skysight-inc/HackerNews huggingface dataset:
> However, the point still stands that genetics are certainly a factor, by an amount that is unknown

If you remove all constraints on effect size, then everything is a factor in everything. There is no strong reason to think that genes unusually prevalent among Kenyans play a large role in success at distance running. Note that this is not identical to the claim that genes do not play a large role in success at distance running. Certainly, performance in any given sport is significantly influenced by genetic factors (though the details are not well understood). But the following is not a good argument:

Genes significantly influence athletic performance
Keynans are great at distance running
|- Keynans have genes that make them better at distance running.

>The abstract calls out "favorable somatotypical characteristics lending to exceptional biomechanical and metabolic economy/efficiency." Sure, but how much of these characteristics and exceptionally favourable response to training and living at altitude is potentiated by genetics? The answer of "none" would be an extraordinary claim requiring extraordinary evidence.

The article points out that Somalians and Kenyans don't (on average) have particularly similar somatotypical characteristics, and yet both nations have produced exceptional distance runners.

>Finally, to address your earlier comment that "all we really know is that - not surprisingly - people who grow up at high altitudes tend to use oxygen a bit more efficiently than people who don't," this is a grossly inaccurate summary of scientific understanding of the multiple examples of convergent evolution that have produced genetically altitude-adapted populations in Kenya/Ethiopia, the Andes, and Tibet.

This is just bluster. We know little about the genetic details, and even less about any possible effects on elite athletic performance.
I realize, I'm not the typical customer (I think autoplaying the next episode was the last feature Netflix introduced that didn't annoy me and made me think about canceling), but for me the only thing that matters when watching TV in the evening is if it's the penultimate episode (because those tend to end with cliffhangers and I'll want to watch the final one as well) and how tired I am/how late it is.

All autoplay does for me is saving me the click on next which I'd click 100% of those times when I don't close Netflix right at the end of the old or start of the next episode.

I can't even understand how it would make people watch more (unless they barely watch and just didn't realize a new one started)
One third of businesses still have active Windows XP deployments
> help me wrap my head around that

Think about when it's cold, and when it's cold and windy.

Low pressure air is like "anti" wind, even less cold then no wind on earth.
I was recently googling friends' names and looking at the results from find-people sites. It's already creepy enough that they have "related to:" and then a list of family members of that person. But the most recent concern was one site already has a "reputation score" like china has already implemented. I checked a few friends who had criminal convictions and, voila, their "score" ranked lower (and of course you can pay the site to remove your entry or whatever, aka a racket). Porn viewing could easily be ranked into the "score" in a negatively-impactful way and lead to job/social discrimination.
Even if we could all agree that autoplay videos and endless scrolling are terrible ideas, I still don't understand why we should get the government involved. Use a service that has them, or refuse to. Find another service that doesn't use them. "There should be a law..." is often the wrong response. At least in my opinion.
90 days is enough to divert your next sprint from "Build new 3d Emojis" to "fix critical bugs". Of course it's not the same thing, but in the end : same company, same budget : just a question of priorities ... Project Zero is the stick. I still don't know what the carrot is.
> You don't see how the risk might increase when more people learn about the vulnerability?

Do you see the risk of having a vuln that is completely unknown still exploitable in your stack?

> What? They provided proof-of-concept exploits just one week after the patch was provided. That's apparently not "immediate" in the eyes of security researchers, but try asking the average user if that's enough time to expect them to update.

Why are critical issues not being patched within 48 hours? The disclosure of the issue can only mitigate so many things, and patch schedules by vendors is not one of them. If your vendor takes 3 months to patch the system, is that the requisite amount of time the researcher should be expected to wait before disclosure? That seems preposterous.

> > Do vendors want more time to fix things? Sure, they always will.

> That was never my argument. I never said they should get more time to fix things.

So then that is your argument. What is a reasonable amount of time, and why is your arbitrary value not arbitrary? A day, a week, a month, a year; when can you ever be sure you've reached the critical threshold of patched systems using a rule of thumb?
You can turn off autoplay from the website, under Playback Settings:

https://i.imgur.com/gctaiHK.png

https://www.netflix.com/HdToggle
It is not easy because food industry has power over what you eat, and they are making lots of money killing the rest of society!!!
You could compare that to the big tech companies if you are privacy concerned, they have lots of power over you and you need to be careful all the time.
AWS Polly launches Neural text-to-speech and Newscaster voice
I ended up building a transcoder within the past few months using Lambda that is handling, as of today, 500k+ videos per month and growing. This was replacing a set of EC2 instances similar to what you described.

A few caveats I ran into:
1) You are limited in how much /tmp on a Lambda instance can hold (512MB total). For the transcode I'm doing on these boxes, some of the videos are that size just to download. It will fail. I have a backup using the older method to handle these very large instances.
2) These, obviously, need a pretty decent amount of RAM to run.

But the benefits are really worth it for us. Elastic Transcoder, for our needs, was going to be >$15k/mo). Our current transcoder cost is around $400/mo. The previous, EC2-based iteration, was a step up for us, but it sometimes took a while to start. Doing it with Lambda has actually been less expensive, provided a faster experience for our customers, and was significantly easier to build than the EC2-based option.

Not bad for a project to see if I could write something in Go.
>since smartphones started replacing DSLRs

Smartphones reduced the market for ~$500 digital point-&-shoots. However, for the more expensive prosumer and professional cameras like the $1999 Canon EOS R mentioned in the article, Canon is competing with other high-end cameras like Sony Alpha mirrorless.

https://www.google.com/search?q=sony+mirrorless+outsells+can...
إم جي موتور‘ تطلق سيارتها السيدان المدمجة MG5
Does it also do hyper-parameter search? It's usually something you usually want to have.
Vuln reporting is free work. It helps companies. This isn't "going after" people.
The Comet
There should be a lot of great tutorial content coming out now/soon. I know a lot of the big training vendors (e.g. cgcookie) have basically been building for 2.8...lots of new courses and old stuff getting redone and updated.
Although I'm not in favour of the law, why not both? After a certain point it begins hard to blame people for being susceptible for the patterns engineered by the professional psychologists companies hire to do their advertising and draw up their reward models. To lump it all on self-discipline is only once removed from linking, say, drug addiction to a matter of mere self-discipline.
My degree is in maths but I got special dispensation to drop statistics so that I could do more computing. Regretted that ever since.
Because I don't see the fact that we have to present ourselves to the outside world with some form of restraint or self censorship to function (your technically correct "not who we appear to be") as remotely the same thing as fraud designed to manipulate/profit. I don't think it's reasonable at all to put those in the same box as some proof "everyone does it".
For those wanting to see more about Canon's stock:

https://finance.yahoo.com/quote/CAJ?p=CAJ&.tsrc=fin-srch
Job Opening at Dcode: Director of Innovation Partnerships
Of the four or so tutorials I took a peek at, only the one on qualitative economics mentioned the backspace as how to get out of pkg mode. I'm left wondering what's wrong with Escape.

The authors don't seem to have touched it since their O'Reilly book was published.
Yeah, FDE is hard, but encfs or ext4-native encryption it easy enough.
In my opinion that's what also happens with entry to top class institutions like Stanford, MIT, Caltech etc.

Competition for better schooling is everywhere weather it is for the Grammar Schools of the UK or Gymnasium School of Germany. I have seen parents preparing their kids for Grammar School right after they leave Kindergarden age.
So develop for a cheaper platform. First it was complaints that Apple takes too much money from the app sales, now it is Apple's hardware requirements are just too expensive.

I get it, Apple takes a 30% hit and it is a lot of money. But managing your own payment platform and sales is going to consume 15% already, so I don't want to hear about how outrageous this is. No one accounts for what they are getting for their 30% when they whine about how Apple is being unfair.

Apple is a boutique brand that has a vast customer base of people who don't mind spending money. Want access to that? Pay! This is not a unique formula, look at an NFL franchise.
Ask HN: How do you communicate in your office?
With the increasing presence of digital communication tools in the workplace I'm finding that people tend to gravitate towards chat rooms instead of talking, lessening the bond between people and even making team outings awkward at times.

Is that true to you and your team as well? What are your team interactions like?
The posted link goes to a special "Show HN" page, with screenshots of actual pages, etc.
Israeli work management firm monday.com raises $150M
came to minD

not

came to mine
You're missing the key point: the patch is disclosure to the bad guys.

The P0 disclosure is the disclosure to the good guys and users.

You're assuming that the bad guys are learning about the problem from P0's disclosures, but without P0's disclosures, the bad guys would still learn about the old bugs from the patch itself.

So which is a better situation: a world in which only the bad guys get the information about broken old versions, or a world in which everyone gets the information?
It’s also an edge case.
JS doesn't compile so all the runtime engines (mainly browsers) need to adopt the new features as well. This takes time. These new features are part of the official ES2019 standard, and Babel makes it possible to use these new language features and transpile it to a language that all the browsers can use. What's not to love? This is actually a great (if not amazing) thing.
Every time I see Perl code like this, I think "That's awesome! I've forgotten how expressive Perl is. It would be fun to use Perl for my next project."

Then a few seconds later I snap out of it and realize that there is no way that I would ever be able to understand what "max :all, :by{.chars}, keys [∩] @strings».match(/.+/, :ex)».Str" does after a few months (or hours). The documentation for that single line would need to be nearly as the OP's blog post.
And what is that meaning for if the functions you are calling have proper names?
I don't get this company and this product. Insane valuation, insane money. No idea how it is possible with so many competitors around and so weird product...
I would be very happy indeed if that ever became a thing. In my opinion, we should have just enough of a military to be able to protect ourselves and stop policing the rest of the world, or whatever it is we think we're doing.
> The fact that we're a hosted developer tool lets us remove the (potential) headache of DevOps and the (absolutely definite) headache of security and compliance like GDPR and HIPAA. Little things like message history become seamless because we can help manage your data for you.

> I hope you don't think this is subtle advertising, though.

ok
Gaming’s blockchain revolution: a high level look at DLTs and gaming
Its possible to me the auto-play setting something that is enabled voluntarily by the user. This would solve your problem.
> Lisp became so idiomatic that people couldn't share code.

That is only a false meme spread by non-Lisp programmers.
Houdini, Maya, Nuke -- all the really big names are on Linux and have been there for a decade or more.
> timeframes involved in getting to even very close stars means living aboard the ships traveling there for an extended period of time

At our current level of technology. Colonizing Mars is likely 50-100 years away, within that time frame it's very conceivable that we might develop the ability to travel between stars quickly.
If Google is responsively disclosing the issues to vendors, why? I would find it hard to believe totalitarian governments like Russia or China would do the same.
Similar story here - went to college, majored in CS, found out how much of CS is math, thought it was just there to be difficult, learned just enough to (barely) pass. It wasn’t until much later that I did some graphics programming that I wished I had paid closer attention - I’ve been going back and trying to re-teach myself a lot to the stuff, like differential equations, that I probably would have gotten a lot quicker and easier if I had just paid attention when it was the only responsibility I had along with access to an expert on the topic who I was actually paying to help me learn it. Oh, well, some of us have to do everything the hard way…
In theory yes, but there are enough cases where amendments were castrated by the SCOTUS so that one cannot predict what will happen with this one.
What were the problems of using early computers?
@tectonic: thanks for including mention of our website/resources in this newsletter! Looking forward to meeting next week at SmallSat :)

If you're interested in understanding the state of the global space supply chain, check us out [1]. We're working on digitalizing the entire global marketplace and CubeSats are a huge part of the on-going commoditization within the sector. Kinda like "Octopart for space".

The supplier ecosystem is really a lot larger than people think (including myself until we started this project). There are some legacy and strategic reasons for "hidden hubs".

The supply chain is undergoing a lot of change, as organizations try to figure out how to not stay hidden and instead ride the on-going growth wave through international business/projects.

[1] https://satsearch.co
Brutal?

90 days is unbelievably conservative. It's frankly ridiculous. Imagine you found weaknesses in a bridge. 90 days to disclose would be insane.
10 years ago the cheapest launch options were in the $1-10M, and that's if you could even find a secondary / ride-along deployment. most satellite launches then would simply purchase a whole rocket, on order of $100s of M.

While this isn't consumer pricing yet, the orders of magnitude cost decrease because of lower cost / smaller satellites have made this much more accessible, and it's only going to continue as launch costs come down.
If your array is contained in itself, flat(Infinity) gives a stack overflow. My guess is they wanted the default behavior to be safer/saner.
While I agree with you, I don't know why exactly I agree you. Allow me to explain. The "real you," the "genuine" you, is nothing more than some random, arbitrary (for the most part) stuff you got from genes and the environment surrounding you (as in, it's effect on you) and, to usually a lesser extent, some of the life choices you've made. Now, it is you in the sense that you've lived with it for your whole life (some could say, put up with it, depending on your luck of the draw and what you think//how you feel about it).

I think the real you is really your mind. Our minds are so special, and on such a higher level, that the physical manifestation is very simplistic in comparison. To illustrate: we seem to look down on those who do as this woman did, but if someone was, say, a burn victim with 1st-degree burns all over their body including the face, we wouldn't think twice about using technology to improve their lives this way (btw, anyone know if this used in any such capacity?).

I'm providing some food for thought as I am challenging my own initial knee-jerk reaction which is "this is horrible, what have we become?" If there's one thing I learned about human behavior, it is that there is usually a whole lot more than what meets they eye (pun semi-intended) going on.
What do you disagree with exactly?
It's a common thing among adults across the globe though. Well, "imaginary friend" might be pushing it but lots of people let imaginary entities help them understand the world and find their place in it. It would be interesting to see how the two compare.
Getting, say, a million people to escape velocity would not be significant in terms of greenhouse emissions, compared to the ~8 trillion revenue passenger kilometres flown annually (which itself is a tiny fraction of global emissions).

Also, if you assume that those colonists are not coming back, their exodus is likely to be carbon negative for Earth.
I read it, but I must have missed that. Thank you!
IMO, your making an pretty large assumption here - you're describing the intent as malicious without anything concrete to back it up. If I was a security researcher, and someone decided to do something out of the norm, I'd probe it! There's nothing here to suggest malicious intent, only a security researcher doing what a security researcher does.

> with a constructed story about how Epic is compromising everyone's security

Did Epic compromise everyone's (or, at least their users) security? My memory of that incident is, yes - they did. If that's true, if the code was buggy and had a path to a security exploit, how is it a "constructed story"?
Yes, that's a good point. Different schools have different teaching/research balances and I would expect to find a difference there in the average attitudes of the professors.
Do you consider yourself the rule or the exception?
I've tried for ages (since 2010...) to get the VFX studios to work with me on making Krita good enough for their needs. I've visited dneg, worked with Intel and other parties, but in the end, the studios yell they want to get rid of the shared windows/photoshop pc in the corner office -- but don't want to put in any actual effort. In the meantime, we're getting there anyway.
> But that's not the composition that I'm talking about.

Okay, then:

composeObjects(first, second) = {
third = new Object
third._methods = first._methods.merge(second._methods)
return third
}

class Foo { hi = { puts "howdy" } }
class Bar { bye = { puts "adios" } }
baz = composeObjects(new Foo, new Bar)
baz.hi # prints "howdy"
baz.bye # prints "adios"

Tada!

This is only slightly simplified from languages like, say, Ruby or Common Lisp, both of which (last I checked) support this sort of class-oriented metaprogramming (or Perl, which exposes the ability to "bless" arbitrary data structures as objects).

> But like your example shows, it is awkward.

In what way was that especially awkward? You take two pointers to already-compiled procedures, you jump to / call those addresses one after the other, and Tada! you've got literally all that's required to build one procedure dynamically from two different ones.

> Go to store, eat chicken.

> What chicken?

That depends on your domain. In this particular case, it could be the first chicken on the stack. It won't be a particularly tasty chicken, since it'll be entirely uncooked and probably frozen, but that's certainly within the realm of possibility.

> you've basically gave an example where you can do anything

Well yeah, welcome to Turing-completeness :)

> You need rules on what can compose with what.

Indeed, and the rules in that example would be:

1. There are two things on the stack, and those things are addresses of procedures to JMP or CALL into.

That's really all there is to it. If the arguments aren't valid pointers to procedures, then you crash :)

(There are of course Forth derivatives/dialects/descendants that do type checking, in which case you could verify that the two topmost items on the stack are pointers to procedures, but that's not strictly necessary for composition; just for making sure your composition procedure doesn't try to compose things that aren't procedures)

> Who writes business logic in Forth nowadays?

I picked Forth (or more specifically: an imaginary derivative thereof) for the procedure-composition example because it's simple to a fault, and because it's able to compile procedures at runtime. You pop things from the stack, you push things onto the stack. You pop two pointers, you store them in the necessary code to CALL or JMP to those pointers, and you push a pointer to that generated code. Tada! Composed.

You could do the same thing in Lisp, or in C/C++ (when linked to, say, LLVM, or when using a compiler that allows dropping down to assembly), or assembly, or in quite literally any other Turing-complete language with the ability to emit arbitrary code and JMP to it (and even then).

Again: not all bricks are Legos. Nothing wrong with needing mortar and rebar to build something.
Make Your Videos Faster with URL API
It is not only the best possible scenario, it's a beautiful elegant solution that 10 years ago nobody would have dreamed of. This really propelled the web as a platform (although opinions vary on whether the web should be a platform at all).
Apple controls updates, not the carrier. So Apple updates happen pretty fast.

I don't think we should wait for the carrier though. That's just months and honestly the carriers need pressure put on them or else they'll keep playing this lazy game and keep customers at risk. Because that's the truth. While a vulnerability exists users are still vulnerable. The difference of disclosure is that users know how they are vulnerable and they can hold carriers responsible.
It’s just a trap to quiz people on language errata when they say a high number the guy would have been just as unpleasant in a different way.
Blogaraby
Good answer.

I'm overly certain that humans will survive though, but the circumstances might not be to everyone's liking.
JavaScript Party 86: How to Get into OSS
I agree this is a bad question, but when people ask, they almost always mean relative to your peers. they're not trying to decide whether to hire a summer intern or a senior dev. they just wanted to hear that you were better than most of your classmates.
Schneider and I believe Allen bradley PLCs use vxworks. I have had a spate of trouble with Schneider quantum PLCs that would stop communicating when some Ethernet switches were upgraded. The program was still running and physical IO operating normally but no visibility in to the process and any Ethernet IO not working. definitely a weak point.
C++17 already made backward compatibility a non-goal (within reason, obviously) and broke previously valid programs.