and a bit of motivation. In 2015 my friends and I were using teamspeak very heavily and essentially became power users. Everything setting or personality feature you could mess with we did and it was a ton of fun. We started a list of features we really wanted to add or tweak, mainly around text chat and email messaging within the program. There was also a ton of UI changes I wanted to make, don't get me wrong I love the program but it's hard on the eyes sometimes. Anyway, around this time I was really wanting to dig my teeth into a big project. I thought it would be super useful to remake teamspeak as an opensource webapp. I even went as far as creating some UI mocks but then Discord blew up and I gave up that idea.

I don't know, maybe I'll set aside some time to try this project again. I really wanted to create an open and free program that allowed anyone to hack on it or setup private services without needing to pay hefty licensing fees or go through untrusted networks. The Web 3.0 version of vent/ts with some Stallman ideals.
Why should converting a &str to a String require memory allocation? It seems like String could just reference the &str and use COW?
Can you tell us the name of the college?
Anyone who ever owned a Palm Pilot went through this. Just shitty capacitive touchscreens.
A lot of people here (including the author and myself) who have written multiple production applications using React and Redux will know that "just install next.js and call it a day" is a wild oversimplification. In fact, some of us were earlier adopters and enthusiasts of SPAs and flux architecture. You're seeing more and more write-ups on the problems with this approach because the early adopters are now long past the honeymoon and are entering long term maintenance.
As disturbing as it is, when you consider how surgeries used to be performed before anesthetics we're still pretty lucky to have them. Even if it just paralyzed you it would still probably be an improvement just because the surgeon would be able to work without you moving.
I don't know why this comment was dead, but I'm vouching for it because it's one of the most perceptive ones - just follow the money.

I'm sure all the other reasons listed also play a role, but I'm a bit surprised it escaped everyone (myself included) that opioids line corporate pockets, and crack does not. Given the extent of corporate influence in the US, I'd wager this is the dominant reason.
> There's a big difference between processing data from an untrusted source and allowing active code from an untrusted source to execute.
With all respect, there's very little difference between code and data.

> That's a larger pain than simply disallowing scripting, and does nothing about things like tracking.
Unless you live don't live in EU, your data is guaranteed to be tracked, stored and if any value is found, it's being sold.
The New York Times somewhat ironically won't let me read this article in private mode. "You're in private mode. Log in or create a free account to continue reading."
Gov. Newsom to order halt to California’s death penalty
> CICO and the fact that distribution (both in time and macro) of the calorie in matter can both be true.

Maybe they do matter somewhat, but here's the deal: if everyone who was obese in this country all of a sudden started eating a diet that was macronutriently ideal and consumed at the perfect times, but maintained the same number of calories, there would be no difference in the prevalence of obesity. I think the science really confidently supports that position, and I'd be happy to look at anything you think denies it.

> Depends on what you call epidemiological study, but using the diabetic population, the causal link between insulin and weigth gain is pretty strong. The book "obesity code" make of good case for that.

I am very familiar with Dr Fung's work and don't think that any of it makes the case you are trying to make. All of his work provides proof for what I've been saying over and over in this thread: IF and Keto can be great ways to create compliance to a diet, but there is no evidence, including the work of Dr Fung, that shows these diets behaving differently from simple calorie control outside of the compliance aspect.
I wouldn't look at the school? A 10-minute convo tells you more than an average that you have no context for.
Just a counterpoint. I currently have a home and have lived in a home for years and years. I don't understand the homelessness crisis, it doesn't seem like an appealing lifestyle.
Source for posters: https://github.com/UKHomeOffice/posters/blob/master/accessib...
so many older job applying application tend to be built in this way. Its happened way too often that I have filled in a whole page of info, from my birth to every job I have ( even though I literally have a resume just for that ), the browser crashes and I lose everything.
I grew up in the late 70s, early 80s not too terribly far from Baltimore and have made a number of visits to it over the years. It never had a great reputation outside of the Inner Harbor, but the reputation as a real lost city really crystalized in the late 80s and it never really recovered -- at least not in the way other major cities have had recent Renaissances. I don't really think the reputation is undeserved.

In fact, it used to be a normal part of discussion that Baltimore, Philadelphia and NYC were basically where you went as a tourist to get something stolen from you, and I personally experienced that on a small scale in two of those cities.

However, I never went really into Baltimore until the mid-2000s when on a number of short term contracts I had to go to near Johns Hopkins and then a couple at Morgan State. To be honest, driving through parts of Baltimore was almost indistinguishable from news clips of war torn cities in the Middle East...just absolute urban devastation...but on slow burn. Hopefully its changed, but it comes to mind as the pinnacle example of urban blight when I think of the term.

My wife, who grew up in South Korea in the late 70s under a military dictator, couldn't even fathom the general level of danger and decay she saw on her few visits into the city. She says she felt better in Pittsburgh.

In the early 2010s, an idealistic friend of mine moved to Baltimore, thinking that an influx of well meaning people with good jobs and money could help turn parts of the city around. They lasted 2 years before the financial burden of repairing material stolen off of their house while they were inside it started to become serious and they moved out to the "safer" city of D.C: gutters, siding, wheels on their cars, a gate, a BBQ, all sorts of things.

One adventurous thief stole all the gutters off their house, two screen doors and helped themselves to a number of car parts off of one of their parked cars between the time they came home from work and went out to dinner.

I know it can be turned around. NYC is generally pretty great these days. Philly ain't half bad. Even D.C. outside of the National Mall is worth visiting and most of the city has turned a corner. Baltimore actually has a lot of great islands of culture to offer, but it's a generation of hard work to get the city turned around.

Another way to think about it is if D.C. and Baltimore metro areas are combined, it could be a unified urban conglomeration that hits around 10 million people, one of the largest in the country, has pretty much the entire Federal Government and many major financial hubs as well as huge biotech, startup and other tech scenes...it has a population larger than the San Francisco Bay Area and could be a much large major economic force.

https://en.wikipedia.org/wiki/Baltimore%E2%80%93Washington_m...

https://ggwash.org/files/baltwash2.pdf
Yes. The anesthetist is monitoring the patient's vital signs, and one of the things they are watching for are elevations of the heart rate, indicating inadequate sedation.

This isn't foolproof though. Not everyone will have the same physiological response, and over the course of an hours long procedure (during which nothing happens in the "routine" case), it's easy to lose focus and perhaps not notice a change for a little while...
And the sun is even closer on average. It's not a very useful metric.
So ProtonMail responds to Swiss warrants, and Fastmail to Australian warrants. Is either jurisdiction clearly better?
Probably very little, but there is nothing stopping you making that statement. However HN usually has a decent signal/noise ratio so it's worth discussing here at the very least.
True, but someone's politics at least says something about them as a person. Kinks have almost no correlation to how people are in real life. I'm not saying that justification for firing anybody, though.
I am a fan of the Mayday(Air Crash Investigation) tv series, you can always find eyewitnesses report smoke and fire in any air cash despite the real cause.
I learned to write code because of a very different internet, and I feel like if I'd grown up with the internet we have today I never would have bothered. Interoperability and disintermediation were such powerful, intoxicating concepts that I turned my entire life around and started writing software for a living. These days, except for the money, it feels like a mistake.
My quick testing makes it seem that the center of a circle is closer to the circle "on average" than any point on the circle is.

A quick Python script suggests that a point on the circle is about 1.273 radii away from the other points on the circle on "average", while (by definition) the center is 1 radius away from all points on the circle.

So this fact about orbits seems related: the closest point to your orbit (on average) are things in the middle of it, which are near the center of your "circle".

Further testing supports this -- there's a gradient from the 1.273 at the "edge" to the 1.0 in the "center", as you shrink the radius of the circle you measure from.
> Probably referring to A330

A330 has figured in the incidents, but AFAIK the flight control software and angle of attack sensors that are implicated in those incidents are the same in all of the Airbus models.

> They never quite figured out the root cause of the un-commanded dives

Yes, they did. Read the "Conclusion" under the "Final Report" section. The "design limitation" they're referring to is that, first, the autopilot is not driven by an average or majority vote of the three angle of attack sensors, but by one of them only (which one depends on whether the captain or first officer's position engaged the autopilot), and second, the other two angle of attack sensor inputs are not used to check the sensor that is driving the autopilot, so if that sensor gives faulty input (the "multiple spikes" described), the faulty input is allowed to trigger uncommanded events such as the violent pitch down that happened on Quantas Flight 72.

What should happen is that the input from all three angle of attack sensors should be combined: as long as all three of them are within some tolerance, the average of the three becomes the angle of attack used to drive the autopilot. If one goes out of tolerance compared to the other two, its input is discarded until it comes back into tolerance (so "multiple spikes" from one sensor would simply be ignored). If it takes too long for the one sensor to come back into tolerance compared to the other two, that sensor gets ignored for the remainder of the flight and the pilots get notified. If it gets to a point where no two of the sensors are within tolerance of each other, the autopilot gets disengaged and a big red light goes on in the cockpit. I am unable to understand why that is not how the system is designed, but the investigation reports make clear that it isn't.
The gratuitous unwrapping comes from APIs like `Mutex::lock` and `write!`
Infinity and "practically infinity" aren't the same thing though. Half of "practically infinity" may end up being practical.
OK I get your point. I was saying a neighborhood full of poor crack addicts will be a dangerous place, so requires "aggressive policing", more than a neighborhood full of coke snorting yuppies.

However both are supplied by the same violent supply chain that the "war" is supposed to stop.
from that write-up, I'd call that a bug in EJBCA more than a "misconfiguration". If it was working as designed, then it's design was buggy. :)
Three objectively wrong statements in that comment:

1. Climate change isn't a "lame career/political cause". It's not like they're putting off children until net neutrality is enshrined in the US constitution. Climate change is an existential threat for large portions of humanity. The scientific consensus on this is virtually unanimous. Until serious, large-scale action against climate change is taken, fearing for the future of any children one may have is perfectly rational, as is opting out of having any.

2. Not having biological children is not the same as skipping parenthood. Adoption exists.

3. Couples that don't have children out of choice are just as happy and fulfilled as those who have them.
I know nothing about DarkMatter so this may nor may not be justified but I just want to make the point that they could be kicked out if they actually did make MITM certs. There are certificate comparison programs that try to spot them.
> I refuse to put an amazon/apple/google surveillance device in my home...

Do you have a smartphone? Because that's most likely an Apple or Google surveillance device.
Paralytics used in surgery impact voluntary muscle control only, they have very little in the way of effect on things like heart rate.

Heart rate is absolutely monitored closely during surgery (precisely because it can be an indication of inadequate sedation).
Ditto in Asia. In Singapore, no one texts and hardly use fb messenger but whatsapp use is prevalent.
I have a few old laptops lying around, still in fine condition but pretty out of date. Can I give them to your organization? How would I get them to you?
The counties with highest disability rates were at about 26% of the overall population (not just adults) as of 2017. Washington Post has a good article about the human impact.

https://www.washingtonpost.com/sf/local/2017/03/30/disabled-...
from the perspective of a blue collar speaker (I'm a master mechanic for a chain of truck repair shops in the Midwest) I hold a safety meeting once a week with a similar rule. No weird breaks.

I learned this style of speaking in the Army. Basically in our 15 minute safety meeting I cover what's happening, why, things that were dangerous, and what we need to do to be safe. Our upper management sees this style as confrontational but its extremely effective.
We live in quite a corrupt society, so here is the part where I tempt you to undertake a nihilistic leap into radical politics: http://www.capitalaspower.com/

I shudder to imagine just what my children will have to go through.

Things have been known to improve as well to decline. Don't let your anger make you pessimistic, experience will supply you with plenty of occasions for that later.
It is actually possible to completely remove the blind spot in the lane next to you.

http://pages.cs.wisc.edu/~gdguo/driving/BlindSpot.htm

People don't like to do this because then they can't see the side of their own car in the mirror.

Perhaps that should be added to driving tests. You shouldn't get a license if you don't know how to make the car safe to drive in.
College and life in general is not meritocratic. If anyone has any right to complain about colleges being racially biased and the fact that life is not meritocratic, it’s the people who affirmative action was invented to help, not the whites and Asians who are slightly disadvantaged by it now.
An aside to the discussion about open standards and all that: As someone who watch most of you from far away but was too young to join in, it always felt like tech was this small group of people who all knew each other. Nowadays, it seems rather crowded field, I'm surprised any of you keep track of each other.
May i have a link to the aforementioned book please?
That says that the majority of soy meal goes to animal feed. I couldn't actually get the amount of soy beans used for animal feed. Perhaps you can find it.

According to this [1], they were forecasting about 4,200 million bushels of soybeans being harvested in 2016 with nearly 2,000 million bushels being exported (about 47 percent according to the source).

I tried to find a reputable source for soy bean use in the US and failed, but some sources I was able to find (mostly vegan activist groups) stated that 80% of soy bean use is for meal while 20% is for oil. Of the 80% used for meal, 97-98% is used for animal feed while 2-3% is used for food.

As far as I can tell that means that if we round things up to the nearest 10%, about half of the soybeans grown are exported, 40% is used for animal feed (cattle, chickens and pigs) 10% for oil (of which some is cooking oil) and a negligible amount used directly for human consumption.

Possible the parent was considering only cattle consumption because another source I found suggested that you don't want to feed cattle more than 15-25% of their diet on soy because they can't digest it. Chickens and pigs presumably don't have the same problem.

I find it interesting that in truth the largest category of "use" for soybeans in the US is as an export trade good. I wasn't actually following the discussion above closely so I'm not sure how it impacts anything. However, it occurs to me that possibly the land could be put to better use. However it was also interesting to me that according to your source Wisconsin has 11K soybean growers over 1.6 million acres. That's an average farm size of 145 acres. As a person who grew up in the prairies of Canada but now lives in Japan, that seems to me to be both not so big and also gigantic :-) (I don't think I've ever seen a Japanese farm bigger than about 30 acres!)

[1] - https://www.ers.usda.gov/topics/crops/soybeans-oil-crops/rel...
Gmail is having an outage
Your comment could be interpreted as a rather ironic humblebrag.
Can you point me to some studies showing that opiod abuse has gone down in states that legalized recreational marijuana use? My doctor has tried to convince me otherwise and I’d love to prove him wrong. Thanks in advance.
The Australian ones come with a gag order.
Why do you assume that an attack would take 1 year, and not (e.g.) a billion years? A factor of two is only interesting if the number you're dividing was interesting in the first place.
I think this is a general fallacy held by a lot people.

The notion that someone who has access to X amount of funds for a given task automatically has 2X and can also afford to spend 2X on the given task is not necessarily true, so such claims are generally baseless.

What is most interesting is that these claims are generally about non-exact amounts, so the logic should follow that if you can afford X, then you can afford 2X, also means that you can afford 4X, and 8X, ad infinitum.

In practice, a 2X difference in majority of real life cases concerning substantial amount of resources is by definition substantial and far from a trivial.
And from an update to that page, (thank you), it's worth picking out his own page and code link: https://olihawkins.com/2019/02/1
ah, I totally misunderstood.
Anesthesia and analgesia are two different things. There are also different types of anesthetics. For "procedural sedation" (the sort of thing you would do in the ER), it's common to simply use a dissociative agent (like Ketamine), so you aren't really "out", you just aren't "in" either.
Most of their products work offline and sync when a connection is regained. That includes Google Docs and Gmail.
How is the IM era over? I exclusively use IM as my social media and its bigger than ever. Telegram, Discord and IRC are massive.
its like they succeeded and then totally fucked it up. greed just gobbled that engine up.
I am in remarkably similar state to this 'prior' state being FreeBSD 11 hosted, with elements of other distributed service.

I also looked to docker and gave up. I like bhyve, and have considered a low-pain migration to bhyve instances to package things into Linux, and then (re)migrate into Docker. A way to avoid pain, and cost of a duplicate site, to build out and integrate.

I wish something as logistically simple as docker compose was in a BSD compatible model, to build packages to. I'd like the functional isolation of moving parts, and the redirection stuff.

Nice write up. I wonder how many other people are in this 'BSD isn't working for me as well' model?
Millions of online photos scraped without consent
On Peer Reviews: Fixing the Gatekeepers of Sciences with Transparency