skysight-inc/HackerNews huggingface dataset:
Actually it's China that appears to be borrowing from the US propaganda playbook by using the war on terror as a pretext for incarcerating up to 30% of an ethnic and religious minority. Even Human Rights Watch has reported on them. https://www.hrw.org/report/2018/09/09/eradicating-ideologica...
This is least sound argument I’ve read all week. Pollution exacerbates asthma, this is well-studied and well-understood, we even know which kinds of pollution do this (ozone and particulates).

Deaths generally have multiple causes and complex chains of events leading to them, and we have a rich history studying the relationship between how an actual event happened (a girl dying) and where we assign the blame (pollution). If you think that the slippery slope will lead us to blame ignorant parents or a random diesel truck, well, that way to assign blame isn’t supported by theory or precedent.

The parents wouldn't be blamed because they didn’t have any particular duty to move somewhere with less pollution, just like you don’t have a legal duty to avoid getting murdered by moving to a lower crime area (the idea that you would assign blame here to the parents is legally ridiculous). The diesel truck wouldn’t be blamed because it did not contribute significantly to the death, you wouldn’t reasonably suppose that whether a particular truck drove down a street would make the difference between someone dying from asthma or not—after all, if that particular truck didn’t, then another truck will, later.

Blaming pollution is well-founded—there are legal limits on pollution which were violated (there existed a legal duty to keep pollution below these limits), the pollution was a significant contribution to the death (without the pollution, the death would be much less likely), and the contribution of pollution to the death was natural and foreseeable. These three things together are key elements in fault.

There are a number of hypothetical (and real) cases which you can use to illustrate all of these factors working together. For example, Alice breaks into Bob’s house to murder Bob, she waits in the closet with a gun ready to jump out and shoot him. When she closes the closet door, it knocks over an umbrella. Bob comes home, trips on the umbrella, hits his head on the floor, and dies. Alice acted with intent to kill Bob, and has in fact succeeded (her actions caused Bob to die), but the chain of causality between her actual actions (knocking over the umbrella, which Bob trips over) is not something that someone would reasonably expect to cause someone to die, so Alice is not in fact guilty of murder (again, even though she acted with intent to kill Bob, and did in fact cause Bob to die).
Experts explain the science behind graphene, the new supermaterial (2018)
Exactly the same here, Brave + a password manager after 25y of Firefox/Netscape/Mosaic.
They have working (but maybe not production ready) AOT and JIT LLVM targets for .NET Core. Where can Java go that C# can't?
So not only does this 'normandy' thing exist, but it goes to a google server? So much for using Firefox to keep google out of my life. :(
Both are correct, both are fact, it's up to you to decide which are more important to you.
If you ask nicely they'll run a one-off "gc expire" for you.

It also requires an attacker to know at least the partial SHA-1 anyway. It's infeasible to start brute-forcing that without being banned for dDoSing them, and if you know what the SHA-1 is you probably had access to the data already.

But yeah. It definitely creates security caveats peculiar to git, e.g. a hostile actor guessing that a force push in an IRC commit announcement clobbered secret data, and the accessing the old commit in the web UI.
Yep, I'm applying for junior roles mainly. Sorry for the confusion, by full stack js, I just meant I have experience on the back end with node.js, express, mongoDB, ontop of the regular front end stuff, not devops stuff or anything.

The projects are the ones on my portfolio. First one was what I built in my internship, it is supposed to be a company website with blog integration, contact etc, the data is lorem just to fill the pages, would be substituted for real data.

The second one is a flashcard app. You came to a log in screen, from there, you create an account and then have have access to your profile where you can create/delete/edit/share decks and their contents. Shared decks are available for all users and can be downloaded on the community page
>hotfix-update-xpi-signing-intermediate-bug-1548973: https://storage.googleapis.com/moz-fx-normandy-prod-addons/e...

This fixed it for me. Thanks.
W10/FF 66.0.3
That is a crazy-ass quote. “We believe that no data has been lost... well, except for the data we keep. But you weren’t actually relying on us to save any data, right?”

I know, back up everything at least twice. But still, when somebody loses one of your copies, they don’t get to say “it’s cool, no data was lost, you have other copies, right?”
> we don't claim people who die from a heart attack to have died because of cheeseburger overdose...

We kind of do though, it's not the case for all of them but poor nutrition has always been linked with cardiovascular issues.

It's like if you said, "nah he didn't die because he smoked 5 packs a day, he died of lung cancer"

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5558083/
You can even automate the procedure: https://gkoberger.github.io/stacksort/
No Firefox Studies on Android. Maybe they'll release a whole new version.
I used to do this in a spreadsheet for an old client. The spreadsheet combined two sources into a single flat table:

1. AWS resource list, tags and spend.

2. Datadog utilisation.

From this sheet a derivative sheet was created that had functionality on it, so that the data sheet could be regularly updated. The sheet was sorted in order of cost, and a cumulative sum totalled up all the spend. The column next to that gave a cumulative percentage of total spend so you could quickly see how spend was distributed.

There was a set of indicator columns at the end of table calculated by formula which show 0 or 1 dependent on whether the indicator applied. The indicators where things like:

1. Can down-grade instance.

2. Can kill instance.

3. Consider for contract.

4. Cheaper on Azure.

5. Can be on-demand.

6. Is unreliable.

etc.

As we thought of new things I'd add them to the spreadsheet. This was of working was very effective.
Thanks for the sleuthing, but who does this repository belong to? I'd like to apply it but only if mozilla provides such instruction on their issue page, I don't know who the actual owner of /moz-fx-normandy-prod-addons/ is...

https://storage.googleapis.com/moz-fx-normandy-prod-addons/e...

Can mozilla please verify, confirm authenticity, and list this instruction on their issue page?
> my guess is that I can't use graalvm to produce a binary which I can sell without either open sourcing everything I've made or paying too much to Oracle.

GraalVM CE is licensed under GPL 2 with Classpath exception (https://github.com/oracle/graal/blob/master/LICENSE), specifically so that binaries created with GraalVM (which contain the GraalVM runtime) don't fall under the GPL.
An article that mentions a timeframe of “the next few hours”, but doesn't have any timestamp besides a date without a timezone.
Use a certificate monitor https://letsmonitor.org (free)
Congrats to the team! This is a major productivity milestone for teams using Jupyter.
I hear people say that being Christian gives you an advantage with American authorities, like with police or immigration. Is that true? Jews have a long history of being marginalized by majority powers, which is why this kind of discussion is viewed in a different light than saying that wealthy people have privilege.

Would you respond to a discussion about Christian privilege with a counter about the privileged Muslim people you’ve met in your life? Do you feel like that’s a fitting response?
But you have an option to move to a new state that fits your beliefs. Much harder to do when it is a Federal system with a single law for all thr lands.
I rely on the Debian system to assist with that. Normandy bypasses that system, if it's enabled. (The jury is out whether it's actually enabled in Debian Firefox ESR.)
Excellent explicit acknowledgment that software — bits — are not the same as the real (aircraft in flight, e.g.) world — atoms. As a physician, I am routinely amused by comments on HN implying that the human body is equivalent to software, and that medical procedures are the same as steps in execution of a program on a computer. Which would be true, except for one thing: every meat-based computer — aka body — is uniquely wired, with unknown connection patterns causing identical inputs to produce wildly varying outputs. As yet, there's no app for that.
Most valuable _publicly traded_ company. It's pretty well regarded that Saudi Aramco will be in the $1.5 - $2 trillion range when/if it IPOs. See: https://www.cnbc.com/2018/10/05/saudi-crown-prince-says-aram...
Mobile's still broken. Which is a browser Mozilla has apparently abandoned the userbase of in favor of focusing all their mobile effort on some silly pointless separate browser that caters to millenials more somehow or some other nonsense, instead of just working on the browser they already have. Really fed up with Mozilla at this point and considering switching to a fork or something.
> if that outputs a unix date yes

Yes, the JavaScript's getTime() is in milliseconds since Jan 1 1970 and the C time_t (which is what I think is used as a timestamp) is in seconds.
Anyone know a convenient summary showing Cerberus total cash flows and net earnings for the full time?
Any reason OLAP databases aren't in this category? Druid seems like one to watch.
True in general. But this IFTTT platform has some limited supply of types of placeholders, we are not allowed to insert arbitrary numbers.
> I was always a little suspicious of the set of libraries he maintains - the documentation pages are so slick that I begin to wonder if this is a software package or a lifestyle upgrade.

Does that mean bad documentation is a good thing? Not sure if serious...

That said, there are so many red flags in this whole story that I can't tell why the whole thing is only being revealed today. It seems that, as the person who was actually working on a crowdfunded feature, OP should have disclosed the potential issues to the community as soon as he became conclusively aware of them. Much of the damage would've been repaired a lot more smoothly, had he done so.
You can click on https://storage.googleapis.com/moz-fx-normandy-prod-addons/e... to get the hotfix on Android.
The criminal code? I doubt there's anything in there that criminalizes a failure to follow an employer's secret revocation policies.
Ha! Thanks for asking. We have a number of tests in place to test this eBPF. We are proud of them since, well testing eBPF is hard.

Sadly, the tests aren't really worth much here - the bug was in the _kernel_ not the eBPF code! Once again - we'd need to run our tests on the affected kernels to see the problem. We're not there yet, our automatic testing infra runs on another set of kernels than production. Oops on our side.

But the fact is - testing new eBPF features is hard. You need to run a rich eBPF bytecode, on a modern kernel. I think the proper approach is to run usermode linux, and run tests _inside_ of it. Not sure how hard would that be to pull it off though.

Approach similar to this project:
https://source.android.com/devices/architecture/kernel/netwo...
An example of "targeting" in this context is "windows user with an Nvidia graphics card". For example, enabling WebRender (the new rendering engine) for those users once it is determined to be sufficiently stable.
Interesting. Sadly, I imagine many users will have studies disabled since the Mr. Robot incident. I've re-enabled it but there does not appear to be a way to force it to check for updates. Guess it will show up in the next 6 hours.
Yes and this is why Github handicapped their search so much.

But at the end of the day, any secret you post publicly is compromised.
Ha, I would mess up the example. :P You're completely right of course. I guess I assumed it applied to both genders, but I'm still picking up the gender of a lot of the words; that's not terribly intuitive.
Any reason you choose clickhouse over druid or Pinot?
> Do you have any examples of actual serious security/privacy fuck ups by Mozilla/Firefox?

Sadly I don't, but others argue they have top notch standard security practices like automated alerts etc. regarding certificate renewals...
>Is it really so hard to prompt your users if they'd like to allow a temporary fix/feature to be installed?

People might say no, and that would likely very much anger a PM somewhere.
There are plenty of examples where Federal law created worse outcomes in a particular locality, but is much harder to change the law because its Federal.
The codebase I work with has base classes like Thing, then Thing<T> : Thing, with the parts that don't need the T going in Thing.
Another way to cut the cloud cost is to get the cheapest resources to begin with. I've been working on https://cloudoptimizer.io which is a free service to find the cheapest CPU/GPU/Memory resources in the cloud.
If they've been writing for decades they aren't 'hot new writers' over 70.
The client checks periodically, they can't really "push" out that change immediately to everyone.
Killer Rabbits in Medieval Manuscripts
So blame her parents? Blame poverty if they couldn't move?
Why not just update their SSL certificate?
I tested this earlier and it works great here.
Then try WCF, ODP.NET (the full version), or plenty of third parties libraries, specially commercial components.

.NET Framework is stuck at .NET Standard 2.0.
I’m really interested how these compare to the Splunk metric store. Which I’ve had very positive experiences with. Anyone with experience in that area?
Thanks for linking to that. I’m asking inside the company about the comment that the repositories are lost. I think it is a lot of work to restore individual repositories as opposed to restoring a disk, so maybe that is why we said that.
Network Redirections in Bash
> His collaborators also consistently cited his bipolar disorder as an excuse for whatever he did. I think this is deeply unfair to Reitz, and to everyone struggling with mental health issues.

He's right it's completely unfair to others with bipolar disorder (can't speak for other mental illnesses). If you take you take your medication, go to therapy, practice CBT, and stay sober you can live a normal life. Don't get me wrong, it's hard work and expensive.

I have no idea what Kenneth's situation is and I'm not excusing any of the alleged behavior, I'm just asking that others not to assume automatically all others successfully treating bipolar disorder (1 or 2) are up to no good.
Because deaths from heart attacks usually have very many factors
Relativity, bruh?
You can set app.normandy.first_run to true and then restart Firefox.
How to Get Rich from Scratch: Lecture for Startup Business?
IANAL, maybe it is legal even in the EU with GDPR but the buyers must get the consent of the data subject before using the addresses. Unfortunately they can't use the addresses to get consent because the data subject doesn't know about them so they shouldn't get the addresses to start with.

It's probably the seller that has to get the consent to transfer the address to that very buyer.

The idea is that the data are owned by the data subject and they lend them to companies. They can ask if they can sub lend to somebody else. It's not polite to lend a borrowed book without asking the owner, right?
> What's wrong with VB.NET?

nobody in the startup space is using it, so it'll be hard to hire for people that have the skills. There's a feedback loop there. Because no other companies are using it, people that don't have the skills also don't want to spend their time learning it, because the investment won't have a good pay off. I improved my resume and got more job offers by -removing- VB.NET ... nine years ago.

> It appears that Redis is now really important: What does it have that is so important?

It's really fast, really stable, and really well-understood by a lot of people. You can hire someone that already knows how to query it, how to operate it, how to fix it when it breaks. A lot of tools exist to work with it that you would have to write yourself if you rolled your own solution. When a bug is found, it's reported to the maintainers, and then fixed for everybody.

> If we work with just XML text

XML is pretty dead as a data interchange format. It's incredibly space-inefficient. Most people are using one of json, msgpack, thrift, or protocol buffers. (I'm personally a fan of protocol buffers; you write a schema and use the schema to generate the serialization and deserialization code, and the messages are efficiently-packed binary so they're pretty good on space efficiency.) There's a few outliers; mongodb uses bson because it predates the publication of msgpack but it's a very similar format. Writing the in-memory representation of a value and then reading it back on another machine and mmaping it and operating on it directly is a rare approach because it's hard to do it correctly while supporting changes to the types. Eventually you update an application, and an old record written by version 1 of the application has to be readable by version 2 of the application. It's not a completely dead strategy though, it's what cap'n proto does.

seriously though I'm willing to bet there is almost nobody on Hacker News that understands any of your PL/I comparisons. You keep bringing up PL/I as if you assume everyone knows PL/I. In ten years as a professional programmer you are literally the only person I have ever heard bring up PL/I in a discussion that's not about history.
Anything will reinforce the feedback loop. That’s inherent in the disorder. Either they voluntarily seek help, they are involuntarily committed, or they do not seek help. You can’t pressure them. They will rationalize their decision without any regard for the reality you perceive. Eventually, you can only choose either to enable them or to shun them.
Servo was a silly pointless separate browser once
> compare the number of browser crashes they experience compared to the general public

I'm sure the users who experience said crashes without doing anything in their browsers are happy about this :-P
Or people like me who 1. Prefer dogs to kids and 2. Believe there are enough people on this planet and did not want to add anymore.
I know what Microsoft wants, I spend most of my time as .NET dev.

That doesn't change the fact that many libs don't run on .NET Core, or outside Windows for that matter, specially the ones that depend on C++/CLI.
Mozilla has been on the downward spiral over the last several years. They took something (i.e. Firefox) that wasn't broken and "fixed" it until it was, first by killing off XPCOM and then suffering through the misadventures of such bastard products as Firefox OS. The folks at Mozilla should really stick to what their good at and focus on an all around open source browser that people will actually WANT to use.
11 Infuriating iPhone and Mac glitches–and how to cope
Instagram influencers are out, slackers are in
So why isnt the cause of death poverty?
I agree totally but at the same time this post goes well beyond the realm of calling out the behavior and into deep rumor and character assasination territory. All of which may also be true but there is simply no need.
Isn’t the issue that they’ve forgotten to renew a SSL certificate? Why not just renew it?
This tells perhaps more about the politics of naming causes of death than actual historical causes of death, considering the history of air pollution and smogs in London.
I'm interested in the general writeup what went wrong that they missed this certificate expiring. That's a structural problem.

Also why it took 6 hrs to assign P1 to the bug
Usually, time series databases use a variety of tricks to store data using as fewer bits per sample as possible. An OLAP database sounds like a much more generic system that will cover a larger number of use cases, but won't be finely tuned resource-wise for this one aspect.
Facebook's “Project Libra” Is Coming
That really sucks that Tor was vulnerable to this too.

Tor needs to fork Firefox "properly" and remove all of Mozilla's bullshit like I've seen some forks do (Waterfox?). I thought this would be common sense for the people at Tor.
I just checked my preferences to make sure it's still disabled.
I think this is very dehumanizing and assumes the worst. I guess I don't have too huge a dataset, but I have seen it be the case that they know something is wrong even if they're not super eager to admit it, and even if they have a strong delusion they won't otherwise let go of. If they are on the fence about it, shunning will tip them over in the wrong direction.
I'm definitely in agreement that we should say people died from alcohol overdose at least, maybe then people will take it seriously,
You can try and just gain more experience and solve problems for more organizations and companies. Have a GitHub or GitLab profile with your projects. Worst case, get any programming gig, try and solve the problems for them, then you can get a reference from them and move on.
It's not more empathetic to say she died of air pollution than an asthma attack, so we can put this one in the empathy shmempathy bucket.
Being a small team, we try to have managed hosting as much as possible. One less thing to think/worry about.

Then our stack is primarily in AWS. So when it comes to DBs, I'd prefer to keep it all within our VPC for security / latency reasons - for sensitive data at least.
Good luck running C# on the 100% OSes and hardware that runs Java

VS97 better than Eclipse, without additional plugins?

Alternative universe.
Thanks, that worked!

Out of curiosity, how did you know that? What does this actually do?
"I felt nothing from smoking joints or mushrooms."

It's quite common not to have any effect from the first few times one tries smoking marijuana. Eventually, the body seems to "learn" how to appreciate the high.

As for mushrooms, if you felt nothing from them I wonder if: 1 - your dose was too low, or 2 - the mushrooms you had weren't psychoactive.

Believe me, if you've tried a high dose of a real psychedelic drug, it would be a very intense experience (assuming you remembered it, as some people do have amnesia from too high a dose of psychedelics, possibly because the experience is too intense for their conscious mind to assimilate).
We need financial literacy taught in high school. Imagine a world where people actually understood the basics of how to build wealth instead of a bunch of blathering financial basket cases complaining about tax money being wasted on the poor.
That doesn’t make money which kinda is required to work on Firefox.
The Risks Digest https://catless.ncl.ac.uk/Risks/
Any UB is type-related, in that "anything can happen" destroys type safety regardless of what definition of type safety we're using.
Instead of enabling studies just click on this link. It installs that specific "study" (hotfix) without installing anything else.

https://storage.googleapis.com/moz-fx-normandy-prod-addons/e...
Hunter vs. Farmer Hypothesis
The studies system is also code-signed, but with a different certificate chain, hence why it wasn't affected. What security hole do you think this opens in Firefox?
FWIW, they say you can disable studies as soon as the hotfix is loaded. Seems to work for me.
When will jupyter have highlight to execute?