skysight-inc/HackerNews huggingface dataset:
For the rest of readers confused about this thread - Peter Attia (longevity & performance focused doctor) did a long blog series on atherosclerosis

https://peterattiamd.com/the-straight-dope-on-cholesterol-pa...

my TL;DR (as a non-doctor): LDL "cholesterol" (actually proteins carrying cholesterol and "fat" (triglycerides) in blood) has a tendency to get "stuck" in artery walls. That causes inflamation, which attracts macrophages which also get stuck, and so on until you get plaques ("clogged arteries") and one plaque breaks off and causes a heart attack. Consuming saturated fat / cholesterol is problematic because it causes a decrease of LDL-sensitive receptors and consequentially more LDL in blood. If I understand correctly, the later part of the previous statement is considered settled science ("we know how it actually works" - 1985 Nobel Prize was awarded for this), while the first part (diet) seems to be somewhat debated and has mostly statistical justification ("evidence suggests") and also depends on an individual's genetics.
Do you bill the time when posting comments like this?
Batocera Linux on the RockPro64 – RockPro64 Gaming OS Install and Review
It seems that Techcrunch's CMS cannot (perhaps) handle Unicode headlines: Rs = ₹

* https://en.wikipedia.org/wiki/Indian_rupee_sign
Running a binary really should be easier than installing a runtime and directories full of code. I'd be even more inclined to reach for a container in the latter case.
There's a difference between veganism and say racism. Racism isn't a leading cause of climate change, while meat consumption is most definitely. It must be ended if we want to survive. Period. There's no ambiguity about it. I love filet mignons and bacon, but they're directly harmful to the planet so I cannot morally eat them and recommend that they should be banned as soon as possible. It is unlikely to happen because people are unwilling to change their lifestyles or their habits, even if it leads to the deaths of countless billions. They won't change without the necessary force.
Angular Admin Dashboard Template with Node.js Back End Live Preview
America’s Highest Minimum Wage Sparks Fight in Small California City
GNOME has been nuking features for a while, recommending people to go and install extensions.

Extensions work by monkey-patching and once you have a critical mass of them, you're guaranteed to run into some glitches where one monkey-patch messes up the other. I like the KDE approach more where features are actually baked into the DE. It's much easier to reproduce bugs and fix bugs that can depend on different features being enabled. Everyone benefits.
I guess they will change them silently at some point. It's more or less obvious they don't check the reports.
Cool! I've thought of doing this as well.

One idea I've had is to stagger the post based on how the site's traffic gradually drops.

If you have ever seen the end of the movie The Core, they use the energy of the bombs and create a chain reaction to keep the earths core moving. I'm sure the science is sound...

In doing this you could keep the project moving over a longer period of time rather than a big bang which might fizzle out.
I'm a programmer in the GP data analysis world. We use the term 'pseudonymization' for this kind of data. 'Anonymization' is used solely to refer to, say, 'the sum total of diabetes patients this practice has' (that would be anonymous patient data; it would not be anonymous relative to the GP office this refers to): Aggregated data that can no longer be reduced to a single individual at all.

The term raises questions: Okay, so, what does it mean? How 'pseudo' is psuedo? And that's the point: When you pseudonimize data, you must ask those questions and there is no black and white anymore.

My go-to example to explain this is very simple: Let's say we reduce birthdate info to just your birthyear, and geoloc info to just a wide area. And then I have an pseudonimized individual who is marked down as being 105 years old.

Usually there's only one such person.

I invite everybody who works in this field to start using the term 'pseudonimization'.
I'm sorry that you're having a bad couple of days thanks to shitty journalism.

Thank you for your efforts in developing VLC, it is a great tool.
By that token, is there ANY application where the attack vector is not 'network' and 'remote' is 'no'? Because I fail to think of any minimally-useful app that doesn't open external files.
I seriously suggest you to add "Disclaimer" to every comment you leave on threads related to your company (see boulos' comments for example here on HN).

Also, and I really mean this in a friendliest way possible, take a pause commenting here. You're not doing yourself a favor. I suggest you talk to your PR/marketing department before exposing more internal details, or run comments by them before posting.
where's the link to code?
Today's Nazis would probably use machine learning to identify "characteristically Jewish facial features".

(Or, of course, simply pass a law that entitles them to deport or hold indefinitely anyone who can't prove they're a real Ayrian with only the papers they have on them at the time)
Aren't they sealed? As soon as the Secret service would detect codes to be unsealed, they'd probably have to be replaced immediately.
Yes, nobody uses brain anymore.
It's in your best interests to edit out the last part of your comment.
> The reporter is using Ubuntu 18.04, which is an old version of Ubuntu, and clearly has not all the updated libraries.

It's not a "old" version of Ubuntu its the latest LTS.
DefendTex Drone-40, a low-cost, programmable 40mm flying swarm munition
Why can't you be an authority of your CVEs without consulting an American gov agency? I'm sure, VLC org is way more trustworthy for nine out of ten people on the Earth.
What is a development for animals might be a regression for us.
I don't like the exchange with TheRegister:

> TheRegister: FWIW we reported the VLC developers were skeptical. Happy to update our coverage accordingly.

> Tho, FWIW, the PoC .MP4 seg-faulted our 3.0.7 VLC installation.

> VideoLAN: using a linux distribution? with an old libebml?

> TheRegister: Using Debian 9.9, using libebml4v5 1.3.4-1

> VideoLAN: Yes, so your issue is your distribution is not up-to-date, not VLC.

No, the issue is that a lib VLC uses is not up-to-date, and it just happens that VLC be installed on a distribution, as is normal. It can't run on bare metal. If I understand https://tracker.debian.org/pkg/libebml correctly it is possible the issue here is that oldstable Debian did not receive a (security?) update for libebml. But this still affects the users of the program. It's still something that could be justified to notify users about.

But I understand the frustration about not being contacted, and I understand the project does not want to be seen as responsible for this if the fault lies with Debian. And it's absolutely possible the CVE on VLC are wrong, I remember being surprised a few times about their strange severity. But still. I don't like this blame shifting. If users do not run a unsupported distribution it is not completely unreasonable to assume his falls into the security sphere of the main project, VLC.
libebml is in the Ubuntu universe repository which means that it is not supported by Canonical. And in the Debian changelog for this package I don't see any mentions of a security issue that was fixed 16 months ago: https://metadata.ftp-master.debian.org/changelogs//main/libe...

I am loosing more and more confidence that these "package the world and freeze everything in place" distros are the right choice for end users.
My grandparents had a room exactly like that!
you are not doomed. you are just fine.

you can be talkative or you can go in to deep meditation in the middle of a crowd. whatever be it do it consciously. remove all guilt and all negativity from it. experience everything deeply - silence or noise.
^^ This 100%
It's a horrible problem to have signifying spiritual death.
>but I'm not so naive to think that if I had a bunch of money and/or privilege for decades it couldn't happen to me too.

Precisely, and that is the 'secret' of money, its mystery ans "phantom-like objectivity". A famous German philosopher once wrote,

"That which is for me through the medium of money – that for which I can pay (i.e., which money can buy) – that am I myself, the possessor of the money. The extent of the power of money is the extent of my power. Money’s properties are my – the possessor’s – properties and essential powers. Thus, what I am and am capable of is by no means determined by my individuality. I am ugly, but I can buy for myself the most beautiful of women. Therefore I am not ugly, for the effect of ugliness – its deterrent power – is nullified by money. I, according to my individual characteristics, am lame, but money furnishes me with twenty-four feet. Therefore I am not lame. I am bad, dishonest, unscrupulous, stupid; but money is honoured, and hence its possessor. Money is the supreme good, therefore its possessor is good. Money, besides, saves me the trouble of being dishonest: I am therefore presumed honest. I am brainless, but money is the real brain of all things and how then should its possessor be brainless? Besides, he can buy clever people for himself, and is he who has [In the manuscript: ‘is’. – Ed.] power over the clever not more clever than the clever? Do not I, who thanks to money am capable of all that the human heart longs for, possess all human capacities? Does not my money, therefore, transform all my incapacities into their contrary?"
As of today we still use shared network drives for everything in major German company. We don’t use slack/irc/Skype/zoom/whatever. Phone calls and conferences(!) from the middle of open office is normal. Asana/Trello/Jira are not known at all. GitHub is paid for, but never used. I am single weirdo in multi department project using github ticket system. The code with prefix is copied for colleagues to project’s shared folder. PostIt tickets on the table works good enough for others. Talking about bugs is impossible since nobody knows what’s fixed and what’s not, the bugs have date in the best case. Everything else is done in Excel sheets using in house written scripts. They usually end in a mess since some people use German regional settings and other English ones. That’s state-of-art situation in very rich and big company today. I don’t see any possible changes in future. Old boy club fights all the time against proposed improvements. You can forgot topics like information security, phishing, being silent about work topics outside the office. Hackers are known from the American movies only.

On the other hand I also worked in opposite unhealthy paranoid environment. I was hired to design Ethernet camera, but Wireshark usage in their office was prohibited. Packet analysis was seen as the worst thing in the company. I quit after few months trying to explain, that I need to analyze the packets during design phase. I think, it’s very normal, that other countries abuse illiteracy of German industry.
In any database whose fields have at least 4 meaningful ranges, 16 fields give 4.000.000.000 possibilities. Now I am on my iphone. As long as ranges are meaningful (i.e. they do divide the group in somewhat even parts), the individuating possibilities are HUGE. And fields do have usually many more than 4 ranges.

Anonymizing datasets is a weasel term.

The database is secure or it is not. As any database is quite likely insecure, we are doomed.
It doesn't roll off the tongue, perhaps pseudo-anonymization is enough.
If you zoom you can see he is a coauthor of the book in the upper left corner.
When I worked in the data analysis world, we would have a bounds for this stuff.

Number of people >100 in the area: <10
Because we support playlists. I know it does make sense, but Mitre is never answering.
I felt the same way when I quoted a particularily strange passage. Got downvoted. Go figure.
It's pretty pathetic that a company is leaning on spreadsheets to survive. If your company is so terrible that it can't transcribe old printed out copies of spreadsheets, and has to subsist on formulas created by some "MS Office Guru" working a night job, then your dependency is your fault.

How is this not simply ad-hoc DRM by another name?

What's the difference between an expiring file format and Microsoft's operating system being shipped with vulnerabilities that require automatic update patches and refusing support for old versions of XP?
An issue on one or two Linux distribution for a OOB-read crash is very very different from "VLC vulnerable on all machines, uninstall now!"

Especially, since the very very large majority of VLC users are not on Linux, but using binaries.
Not a valid Postcode District...

Yes it bloody is...

Continuing anyway, I arrive at "NaN% of the time!"
Most of SAPs code is ABAP and is visible, debuggable and even hackable by the user.
Ask HN: How to make a project open-source? What to care about?
Hello folks,

I’m co-founder at Herni Labs (herni.co). We’ve been working on an IoT Platform as our main product, but due to recent developments in the market, we decided to make this platform open source and focus on individual, separate applications ourselves, while contributing to makers and hobbyist builders via this OSS.

Right now I’m doing research about making any project open source, what to look for, what are the initial steps, how to manage contributions, how to build a community around it and so forth. To learn these better, I’d like to meet with people who previously experienced this process first-hand and talk to them.

Is there anybody here who fits this description or is there anybody you know who can guide me through this process?

If yes, can you drop a comment about your experience? Or maybe redirect me to right resources?

Cheers,
Metin ️
Even back when I learned COBOL there were stories of programmers who intentionally created Abends so an operator would call them up with an error code, they tell them to hit enter, program resumes and they can claim callout pay.
I think this is a pretty good argument, and more correct that my previous comment. It's too late for me to edit that one, but it's a pretty clear argument.

I doubt that any company would be willing to take the risk of creating a commercial self-driving car using this data to get a head start. I don't think I'll be seeing this particular license fought over in court.
Golang fuzzing found a vulnerability in NATS server
I have tended to use a gui to view the state of the repo (even gitk, which is bundled with git, is better than the CLI for this IMO), and the CLI to manipulate it. Inspecting the state of the repo through the CLI is mostly slower and less clear than through any GUI from my experience, except in the case of complex queries in a repo with a complicated branch structure (I at one point had a linux repo which had something like 7 different remotes for the purposes of tracking the differences between different branches of the kernel in embedded development. GUIs will struggle to show that tree sensibly)
I think the VLC developers come off as pretty defensive in this. They flame the reporter for opening the issue on the issue tracker, but on the issue the reporter says that he got no response from the VLC security contact which he tried first. Then, they dismiss the vulnerability and flame the CVE assigners, because VLC themselves are shipping a distribution with the vuln fixed, even though many Linux distributions and presumably other distributors of VLC remain vunerable - a situation clearly requireing vulnerability coordination and a CVE assignment.
How the Retweet Ruined the Internet
Would you please supply references, and perhaps some more context?
LTS == old.

That's the point of LTS.
When information you are recieving has been "anonymized", how do you tell it is accurate? If you are the person collecting and storing said sensative information, you will know what is and is not accurate, but nobody else knows.

For some kinds of information, like medical records, the information is deadly not to have accurate, but also deadly to have accurate and public. Once the information leaks, employers might decide to not hire high-risk people or insurers might decide to pass over certain people as too costly.

I'm of the opinion "anonymizing" data is something that enables grifting; if enables the collectors to placate the people they are pulling data from, and it allows the grifters to make the argument the information they have means nothing.

Ultimately, I think these organizations should be making sure their information is absolutely accurate, and we should have laws in place, with severe criminal penalties, against the use transfer or use of said information. I would even go so far as to say things like cell phone location records should be fully public as a matter of the law.

Now when you want to get those records, you go to a government website for the "hunt and poke" stuff (e.g. where are my kids going or is my wife spending time with another lover, how long is my commute on average, or where was I at 3 years ago on a day, all sorts of useful questions); the access records are public too.

If you want to study them, you sign a NDA saying you won't, under penalty of severe criminal prosecution, leak the information or use it for criminal purposes. Anyone found having the data and no signed government NDA = instant 20 year prison sentance plus felony conviction.

This way, if, for example, someone signs the NDA and goes on to offer services to executives to help them cherry pick staff, not only does the person offering the under the table services go to jail, but the executive does as well.

When you criminalize certain things, then give the public all the information and tools to do as they see fit, the law works. It's a lot easier to prosecute a company executive for cherry-picking staff with insurance data when the data is well-labeled. It is also a lot easier to sue them when you have an access record that says someone under their employ checked how often you go to a clinic or night club via your cellphone records.

The problem is not going away anyway, and "anonymizing" data to placate our sense of morality isn't going to help. There is no easy technical solution, but if the thinking is not to anonymize but instead track and enforce who has access, things change drastically.
How to Write Product Descriptions That Sell: A Five-Step Guide
I worked on a reporting/dataviz project a few years back, showing survey results from states/districts/schools. All the data was included in the totals, but if a school had 5 or fewer responses, we didn't allow viewing of the school data. It was specifically because being able to see answers to things like "do you support your principal?" when there were only, say, 3 teachers at a school, and seeing 2 for "no"... it was way too easy to determine who the respondents were. Even with '5' as a cutoff, it still felt a bit dicey for some schools.
Python's performance is less of an issue when you use libraries like Numpy that are basically running optimized C code.

Depending on what you're doing, Python is usually great at performance where the time it saves the user writing code is more valuable than the performance itself (a lot of exploratory scientific research).
Right. As someone who uses raindbow parentheses, I should have immediately thought that it would be solved by the editor. Still, I don't like if readability relies on the editor too much, since you often want to paste or read code elsewhere (on HN, stackoverflow, github, random websites, etc) that may not know about your non-mainstream language.
“Winnti” [pdf]
Chandryaan2: First earth bound orbit raising maneuver successfully performed
Absolutely not:

- the reporter never contacted us, we have a clear process and a bounty program. We checked again, he never did.

- we receive and process all security issues privately: we fixed 31 of them in the last update. And miracly, the other reporters managed to contact us.

- Linux is the smallest OS for VLC.

- An issue on one or two Linux distribution for a OOB-read crash is very very different from "VLC vulnerable on all machines, uninstall now!"

- The CVE number of 9.8 makes no sense. How do you even exploit this crash?

- VLC has DEP and ASLR activated everywhere. How do you execute code with this read issue?
Just that Ubuntu apparently forgot about the "S" part of "LTS", or they could have updated that package.

Alternatively (because libebml is "universe", that is, unsupported), stop ripping out maintained components from projects to "use system packages instead" which are not maintained.

It's stuff like this that makes Firefox and Pale Moon play hardball with distros that mess up their software. (nevermind that the Pale Moon devs aren't even trying to solve such things amicably)
Interesting, I was always under the impression that chipmunks were susceptible to heart attacks. I can't remember where I read it and I can't find a current source but you are apparently not supposed to harass chipmunks because they can experience stress induced heart attacks when threatened/chased. I've also seen potential evidence for this when my cat chased one around a parking lot only for it to collapse after sprinting around for a solid minute. It was immobile, looked short of breath and eventually died at some point between when I brought my cat in and the next morning.
Abortion is abortion, no? Isn't it their body, their choice?

Why does abortion get a special different word like foeticide in this case?

If the mother chooses to end the pregnancy, aren't we cherry picking if and when it becomes right or wrong if we ban special cases of abortion?
Danbooru requires one to have a 'gold' account to see pictures tagged as lolicon or shotacon. That's a $20 one-time purchase. It's not clear to me that they are using such an account.
While extremely elegant and minimalistic, I do not think cilk ever gained much traction. GCC has deprecated it and is removing it. I think that OpenMP was too entrenched in the language extension space (and has since grown at least the potential of cilk like functionality), while more portable libraries (TBB for example) covered everything else.

I think it has been highly influential though.
At no point did I say more vegans do this than non-vegans. I would say the proportion of people who engage in this behaviour is broadly the same regardless of diet.

My point is that being a vegan in the name of the environment and animal cruelty, and still engaging in drugs and long-haul travel, which is far more harmful than a diet change, is hypocritical.

If you’re truly a vegan for environment and ethical reasons, abstain from travel.

You sound like one of the exceptions who practices what you preach.
Fundamental is kind of binary, something is either fundamental or it isn't. This is like arguing what element is more fundamental to human existence oxygen (65% by mass) or nitrogen (just 3% by mass); we die without both.

Now, like oxygen, pi and e are certainly more prevalent ...
What accounts for that remaining 2‰ of uncertainty?
I think that there are a lot of assumptions in that chain. When you or I ask why did we make a decision X we can formulate answers but, for my account, I don't have access to all of the components of my thinking - I cannot articulate what I feel is really going on. I think that randomness in the universe is very hard to account for too - I was impressed by an essay that Scott Aaronson wrote about this : https://www.scottaaronson.com/papers/giqtm3.pdf but I have read it several times and I am afraid I don't really understand it.
Especially when you are used to more or less filtering out '.', ',', and ';'.
Wups, what is your postcode? Feel free to let me know at luc (at) rocher (dot) lc if you don't want to post it here.

We used the complete list of US/UK postcodes (edit: England and Wales only for UK) to implement the demo, so all of them should be there.