skysight-inc/HackerNews huggingface dataset:
Not the worst way to teach kids a bit about how to nurture their environment. The absolute worst case here is a bunch of kids learning stuff and applying it later in their life. The best case is that and some meaningful percentage of these trees actually survives and helps restore a bit of land. Sounds like an interesting example to follow elsewhere. There's no shortage of recently arified land across the world.

I think there are a lot of countries finding out that they are not passive participants in the curve balls nature is throwing them and that they can influence what happens with simple, low tech solutions like planting trees and taking care of them and maybe a few simple changes in behavior like keeping sheep and cattle away from volatile areas.
"Transfering" a human mind isn't necessary. If we can create a machine mind capable of similar cognition to a human one, then that's close enough. It will effectively be our offspring.
If you ship an app with ES6 js and a user with a browser that doesn't support ES6 features tries to access it, then it won't work for them.

The user doesn't manually compile anything, but their choice (sometimes lack of choice) of browser determines which version of the spec they can run. So you end up polyfilling forever because some significant chunk of your user base is tied to IE8 or worse.

All the original commenter meant is that the people making the software can't ever guarantee what version of JS the end user's browser can handle.
What Help Should We Provide to Students Learning to Program?
How did you make the little ‘1’ ?

^1
Possibly relevant:

https://en.m.wikipedia.org/wiki/Profumo_affair
> The value of gold is inversely correlated with the trust in government bonds.

And government-issued currency.

> gold is the only real money

No. But gold is one of the better ways to, in essence, short fiat currency.
There isn't the forcing function of being really hard to get there, so it doesn't interest people to build self contained habitations on earth. It was tried a few times without much success, for example with the Biosphere project.
From the article, there are a few other company names listed in the screenshot (caveat: these are just based on filenames, it's not 100% clear that these are the exact companies, they just seem to match):

42lines.net, apperian.com, globalgarner.com, astem.net, ford, identiphy (not clear which), codecademy.com, safesocial.media, starofservice.us, unicreditgroup.eu

There are other files in the dump, but it's not clear which companies they are.
> I agree, SSN's are a poor form of authentication. What's missing from these conversations is realistic approaches to fixing it.

SSNs are a poor form of authentication because they're ostensibly secret but re-used everywhere. It's just like a password in that regard: no password is secure against reuse, no matter how strong it is on paper.

A minimal change would be to allow/encourage single-use SSN-equivalents, generated on demand by a central authority. That is, someone would give a different "SSN" to their employer, their bank, the IRS, and their cable company (for credit check).

That still provides a point of vulnerability, but that
is far better than the current system where a single credit application form is a global compromise. If a single-use number is compromised, it could be easily revoked without affecting the person otherwise. Likewise, numbers could easily be generated with short expiry dates to make use from stored credentials impossible.
Sure, but at the same time, when Google announced that Google+ had a huge security breach of 52M accounts, they didn't publicly disclose it until well after the fact because they didn't think it was serious enough. I wish Google would follow their own principles.
Flink Network Stack Vol. 2: Monitoring, Metrics, and That Backpressure Thing
Unfortunately, I believe the supported phone is the Nexus 5. The 5X is not a different version of the 5, it's the next generation of the smallest Nexus phone line, since the "6" was already taken. The numbering went Nexus 4, 5, 5X.
Baidu's new language model outperforms BERT and XLNet on 16 NLP tasks
Why does news have to be scalable? I don't understand your comparison to medical bills or gofundme either.

>Some people can support themselves with patreon but the number is limited

isn't that true for all industries?

>Crowdfunding also encourages extreme opinions and bubbles over neutral reporting.

lol wat. you got a source for that?
I hate paywalls. I rail a lot about my inability to adequately monetize my writing, but I want to put that information out there "free to the public."

Ideals: They don't seem to keep me fed.

But I'm not going to ever paywall my writing anyway.
Detecting a permgen memory leak in a Java application
[laughs in enterprise web app]
One argument I've seen frequently is that humans offset our smaller crania by losing the sloping foreheads of earlier hominids.

Neuron count in the cerebral cortex seems to predict intelligence better than total neuron count (e.g. putting humans ahead of elephants, and chimps ahead of giraffes), with only one odd case (pilot whales) beating humans. So if we lost overall capacity but retained most or all of our cerebral cortex size, the change might be explained.

(Full disclosure: a quick look says most primate brains are right near 26% cerebral cortex, while humans are around 18%. It's possible intermediate hominids were even lower, but without knowing why the difference exists I can hardly assert that.)
There are many possible motivations for Project Zero, and the reality is that more than one is likely responsible for the inception and ongoing sponsorship of the team's membership and activity.

What made you settle on this specific one?
Excellent (if exhaustive) suggestion. I'm a happy listener.
> the problem is that I don't want to pay for video hosting indefinitely

That's fine, YouTube offers the service for free, but it's not reasonable to have any particular expectations of quality or service from a free offering.
It's not a misnomer.

Back in the day, I wanted to implement a cache in our software product that used reference counting to update objects and when the object went to 0, free it from the cache. Pretty straightforward, no rocket science, but this was also cross-platform including Solaris, HP-UX, etc.

This was easy to do on Windows/Intel because they implemented a native CAS at the time (almost 20 years ago now), but the other systems didn't. The only way would be to add a mutex per object, which was a non-starter because it used real kernel memory and resources, so I had to abandon the feature entirely.

The above is truly lock-free because it doesn't require any additional resources that have to be tracked or freed.
I would pretty much quit if someone came and interrupted me in person twice a day to ask me how things are going?

In my decade of experience i’ve usually seen new PMs be extremely anxious and paranoid about timelines. As they get more experience and they see more projects that go off the rails they understand the tech speak a bit and have laxer expectations.

Sure we’ll be 2 weeks late, but in the grand scheme of things, it doesn’t matter. Don’t burn your engineers for a dumb deadline that makes little difference to the customer.

There’s a reason we have kanban boards and sprint boards. How are things going? Look at the board. The tickets are updated. Any blockers? Read the slack channel. Only interrupt in person when shit is really on fire. But even for that, the monitoring software will page the opslead.
Very, very probably only to declutter their screen. Does the survey collect intent about why they install it?

I doubt anywhere near 26% block ads because of tracking. I doubt even 1% if users even understand what tracking means.
Or we could colonize the southern Pacific ocean. It's virtually empty of human habitation and although a permanent colony will be difficult to establish, it's still orders of magnitude cheaper and easier than Mars.
I highly recommend subscribing to The Orbital Index newsletter. One of the 3 newsletters that I actually read every week. It's (almost) completely outside my profession but very interesting to read nonetheless.
Individual results may vary. Don't take Monorepo if you are bad at programming, or if you may become bad at programming.

Side effects include but are not limited to your repo growing into a single giant ball of circular dependencies.
> Faith is the only real money.

Credit => credo => 'I believe'
Looks like everyone - vulnerable population or not - should be using VPN when viewing pornographic content.[1]

[1] https://www.privateinternetaccess.com/blog/2019/07/why-you-n...
It's a good illusion, but isn't this just a variant of the dots used in old colour comic books and some op art prints? For example, http://facweb.cs.depaul.edu/sgrais/images/Color%20Comics/Kid... and https://legionofandy.files.wordpress.com/2016/04/big-tarzan....
arr.flat(Infinity) seems like a strange decision for flattening the entire array - wouldn't the most common number of levels to flatten an array be all levels, in which case I'd expect arr.flat() to flatten the whole array but in this case it's just 1 level.
Heat transfer happens by heat conduction and heat radiation, so even in a vacuum you will radiate heat away in the form of infrared photons, at least if the vacuum is not at a higher temperature. Heat radiation is however a less efficient process then heat transfer in a sufficiently dense environment. That is also an issue for spacecrafts, they need rather large radiators to radiate away excess heat into space.
So what. I don't personally care if a company's marketing is affected - we as consumers have the right to know if iMessage or other protocols aren't secure. This is in the public interest and I'm glad Google's doing this. Apple can start their own Project Zero investigating Android if they want.
The point is that $100k > $10k, so stating that "it's really not that expensive anymore" is false.
By disabling this are you hurting the ability for Siri to understand you better? Is there any negative impacts?

Edit: Sorry for asking an important question. Blocking some of the Windows spy junk causes some issues with apps.
That place was a lot of fun. I remember that pyramid. King of the Castle was the game pretty much always played on that thing. Kids would literally through each other off of the top and try and trap each other between the hanging pillars.

I can't imagine it would go very far these days. They'd just get sued. Insurance would be insane if at all possible.
By that standard, literally no company in the industry is following these principles, because internal findings are not routinely disclosed. Internal vulnerability researchers have access to information outsiders don't, so you can imagine, the bugs you're not hearing about are pretty lurid. Every major tech company in North America spends millions annually on third-party software security tests; did you think these just weren't turning things up? What did you think was happening to the reports?
You're not the primary audience for this (yet).

This orders of magnitude cheaper than it used to be and will enable a broad wealth of new startups and applications in LEO. It's nothing short of a revolution.
On a representative contemporary *nix desktop: <Compose> ^ 1
why don't you just disable Siri?
The Real ID Act [0] effectively made all state ID's into national ID's. All but 6 states are already compliant, and the last 6 will likely become compliant by next year, lest their citizens become unable to use domestic air travel without a passport.

[0] https://en.wikipedia.org/wiki/Real_ID_Act
What do these queries look like...
Just gotta wait another 50 years or so for the free terraforming effects of AGW!
Status: "Fixed ... from a certain point of view."
Here's an HTML version if you're on a phone: https://www.arxiv-vanity.com/papers/1907.06520/
PRISM was the one with FISA warrants, where the government lawfully acquired data from Google via formal processes.

MUSCULAR was the the one where the NSA tapped Google's inter-datacenter fiber lines in order to spy on their internal traffic.

https://www.washingtonpost.com/world/national-security/nsa-i...
Up front, I worked at AWS on the CloudHSM team, don't work at AWS any more. I am not a lawyer. This is all my opinion from a very brief analysis.

The customer agreement[4] states:

> 3.1 AWS Security. Without limiting Section 10 or your obligations under Section 4.2, we will implement reasonable and appropriate measures designed to help you secure Your Content against accidental or unlawful loss, access or disclosure.

> 10. Disclaimers. THE SERVICE OFFERINGS ARE PROVIDED “AS IS.”

It goes on with the usual shouty disclaimers.

The service terms[3] state (I'm specifically citing IAM here because it's how you handle a ton of authentication):

> 19.3 You are responsible for maintaining the secrecy and security of the User Credentials (other than any key that we expressly permit you to use publicly). You are solely responsible, and we have no liability, for any activities that occur under the User Credentials, regardless of whether such activities are undertaken by you, your employees, agents, subcontractors or customers, or any other third party.

My read on it:

AWS generally gives you tools to secure your data, and it's largely up to you how you want to do it.

The docs state that if you set IAM to allow or deny access to a service to an authenticated entity, then IAM will do that. If you set up a VPC and shut off a port through a security group, it's going to be locked down.

AWS has a slew of services, and these things can interact in surprising ways. So reading the permissions, you're often wondering[1], "what permissions do I need" and it's not always clear what a permission grants.

To summarize, then, the AWS documentation at a low level gives you some very technical instructions, and at a high level will generally recommend best practices[2].

I will say that IAM is good stuff and works, the issue is the sheer complexity of configuring it all, and a few footguns thrown in for good measure. But AWS should look at adding "security agreements" similar to their Service Level Agreements that guarantee availability.

[1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/access_perm...

[2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practi...

[3]: https://aws.amazon.com/service-terms/

[4]: https://aws.amazon.com/agreement/
I don't understand what is so appealing about not having a build pipeline for JavaScript, other than the ability to very quickly test and learn things directly in the browser, which of course anyone can still do.

For anything remotely important, you're almost certainly going to already want a build pipeline to do things like concatenating/minifying code, running tests, and deploying. Adding a transpilation step to extend support to older browsers comes with almost no cost to time or maintainability, assuming you're using well-supported things like Babel and its official plugins.
Cofounder/CTO here. Sorry this went up when I was sleeping, so I missed the discussion. I'll answer some things through the threads but if you have any questions for me I'm here.
> It isn't of course, Nokia smartphones from that period had colour screens and ran Symbian. They had 3G, Video calling, MP3/Video playback, fairly okay web browsers (I used to use Opera), and okay-ish photo/video capabilities. You could even edit documents on them if you hated yourself that much.

Those Symbian S60 Nokia phones you listed could install and run apps written in "C++". Emphasis on those quotes! But regardless, your very own native code, doing your bidding. Been there, done that.

It worked, but writing those apps was very tedious and hard. Everything was async to save power. No standard libraries, etc.

I'm very happy there's no need for "leave stack" and "cleanup stack" etc. in the modern world.

But damn, that architecture was really helping the battery to last for a long time. Your code simply would not be running until some async thing did a callback.
I'm not sure I want to live in a colony that's some 1%er Libertarian's personal playground with no rule of law beyond what he sets. Turns out most laws were written for a reason, and going through the pain of re-discovering the reason for said laws over and over again doesn't sound like much fun.
The wonders of Unicode: "Superscript One" has codepoint
U+00B9.
> [0] - The down-voters seem only to disagree with you. That's not what a down-vote is for, and voting this way actively harms the discussion.

...

> Please don't comment about the voting on comments. It never does any good, and it makes boring reading.

https://news.ycombinator.com/newsguidelines.html
Anecdote #1 - DSL went down for me at about the same time...local loop is fine, issue appears to be downstream somewhere.
So basically it could be bad. Right now there is little evidence it's anywhere near the concern that asbestos is, but we don't know for sure.
It brings up many interesting challenges and unknowns of living on Mars, but it comes across as a naysayer's rant. Humans are capable of (and perhaps wired for) incredible personal sacrifices for the sake of exploration and progress.

Nothing in the article will stop individuals from trying, only government policy can stop that.
Yes, exactly. And in particular, capturing those variables at the point of the run, not just some time before/after when you remember to record it manually.

Lots more detail here: https://dotscience.com/product/ and a super long deep dive demo wih lots of examples (I would have made it shorter if I'd had more time ;))
Really though, don't know why this isn't the most mentioned feature in this thread, processing objects in JS has always been annoying.
Arrow function made `this` much more intuitive while maintaining backwards compatibility. That's definitely bringing something to the table.
"Before long, the banknotes were trading at more than their value in silver, and Law was made Controller General of Finances, in charge of the entire French economy."

This is super interesting. Does anyone familiar with the subject matter have an idea why?
And they keep collecting exploits thanks to memory corruption bugs.
Didn’t read past the 2nd paragraph? 737 max obviously doesn’t have enough quality to ensure customer success, so I agree it needs more quality.
Looking inside a 1970s PROM chip that stores data in microscopic fuses
"Debt: The First 5,000 Years" is a book length op-ed. It's not useful with respect to economic history.
Well yeah, because if they colonized Mars, that would make them Martians
>The whole arrow function notation, for example, buys nothing new compared to the old notation of writing "function(....){}" other than appearing to keep up with functional fashion of the times.

Incorrect - The main advantage is fat arrow syntax can keep lexical scope of this current context. Hence you dontneed to implement that=this antipattern
The hentai sites I tend to use are pretty good in this regard I think. Most of them even work with no JS. E.g.
https://danbooru.donmai.us
https://e-hentai.org

Edit: I tried visiting them without adblock and I'm actually surprised they didn't even have ads.
Would this set a legal precedent for regulating code or is there already a precedent? If this does set a new legal precedent, the future looks messy
Going off a tangent here, but global warming is pretty much our alpha-version of terraforming other planets.

We also have to be clear what the end goal is for being on Mars. Is it to have a permanent research base or an actual livable planet where you can go outside and not die without a spacesuit. They're radically different.
You can also declare variables in conditional statements in C/C++ like https://godbolt.org/z/h0BR8K

int foo(int);
int bar(int x) {
if (int y = foo(x)) return 0;
return x;
}
Can anyone explain iOS “automatic” updates? They never seem to work for me.
You’re upset that a deep-pocketed company is funding security research?

I have no love for Google but I’m extremely happy they found vulnerabilities that could be patched on my phone before someone else did.
Docker PHP-fpm truncated logs with PHP 7.0, 7.1, 7.2 (workaround/configuration)
Project Zero does not accept bounties. They generally ask for the money to be donated.
> If you ship an app with ES6 js and a user with a browser that doesn't support ES6 features tries to access it, then it won't work for them.

Right, but if the developer transpiles their source code and distributes it then the JS end-user is in the same situation as the C binary user. Distributing ES6 code without transpiling it is akin to distributing C source code without compiling: the end-user would need to have an up to date compiler/runtime to execute the code.
But the 640k limit was imposed by the cpu, not the os. It was a widespread nonsense that Gates invented it.
If you use a cross-platform tool like Xamarin or Unity, the only step of the development process that requires macOS is the publishing-to-app-store - and debugging on actual iOS hardware, if need be.

So it's not that bad, you can do most of your everyday work on whatever OS you prefer.
> but free speech is as much a societal value as a legal construct, and is not limited to the Bill of Rights as its sole champion.)

Where, in the US, is the requirement that everyone has to let anyone say anything enshrined? AFAIK, it's not, and is (very) often confused with the Bill of Rights version.
As I understand it, it’s a range of things. Water and protection from animals, as other mentioned, is a big part of it. But so is growth speed, most trees grow rather slow, but grass, weeds and shrubbery doesn’t. This means that seedlings can lose the struggle for sunlight if you don’t “now the lawn” around them.

There is also quality of the seedlings. The best example is kitchen herbs. If you buy some
rosemary in a pot at you local supermarket, it’ll taste fine. It’ll probably also survive long enough for you to eat it. If you try to plant it in your garden with the intention of keeping rosemary around for years, then there is a good chance it’ll have died within its first month. That’s because supermarket herbs are mass produced in safe environments, where long term survival isn’t valued. You could get lucky, but you’d have a much higher rate of success if you buy your rosemary from a grower who grew them to be planted outside. This is both slower and more expensive though.

Getting 350 million seedlings, often as cheap as you can, is easier with the mass-production approach, and that’s typically what these projects do.
Some of us actually are.

It just isn't a widespread thing.
To follow up on this, for anyone who might have seen it, a scan of the Word app for Android indicates that it contains

* Google Firebase Analytics

* HockeyApp

The former I've seen in about 90% of apps I've downloaded from the Google Play Store. The latter claims to be "the best way to collect live crash reports, get feedback from your users, distribute your betas, and analyze your test coverage." Oh, and Microsoft owns it. [1]

Neither seems particularly unusual to me. I wonder what has caused this much outrage:

* Assumptions about the nature of the "tracking" ("specializes in predictive profiling" leaves a lot to the imagination)

* Assuming that other apps aren't doing the same thing

* A general expression of anger at all apps that have embedded scripts like these

[1] https://devblogs.microsoft.com/bharry/microsoft-acquires-hoc...