skysight-inc/HackerNews huggingface dataset:
No false negative sounds nice, but the problem is the amount of false positives. The Unix `true` command is also a static analyser with no false negative (but 100% false positive on perfect code).

And a perfect static analyser with no false negative or false positive is equivalent to solving the halting problem. So what we need is a «good enough» solution working with existing code. But the amount of CVEs and the low adoption of such tools empirically shows that we are far from there.
I don't get it - why does the fact that we're optimised for long-distance running make any other sport 'absurd'? Why is it illogical to practice something which isn't your strongest point against other animals?
Complete List with Remote Job Sites and Prices for Job Posting
And Apple donates a lot of money for the reconstruction. How about they just start paying their taxes instead of turning everything into some marketing scheme.
It's more a photo essay than anything else.
The U.S. military's 36 code-named operations in Africa
Esoterics and conspiracy theories where pretty strong before british (and elsewhere) decline in church authority.

It isn't the end of an era in the utopian sense, from now on science and reason. But the era of the church as "1st estate of the realm," the unchallengeable political power & moral authority, ended.
I wish PL researchers would actually run studies to measure cognitive load and usability metrics while using their language compared to some other language.

I would do it if the right PhD student came along!
The original policy has been in place since the 90s, and like the Portuguese and Swiss equivalent experience it drastically reduced the extremes of drug addiction.

The difference in the swiss city of Geneva at the central station in the late 80s and early 90s is hell and heaven. While it does not solve all problems the methadone heroin replacement system does solve the vast majority of negative issues. Petty crime and robbery dropped significantly, whores for drugs disappeared, needle reuse is non existent. And in the 80s I was warned with reason to look out for drug needles and not touch them. This is not a worry anymore, either in the Netherlands or Switzerland.

Both Amsterdam and Geneva suffer these days from organized street crime. But the risk of being attacked by a junky for your wallet is minimal.
Organized street crime prefers to steal from you without you noticing and are quite skillful. Junkies needing money for a hit are more like dogs with rabies. The remaining junkies are rather fragile and slow, and not dangerous as long as they get their regular hit. Which they do in a safe and controlled environment.

Having been to San Fransisco and Amsterdam these are no longer comparable at all. 25 years ago I can believe but 15 years, no.
Just google "RCE Java":

https://www.darkreading.com/informationweek-home/why-the-jav...

You may also be interested in JNI. Java is also written in C or some such, so it can't escape the realties of that language. Even if it would not be, it would probably run some kind of JITted assembly.

https://heimdalsecurity.com/blog/java-biggest-security-hole-...

Unless you're talking about some platonic ideal of Java, real world implementations have memory bugs.

Bug enabled RCE can't happen anywhere in a C codebase. It's comparatively rare, too, to other classes of bugs, and depends on how much an attacker can control the input.
The issue is that you can't, or you risk your site being basically blacklisted from google. Especially if your a news site.

Users have no control outside of not using google. If google were to provide a setting for the user to never see AMP, I would have less issue with this. But they don't

Instead, they basically force publishers to use this because if they don't the news carousel will not show their article.
It just gives Google more control over the web for minimal at best benefits
Ask HN: How did you QUANTIFY/QUALIFY your MVP?
Basically how did you decide how to quantitatively, and qualitatively decide what makes it into your MVP, and what doesnt?
What the Japanese carriers sells as wimax 2 is apparently rebranded lte.
Consider that for mobile users, updated software might not be available for their hardware and they might not be able to afford new hardware.
Former Democrat Gov. Jerry Brown vetoed the safe injection site bill saying "enabling illegal and destructive drug use will never work."

Doesn't look like "the Republican Party at the national level" to me.

https://www.washingtonpost.com/news/powerpost/paloma/the-hea...
Is addiction an excuse for everything now and not simply the compulsive use of prohibited substances like it used to be ?
This is an interesting approach, but it's not tooling independent. If you can rely on your translations only seeing use in React components, then it may be just what you need.
It could be checked at compile time no?
No need to be sarcastic. The documentation explains the advantages over gettext.

Most notable being that using the source language string as identifier a) discourages changes (and improvements) to the source language strings and b) makes it hard to handle strings that appear the same in the source language but need different translations.
We have these sites in Switzerland and it helped massively to take Heroin shooters off the streets. https://arud.ch
Giving Generative Art Its Due
Backlinks by Neil Patel
If sent emails were publicly visible (and indexed, searchable, etc.) you can bet that responses to them would be a bit... snappier.
Basically every major city in the US is a "lib" city. Can we no longer criticize the stupid things they do without being accused of partisan trolling?
yes, I want to use them in C. It is possible with clang but, unfortunately, not with gcc. I also want to be able to type them into TeX, both in math mode and in text mode, without much fuss.
Yes, they are interchangeable.

On my blog ( https://theandrewbailey.com/ ), I have a "health check" page that includes all available trust chains. For my Let's Encrypt certificate, it shows 2: one through an intermediate to the DST Root, and another intermediate to the ISRG Root. I can verify that both exist and are used (though one certificate and intermediate are loaded and served): the current Firefox release (and all other browsers I've tried) uses the DST root, but Firefox Developer Edition uses the ISRG root.

It seems to make sense: certificates don't sign certificates, keys sign certificates (more specifically, certificate requests). I don't see an obvious reason that a single certificate request can't be signed more than once. If one is, trust should flow through either certificate, since the certificate says that the signer verified that the holder has the associated private key, and if that private key signed another certificate, it should not matter which intermediate the trust goes through, so long as the root on the other end is trusted.
>> An expert system will never be able to process or understand new things unless given explicit solutions.

(Not the Cyc person).

Your comment is arguing for an end-to-end machine learning (specifically, reinforcement learning) approach. However, modern statistical machine learning systems have demonstrated very clearly that, while they are very good at learning specific and narrow tasks, they are pretty rubbish at multi-task learning and, of course, at reasoning. For breadth of capabilities they are no match to expert systems that can generally both tie their shoelaces and chew gum at the same time. Couple this with the practical limitations of learning all of intelligence end-to-end from examples and it's obvious that statistical machine learning on its own is not going to get any much farther than rule-based systems on their own.

Btw, reinforcement learning is rather older than the '80s. Donald Michie (my thesis advisor's thesis advisor) created MENACE, a reinforcement learning algorithm to play noughts-and-crosses in 1961 [1]. Machine learning in general is older still- Arthur Samuel baptised the field in the 1959 [2] but neural networks were first described in 1938 by Pitts and McCulloch [3]. Like Goeff Hinton has said, the current explosion of machine learning applications is due to large datasets and excesses of computing power- not because they're a new idea that people suddendly realised has potential.

_______________

[1] https://rodneybrooks.com/forai-machine-learning-explained/

[2] https://en.wikipedia.org/wiki/Arthur_Samuel

[3] https://en.wikipedia.org/wiki/Artificial_neuron
> And you're also back to the situation where you can't preload the content in a controlled manner or privacy-preserving manner...

A few people have pointed out the privacy-preserving aspect of AMP. I'm not sure I get how that's the case. Is this referring to the fact that the page is not being pre-loaded from the content owner's own webserver? The main privacy violators on the internet are Google and Facebook. How is loading something from Google cache protecting my privacy?

Worse still, if someone posts an amp link on Twitter or a chat client Google now gets to know when I access a specific website even though they are an unrelated third party[1].

Edit: [1] In practice this was probably already the case since Google Analytics is so popular. But still.
There was an attempt to address Mozilla's concerns[1], but Mozilla never responded, unfortunately. If the Mozilla community chooses not to respond, that might cause people to consider whether or not their position should be given much weight.

[1] https://github.com/mozilla/standards-positions/issues/29#iss...
To be honest, i had managed to disable it prior to some of the big updates.
After having to reinstall windows from a newer medium including those updates, i wasn't able to disable it anymore.
From memory, it was just an option in the start menu settings that has been removed now.
Nah, when I vacation I can go there if I like it. These people have to go certain places.

My friend is a marine biologist and she dives off tropical islands in beautiful blue ocean water. The other day she talked about how everyone said it must be amazing to live this life so close to nature and she said it's really fucking hard not to flip out. The job is hard and painful and to be honest, my job as a software engineer is way better because I get to have fun wherever I want two days a week.
Planet Money did an episode (https://www.npr.org/sections/money/2018/06/27/623990036/epis...) about fake reviews and talked with the creator of ReviewMeta (https://reviewmeta.com/), which attempts to distinguish real reviews from fake ones based on things like similarity and clustered posting.

Of course, if it has or gets traction, fake reviewers will adapt, just like spammers do.
Since I wrote this, Rust did stabilize SIMD intrinsics, and using crates like https://github.com/AdamNiederer/faster or https://github.com/jackmott/simdeez you can write pretty idiomatic code to leverage them too.

Also I believe the browsers have sped up some of the Javascript cases shown there substantially.
When researching the first thing I do is A. ignore 5 star reviews and B. read the 1 star reviews first. That's probably the best way to figure out if what you're buying is a piece of trash or a legit product that works. One star reviews are usually written by pissed off customers. I also don't usually leave reviews unless it's a one star piece of garbage that really pisse dme off.

Amazon is plagued by this. I just looked up earbuds on Amazon and clicked on a pair on the first page of results. It's a brand I've never heard of with a design that looks silly, perfect. 473 reviews, ALL 5 star, ALL posted April 13th, multiple from the same users. The laughable part is many are for different products like screen protectors and "lightning wires" (lol). What a joke. How Amazon expects to stay in business is beyond me.
These people are also known as "organ donors".
From the Caddy release announcement that supports wildcards[1]:

"This release introduces support for wildcard certificates, a new offering from Let's Encrypt. Getting a wildcard certificate requires enabling the DNS challenge. Fortunately, that is extremely simple with Caddy, and it works with over 20 different providers!"

1: https://caddyserver.com/blog/caddy-0_10_12-released
interoperability between the js and python ecosystem. This is pretty much a holy grail.
By interoperability, I mean python functions can render to the browser and your javascript functions can include a python library directly.

have a single runtime (js) execute both your front end and backend code.
If the website is not hosted in the EU then the law will have no effect.

I think many websites will simply move to other parts of the world. That is what I would do anyway.
Bloggers Make Money in 2019
Porn will be age-blocked across the UK on July 15
Can someone explain Mastodon to me? Because I’m not really sure I “get” it.

As I understand it, I need to register for Mastodon at some server ``foo``, and with this one single registration I can also access other servers ``bar`` and ``baz`` and read what their members post, but I’m not able to post on those servers myself, only on my original ``foo`` server.

So what happens when ``foo`` goes under for whatever reason? Or what if the admins at ``foo`` decided to ban me from their server for whatever reason? Am I just shit out of luck now?

And what if my friends decide to join Mastodon some time later, but they all agree to join ``bar`` leaving me the odd person out? I think I’ve read somewhere that it’s not possible to relocate my ‘home server’?
AS a 20-year Mac user, I have no idea what you mean by "unlike Mac, software in Windows keeps working for years on".
Is there a name for this kind of experience, where scrolling triggers different kinds of animation?
Brazil Supreme Court draws fire for silencing critics
Unbundling Craigslist
Politicians basically caused the problem by allowing Purdue etc to get a massive amount of people addicted to opiates. They should be solving the problem now not making it worse.
Caddy requires configuring their DNS provider as well[1]. LetsEncrypt (and ACMEv2) only allow you to get a wildcard if you use the dns-01 challenge.

[1]: https://caddyserver.com/docs/automatic-https#wildcards
Funnily enough "Strona 3 z 6" and "Strona 3 z 7" sounds correct but "Strona 3 z 100" doesn't.

So I think it's only words starting with "s", not "sz" nor "si". And only 0 starts with "z" so it's not a problem (you never have "X out of 0"). So the only special case is for 100-199, 100 000-199 999, etc.
Can't you just click the link at the top right that will send you to the real page as it does today?
Pre-existing condition exclusions no longer exist. Although Trump wants to overturn the ACA and bring them back though. Death panels exist in the abstract: they are largely republican politicians who want to bring back pre-existing conditions and otherwise strip people of insurance and remove specific coverages as well. Fox News and Murdoch have really done a lot of damage to the country.
Managing a Nextcloud Snap on a Linux Server
Jeremy from Marketing
> That's no more true now than it has been for the past 10 to 15 years.

It is, though. 10 years ago I'd expect to get a PDF or an .XLS or a bundle of Matlab code. Maybe a static page. Today, if you can't interactively explore the data in the browser, it's considered subpar.

> The internet, as it is today, is still mainly services. Many things may be more and more accessible in the web by preference, yet remain freely available and consumable through other forms (REST APIs, direct database access, etc) and delivered through apps and integrations within operating systems

Disagree. The Internet may be mostly services, but they're services with default UIs you're forced to use, and are not freely consumable through other forms. REST APIs are restricted both in terms of features and what ToS allows you, and more often than not you couldn't build an alternative UI with feature parity to the original one.

> Dropbox: files sync with the various apps and utilities

Sorta, kinda. Can I have an alternative implementation of the Dropbox client? The problem isn't bad here though - Dropbox does one thing and does it well, i.e. syncing files with real OS-es and their filesystems. You can work with that to the extent your OS lets you.

> Pages, Keynote, Numbers ... Office 365

All being increasingly replaced by Google Docs, because it's free and you already have an account. You can't edit those outside the browser.

> Github

Exception, not the rule, and it's an artifact of the fact that developers still mostly work on desktop OSes with real filesystems. I'm worried about the future in which we'll all be using some future evolution of VS Code in the browser, communicating with future Github in the background over some APIs you can't hook into.

I'm not saying everything is in the browser now. But it sure as hell looks like in 10 years it'll all be.
Well those new elements aren't functional unless you specifically include a Google controlled/hosted piece of JavaScript in your AMP page.

If it's a standard, shouldn't there be some way for those elements to work without including someone else's JavaScript?
> Yo guys, I know this may sound crazy to you, but have you thought about imprisoning those junkies?

Indeed, it sounds crazy. In fact, it's very close to the cliché definition of insanity: what you are proposing has been done over and over again, without a single successful example of prohibition in all of western political history.

But more than crazy, what you're suggesting sounds childish, expensive, and complicated. It does not sound like sober thinking about effective public policy to deal with the consequences of addiction.

A contrasting approach which is mature, affordable, and simple, is to legalize all plants and to create a controlled, safe market for plant derivatives like heroin. This will have the impact that is most important: it will disrupt the income stream of the drug cartels and dealers who, as I'm sure you already know, share your policy approach quite passionately.
Would be interesting to see how later versions of Node perform compared to v6 in the tests.

Node 8 especially, with turbofan.
I don't think I mentioned 'everything' in my comment. I was talking about heroin. What do you think compels heroin users to keep using it?
What do you mean they never responded? They say they are working on a response[0]. Taking time to respond and informing the other party that it will take a while is not "never responded".

[0] https://github.com/mozilla/standards-positions/issues/29#iss...
So they crippled a better performing product to protect a lesser product - or rather to protect some egos.

I refuse to believe they are that stupid.
Interesting question. I guess most people think of depression when imagining advanced forms of laziness, but maybe determined laziness can be a form of ascetism too?
What are the most successful evil twin Scenarios/modes that you can think of?
the two uncommon Scenarios/modes that i know and have seen online
are
a WEP downgrade attack
"A story of Rogue AP":https://www.wifi-libre.com/topic-756-una-historia-de-rogue-ap-el-pdf-de-koala-traducido-al-espanol.html

and asking the user to push the wps button instead of asking for the password using wifiphisher
wifiphisher -wP -wAI
https://github.com/wifiphisher/wifiphisher/issues/494
> I keep coming back to Rick of Rick and Morty talking to the toaster. You're a toaster you make toast.

"Keep Summer safe."

* https://www.youtube.com/watch?v=S9ajvrejv90
what is happening?!!
The people are broken robots. A broken robot in a penthouse is still a broken robot, no easy fix. Dont mean this in a dehumanizing way either.
This is an awesome experiment that will allow us to do AB testing.

The thing is that I'd rather see the UK tackling the serious drinking problems teen have rather than addressing porn.
Heyyyy thanks glad you enjoyed it! I was surprised to wake up and see this on Hacker News today.

Thought I'd comment on the video editing:

It is all pretty low tech. I use Adobe Premiere to edit and mostly just animate transform, scale, and crop effects to achieve everything. Like for the zooms you pointed out I double up a layer of the screencap and then crop and scale. It's a bit painstaking at times.

Another little part is when I do the screen recording I set my desktop background to an image with a colored box area of 1280x720. This is the area I know will be "on screen". So I have the windows I want to pull in during the video just outside this area. Then I crop to this box in editing. I think this is better looking than just capturing the whole desktop, and I like the live feel.

I'm enjoying evolving this style... I sometimes have thoughts of making some kind of gross homemade video compositing tool in JS. But I haven't gotten there yet...
You could still be at risk from this IE zero-day vulnerability
Having lived in SF for about a year now, it's actually quite a clean, beautiful, and safe city IF you just stay away from a big chunk of the center. My wife and I pretty much try to avoid it at all costs now, which is sad because there's a lot of good stuff there (architecture, theatre, restaurants, the tech scene, public transit arteries, etc.) but there are also plenty of interesting and beautiful neighborhoods to explore that don't have any of these problems, so we still enjoy living here a lot for the most part. It's a utopia and dystopia all wrapped up into one.
You're getting side-tracked on the issue of whether or not there are good arguments for the existence of God and other key components of Christian belief.

The Catholic position isn't that you should believe every part of Christianity on the basis of blind faith. That's clear from the sources that I linked to.

You might think that the arguments are bad. However, believing something on the basis of a bad argument isn't the same thing as believing it on the basis of blind faith.

Take the infallibility of the Pope's ex cathedra pronouncements as an example. Yes, you are supposed to believe these as a Catholic. But the doctrine of infallibility rests on reasoned (though not necessarily sound) arguments. Catholics don't say "believe whatever the pope says because blind faith". They say: here is why we believe the Pope's ex cathedra pronouncements are infallible and hence to be assented to.
Why not both? There are addicts that live quiet unobtrusive lives and there are addicts that make everyone around them—-entire cities worth of people—-miserable. The existence of the former mean the latter don’t get off with “I’m an addict, it’s not my fault”. What we are suffering from is not merely the existence of addicts but the tolerance of addicts that choose to indulge in wantonly antisocial behavior.
https://workfromhomejobs.me would be a good addition
Thankfully there is free (as in freedom) software. It is as important as ever that it exists, it is our only hope to stop these "gods".
I'm genuinely curious about this: are vegans who are against animals suffering in any form universal anti-natalists? From my perspective, if you treat a pet well, or even live-stock well, their lives involve much less suffering than their wild-counterparts, who typically die of disease, starvation, or predation. So the only way to make the view consistent IMO is to be against animal life in general.
one of the biggest issues i had with AMP is the URL (Which cause some of the users in our site a confusion)

Implementing AMP while keeping my website URL is great.
Glad to hear that Cloudflare is already supporting this.

Will implement it now in my sites.
Lessons in career change: oil industry to dev while moving across the Atlantic
RFC 8546: the wire image of a network protocol
I've considered just quitting and wandering around countries on foot. I've got the money from software saved up to do it. And I live cheaply anyways.
Well I have some friends doing genetics and their infrastructure is maintained by IT team. For them the whole programming experience is connecting to jupyter server running on pre-configured server. I think there are even some online services offering this kind of configuration for teams.