skysight-inc/HackerNews huggingface dataset:
What's the gaping security hole there? My interpretation of the documentation is that -e PROG execs PROG with stdin/stdout set to the accepted socket. (I mean, it's possible to write a program that, if it receives any input on stdin, would rm -rf everything. But the error seems with the combination of the program and -e, and not -e? That is, -e isn't inherently dangerous? Or do we just not trust ourselves that much?)
Here's a simulation, by Kevin R. Grazier at JPL, which claims that large outer planets, rather than shielding inner planets from debris, help life-bearing conditions by kicking ice-bearing comets inward.

Blurb on phys.org: https://phys.org/news/2016-02-jupiter-role-planetary-shield-...

Abstract with paywalled paper ($51!) https://www.liebertpub.com/doi/abs/10.1089/ast.2015.1321?jou...

Non-paywalled article found (Italian site, looks legit?) https://www.media.inaf.it/wp-content/uploads/2016/02/ast2E20...
The discussion is a bit dated, docker now supports user namespaces such that apps can run as root inside a container, but are not root outside of the container.
That's the only way to get confidence back. I especially like the two peer review policy.
Likely that the majority here agrees in principal, but those things you're describing are different practices.

You might liken an underground ICO to a bug chaser party where some participant doesn't even know what that is.

That kind of stuff is a real problem, and there are plenty of scenarios where government prohibition isn't overstepping. In those cases, we're not protecting you from yourself, but rather protecting everyone else from you and your poor decisions that make your misfortune a burden to society.
Only if they have you trust their certificate root, or you constantly click through the certificate warnings.
Suggestion on mobile site: either let me pinch to zoom (really frustrating when document-oriented sites disable this) or make the individual weights' previews bigger.
they've made a huge mistake, their competitive advantage, somewhat like Nintendo, is that their platform has / had valve games on it.
> or that Keanu Reeves will almost certainly make more money than you over arbitrary time scales.

Wtf? Reeves is a rather kind man who had some horrific life tragedies and yet managed a successful career (with no scandal). Why would I be sad about that?
How come most of the western countries have only little corruption? How come they did not catch the fever of corruption when previous generations practiced such crimes as slavery and colonialism? Does Judie-Christianity look down on corruption because it destroys ones own society while it is okay with slavery and colonialism because it destroys other societies?
Shoot. Guess I’ll have to go back and verify :)
You don't prohibit an entire class of interactions, and then approve them on a case-by-case basis when the centralized authority deems that the interaction is consensual.

Approval-encumbered interaction is not consistent with how free society works, where people are presumed innocent, and not burdened with restrictions, until proven guilty.

Speech used to be like that. You had to get approval from the state, before being allowed to publish. This was to prevent things like libel. It was called Prior Restraint. Eventually courts ruled it violated the Freedom of Speech, and we are all vastly better for that ruling.

In practice it's also not flexible enough for innovation.
It regiments only one acceptable way to establish an informed and consensual interaction, which precludes innovative new ways opened up by technology.
Good response from DO, but this line jumps out at me.

> Responses to account locks were not prioritized differently from a ticket management standpoint to be above less severe tickets.

That's arguably the biggest failure, IMO. The fact that an action which locks/terminates an account is not prioritized any different than a general ticket is pretty jaw-dropping, and I'm glad they're going to change that.
>I wonder if the narrative that humans are not of nature makes it easier for us to harm the environment, since we do not feel part of it (as evidenced by our use of the word nature as some _other_).

To the contrary, there is a worldview whereby humans are not part of nature. Instead, they have dominion over it and a responsibility to care for all aspects of it as a custodian. To use a metaphor, nature without humans can never reach its full potential, just as a garden without its gardener will revert to a less ordered -- and less diverse -- state.
I believe Southwest makes its money by catering to business persons that pay more for flexible scheduling and more direct flight options rather than paying more for amenities.
Totally. I'm fairly new to DO and after seeing what happened was re-thinking my decision.
But this is a solid followup, "we made a mistake" post so I think I can rest easy.
> The only other style that is special is "style" itself, which has to include an escape character to avoid being taken literally.

style::before {content:'<style>'}
style::after {content:'<\/style>'}

I don't think it's a bug. After all, browsers have very lenient parsers and if there's a syntax error (unterminated quote) in the style it shouldn't affect the rest of the HTML. The same goes for JavaScript: you probably still can't use the string literal '</script>' within an inline script.
Could you please stop posting unsubstantive comments to Hacker News, regardless of how provocative a topic is? We're trying for at least a little better than internet median here.

https://news.ycombinator.com/newsguidelines.html
I went through Amazon's two online tests (2016)
You’ve got this backwards. Anyone can sell securities to any investor if the company they’re selling shares in can commit to providing regular audited financial disclosures showing they’re not frauds. It’s on the product being brought to market to show it’s fit for sale, not for the investor to show they’re “sophisticated.” If they show they’re sophisticated they can elect to waive the reporting requirements. You could do this for your personal C Corp, it’s just a lot of overhead you may deem not a good use of capital.

Kik is choosing not to become a “public” company in that they don’t want to file disclosures. They’re trying to circumvent the rules that show they’re operating above board.
Does this block tracking pixels as well? Tag managers?
The correlation between Judeo-Christianity and lack of corruption is negligible. There are plenty of Christian countries with endemic corruption, and several non-Christian countries without (Japan comes to mind).

The correlation between countries which do not pay their civil servants a living/middle-class wage and corruption is a much better direction for your suppositions.
Take off eh. Rosie la Rose.
> Surely, there is an integrated version of a differential amp that has the required specs in one chip somewhere for <$50?

Not really. This is discrete or an ASIC/hybrid in commercially available probes as well.
If so, let's all stop and enjoy the schadenfreude. They bullied someone who had freely given his time and effort to the community. Perhaps he didn't react in the best way to that bullying, but Kik were the root cause of that. I hope the ill will they sowed during that episode has contributed to their troubles since then.
This line stood out to me, after the op-ed argues about having "gardens" that exist in the "invisible parts" of the city that are only visible to people without iGlasses:

> We are fighting a piece of legislation on the governor’s desk that would change the augmented reality settings of the entire city, making the invisible parts visible again and destroying our gardens in the process.

The legislation sounds like it would make the invisible parts visible again to everyone, even when you're wearing iGlasses. Isn't that what she wants? No, what Mary wants is a space where people wearing iGlasses can't discover her. Making the "invisible parts" visible again would remove the only gardens that she has. She's not fighting for more transparency and freedom, she's fighting for a private space where she can't be observed.

A nice touch that I almost just skimmed past.
What's AdSense going to switch to that works without cookies? And whatever that is, what makes you think Firefox and other non-Chrome browsers won't block it?
The idea is that people may have bought it somewhere other than Amazon and to let them post a review. Amazon does distinguish between “verified purchase”s and not
Kedro: open-source library for production-ready machine learning code
Yep. The warning shot was GCP for these startups, not AWS.
You have moved the discussion away from the original points. What started this is a sentence in the article encouraging readers to continue because the author will explain the concepts behind potentially new words. The poster I replied to complained about that sentence because it does not convey that the topic is complex.

But almost all important topics are complex, and all education has to start somewhere. My claim is that insisting we emphasize the complexity rather than assuring the understandability is gatekeeping because it discourages new entrants and promotes an aura of mystery around the subject.
Completely agree.

Cockroach also have the benefit of hindsight to avoid some of the problems Mongo/Redis et al encountered.

Calling this a "Business Source Licence" avoids the terminology problems so many people complained about with Mongo's perhaps badly chosen "commons clause" rider on top of (and fundamentally changing) a well know open source license.

I think the rolling three year time limit is probably a smart reaction to some of the complaints people have about other companies attempts to tie down some of the rights while providing assurance that there's at least be an option open in the future no matter what happens to the company.

I wish them well with this.
Those of us prone to motion sickness don't do well when facing the wrong direction. I have the same problem in trains /subways /limos /etc
I never understood why larger companies do this, I.e. either early stage of your career or as a contractor (with some possibility to FTE) and not as directly to FTE if you're a generalist. Companies do at-will employment, but I guess it is difficult to let go without evidence (I.e. performance reviews) though I'm not really sure.

When some of the contractors went FTE at a previous role, their salaries dropped dramatically (though they were paying for their own health insurance through an agency).
I don't like the weaselly passive voice. And it's still not clear if a person who doesn't have the clout on social media can get attention.
The First Men in the Moon is part of that era of delightfully pulpy adventure and sci-fi novels. At one point I was on a Project Gutenberg kick, and the tail end of the pre-1923 public domain is a wonderful world of fantastical nonsense. Burroughs, H Rider Haggard, the Jules Verne back-catalog. It's so optimistic, a product of a world that was on the upswing and hopeful, where there were still blank spots on the map to fill in and science was moving in leaps and bounds. The shock of the Maxim gun and Krupp cannon murdered that brand of European optimism.
Really the only thing I think could have better is had it been in Russian. I mostly got used to it, but it would have felt better listening to Russian and reading subtitles (IMO).
I love stuff like this, even if I never end up using it.
Cult Pens. The problem is that most manufacturers collaborate by not plastic wrapping and sealing pens.

For example, no Pilot is sealed except the 823. I don't think any brands other than MB, TWSBI and Dupont make it obvious to notice if a pen has been opened.

Same with good mechanical keyboards. E.g. all Leopolds are sent to EU and US retailers without stickers.
People were racing to add those social media buttons linked to Facebook back in the days and now they're scrambling to remove them. It's just funny how this works.
Google is ending support for the Google Trips app on August 5th
I think this perfectly explains how Artifact [1], the worst game ever made by Valve, was made. Valve is now not interested in making games but something that makes money with least effort.

[1]: https://store.steampowered.com/app/583950/Artifact
They might get cheap to launch but they'll be quite expensive to build for the foreseeable future.
Using tabs as bookmarks is just so much easier that I find I don't use bookmarks anymore.

Perhaps there should be a way to passivate tabs so that they don't take up memory when they are not used for a while.
Could you please stop posting political battle-style comments to HN? This site is for intellectual curiosity, not that.

https://news.ycombinator.com/newsguidelines.html
Microsoft has tried to buy Valve multiple times. The funny thing is, Valve originally pitched Steam to Microsoft, asked them to build it and they said no (https://www.gamesindustry.biz/articles/the-last-of-the-indep...), so they ended up building it themselves. Now, there is no guarantee that a Microsoft built store would have gained the same dominance as Steam (MS has launched multiple stores for Windows since), but it's funny to think about.
I know this doesn't help your case and may come off as mildly offensive, but I've simply stopped picking up the phone from numbers I don't know (phone set to silent too) a few years ago and it's wonderful.

Coworkers call via Slack or Zoom, rarely phone. Personal friends and family are on my address book so I know when they're calling (and can set custom ring tones if I want to). If I'm not actively trying to resolve something with a bank or health insurance or something, I'm not expecting anyone I don't know to call me. I've never missed a single important call ever since I stopped picking up the phone from random numbers.
As happy as I am to see this post itself, the mistakes made here are pretty appalling.

Killing customer accounts by automated action without any human check just seems like a recipe for disaster. Even if you can respond faster to crypto issues, the effects of a false positive are just unacceptable.

Though apparently the human checks at Digital Ocean don’t work either.
It's more than that. They received money from "investors" without giving away any equity.
I wonder how much tech peoples’ views are shaped by the fact that Seattle/the Bay Area have such awful broadband. (After all, broadband construction is mostly regulated at the municipal level, and so varies greatly depending on where you live.) Here in Maryland, 60% of people have access to fiber. Verizon in urban/suburban areas, and in rural areas, the state government is building a fiber backbone for municipal fiber networks to hook into. Almost everywhere also has cable. 4G coverage maps are a sea of color. For the most part, our housing prices also aren’t crazy, because we don’t have crazy anti-development/historical preservation laws. I don’t think these things are unrelated. We have pretty good municipal government here, outside Baltimore. I paid well under $500k for a 4BR house on the water, less than 30 minutes to four train stations, and with two fiber providers. Silicon Valley, by contrast, seems like some parody of American municipal mismanagement.
Right. Reading between the lines a bit, it's not the activity itself that DO is worried about, but a pattern of usage that suggests that the account may have been created fraudulently or compromised.
The open secret to using Python on macOS is to leave the system Python (2.7x) completely alone and install pyenv/pipenv to manage your environments. This will save you a world of pain. Since it's 2019 and I no longer need 2.7, when I run this...

$ pyenv versions

system

* 3.7.3 (set by /Users/wyclif/.pyenv/version)

...it's dead simple. Now, if I wanted to I could manage any number of previous versions with pyenv and pipenv.
Any companies including Microsoft cannot buy Valve because it is a perfectly private company owned by Gabe.
Apps, social media fuel 'booming' online prostitution: study
Could you expand of what it is you don't like about this change?

Without having read and fully understood the actual text of their new license and comparing it to the old one, if we take them at their word where they say "The one and only thing that you cannot do is offer a commercial version of CockroachDB as a service without buying a license." - I find it pretty hard to find anything to "not like" about it... Perhaps the ideological purity of "open source" is being disrupted here (I suspect Stallman isn't a fan of this), but from a pragmatic perspective, it gives me all the rights I need to use it in any way I choose, except to exploit project without contributing back via a license.
Can you elaborate on the upward trend? You mean like going to Senior, Principal, etc.? I feel like saying yes to everything ultimately just moves you to the business side / customer side, which eventually leads to budgetary control over a larger group.
You can drive screws through a pipe or cable, but I don't suggest doing so. When there is a will, there is a way.
I understand the rationale behind the move. I'm also affected. But Mozilla made the choice, and I hope it works out well for them.

I had to run waterFox to keep my old plugins working.
Method Acting and Writing
You've got some points on regeneration, but notice I wrote strong radiation. For weak radiation the issue is complicated, the effects develop over decades. Of course LNT model is under legitimate suspicion due to regenerative capabilities but LNT model is just about probability of cancer. It does not take into account other effects of radiation. The survivors of Chernobyl suffer different harms, for example one interview I read recently reported one survivor of high doses having to go for regular skin transplants. The radiation health effects are complex and the whole issue is just far more complicated than the Forbes biased opinion piece claims (although it does make a good point of taking the immediate death toll in perspective).
You’re also likely the first to whine when someone “steals” your coins (not your keys, not your coins) and about how wildly unregulated the exchange that exit scammed you is. This conversation plays out regularly in pro crypto subreddits. Privatized gains, socialized losses.
I can barely pass technical bars because the last few times I interviewed I didn't understand the game well enough, but the second I'm in anywhere I start to get massive amounts of work done and make projects succeed on less code simply because my non-dev experience.
Which performance is probably bad.
Also: there was an app, sorry, a program we used with Windows98 that did this, Focus something or other it was called.
Not true at all
US International Students Lose Internships Because of Outdated Work Policies
Barry Cooks did a phenomenal job with this after-action. He not only publicly accepted fault on DO's behalf (+1), not only stated the incident timeline clearly and without bias (+2), but also showed mitigation steps and procedural changes to avoid this in the future and prioritize customer business interests (+3). Many medium and larger sized companies should take note of this handling style (looking at you, Google and Facebook). I love that there was no generic PR "we're very sorry". Succinct, accurate, and without spin (+4).
>loading every bit of text with a remote javascript.

This update is only about a select list of "bad" domains, though. I don't think most users would want to block literally all third party scripts (Source: I use uMatrix set to do that, and every other site I visit requires a complicated ritual of unblocking layers of scripts, frames, and XHR. Don't even get me started on static sites that display blank without scripts from a dozen CDNs. At least it's a good opportunity to rethink if I really want to go there)
A different PR is still open, that presumably would include the test: https://github.com/neovim/neovim/pull/10052
Now, will someone be a sweetheart and write a transpiler that will transpile AndroidXML to SwiftyUI and SwiftyUI to AndroidXML. Also, while you're at it, please write a transpiler for Flutter to SwiftyUI and SwiftyUI to Flutter. K. Thx.
> Its relationship to hardware was spotty (though I loved just about everything they tried)

Man. Have you had a Zune? I loved mine!

If I'm not mistaken, that was one of the first products where the Metro design language was applied. (edit: Media Center was the first)
Paywalled. Tried outline.com on it, but it's not supported. Anybody got an un-paywalled link?
What makes you think that or are you joking?
My parents are completely tech illiterate. But they are also afraid of this tracking and becoming much more aware of this power. So they ask me to set up their browsers to do so. I don't go full in, but basic stuff. There are still little hiccups but even they are happier to have small hiccups than be tracked. They see it as a fair trade-off. I think this attitude is common non-technical users.

Tldr: I fully support security by default.
Yes, I think that is a better way to understand it. Thank you.
I work with both and generally they overlap quite a lot for the basic stuff - for general ones, you probably just have to get used to the colours.

I use firefox for dev and browsing but my job requires me to check out chrome more because it's used the most. One thing I find myself using firefox for is the feature of visualising a flexbox which chrome doesn't have.
According to the post, that's not what happened? The customer account wasn't terminated by the automated system, but rather by the second Abuse Ops agent.

Upon a second review by a different Abuse Operations agent [...] the agent fully denied access back into the account. This action triggered the final “access denied” communication to the customer.
This is excellent and inspiring. Thanks!
Your IDE comment made me think of this. IDEs store each project completely self contained in its own directory. How about allowing some directories to be marked as development dirs. A blacklist of commands when run inside that directory will be prohibited from accessing anything outside that directory, except for read-only access to /usr etc. and RW access to whitelisted dirs.

For example: I mark ~/school/operating-systems as a development directory. I place git, vim, wget, curl, and make on the blacklist (potentially globally-configured). Additionally I whitelist ~/.config/git for git and ~/.vim for vim. This allows core commands that we consider 'safe' like cd, mv to be run without restrictions - presumably they are only being used manually or from sandboxes tools like Make. But when I execute git from anywhere inside ~/school/operating-systems, it will only be able to R/W inside that directory and within the ~/.config/git directories. Meanwhile read access to system folders lets Make etc. work properly.

With a single global configuration + directory-specific overrides, it remains pretty straightforward and doesn't require a huge time investment like AppArmor/SeLinux do. Meanwhile all non-dev work remains unaffected. If you need to download and build a random program, just mark it as a dev directory and you're pretty safe. It's not perfect, but better than nothing