skysight-inc/HackerNews huggingface dataset:
One area for improvement: Default to a set of domains to check rather than just one, for example google.com, facebook.com, baidu.com. Check them all in parallel, and return success as soon as you get a good answer from 2 out of 3. This avoids falsely reporting "offline" when one host happens to be down, and it avoids slowing down the check when one host happens to be slow. Probably use `mio` to orchestrate this, to avoid the overhead of threads. (Note that this is similar to how musl libc implements DNS.)

Another area: Think about what should be reported in a country like China. For example, facebook.com is blocked. If China blocks google.com tomorrow, does that mean that every computer in China is offline? Probably not. On the one hand, this isn't something that a library can give a one-size-fits all answer for. On the other hand, since China has the most internet users of any country in the world, this is probably something that the design of the library should consider and offer documentation and best practices for.

Another area: Many GUI apps expect to make ongoing connections, e.g. chat apps that are always listening for messages. These apps need to persistently check the status of the network in the background, and many would be willing to dedicate a background thread to this library if it helped with some of the details of that, like 1) detecting hardware-level state changes, like WiFi coming and going, to prompt an immediate re-check, 2) checking in a rapid loop after a network change, but backing off to a lower background rate when the network is stable, 3) "de-bouncing" network events in case the network seems to be coming and going multiple times a second, so that UIs responding to those events don't flicker.

Higher level: This is a common problem. Find other libraries that have solved this problem before, compare the different ways they've solved it, and document the tradeoffs. I appreciate that I'm suggesting that you do a lot of work, but if you intend for production applications to use this code then it's very important work.
The content of targeted advertising is usually way less spammy than untarged advertising. More or less
the only people who can make money on completely blind online ads are scammers (whiten your teeth! etc)
Youtube build spfjs for loading a page in "Structured Page Fragments" https://youtube.github.io/spfjs/
For the desktop web Duckduckgo has a plugin that shows you all the trackers that are on a webpage and lets you block them. They also have a mobile web app that you can use as your default web search on mobile. https://duckduckgo.com/app
> If you are going to publish a number of the harm of PM by extrapolating from an IER and PM levels, it should be a net effect, which would be staggeringly positive in terms of lives saved and lengthened not shortened.

Respectfully I disagree. You've conflated the primary effect and the side-effect. The primary effect is energy is generated and energy is what has improved our lives. The side-effect is PM exposure which is killing us. Burning fossil fuels isn't extending anyone's lives. Generating energy is. If we can trade it out for a better method the same extension of life persists, and the premature deaths drop. Thus, we can factor it out. The truth is, it does both things, and we need to switch it out for an energy source which only does the former without doing the latter.

Imagine for a second a power plant that generates electricity but once in a while it murders a random passer-by. It think it's fair to say the power plant is responsible for those murders, and we can talk about replacing it without having to talk about all the good it's doing.
I don’t think your Dockerfile should be downloading your dependencies and building from scratch. Let your build pipeline pull them in, run tests, and pass them verbatim into your container.

Vendor your dependencies if you have to, or maintain a cache, but don’t make your Dockerfile redo all of that work.
>It's kinda hard to see how Amazon won't eventually collide with antitrust forces at some point.

Where did you get this idea? I don't see how Amazon, or anyone else for that matter, could ever run afoul of "antitrust forces" in the US, because there's simply no such thing in America any more. America hasn't enforced antitrust law in ages.

They might have problems in other countries, but the US is by far their largest market, and they have absolutely nothing to worry about here.
Nordic countries incinerate almost all non-recycled municipal waste, to the point that they import waster from other countries to keep the incinerators well fed.

Any insights how this is handled there? They are pretty famous for having some of the strictest environmental and health regulations, so I assume these issues have solutions.
Fixed that for you: "Because they have strong ties to the Chinese government. So they refuse to build backdoors for the NSA".
It's a pretty solid assumption in economics that in an industry with perfect competition, profit margins eventually converge with the benchmark interest rate.
What are you smoking? Do you honestly think Trump's justice department is going to enforce any such laws?
It doesn't just convince you of something, it even drives culture, like beauty and fashion. Advertising has changed how women look and perceive themselves and the products they buy. None of it is needed. Make-up, shaving products, creams, etc. Fashion has turned into fast fashion. It's just a waste of natural resources and creates plastic waste.
"Factory" bread can be "disgusting" because it's made to feed the masses and gain market share, not taste good. For the same reason hamburgers at McDonald's are not as good as those made at a quality restaurant or at home.

Good bread, as with any good food, typically takes time and quality ingredients. You won't find that in mass produced food. That costs too much.
Similar order of magnitude as owning a ski or other boat over 21' or so. Not "cheap", but not outrageous.
The only currently known and exploitable API is with `docker cp`, but FollowSymlinkInScope is used all over the place. Unfortunately, fixing FollowSymlinkInScope requires redesigning the API and then redesigning all the callers so they stop passing around path strings blindly and instead pass around handles (which are O_PATH fds).

But, as I mentioned in TFA, the plan is to rework https://github.com/cyphar/filepath-securejoin to have a sane API that detects attacks on older kernels while using the new kernel bits (once merged).
Not the country's fault but Chinese companies definitely should take back the waste. They produced it in the first place. If not, they should not be allowed to sell.
The only people I've ever seen there are young techies, and their offices are in hip parts of town rather than Medical Gulch.
I appreciate you are trying to provide a helpful suggestion buy this is not a solution.
1) I live in the UK. I'm sure Chicago is lovely though!
2) Housing price rises effect entire areas and transport networks, so anything in reasonable commute range (especially if you rely on public transport) also has prices inflated and driven out of reach.
Louisianaian here! Back when I did my PhD at LSU 5 years ago, the university seemed like it was constantly in a budget crisis from a combination of state funding cuts and public demands for low tuition (lots of people in Louisiana view LSU attendance as something like a birthright). As mentioned in the article, this cancelation is almost certainly driven by cost cutting. I hope my friends still there can still get the literature they need!

Related article I found about a legal dispute LSU had with Elsevier:
https://www.insidehighered.com/news/2017/05/03/louisiana-sta...
Simpsons did it... 0chain.net
Do you mean a single _fusion_ event?
Legend has it that adding more H2 to your H2O turns it into H3O, which decreases the pH of the water to match the acidic nature of your stomach! /s

But seriously, these kinds of “truth blogs” do more harm and spread FUD that undermines public support for environmentally beneficial food sources.
Status can't be all of luxury goods - although it may be for say fashion. Material comforts and perception of superiority are reasons - those who have a community and any disposible income have their own market "profiles" based on familarity. Even if it is just say preferred sorts of Whiskey by mennonites.
Show HN: MbedTLS Integration for Oat++ Applications
Not everybody uses those mitigations.
I'm a bit confused. Shouldn't there be equal concern for apps that _share_ data with third-parties? The first-party app doesn't need to store any of the information in that case; they just hand it off in-transit.

And have you had any luck with installing apps with such criteria? I'm on a similar boat, and primarily use F-Droid apps.
Advertising is not a good system for that. If there are multiple companies providing A (the usual situation), advertising will not help you choose well. If you think you need A but in fact A is quite harmful and you're best off avoiding it in favor of B, but there's no money in B, advertising will actively attempt to mislead you.

There is no magical ethical kind of advertising based on informing the customer. All advertising is 100% biased towards the decision of purchasing the product. That's what makes it advertising.
> There are supporters saying 'temperature is not climate when it comes to disproving climate change, yet try to use the same argument when proving that it exists.

Everywhere I've seen both these arguments used, the attempted-disprovers are using something like "worst snowstorm ever in X location means it can't be getting warmer", whereas the supporters are talking about the average temperature of the whole planet, and how the increase in energy in the system is causing extreme weather, both hot and cold.

tl;dr– local temperature vs average temperature: not the same argument.

If you have counter-examples, I'd welcome them.
What do you do about the mobile apps which don't store your data themselves, but share it with various third parties?
For what it's worth I saw more of them in Kyoto than in Tokyo. I was staying around here: https://www.google.com/maps/@35.0086507,135.7541648,17.51z

It did bother me that I could never tell what the actual size of the drink was going to be. Is it in kanji, or is it just not listed at all? I definitely had a situation where I was expecting a full normal sized bottle of green tea but got a smaller one.
A particularly egregious case[1] is a lawsuit against LaCroix complaining that their product contains chemicals also used in cockroach insecticide. The chemical in common was linalool, which is just a floral scent!

https://www.snopes.com/news/2018/10/08/lacroix-sparkling-wat...
They're dropping those brands into the midden heap that is the "marketplace" where you can't be sure of what you're getting. If Amazon was selling it directly, you had some confidence they were buying from that seller. No longer.

Amazon buys are now just as risky as Ebay ever was.
You can use full words or even short multi-world phrases in math expressions. From a typesetting POV, write them in roman (upright) type, and enclose them in brackets whenever ambiguity arises (due to the possibility of separating spaces within a single variable, or the concurrent use of juxtaposition (of single letters) as a product or for other purposes within the same sorts of expression. This is very common in the applied sciences in general, and the convention is universally understood.
> I'm sorry but this is over-engineered garbage and good luck to anyone who uses it.

I agree and wish people would speak up and share sentiment like this more often.
Hah! I get way more traffic and conversions by advertising about $150/month through Craigslist. I tried spending that much a day with AdWords, with all the targeting and settings fine tuned to my market, but never reached the quality traffic I get through the classified advertising.
It's an uncanny valley of food. It tries so hard to simulate meat that it emphasizes its fakeness. Personally I prefer a simple vegetable patty that's not trying to be what it is not.
Youtube proves otherwise.
Hitting enter in the address bar allows you to access them
Ask HN: What Are You Building?
I love to hear about what people are building? Fun side projects, side businesses, etc.
Perhaps Monsanto ?

The US needs a hard reset, there wont be a simple method to fix what is broken here.
I don't want a free replacement if it's just going to be the same crap. The problem is that the product itself is crap, not necessarily that any given one is defective. Replacements won't be any better.

And this is still way more hassle than I want to deal with.
Are you familiar with the difference between blocking & non-blocking I/O calls? Also, have you done any distributed systems work, where the algorithm that services a given request might require computation on different machines? That's background knowledge that's important; it's hard to know where to start without knowing your background.
Your comment is based on the myth that the atomic bombs ended the war.

https://www.latimes.com/opinion/op-ed/la-oe-stone-kuznick-hi...

"""
The atomic bombings, terrible and inhumane as they were, played little role in Japanese leaders' calculations to quickly surrender. After all, the U.S. had firebombed more than 100 Japanese cities. Hiroshima and Nagasaki were just two more cities destroyed; whether the attack required one bomb or thousands didn't much matter. As Gen. Torashirō Kawabe, the deputy chief of staff, later told U.S. interrogators, the depth of devastation wrought in Hiroshima and Nagasaki only became known "in a gradual manner." But "in comparison, the Soviet entry into the war was a great shock."
"""

"""
Most Americans have been taught that using atomic bombs on Hiroshima and Nagasaki in August 1945 was justified because the bombings ended the war in the Pacific, thereby averting a costly U.S. invasion of Japan. This erroneous contention finds its way into high school history texts still today.
"""
I don't think I would call this a "measurement". A measurement, in the Copenhagen interpretation, is a fundamentally non-unitary process.

What you're describing is simply tracing out the environment, so that we end up with a mixed state. The complete density matrix, however, is still being governed by the Von-Neumann equation and therefore evolving unitarily. So I assume what you're saying is that we don't need to model measurements separately since their results would be described by statistical ensembles and, at the level of a subsystem, you can't really tell the difference between a genuinely entangled state and a statistical ensemble, anyway?
Not a drug cuz wikpedia told meh. Got it.
Just using O_PATH won't completely save you. O_PATH can definitely help, especially if you actually check that the path is what you think through readlink(/proc/self/fd/$n), but doing it safely is quite a bit harder than just using *at(2). As mentioned in TFA, I am working on some kernel patches (which will probably result in an openat2(2)) which allow for restriction of path resolution so you can block symlink crossings entirely or force symlinks to resolve to the dirfd you passed.
I'm not a copywriter in the sense of "person who writes adverts," but I am someone who writes copy for website content.

One of the problems is that it isn't even good communication to say (for example) "This device has a 7 inch screen." That's mostly useless information for most people.

It's much more genuinely helpful to tell people something like "You can easily read our large screen even in bright sunlight." Most people aren't going to see specs concerning screen size and mentally translate that to "Woah, this will make my life easier because it will be more readable than the dinky thing I currently use."

Good product descriptions explain to you what this thing will do for you. If it gives a spec, such as weight, it needs to also tell you why this matters -- such as "this is lightweight for this type product, making it much more portable than average so you can take it with you to the work site."

There is no clear dividing line between the kind of description that explains you can do X with this product and the kind of advertising that leaps to implying "And then women will fall madly in love with you and you will be the new Don Juan of your neighborhood!"

Over the years, I've wondered a great deal where the dividing line is between good communication and active manipulation. I think that line is actually quite fuzzy.

When push comes to shove, if you want to tell people about X, you can be assumed to have an agenda of some sort. But, most days, I'm reluctant to suggest the world would be a better place if we all just stopped communicating entirely.
Hard to say since they drop that statistic without bothering to provide any context or citation.
What right? Well, it's not a right but a condition to sell that they must take back non recyclable/biodegradable waste that came from what they produced.

That said, I'm not advocating the country takes it but the companies. In fact, China probably will adopt this sell condition policy domestically but not apply it to overseas selling.
One reason not to do DNS exclusively is that many networks allow DNS requests (and intercept them) but block HTTP requests.
Prescription medications cannot be legally advertised in the UK, and this makes the ad space much quieter. All you get advertised is OTC painkillers and cold remedies.
Being surrounded by autonomous kill bots is not a happy thought, even if they also happen to function as people movers.

Also how do autonomous vehicles handle jaywalkers? If they reliably stop then at least some people will just cross whenever they feel like it.
“Facts” about BPA
Your options are rather extreme and unsuitable, by your own admission.

The most direct solution is to prohibit landlordism and private renting. This prevents housing from being treated as an investment and keeps it within the housing pool.
1 = Raspberries outdoor. Camera and two-finger gripper + pull.

2 = Apples outdoor. Camera and three-finger gripper + twist + pull

3 = Strawberries indoor/outdoor. Camera and two-finger gripper + pull.

4 = Blueberries + raspberries outdoor. Multiple general agitator designs + fall. (see https://youtu.be/bt73GOk4JRY?t=100)

I think the fourth is the only honestly commercially viable option. However, it's never going to work with most fruit, because it relies upon general agitation to disconnect the fruit.

Additionally, all of the solutions require neatly cropped rows. Whereas, the promise of robotics is that it will allow intercropping which creates more productive land with a stronger and more natural ecosystem, reducing outlays on pesticide, herbicide, fertilizer and related labour and increasing effective crop density and land use. None of these solutions even touch on these very real opportunities.

FWIW, I am personally confident that my R&D team (who normally work on food production and packaging robotics) could produce a functionally superior prototype to the OP video in a matter of weeks, for a fraction of the budget.
> I think a non-privileged user (or the use of user namespaces) would limit the scope of the attack based on permissions

I don't think so -- Docker does all archive operations from the context of Docker (so, as root). Obviously with rootless Docker this is different, but I highly doubt anyone has started using it yet.

EDIT: Obviously also if Docker has an AppArmor profile applied or restrictive SELinux labels then it will also be limited by that.
>Smoking is closely linked to some forms of breast cancer.

the smoking rates among women in Belarus is ~10%. To account for the breast cancer rate increase in the Gomel and Mogilev regions all the women smokers there would have to get the breast cancer. Add to that that women smoking rate for example in Russia is close to 20% and the breast cancer rates there are relatively normal. Given all that it is pretty obvious that smoking has nothing to do with that cancer rate increase in Gomel and Mogilev regions .
Does it have any features to handle inheritance / composition of configurations?

We usually have a slew of different environments that are mostly the same except for one or two parameters. I would like to find a solution that has the ability to control common parameters in one place without having to code the inheritance into every language / setting where the config is accessed.

In general it seems like simply storing your config in JSON or YAML and putting it in git provides most of the features of many config solutions and the overhead of deploying something separate to handle it rarely justifies the marginal benefit from that.
An index fund invests in lots of companies. The ones that are driven by ad revenue only make up a fairly small percent of the fund.
Ask HN: Remote Storage Client API Idea. Any Thoughts?
I have an idea for an open source project and want to see what people think here on HN.

This is a project to encourage data freedom - separating who is supplying your web app with who is storing the data. The data storage could be Dropbox, Google Drive, Your local HDD (with a browser extension), a self-hosted storage, IPFS maybe etc.

This will also encourage and perpetuate use of FOSS on the cloud - because you can use a suite of FOSS applications, e.g. a todo list, a calendar, a text editor, a code editor, and link them all to your preferred storage solution, which itself could be FOSS or Propitiatory. It also lowers the bar for app developers who no longer need to run a server at their own expense and risk.

This will be achieved by exposing a simple client-side JavaScript API for storing data remotely.

This API would let the developer of an app, e.g. a text editor say, call this to save data, open data and discover what data can be opened. The app doesn't care about how the data is stored. It would be similar in feel to using localstorage.

The API itself would then require registering of plugins for whatever storage providers you want to use. So there would be a plugin for Dropbox. The app developer chooses which plugins they want to add, but typically I imagine there being a standard bundle of popular providers, including https://remotestorage.io/ which then let's you self-host a server.

If you find that apps aren't including your favourite storage host, you can get around this with a chrome extension to register that when it detects a site using the api.

I'm undecided but this might include encryption options, or maybe that is a separate concern.

For authentication, there will be a default UI for telling the user they need to authenticate, e.g. with Dropbox and handling the tokens, but that will probably be overrideable to fit in with the branding of the app.

Any thoughts?
Violent Protests Erupt as Hindu Doctor Accused of Blasphemy in Sindh
I'm building a marketplace for medical practices to find technology vendors of all types (everything from your office phone system to online patient portals to remote vitals monitoring tools). The goal is to become a one-stop-shop for medical practices and save time for clinicians, purchasing teams, & administrators by rigorously vetting all of our vendors before we host them. Esp important as the health tech market explodes and the universe of tech available to doctors & clinicians grows quickly. https://www.goplacebo.com/
This is basically a listicle from 1967. You could publish this on Buzzfeed by making the title "21 Ways to Raise AWESOME Children (Number 12 Will Shock You!)" and adding emojis.
> That snippet seems to clearly demonstrate that it is not fear mongering

It demonstrates nothing. There is no citation, there is no definition of what the EPA tests for (vs the FDA or anyone else), what human safety means. A once over interpretation of a throwaway line is not "clearly" proof of anything in any forum.
Apps are harder to tweak to where they don’t track you.
Please Apple do something about this, so I can stop sabotaging my career as an iOS developer by regularly arguing against tracking to my superiors.
Almost all companies need a consumerist society to grow though.