skysight-inc/HackerNews huggingface dataset:
it immediately began to install files, a “very out-of-the-ordinary” event that he had never seen happen before during this kind of analysis. The agent had to immediately stop the analysis to halt any further corruption of his computer

This makes it sound like plugging USB sticks guests are carrying into a computer is standard procedure for the Secret Service. That might make sense if they have some sandboxed computer designed for this purpose, as suggested by other commenters. But then the rest of the quote makes it sound like the agents were unprepared for files to be copied and they panicked and aborted the "analysis" to prevent "corruption". Which makes it sound like, no, they just plug it into their own computers...
I'd say that it applies even more to an emergency room.
I'm pretty sure that two sentences you quote don't form a meaningful pair, so I wouldn't expect the second sentence to explain the first.

The sentence "Whitman was unequivocally declaring his own independence from poetic conventions and niceties." relates to what Whitman was doing, i.e. to announcing himself as "American, one of the roughs" in an earlier sentence.

"... Every atom belongs as good to you" corresponds to the later phrase "Here was a poet of the people for the people". That's my reading anyway. The structure is ABAB: quote, quote, gloss, gloss.
> they don't

When you take parts of a quote out of context it changes it's meaning. That's rather bad practice, so please refrain from doing that.

As for the marketing. Do you think Audi should stop marketing its cars to consumers because everyone buys their car through a dealership?
One small example: KVM switches would become incredibly cumbersome to use. However, I agree, there should be a much higher security standard for USB devices on the OS-level.
Interestingly, in the UK they had a large "this is not an emergency" campaign trying to make people to choose GPs over emergency services.
Dude, you're making ScraperAPI requests (with your API key in plain text as a parameter) directly from the client app...this thing is a nice idea but it'd probably be a good idea to clean it up and repost.
Europe collectively twiddled their thumbs, "waiting for diplomacy to work" while Milosevic slaughtered Muslims. It took US initiative to step in and stop that.
You might find a more sophisticated version of that conventional wisdom to be less amusing and more worthy of food for thought.

It comes from Ronald Coase's theory about the natural size of companies. Companies exist at the tradeoff where the costs of transactions between multiple companies equal the internal inefficiency of a large organization. The larger the organization, the more it tends towards inefficiency. Anything that decreases transaction costs, decreases the size of organizations. And vice versa.

From that you expect large organizations of all kinds to be inefficient. Which fits your observation. Now note that government organizations tend to be are large organizations with a tendency towards complexity and no incentives for efficiency. How do you predict that will work out?

Again, whether or not this is a compelling argument is a matter of opinion. But if you want to understand the views of those who don't like government healthcare, this is a key point to keep in mind.
Meanwhile even the shittiest hollywood plotline has "we'll infect their systems with this virus - infiltrate and plug it into their servers" narrative.

I know secretive service agent =/= computer expert but jesus...both my little sister and 60 year old mother know better.
I've used Alacritty quite often, and I particularly like font and color rendering. It does respect my Xdefaults, whereas XTerm or URxvt don't. It simply looks much better.

Now, playing a bit of devils advocate, why shall I abandon either of those in favour of Alacritty? XTerm, in particular, has much lower memory usage and significantly lower latency.
The "slowly boiling frog" is a good metaphor for failing to perceive a threat when change is gradual enough, but according to Wikipedia it is not real:

> Modern scientific sources report that the alleged phenomenon is not real. In 1995, Professor Douglas Melton, of the Harvard University Biology department, said, "If you put a frog in boiling water, it won't jump out. It will die. If you put it in cold water, it will jump before it gets hot—they don't sit still for you." Dr. George R. Zug, curator of reptiles and amphibians at the National Museum of Natural History, also rejected the suggestion, saying that "If a frog had a means of getting out, it certainly would get out. [1]

[1] https://en.wikipedia.org/wiki/Boiling_frog
Religion did provide that, but not without its pathologies. It should be possible to get the positives without buying in to the whole thing.
I’m an outsider to this world so please forgive the basic question: what is “main”?

Does its use depend on any particular markup in the HTML?

And how far back does it go as a CSS feature?
Because very many people (and more importantly, businesses) have obscure buggy printers from the 90s or the equivalent thereof.
> Socialized insurance rates in Germany are 15% of income. Unless your family doesn't earn any money, they have been paying far more than 50 Euros.

And that's kinda the point of the parents' post, I think. If I were paying 15% of my income for socialized health care, I would be pissed if I ever had to pay anything out of pocket for my own medical needs.
It's not a panacea. The companies that are using the (A)GPL often uses it more as a cudgel to get their customers to pay up for an enterprise version under commercial licensing.
I'm sure you know so much more than all of the doctors involved in creating it as a treatment for epilepsy.

And, of course, Dr. Atkins. He surely didn't know much about healthy food!

Why not research first before writing a comment containing "whoever made this diet"?

This diet has existed for longer than you have.
As much of a fan of Open Source as I am, I've come to realise the OSS has killed indie development. Many OSS projects are built for free to show as proof of skills when applying for jobs, with the outliers being cash cows for major cloud service providers.
Indeed, AAA games are designed like you explained on purpose.

However, let's not put every game in the same bag. A shootout to all indie games that simply make games that start and end.
Hmmm... I don't see any reason why Tesla would lie about their delivery numbers though. Halon's Razor would argue that Tesla's grossly accelerated deliveries in Q4 (end-of-the-year) is leading to errors in IHS Markit's numbers.

Overall, Tesla clearly has a demand-problem demonstrated by Q1 numbers (30% drop in deliveries, even as the company cut prices worldwide and expanded to China + Europe deliveries). But I don't see any reason to distrust the numbers Tesla is giving out.
Recently I tried out some USB temperature sensors. They present as both a proprietary temperature sensor and also as a USB keyboard. In the event you don't have a driver for the sensor, you can still get your readings by toggling the caps lock which sends a "turn on caps lock lamp" signal to the "keyboard", which responds by "typing" the temperature data.

I'd rather this device presented itself as a drive containing various virtual files that contain temperature data in them, but the cat's out of the bag, so to speak.
> I think the question of how to safely analyze suspect USB devices, at the level of potential nation-state actors, needs a lot more consideration and probably some custom tooling.

I would be absolutely shocked if the US’ three letter agencies did not have some form of custom tooling to detect this — especially considering the sophisticated multi-vector I/O exploitation they demonstrated a decade ago with Stuxnet and the Equation Group.

Regardless of your views on his policy, Trump has demonstrated zero respect for opsec — even in a national security context — so I would also not be surprised if those three letter agencies have decided the White House is untrustworthy with its cyber warfare capabilities.
This new Edge seems to reuse the cookie jar, history, etc. of the real Edge, so emp_ is probably already logged in to his Google account on the real Edge. (Corrections welcome, but it's what I've noticed after trying it.)
Sounds familiar

"They have pillaged the world: when the land has nothing left for men who ravage everything, they scour the sea. If an enemy is rich, they are greedy, if he is poor, they crave glory. Neither East nor West can sate their appetite. They are the only people on earth to covet wealth and poverty with equal craving. They plunder, they butcher, they ravish, and call it by the lying name of 'empire'. They make a desolation and call it 'peace'."
And if the insurance does not cover something the prices are reasonable and transparent.
Not really. There are non-ER/non-hospital urgent-care centers, but they usually keep to roughly normal business hours. For after-hours care, the ER at a hospital is often your only option.
Yes, kind of. They can handle a few things (ear aches, something that requires anti biotics, basic pain relief) with a nurse practitioner.
Ah, much more developed than I — I maintain a site that has a font similar to yours and I need to manually amend each and every typographic conceit. Not smart!
TLDR highlights:

Beginning in macOS 10.14.5, all new or updated kernel extensions and all software from developers new to distributing with Developer ID must be notarized in order to run. In a future version of macOS, notarization will be required by default for all software.

—

Apple recommends that you notarize all of the software that you’ve distributed, including older releases, and even software that doesn’t meet all of these requirements or that is unsigned.
I would add indie developers to the list of losers. From what I see, many OSS developers write code to shows it off when applying for jobs.
I’ve felt the same and I grew up with those older games (I’m 35). There are still some greats coming out but you have to seek them out and filter out a lot of games these days to find them.

If you are interested in game design and more on what makes a great “that’s all folks” game, check out “Theory of Fun” by Raph Koster.
>It's 2019. Why the f* haven't Windows, MacOS and Linux all implemented these basic precautions?

Because up until 10 years ago, developing your own USB device was generally expensive and malicious devices ended up being out of scope in threat modelling. In addition, some models these days still define 'physical access == game over'...
Because the overwhelming majority of computer users in the world are not sophisticated, and want things to "just work" once those things are plugged in. I don't think it's an unreasonable expectation/desire, despite the risks.

Keep in mind that autoplay is not unique to USB drives either. CD-ROM drives have had that feature forever.
Who cares about the deductible? It’s still a ripoff. My girlfriend had an eye infection while we were in Germany. We went to an eye doctor and paid 25 Euro cash including an ointment. The US is just horribly expensive and very unpredictable.
our cities are filled with bums, and have absolutely no money to either give them jobs or make new programs.

New York City spends about $30k per homeless and you still cannot walk a block without seeing one.

It's not about the money...
This is missing a few important points.

1. The 15% of income has a cap. It's something like after 60k EUR in wages you don't pay anymore. Also, only 7.5% comes out of your paycheck, the employer pays the other half. When I was there a few years ago I was self employed so I had to pay "both sides". It would've worked out to roughly 750EUR/month for health insurance which had _0 deductible_ and _0 coinsurance_ for doctors visits or ER care and would've covered my entire family no matter on my children I had. Compare that with a typical HDHP family plan offered in the US and you're looking at $400/mo in premiums, with a $3k deductible and max OOP of $6k. The final cost is comparable.

2. The 15% is only if you participate in the public system - the private is not tied to your income.
> Supply side markets work when they defeat the power of hoarding. Pick any market, and if sitting on the item makes you money in the long term, rather than putting it to use then you have a monopoly problem of some sort.

> For a market to work, it must always be the case that using the item to cause some socially useful economic flow to happen is more profitable than sitting on it, or trading your hoard with other hoarders. Ideally you go bust quickly if you sit on it, much as you would with perishable goods.

Agreed!

> When you apply that view to housing services you find that the power to exclude is the hoard that needs defeating. Keeping an apartment empty and outside the housing services supply market should be cripplingly expensive.

Aaand you've lost me. IMO it's not the people keeping an apartment empty and off the market that are the issue - they're suffering a loss for this, equivalent to the rent. No, the people 'hoarding' are, essentially, the NIMBYs. It costs me nothing to prevent you from building 1000 apartments to replace a parking lot in Downtown LA, but that lowers the value of my house (reduced demand) so I'm going to make it as legally difficult as possible - that sort of thing.
More likely the internet would just not exist or would be entirely centralized in services like AOL.
Great, thanks very much for finding that paper. Hopefully Facebook follows this up in the not to distant future with at least a rudimentary example.

I can learn from a paper, but I learn much faster from an example!
> You'd think a CSS guru would not rely on JS to display text

The reason people love this website is because the content changes as you learn each concept. The way you "change" content in web development without reloading is through javascript. It is about as close to a perfect use case as you can find.

There is nothing ironic about that.
Just a quick note that health insurance premiums do not in fact get plowed directly into rents and administrative redundancies; we pay more than Europe (and Medicare) does in administrative costs, but far-and-away the largest components of health care expenditures in the US are in inpatient and outpatient procedure billings (outpatient by a factor of almost 2x inpatient, itself something like 3-4x all administrative costs).

We certainly do seem to pay far too much for health care! But the explanations aren't as simple as evil health insurers. The system appears to be structurally pretty messed up, and alterations to the payer-side alone, without radical changes to the provider side, are unlikely to solve the problem.
Based on US household income, 7.65% of 56,516 = $4,323/yr
The Secret Service as an organization has sophisticated cyber capabilities. That a specific agent within the president's detail didn't is less surprising. Still, I'd expect more from the organization, and I bet that the specific agents involved are getting disciplined and trained.
Income Inequality Comes Roaring Back into the News
Truthfully, the only reason I had the numbers at hand was because I'd personally fallen for your "Lesson #1" before.

I spent my 20s far below median (which I knew), and my 30s far above median (which I didn't realize, at least not at first). Very different lived experiences :)

And I know many folks around me (friends, family, colleagues) look around (confirmation bias & availability heuristic, amongst others) and believe that $60k-$80k (or more) represents a "typical" lived Canadian experience. They are, to a person, universally surprised to see the actual median income (as was I when first tracking it down).

It certainly is viewpoint-shifting. Cheers!
What is it like to live without a chronic urge to die? At least since I was 7, I have been contemplating my mortality. This is also not to say I despise being alive - after so many years, I think that I have had enough and would like to leave the table now, thank you. Of course I have been diagnosed with depression and of course I have been put on medications for it. What I have not done yet is to act on my "suicidal ideations" and have made measures to prevent myself from suiciding willy-nilly (in particular, I do not own a gun despite enjoying going to the gun range and hunting with friends). I have also never been committed to any sort of mental facility for these thoughts, so cannot relate to some of the things in this article - it seems like a hell scape I should do well to avoid.

But back on to suicide. Sure, my thoughts of suicide do increase when I have depressive episodes, but it's not like I'm constantly in a depressive state. I have good days, weeks where I am productive and manage to enjoy the things I enjoy. In doing so, I've come to realize something in general about my frame of mind regarding suicide. Thinking about suicide makes me indelibly happy. At my lowest of lows, I fantasize longingly to turn the lights off. At my highest of highs, I still think to myself that: here, here is where we should cancel the show. I even feel that my mindset towards suicide has contributed towards its prevention. I have an ideal version of my death. I do desperately want to die, but I want to die without being beholden specifically to anyone or anything, including my mental illness.

It is a crisp Autumn day in New England. It is where I spent my childhood years. The leaves are awash in a flurry of reds, oranges, and tinges of brown. I am happy - without a depressive episode turning my screen to gray, without duties or obligations holding me back, without a care in the world. And...

I go on. So how can others go on living when death seems so sweet?
Effectively the same in the states. When you are a kid, you're on your parents health plan which brings up their cost and your future cost as a parent, and when you are old you do get universal healthcare through Medicare.
How did Cambridge Analytical impact people? People didn’t feel the pain so they do not care. Pain was felt in the Ashley Maddison leak — Google and Facebook has a lot more info than AM ever did, if it’s ever leaked it will be world ending for many.
Which is good. It's sucks if i have to pay more for a burger because the cow have to be happy.
Perhaps I've misunderstood what you've said, but VS Code enables telemetry by default. https://github.com/Microsoft/vscode/search?q=telemetry&type=...

It's extremely abusive. The parent company, also.
No. It's just hetero 24-33 year olds, and only the subset of those that arent celibate for other reasons, and then only a minority (albeit growing) percentage of those. And then only a very small minority of those that blame others for their own issues. We're taking about factions of a percent of the population.

This is what I mean by overblown. People's perception on this issue is just ridiculously out of whack. Young men aren't as dangerous to civil society as a lot of people like to imagine. The violent ones get jail and the rest grow up.
It's been extensively tested and debunked by many, many people and yet it's a myth that continues to perpetuate HN. The idea that these big companies or Big Brother are streaming your phone microphone data 24/7 is a lot more romantic than "the public wifi network I'm connected to is riddled with analytics."
For me it's the opposite. I moved from Denmark to the US, and I pay around $400 in health insurance premiums (health, eye, and dental) for a whole family. In Denmark, only health is covered, so for eye and dental many go out-of-country to get it cheap.

The US is much cheaper for all health insurances, except if your poor. Obama tried to fix that, but made it worse and more expensive for everyone (socialism).
Thank you for this comment. I considered the webpage dead.
And because the 99% use case is: "I plug it in and I want it to just work"

This type of protection parent is referencing is "endpoint protection" and there are many industry standard solutions. Why should an OS be more limiting? If you have physical access to a machine that stores things you shouldn't have access to, it's already compromised in my opinion. Why the eff are people overlooking physical security in 2019 is the better question.
Scripting Qumulo with S3 via Minio
Guess what, private insurance companies will also negotiate prices.

What happens in socialized systems is that the government does price fixing, which makes healthcare worse and it limits supply. Try getting a specialist appointment with socialized healthcare in Germany, it can take several months. Get private insurance (or pay out of pocket) and suddenly appointments become available. Doctors are leaving the country in droves.

Some of the hospitals in Germany are in an abysmal state, MRSA rates are extremely high:

https://correctiv.org/en/latest-stories/super-bugs/2017/01/1...
On the other hand, a typical state college is closer to $10,000.

Yes, it's not Ivy League, but it does the job.
sounds like a pretty cool idea!
When a program has a free variable, we can consider an entire space of possible execution paths, one for each possible value the variable could take.

Or we could put on a greasy old pragmatic ball cap and issue an "unbound variable in line 42" error.

A free free variable has no "possible value". If a variable has a value, it has a binding; if it has a binding, it is not a free variable.

If we suspect that the variable is not actually free, but rather its definition has not yet appeared, we can defer the processing. Perhaps capture a continuation of the symbolic execution machine, and dispatch it later.

If the expression which refers to the free variable is not actually evaluated (as our symbolic execution shows), we can squelch the warning, or change its wording.

The idea that a free variable is implicitly universally quantified works in logic, but it doesn't transfer to an ordinary programming language (i.e. not Prolog, and its ilk) very well.
Eeewww. Why not just make it a virtual com port, which most computers already have drivers for?
I hope a well-informed person will clarify what exactly this means in practice.

I have to assume that it will still be possible to compile some code and run the executable without first passing it through Apple’s servers.
It's an attitude thing.

Countries like Japan and China are much bigger and yet pivot on a dime politically when there's consensus. China went all-in on coal and when things got so bad pollution wise, they went all-in on solar.

It's not a limit on population size, it's a limit defined by political cohesion. Look at the US today with two parties, one center-right wing, one extreme right wing, where they can't get anything done because one party would rather shut the country down than negotiate.
> If a USB device identifies itself as a keyboard, the system shouldn't accept its keystrokes until that keyboard has typed the user's login password.

Wireless presenters often identify themselves as keyboards so that they can "press" the arrow keys to move forward or backward. How are you going to type your password using such a device?
So the actual title should be "In a future version of macOS, apps signed with Developer ID will require notarization by default".
Many of the largest, most known projects are this way but like most arts there is a really long tail of smaller projects that are done and maintained by people without pay.
This wasn't necessary, they just had to get rid of the slow, ugly UWP UI framework. The Edge rendering engine was fine.

It looks like this new Edge uses Win32 instead of UWP, so people will actually use it, and they'll pat their own backs thinking the problem was the rendering engine. No, it was the stupid UI framework. >:(
You can lockdown USB access on linux with usbguard[0]. IIRC windows 10 enterprise also has some USB whitelist feature somewhere.

[0] https://usbguard.github.io/