skysight-inc/HackerNews huggingface dataset:
Isn't a "protected concerted activity" an activity that is done for "mutual aid and protection"? It may be closer, but I don't see a case being made under NLRA either.
It still boils my blood that there are wealthy families in New York (politics and religion aside) who actively fund anti-vaccination rhetoric and associations who make issues of vaccination religious...
But the real rationale is: let’s blame someone that’s easy to blame instead of figuring out who’s actually responsible.

Germany has photo-radar, but can only issue a ticket to the driver.

Possibly that’s related to some of their history, I’m not sure.

Though they do issue voluntary “caution” money tickets to the owner at a discount to make it go away without identifying the driver.
It's kind of funny how wanting to improve the company you work for is equated with "sabotage".

Thing is, part of Googles identity is "don't be evil". A vital part of this is stopping whenever you (unintentionally) do something evil. This should not be a problem for Google at all or reason to loose trust in an employee. Unless, of cause, the company has changed. And that's what those story's area about and why we need them: To make sure the public image of google actually reflects what the company now actually is.

Btw: To those saying "why don't you just quit as protest"? For one that makes it easy to be dismissed as disgruntled ex-employee. But more important is the same reason you don't just leave your country of family whenever you disagree or have a problem with those. Cutting ties is a last resort that shouldn't be necessary.
I have dog allergies and work in a workplace that allows dogs. It's not terribly fun, and I feel like I'm fighting a politically-uphill battle to not be seen as the bad one while still having a decent space to work.
Show HN: Lockless Variadic Futures for C++17
This is one of the reasons why USB-C doesn't particularly interest me. USB-C doesn't provide any benefits that I value, but comes with an increase in complexity and potential for (sometimes physically damaging) error.
> It’s almost like the shock of the event kills your previous self.

This is a very profound statement and I think I may take it a bit further in a "ship of theseus" narrative:

Perhaps we all are literally different people from year to year, month to month, week to week, and we just happen to remember our former selves enough to keep the ship intact?

What if the trauma simply shocked us into forgetting or wanting to forget our recent past selves?
I do light baking in Unreal Engine 4 using a program called 'Swarm' https://docs.unrealengine.com/en-US/Engine/Rendering/Lightin...

Swarm only uses CPU power so you cannot take advantage of GPUs to bake lighting.

I wonder if I could get 100 RPi4's to run Windows + Swarm and create a render farm for $3500...?
Holy shit RIP your inbox. God bless this madman.
I love Apple Maps' Dark Mode.
They do tend to emit disproportionally high smug levels though.

It's just passing the buck to the companies providing the electricity so the consumer can pat themselves on the back and order vanity plates that say "0 MPG" and "OIL HAHA".
> and not really encourage steps

What do you think would be a more efficient way to encourage those steps?
Why support proprietary Apple Maps instead of Open Street Map? Is the data a lot more precise? Is the viewer smoother?

Is it just another step towards aligning with Apple for an eventual buyout/search engine standard?

That said: If privacy is the only concern Apple seems to be a pretty good ally, as the only major player with a significant interest in it.
Looking for contributors for C++ project
Cyber Incident Exposes Potential Vulnerabilities Onboard Commercial Vessels [pdf]
And some countries include a separate offence of "failing to identify the driver", with penalties usually more severe than the driving offence.

A few British politicians have found this out the hard way.

https://en.wikipedia.org/wiki/Chris_Huhne

https://www.theguardian.com/uk-news/2019/jan/29/labour-mp-fi...
Faregates are awful for people in wheelchairs and family with strollers. Vienna does not have faregates and the fare evasion is low. Additionally it’s cheaper to operate because it requires fewer staff and machines (statement by the operators).
And why would a conspiracy theorist believe those are moon rocks?
The downvotes are unjustified, this is a literal quote from the headline article.

It doesn't tell us how bad this is however. And it is bad: https://xkcd.com/1732/
YouTube video has its own URL in it
Me experience is exactly the same. Usage is mainly watching Plex or other streaming video.

I got rid of the case and just nailed it to the wall with some space on either side as a stopgap measure. This has reduced the frequency of the throttling as indicated by the temp gauge on screen, but not entirely avoided it. I have plans to add cooling this weekend.

This is with all upgrades as of today.
Who Should Pay for “Moon Shots”?
Great..adamant DDG user!

One thing I look forward to is the ability to get the distance from X to Y in DDG.

I’m not sure if this something many do as well but personally it’s probably one of my top ten things I Routinely search(Weekly) for.
I once reverse engineered a Gmail worm found in the wild. The underlying exploit ended up being a security scan bypass in Google docs. I spent a lot of time submitting a bounty report, but I made one fatal mistake: I used URL redirection in the PoC. It was automatically rejected even though that was an example of content that the scan normally detects, not the actual vulnerability. It was closed as not eligible, then silently fixed a week later.

Edit: I checked the emails to refresh my memory. A human acknowledged that it was a flaw in the security scanner and forwarded it to the drive team, then a bot (AFAICT) determined that it was not eligible based on metadata in the report.

Edit 2: I did get one thing out of it. They sent me an invitation to a Bounty Craft event in Las Vegas during Def Con which I was attending that year (likely the actions of another bot scraping the email list). I got there early and accidentally sat down in the Microsoft Security Response team's couch area while they were all up getting food. They were nice people. They realized I never picked up swag on the way in and someone took me back to the door to get it. Apparently since I was with one of the event organizer and they said "you forgot to give him a t-shirt" they assumed I was staff and gave me a staff t-shirt. The event was 100% about how the sponsor companies were investing in automated fuzzing technologies and basically didn't need bug bounty hunters anymore. Slap in the face.
Does preferences->search->provide search suggestions=(unchecked) not do what you want?
Zero boilerplate application state with zodiac-UI/store for Angular
Do you not know how to use google?

<https://ainowinstitute.org/research.html>
Yup. Standard retargeting is BY FAR the most likely explanation for most cases of this sort.
1) I'm sure climate change models took this into account but is it worse than predicted ?

2) And if it releases land and resources.. how happy will Russia to increase their economy through uses of gas/oil ? (not helping permafrost)
she's a fraud.
https://googlersagainstdeceit.blogspot.com/
Sure, but those similar companies all paid their CEOs an absolute fortune too, so it seems that paying CEOs buckets of cash isn't a very good gamble.
This did not help me. Using the pi4 as a desktop based machine, even just for streaming, will regularly hit 80c.
It's ridiculous how many people have "service" animals nowadays. I don't care for the smell of animals, nor can I vet the training abilities of all animal owners, so I'd rather not deal with them at all. Somehow everyone has an emotional problem nowadays that requires a pet to be with them at all times.
As we recall Apollo 11, let us not forget about the rocket. Funny XKCD strip: https://xkcd.com/984/
The term you probably want to look for in your web framework is "encoding".

I don't like "sanitization" personally, because it sounds like you're removing "bad stuff", but in general, "bad stuff" is not identifiable or removable because "bad stuff" is highly context-dependent, plus a lot of times the "bad stuff" is perfectly legitimate [1]. Apostrophes are "bad stuff", because they can break out of SQL queries and HTML tags, but they are also parts of people's names. Double-quotes are "bad things", but they are legitimately part of all sorts of real data. Any "sanitize(string)" function is by definition wrong because it has no place for a context to go, and it will do bad things to your data.

One of my items on my short checklist for examining an HTML templating language is "does the simplest possible way to dump out a string to the user at least do HTML encoding on the value"? That is,

x = "<>"
template = compileTemplate("{x}")
template.Dump({x: x})

for whatever the simplest output of a value is, should output "&lt;&gt;"; if it outputs "<>", you've got a templating language that you ARE going to write XSS attacks in, no matter how careful you are. The time you want to dump out non-encoded text is the exception, not the rule.

Bonus points for being even more aware of the context and correctly encoding things in Javascript context vs. HTML context, etc. This isn't a magic wand that fixes everything, but in general, if it does default to a blind HTML-encode it at least means that instead of a security failure if you screw up the encoding, you'll get the user seeing some ugly stuff on their screen like &lt; instead.

[1]: Although, technically, I think it's acceptable for an HTML encoding function to just eliminate the ASCII control characters other than newline, carriage return, and tab, rather than encode them. Those are just asking for trouble, even if you encode them. Especially NUL. Even in 2019, best to keep NULs out of places they don't belong.
Sigh. Historical accounts of Lyme disease go back at least to the 1700s, predating the founding of the lab in question by a couple of centuries.

This seems to be an offshoot of the anti-vax hysteria.
Pretty sure you can forget about DDG supporting Google. The whole point of DDG is privacy. Not sure how they could use Google and still keep your location information private?
There's also a Rawls-esque thought experiment, which is "What rough archetype of a person/family would be better served by being teleported back to pre-capitalism if they got their ~current status in the old order, and everything that comes with it?"

This is a really brutally difficult game to play in a developing nation because one of capitalism's achievements is "Half your children don't die." (In the last 30 years in Bangladesh early childhood mortality is down ~14% to 3%.)
Economies of scale exist; urban dwellers generally pollute less on a per-capita and on a consumptive basis. And your whataboutism is misplaced--air pollution in cities has been improving steadily since the 1970's. (The Trump Administration is rolling back regulations related to this, which is fun, but that has likely not had significant impact yet.)
Thanks. Already subscribed to your feed :)
> European honeybees — f’ed from the beginning

Just LOL!! So true. #evolution
> There's not a socially acceptable way of conveying how bad it is. Running around and screaming "we're all going to die" is more accurate that saying things will be fine.

But what solutions are you proposing? Can we afford them, without having to change any of our laws, or our lifestyles one whit? Are they going to raise cost of living for the poor, or reduce economic growth? /snark
We need coordinated, urgent political action on climate change. We already have the technology needed to solve this - we just need to deploy it. Now.
Sure. Create a filesystem data source in the Drill config (https://drill.apache.org/docs/file-system-storage-plugin/) with the directories where your CSVs are in. Then query them however you'd like. Use the CLI if you want to produce another CSV or REST/JDBC if you need the data somewhere else. If the query is complex and long-running you can monitor it's state in the Drill web UI.
Stanford Life Sciences Research
I agree with the warnings in the article and the statement that after talking to officials the author believes that Iran was indeed behind the tanker attacks is incredible: only hard evidence is credible.
I saw an Apple "street view" car in Chicago yesterday, looked to be one of the newest model Toyota Priuses. Honestly had no clue Apple was in the street level imaging space until I saw that car and started looking around the web to learn more.

It turns out, and to answer your question more directly, 2019 is apparently a pilot year for a lot of initiatives with Apple Maps. It's got my curiosity, that's for sure.

https://maps.apple.com/imagecollection

https://www.fastcompany.com/90373170/apple-maps-is-catching-...
I'm wondering what the right approach is in such a situation. If they don't fix the leak, do you keep quiet or go public? Going public puts them under much more pressure to fix their shit, otoh, bad actors have probably more than enough time to scrape the data. But the other scenario bears the risk of some other bad actor also having discovered it and silently abusing the data. Considering the leak goes unfixed and the company grows they might some time be able to scrape data of ten times as many people.

So would you rather actively help leaking 1m records to public or potentially have someone else getting 10m a year later, but not having anything to do with it directly?

Thinking about it you might try and contact a bigger tech news site to get the companies attention.
This is not a good take, especially given the steady improvement in both cost-efficiency and the availability of renewable energy.

As an example: my girlfriend and I are putting enough solar on the roof to give us the headroom to charge an electric car, when it's time to switch.
Thanks for the clarification.

What a clusterfuck of a standard.
Related:

A utility for transforming JSON at scale written using the Rust programming language is bumblebee and available on crates.io.

The author of that package uses it internally for massive amounts of data on a regular basis, and he's a bit too modest to use a higher version number.
and NOC024U
https://www.flickr.com/photos/denisgobo/48075951728/in/photo...
At some level, it looks bad because of bad PR and the manner of how people report on it (clickbait or otherwise). At another level, we can fill the blank in various ways. "it personally looks bad to me because ____".

One way to fill the blank is to assume in good faith what the person is saying. And if you do, Google does look bad IMHO. Of course, I've seen people leave and badmouth companies when its their own fault for causing the situation. Its only people who are involved in the situation who can confirm all the specifics. As outsiders we can only assign some kind of probability here.
You're joking, but this is true at the individual level because you can marry the wrong person. At the population level, reducing divorce does increase happiness and is something we should design for.
The molecular mass of oxygen gas is 32 and the molecular mass of methane is 16. The methane will tend to rise and mix, leaving plenty of oxygen near the surface. It's unlikely to asphyxiate humans unless it happens really, really fast.

People and animals have been asphyxiated by massive CO2 releases because they can happen very quickly, and CO2 has a molecular mass of 44, making it stay near the ground for longer, displacing lighter oxygen and nitrogen gases.
Still true. All that means is verbally telling them the correct name and birthdate. No ID required. (Unless, of course, you were driving, obviously.)
This seems like a weird conspiracy theory. I mean if you are looking for a bio weapon, one that doesn’t have person to person spread, has a distinctive rash, doesn’t result in immediate death (but can cause chronic conditions) and is treated by fairly common antibiotics seems like a strange choice.
Clearly the most reasonable interpretation. Absolutely no plausibility of another possibility.
What? Protesting from within perfectly sends the signal that it’s still the best place to work despite egregious offenses.
> It would be prohibitively expensive and overkill most of the time.

I don't think purchasing a spool of spot tie costs much more than electrical tape and neither does heat shrink.

> Zip ties are mostly not allowed for QC reasons.

Collateral duty inspectors (and QA) ensure quality work so this is not the case. All work done is always inspected by someone who is an expert and did not participate in the maintenance.

> All but the worst electrical tape will take 20+yr to come apart

I have seen electrical tape come apart in just a few years.

> if things fall apart in the air it's a bigger deal.

If an autopilot system receives incorrect input it could kill someone.

As an aside, I've worked on military aircraft (Avionics), and I have seen what happens when a wire is loose and in contact with a vibrating surface.

That said, again, I have no experience with cars.
How does this story apply? Turing has no life to live whether he is on the notes or not, and somebody will be put on them.
> The paper has been criticised for not being peer reviewed

Not defending the content of the paper (haven't read it), but it's really stupid to criticize a paper that has recently been submitted to a preprint server for not being peer reviewed.
> Having a specific port is no guarantee that the device will use this or that capability offered over that port

And that's the serious underlying design flaw.
> It's a webpage built on web standards and designed for web developers.

There are a lot of web standards. XHTML and XSLT are web standards. Server-side rendering is web standard. Being able to save a page with search results and view it online used to be standard.

Some standards are better than others. Some are objectively bad and promote hazardous and error-prone practices. ActiveX is a standard, that was meant to turn Web into platform for running Windows applications. It did so by giving web developers access to powerful programming languages and diverse range of APIs (some of those APIs were a bad idea by themselves). All modern Javascript web frameworks are spiritual successors of ActiveX, and I sincerely hope, that they will end up in the same garbage dump of history where it did.
Well, at least on my Android 7.1.2 (toybox --version 0.7.1-3125af0e06f4-android) mktemp doesn't recognize the -t option (https://github.com/landley/toybox/blob/0.7.1/toys/lsb/mktemp...). So it seems to be fixed in newer versions, but I am sure there will be some installations with the old versions around for a while.

Instead, I could use --tmpdir, but somehow that one seems to be buggy:

$ mktemp -d --tmpdir name.XXXXXX
mktemp: Failed to create directory name.XXXXXX/name.XXXXXX/tmp.sL2WbI: No such file or directory

The macOS version, on the other hand, does work with those options, but it creates a file like name.XXXXXX.veCNnwkX (instead of name.veCNnwkX) so not a deal-breaker, but it is certainly not what you would have expected. And using --tmpdir with macOS doesn't work either.

So yes, in theory, it shouldn't be too hard but sadly, the reality is often buggy and outdated :-/
I'm not sure we should be encouraging people to own more dogs and cats- they have a substantial carbon footprint for being extravagances: https://www.salon.com/2014/11/20/the_surprisingly_large_carb...
Inline SVG has several advantages over icon fonts, which were never meant to exist:

- immediate rendering

- multi-color icons without any stacking tricks

- flexible styling

- better aliasing, more consistent rendering

- can be animated

- easily load only assets used on the page vs a sheet of hundreds, most never used

- works well with rendering libraries like React, makes manipulating images very easy

- compresses well with gzip, no need for symbols

It’s becoming standard practice for good reasons.
Tick researchers have refuted this myth that the military created Lyme disease or were responsible for its spread here: https://elemental.medium.com/what-its-like-to-be-a-creepy-cr...

> What’s the strangest sort of question you have to handle?

> Keesing: The conspiracy theory that the government made the Lyme bacterium, that’s gotta be up there. I mean, really?

> Ostfeld: There was a man at a public event where I was speaking a few years ago who, in the question and answer session, pontificated about how the Lyme disease bacterium was created by the CIA at Plum Island as a biowarfare weapon — which if you know anything about this bacterium is absolutely ludicrous. It would be the stupidest biowarfare weapon you could possibly imagine. In any event, I said that this was actually not true, the DNA of this bacterium has been amplified in museum specimens of mice that were collected around the turn of the 20th century. So that predates Plum Island. And I said, there was a recent discovery of a mummified human corpse in the Swiss Alps in a National Geographic expedition that was 13,000 years old and they amplified Borrelia burgdorferi DNA from this mummified frozen corpse. And this guy responded by saying, "Yeah, so, you think it’s far fetched that the CIA would take this frozen human corpse and dump it out of a helicopter in the Swiss Alps to cover up what they did?" So there’s no correcting the conspiracy theorists.
I believe the climate is changing.

I believe humans are contributing to the acceleration of that change.

I believe how we discuss a problem affects how we are able - or not - to solve it.

I __do not__ believe hyperbol-y headlines are going to help. That is, using the word "ever" as a proxy / synonym for "recorded history" or "human history" should not be acceptable. We need accuracy. We don't need exaggeration.
I use it all the time. In Portland it is as good as GMaps is at navigating fastest route during heavy traffic. Which is to say, not perfect, but adequate. It has yet to take me to the wrong location.
Docker Containers Security Tools
They do have the !g option in their search though. If you aren't happy with the results, append your string with !g and it will send you to google results. You do lose the privacy layer though.

From a purely privacy standpoint this isn't much different.

There are a ton of other bang options here:

https://duckduckgo.com/bang?
Publii: https://getpublii.com/
Rule of thumb is to notify them and share your intent of public disclosure within a certain time frame. Typically 90 days.

That's exactly what happened with Zoom. They half ass fixed it, then it went public and it was fixed in one day.
DDG already "supports" google via !g searches
Well, at least in the case of India, most of what you pointed out has been directly benefitted by the space industry. India has its first major semiconductor foundry operated under the Department of Space. And the space agency spends a significant part of its on-ground budget on developing outreach programs for farmers to teach them how to use meteorological and soil data to get a better, more reliable harvest. Also, India is one of the few countries to have a civilian space agency led solely by engineers. The only time it rubs shoulders with the military is when it sources spacecraft and launch vehicle parts from the national defence supplier or when it shares data with the military in order to satisfy the government's political mandate.
Probably cost much more than that once you figure in the power and networking equipment.

If I had the expertise, I would make large clusters with a bunch of the RPi CM3+.
> But that's most port standards that have ever existed.

That's also the problem that USB solved. Until USB-C came around.
There are concerns about old diseases that might have been conserved in the permafrost and that could be released as it melts though.