skysight-inc/HackerNews huggingface dataset:
While I definitely agree, I am genuinely curious:

Would you have preferred addons remained broken for the up-to 24 hours they would have been through the regular update system?

I'm not trying to defend what happened here, and I acutely feel the breach of trust. But, I also am trying to understand that this was a lose-lose situation - and the choice had to be made extremely quickly and under immense pressure.
I just checked my Windows 10 machine that I use every day for 8 hours to get real work done. There's no "Candy Crush" on it.
If there was an average of 128 rating 10.0 CVE vulnerability's in Android, Google Home, Google Glass, Google Mesh.. and they also had a track record of getting more insecure over time with new updates; would you feel safe in their self driving car?

Company culture on this have everything to say. So looking at their most sold products is a good testimony for lack of security focus.
You could look at it as a POC: ideas from experimental or niche languages sometimes find their ways into existing mainstream languages.
Blender is good for character animation, but it's learning curve is higher and there aren't as many QoL improvements as in other 3d software. 2.8 is a step in the right direction but I still find cinema4d to be much much much faster to get results with for my purposes of motion graphics.
"At its heart, VisiCalc is about numbers. One of the early decisions we made was to use decimal arithmetic so that the errors would be the same one that an accountant would see using a decimal calculator. In retrospect this was a bad decision because people turn out to not care and it made calculations much slower than they would have been in binary."

http://rmf.vc/implementingvisicalc
A slight pedantic response, it pays for 2 rookie contracts but it wouldn't really allow you buy the contracts of 2 rookies. Baseball rules are designed to suppress the salary of rookies below their free market rates in order to benefit both veteran players and less wealthy teams. The end result is that any decent rookie has a lot of surplus value attached to their contract and they become an asset rather than a liability. Teams generally need to give up multiple millions in value in order to "buy" a rookie from another team and gain the right to pay that player half a million dollars.
Debug the DOM in Visual Studio Code with Elements for Microsoft Edge
(Stripe infra lead here)

This was a focus in our after-action review. The nodes responded as healthy to active checks, while silently dropping updates on their replication lag, together this created the impression of a healthy node. The missing bit was verifying the absence of lag updates. (Which we have now.)
Yea some state of the art results are just inaccessible without large budgets, simply because models can scale (and because some orgs have a lot of money to train those scaled models).

You can always just use smaller models and/or lower resolutions though; of course the results won't be on par but it may reach a qualitative result (for research and experimentation purposes) or good enough result (for personal application purposes). E.g. hobbyists don't need AlphaGo-level go playing AI (which I'm sure had aggregate costs in 5 figures or more to train), reduced versions play all far above our levels -- although in this case there's the interesting effort of pooling hobbyist resources to indeed reach SOTA, see LeelaZero[1] and LCZero.

Some kinds of research will be effective only at large orgs, that's always been true. There was indeed a brief period when people realized GPUs could unleash deep learning/CNNs that you could do anything with a good GPU, but that was very much an exception. To borrow from another field, you cannot do a level of car engine research without all infrastructure to fabricate and test engine prototypes (though you can do some/other kinds of theoretical analysis).

[1] http://zero.sjeng.org/home
Given the high percentage of startups that fail, I wonder what percentage of VC funds fail, where perhaps we can define fail as "return less than the S&P 500 over the same timeframe". I imagine the true answer is a much more difficult number to come by. Easier to get late money in a successful company and claim "qualitative success".
An obvious marketable application for this is location tracking. Advertisers could embed more detailed positional information into audio / video advertising and use apps to get more granular information on who’s listening to it. A logical extension of https://www.google.co.uk/amp/s/www.independent.co.uk/life-st...
The support is pretty good in Vancouver, but there's two big compounding problems.

1 - drugs, which is a massive complication modifier

2 - capacity, which is stressed a LOT by other areas of the country. For example, other provinces have a policy of buying one-way bus tickets to Vancouver for any homeless person who asks (or is slyly convinced to leave). Vancouver can't do anything to stop it, for good reason - freedom of movement within the country is a guaranteed legal right.
Hydro can be extremely disruptive to ecosystems, and you also need a suitable site for it. It's very situational, from what I understand.
Mac OSX comes with chess. What's the difference?
> it would eliminate insurance networks

It wouldn't. Insurers would still need to approve providers' prices, and those negotiations would have other levers that could be pulled.

But broadly speaking, yes--requiring insurers pay the same price that is advertised and available to the uninsured public is basic price-transparency policy.
No moving parts, and finding free water for pumped storage is going to be hard in California.
In emacs there's a package rainbow-delimiters-mode for parantheses, braces, brackets and what not, and rainbow-identifier-mode which makes variables names unique colors.
Strava has been stagnating for years at this point. I used to really love their site, and I've still been a pretty active user, but I can't even remember the last time they introduced a meaningful new feature or improvement.

And their paid subscription offers me, a non-racer, basically nothing. I checked it out once before, but cancelled after realizing there's no substance to it for a casual/enthusiast.

And now this recent dispute with Relive just indicates that they misunderstand their place as a platform. If they want to start acting like Oracle and be a bully rather than an innovator, then good riddance to them.

There is nothing special about Strava except inertia at this point. There are MANY competing services and platforms, and perhaps it is time for me to consider switching.
That requires allowing Google to retain your geolocation data.
The Raspberry Pi 1 and 2 are slower than 1 Ghz, and ARM has less IPC than x86 (although I'm admittedly not sure about 90s-era x86).
Cool, but I always wondered - is the child 'biologically' speaking belonging to woman who had the uterus transplanted in her body or to the woman who was the original owner of the uterus?

For example, I understand uterus has ovaries attached and ovaries have/produce eggs. But the DNA of uterus and ovaries is that of the donor.

Therefore, sure, woman who gave birth to the baby can technically, legally and socially be called the mother but biologically, if we were to take DNA from baby, would the uterus recipient DNA show up or that of donor?
No, the scooter I own would stay at home, as it would be in the way during my morning commute.

(I’m not saying it’s for all, but for me, the shared scooter could not be replaced by having my own, which is the argument that kicked of this subthread)
"We" now and "we" ten thousand years from now are very different people. Those in the future will laugh at your concerns for them. It's as if ancient Egyptians would worry about whether we, now, have enough flood plain space to harvest crops.
Honestly the housing first is a bad idea for the visibly homeless. Might work Ok for the invisible homelessness but the property damage costs can easily be factors lager than even the rent cost.
My point was that it's all but impossible for any rollback to be entirely risk-free in this sort of situation. If everything was understood well enough and if everything was working to spec well enough for that to happen, you wouldn't be in a situation where you had to decide whether to make a quick rollback in the first place.

I'm not saying that the decision won't be to do the rollback much of the time. I'm just saying it's unlikely to be entirely without risk and so there is a decision to be considered. Rolling back on autopilot is probably a bad idea no matter how good a change management process you might use, unless perhaps we're talking about some sort of automatic mechanism that could do so almost immediately, before there was enough time for significant amounts of data to be accumulated and then potentially lost by the rollback.
> Internet Explorer is the only browser with a large install-base that still supports NPAPI and by extension Java Applet.

I though plugins on Internet Explorer used ActiveX, not NPAPI. Wikipedia agrees with me (https://en.wikipedia.org/wiki/NPAPI): "Internet Explorer versions 3 through 5.5 SP2 supported NPAPI [...] Support came via a small ActiveX control (named "plugin.ocx") that acted as a shim [...] Microsoft dropped support in version 5.5 SP2 onwards for security reasons."
California talks the progressive game, but in housing for instance, they've failed and failed.

Oregon passed significant housing reform this year - California failed (OR HB 2001 vs CA SB 50).

Lots of articles on this:

https://www.sfchronicle.com/opinion/article/San-Francisco-Ba...

https://marketurbanismreport.com/blog/the-disconnect-between...

And one on Oregon's bill: https://www.sightline.org/2019/06/30/oregon-just-voted-to-le...
It would be both more subtle and practical had Huawei modified sshd to accept any key that had been signed by their CA.

That would have been slightly harder to detect.
This is such a fantastic blogpost. I love the part about regex backtracking. Great job CF.
I think a "reasonable person" would believe it's ok to download the file, but then discard it once they realize the contents are not actually public.

By analogy, suppose you receive a letter in the mail; you reasonably believe the contents are yours, so you open it. Oops, it was actually mailed to you in error; the contents belong to another person. Obviously you did not commit a crime, but you are obligated now to discard the contents.
Ask HN: Can I list previous employers as customers of my services business?
Currently an independent contractor looking to start a larger consulting company.

Is it legal (and ethical) to list my previous contracts as customers of my new consultancy?
In this case yes, however they also indicate this is how they do their staged rollouts in general. So if they are releasing any other software update that goes through the staged rollout free customers are tested first. If that change broke something, free customers get that first. Which seems fair to me.
Good support for the homeless tends to attract more homeless to big cities. See The Shirky Principle.

Places that don't have such problems have good support for human beings generally, not (just) good support for the homeless in specific.
It's ironic, Linux today is in a better state than its ever been. Chrome is Chrome, dependency hell is more easily mitigated by containerization, desktop environments have mostly become stable, hardware from Purism, System76, and Dell is quite good.

I think a lot of us just end up with Macs because work IT hates the idea of managing Linux machines and macOS gets you 95% of what you need.
$0.02/Kwh for the solar part is pretty good.

A reasonable short-term goal: get 100% of US peak air conditioning load south of 37° N on solar. That's the line from the Virginia/North Carolina border west to central California.

Peak solar power output and peak air conditioning load line up pretty well, so that doesn't need storage. Storage is more of an issue for wind, which varies about 4:1 over a day over large areas and doesn't match load at all.
A spacetime area law bound on quantum correlations
> right minded and compassionately motivated

Don't confuse the two. Breaking down a working system that was evil without creating a replacement, without gradual transition, can (and did) result in a more evil system.

They were motivated by compassion but not right minded.
Even the Haskell people are adopting SSR’d JS-heavy frontends (Miso, Purescript, etc) for their web apps. That’s when you know it’s mainstream. Good luck with PHP!
Given the persistant patterns of unprofessional amd unethical behavior amongst law enforcement, it's understandable that people are against giving them access to more powerful tools that have great potential for abuse.
/insert lyrics from "We Didn't Start the Fire"
I think it's awesome that you publish a whitepaper, but it's just a whitepaper, not source. It doesn't prove anything.

Edit: also there seems to be a lot of this:

> We’re sorry. This section of this document is not yet ready. Any- thing you see in this section is at most an outline of things to come.
> The Lua WAF uses PCRE internally and it uses backtracking for matching and has no mechanism to protect against a runaway expression. More on that and what we're doing about it below.

We run a WAF based on LuaJIT in resty. Just to be clear, the resty interface to PCRE does provide a DFA mode. Furthermore, Zhang actually ported RE2 (see other comments here) to C as sregex, which is usable from Lua as a c module regardless if it runs in resty or a custom Lua app.

> Switching to either the re2 or Rust regex engine which both have run-time guarantees. (ETA: July 31)

Not addressed at Cloudflare, since they had a defense in place. But just in case anyone else is running a similar thing in Lua.

And:

> In the longer term we are moving away from the Lua WAF that I wrote years ago.

Then sregex might be the perfect fit here. Though Rust is technically safer. Depends on what longer term means.
Plugging SQL databases directly into Observable notebooks
Voters are well aware that they would have to pay more if their silo’d employer group health plans with healthier white collar employees were removed, so they vote accordingly. Voters don’t want to pay extra to subsidize those that can’t afford healthcare, and the politicians reflect that.
I would have preferred they wait 18 more hours (24 hours worst case instead of 6) and avoid abusing Studies, yes.

Convenience and speed won out over following their privacy policy and observing their promises. That's a huge deal to me, given that integrity is why I choose Firefox.
The creator of Factor left years ago to work on Swift I think.

I think it is still maintained, but slow releases.
If you think of VCs / founders as a marketplace, which it kindof is, then yes. You have a larger 'market' for selling your startup idea, and optimize the 'product' for 'fit'.

If you think of VCs as totally independent, open-minded, critically thinking professionals, dutifully providing a financial service, then no. You pick the VC for the idea rather than the idea for the VC.

The second case is the ideal, but assumes highly-competent VCs and founders with equalish leverage. I think the perverse incentives for VC partners (read Palihapitiya) and the lack-of-prestige factors for first-time founders break the model. But this seems to be more true for second-time founders with moderate success under their belt.
While, I admit, I did listen to the program some months ago when it came out, I don't recall them advocating a single solution to the problem, their own anchor made it clear that while we should probably be putting more people in jail, mass incarceration wasn't a fix for the issue - I'm struggling to find a transcript for the broadcast, but my memories are pretty clear on it.
Tell HN: Help censored users access Tor by installing a browser addon
The addon is available for Firefox on AMO:

* https://addons.mozilla.org/en-US/firefox/addon/torproject-snowflake/

* (and for Android) https://addons.mozilla.org/en-US/android/addon/torproject-snowflake/

And if you happen to want to install it on a Chromium based browser it is available as well on the Chrome Addon Store:

* https://chrome.google.com/webstore/detail/snowflake/mafpmfcccpbjnhfhjnllmmalhifmlcie

----------

Thanks to a new Pluggable Transport called Snowflake you can now help censored users access the Tor network by just installing an addon. The way it works is pretty simple: censored users learn about a temporary proxy (a 'snowflake') from a broker (using domain fronting or other techniques) that they establish a connection with using WebRTC, the temporary proxy then transmits the requests to a bridge which then connects to the Tor network, the temporary proxy thus functions as a middle point between the censored user and the bridge <=> Tor network. The idea is that by getting a significantly large number of ever changing and decaying temporary proxies it will be hard for a single censor to keep track and block all of them.

As explained earlier, when you function as a snowflake proxy no exit traffic is generated at your level, you just transit traffic to a bridge which then connects to the Tor network. Hence there is no need to worry about which websites the clients are accessing through your proxy. Their visible browsing IP address will match their Tor exit node, not yours. In addition Snowflake's strength comes from having a large pool of temporary proxies, so don't forget to spread the word and have a maximum of people installing this addon!

-------

To learn more about Snowflake you can have a look at the following references:

* https://trac.torproject.org/projects/tor/wiki/doc/Snowflake

* https://www.bamsoftware.com/papers/thesis/#chap:snowflake

* https://keroserene.net/snowflake/technical/
There is a very interesting small read from Georg Simmel written in 1903 called “The Metropolis and Mental Life” in which the Berlin based Simmel tries to describe how the new mega-cities influence the mind of it’s inhabitants. Even now, more than a century later his text still works.

However only up to a degree — many people like to take some sort of preceived trend (”people are getting more emotionally cold”) and extrapolate it into the future. This extrapolation becomes part of their Weltbild and because we like it when our anecdotes line up with our Weltbild, we start to leave out facts that don’t.

Does it mean that Simmel’s general idea that cities affect people is wrong? Probably not. It is just not as big of a thing as many make themselves belive it is.
Of course. You would have to build a generator. You would need to lay the lines from your hydroelectric source, which could extend many, many miles. And you'd need step down transformers for the last mile.

Lipo would supply DC power directly from within your neighborhood.
I'll start this by saying that I'm highly in favor of universal health care. Seems like the best insurance company would be the one with the most patients, which can thus negotiate the best deals. So with that out of the way...

Doesn't this bill completely undermine the insurance business? If a hospital can't charge more than the median value that in network patients are charged, why would you buy insurance? I must have misunderstood or misread something.

I would think this would make it substantially more difficult for insurance providers to make negotiations and cut deals with hospitals. I would imagine they would just pass off the cost to the consumers, as they typically do.

It always seems to me that these half way positions between universal health care and commercial end up being worse than either. From a very high level it sounds like a fantastic thing, preventing patients from getting screwed, but isn't the cost that those with insurance pay more? I would assume that there's far more people paying insurance than the number of people that get these surprise bills. Though I'll admit the whole system feels rigged at this point and is likely intentionally convoluted to make consumers uninformed (by level of difficulty).
One thing I liked was the use of WikiCase. Just type the title of another page, and it makes it a link. No markup to learn. Very approachable. There are a number of major downsides, though, so I am glad most modern wikis use a markup-based system.

http://wiki.c2.com/?WikiCase

http://wiki.c2.com/?WikiNameDisadvantages

http://wiki.c2.com/?WikiNameAdvantages
will do -- that was only a high-level run to make sure there's enough compatibility with our framework & tools to move forward.

stay tuned ;)
First Encounters with the Inner Brain
Nuclear has well known downsides. As I mentioned, it's not renewable so isn't a permanent path forward for human civilization. But additionally it currently has unpriced externalities in long term waste storage, looks less attractive when fuel & plant are full amortized over lifecycle, complex relationship with arms proliferation, limited deployment options because of large cooling requirements, requires permanent and expensive security and expertise over the life of a plant, and others.

It's not the harmless cure-all that it's made out to be here at times.

edit: that said, CO2 levels are an immediate planetary crisis and nuclear is a tool we can and should use to mitigate it.
It also depends on how you define "startup".

The informal definition we think of day-to-day is fairly fuzzy. There's nuance in differentiating a small business operated by a few people from a startup. Being venture-backed is a simple differentiator but there are still legitimate startups this would exclude, e.g., serial founders who don't need to raise or products that make money early.

With respect to "fail"... is an acquihire or an even-money, 1-3x exit etc a "failure". Probably, yes for the VC, but not necessarily for the founder. Accelerators are incentivized to count "successes" liberally as well.

With a more broad definition of startup, it's easy to see the failure rate at 99%+.
No, I think you should simply download the ordinary version. Jupyter, Juno, etc. are easy enough to install locally. I forget the precise details, but I think JuliaPro comes with certain versions of packages, and it's less confusing just to get the latest of what you need (using the built-in package manager).

JuliaBox (and https://nextjournal.com/) are cloud services, but if you have a real computer and want to do this for more than a few minutes, just install it. (There's also no need for virtualenv etc.)
Why Your New Programming Language Will Not Work
Course: Flask Web Development
I’ve seen quite a few Vauxhall Amperas in the UK. RHD of course seeing as they are Vauxhall.

Look good except for the weird plastic inserts on the allow wheels.

They were around £40k or something though which ain’t cheap
A problem worse than Zoom?
Or they would just cap prices for specific procedures. Then the patient could use price transparency to see if they'd wind up with an overage bill, and consider if they'd be willing to pay the remainder (e.g. if the doctor was preferred).

Right now insurance either do cover something or they don't. That in itself is problematic. If insurance would cover a procedure up to e.g. $500 at one medical clinic why do they cover up to $0 at another? Shouldn't it be $500 here or $500 there?

Networks inherently pit you against both the insurer and healthcare provider. Instead you and your insurer should be on the same "side" against healthcare providers.
Sleep Disruptions May Increase Alzheimer’s Risk
You pick up a scooter when you haven't brought other means of transportation. That's way more common than you seem to imagine (every day for me).
Nope, not buying this excuse. They don't want food directly because they want cash to go buy other crap.

Hey look, I get it, being homeless sucks, but the situation the OP is describing is not working. Seattle, SF & LA have all become shit cities because of the way the govt handles homelessness. They enable not assist.