skysight-inc/HackerNews huggingface dataset:
I dont really use g00gle products, and im not standing at your console to see exactly what happens, so im going to take a stab it in the dark.

Perhaps G00gle has blacklisted a known hostile bot or wormed machine, and thats what is being blocked?
if something had a mission to spread far and wide, an open promiscuous account would be a good vector to exploit.

It could possibly be a spoof, so when you log in to see what happened your password gets snarfed
Not necessarily. They could run str.lower() on the password input before hashing and saving the hash. Then to verify the password, you just always run str.lower() on the input before calculating the hash.
You can't be sure, they could lowercase all passwords (so during registration and after logging in) after they are entered.
In a similar way, there is also the Sabbath Wire:
http://mentalfloss.com/article/91594/theres-wire-above-manha...

18 miles of translucent wire stretches around NYC called an eruv:

On the Sabbath, which is viewed as a day of rest, observant Jewish people aren't allowed to carry anything—books, groceries, even children—in public places (doing so is considered "work"). The eruv encircles much of Manhattan, acting as a symbolic boundary that turns the very public streets of the city into a private space, much like one's own home. This allows people to freely communicate and socialize on the Sabbath—and carry whatever they please—without having to worry about breaking Jewish law.
Note that the intended replacement API has been available for three years:

https://developer.apple.com/documentation/usernotifications/...

According to Moxie, it does have a downside. Notifications must be marked as either displaying an alert or as silent. Silent notifications are invisible to the user, but can be read by the app; Signal uses them for things like typing indicators and read receipts. With the new API, if a notification is marked as displaying an alert, the notification extension gets a chance to modify (i.e. decrypt) the content, but the end result must be an alert of some sort. If it’s marked as silent, the notification extension doesn’t run at all: after all, the data isn’t used for anything until the app asks for it, which can only happen if the app is actively running, so the app can just handle decryption itself. And if notification extensions were allowed to trigger on silent notifications, app developers could send meaningless notifications to keep their apps running in the background without the user’s awareness – the same issue Apple is trying to address by cracking down on PushKit.

The problem is that the flag for whether a notification is silent or not is visible to Apple’s server, whereas Signal wants to keep even that one bit of information hidden behind its end-to-end encryption.

https://twitter.com/moxie/status/1159127482143875072
The big thing is that you can choose which file system you want. On linux and want a btrfs filesystem? No problem. Oh you want to read a NTFS volume? Just download the ntfs packages and you're good to go.

BTRFS, NTFS, ZFS, EXT4, and APFS/HSF+ don't really matter for general users sure, but each has certain advantages and limitations that make the flexibility should you need it very useful.
If you haven't seen this -

https://www.youtube.com/watch?v=dguiAWrUGMM

And it's still going on today. Not just some bad practice they did years ago.

https://www.youtube.com/watch?v=487CRdRHEeI

Think about the control you can nudge things in a specific direction with that.
Came here to say the same thing. Even this description is _really_ light on details.

I'd love to see a technical breakdown of this problem. iOS 13 has a background task API - why can't that be used?

Incoming notifications can trigger application code to run - why can't that method be used?
Bold-faced*

> Although many people seem to believe that “barefaced lie” is the source of both the “bald” and “bold” versions, it appears that “bold-faced lie” is by far the oldest, dating back to at least the early 1600s.
I hope they work as well for you as they have for me!

Unrelated to weighted blankets, but related to better quality sleep, I have also found that these pillows help reduce the number of apnea events I have per night as well:

https://www.amazon.com/dp/B07CMFSY97/ref=emc_b_5_t

You put the thicker end under your neck. It helps keep your airway open, and is quite comfortable. I will say that you might want to buy locally, though- if you check the reviews, it seems like there are a lot of counterfeits on Amazon. The real ones don't smell, and have a firm level of support.
The push towards cyber peace
From PushKit's documentation:

PushKit notifications also have the following advantages over user notifications:

- The device wakes only when it receives a PushKit notification, which can improve battery life.

- Upon receiving a PushKit notification, the system automatically launches your app if it isn't running. By contrast, user notifications aren't guaranteed to launch your app.

- The system gives your app execution time (potentially in the background) to process PushKit notifications.

- PushKit notifications can include more data than user notifications.

Sounds like PushKit notifications are treated like a full app launch, which gives your code access to APIs which regular push notifications don't give you (trivial example being location) https://developer.apple.com/documentation/pushkit?language=o...
I agree; one thing I often see in articles critical of Amazon citing number is that they fail to account for the absolute absurd number of actors it employs, comparing more to large-scale societal elements like cities or small states rather than the generic corp that rents out the top 40 floors of a downtown skyscraper.

For some fun with with large numbers, Amazon currently employees more people than the state of Wyoming has residents(647,000 to 577,000). Over the course of four years Amazon has killed 10, (or hell, lets make it 50 to compensate for under-reporting) people by traffic accident; the population of Wyoming managed to achieve that rate of death themselves in about the span of a month (or six months for the larger figure) [https://wonder.cdc.gov/controller/saved/D76/D65F000].

I think those are just direct employees too, if they are fanning out onto contractors I wouldn't be surprised if they are ultimately controlling Walmart levels of employees (2.2 million).
I strongly believe no one has to die.
Intel's 7nm is also smaller than TMSC's 7nm.
They could be doing argon2(lowercase(password)). But you're right, it's unlikely that they're doing the wrong thing in the right way.
The real solution here is to simply write your code with an appropriate amount of abstractions, and then start with the simplest / cheapest backend that fits your needs. When it comes time to add Redis, or shared memory, or both, only a small amount of your code needs to be adjusted for the new backing store.
> Linux, for example, supports all the "weirdness" of flash with an MTD module which is low-resource enough for single-core sub 1GHz routers with 16MB and 32MB of RAM to handle.

Managing 16MB of SLC NOR flash is trivial for a 580MHz MIPS core with 32MB of DRAM. Managing 16TB of TLC NAND is completely different. There's a reason that SSDs almost always have 1GB of DRAM for every 1TB of NAND.
Well, that's because Explorer doesn't navigate the file system, but the shell namespace.
just rebrand your old first as business

BA’s first class is on a par with Emirates business class, actually...
Android cross compatibility is the only real feature I can think of.
Works with Wine, I'd like a port to Linux Arm64 though, it's a nice graphic file manager. On the other hand, ranger is adequate.
I had the same thing in the US and no, there were no copays or insurance billing associated, beyond the fact you're getting your care at that hospital.
I think you misunderstood Facebook's strategy here completely. The whole point of this feature is to add value to Facebook's main app, as this is a feature in the app and not a separate app itself, it makes the product more sticky and less likely people will delete their facebook account in future.
This is not correct, and I'm not sure why you would think this. In general the way to think about capital gains is that you can't qualify for them unless you have purchased something that then appreciates in value.

So for stock options, you don't start the clock on the long term capital gains rate or set a cost basis for your capital gain until you exercise the option and shell out the cash for the strike price.

There is all kinds of information on the internet about this if you don't believe me.
Ask HN: HN'ers with full-time jobs, do you have any 'side hustles'?
Well, "old white dude" comes from the study participants. "rich" comes from people you want to sell to and/or people who have the resources to pay you.
Petascale Computing Institute 2019 presentations publicly available on YouTube
This article doesn't quite explain what's going on as much as I would like, so maybe I can add some more detail.

The key problem from an app developer's point of view is that the iOS push notification API doesn't just let a server send an encrypted blob of data to a user's app, and have the app handle it locally, deciding whether it needs to display a notification to the user.

What the iOS push notification API does let you do is send an encrypted notification to a user's app, and then if the user is going to see this notification, have the app locally intercept that, and decide what exactly to display. So for an encrypted messaging service, you can send the encrypted message, and have the app locally decrypt it.

The difference is that the push notification API doesn't let you send push notification data that won't be visible to the end user. So to use this API, your server needs to know that a user just received a message. It can't send out something like an encrypted blob that could be a received-message or could be a different sort of encrypted message like a read receipt, and let the app decide locally. This isn't optimal for a private messaging app - ideally the server wouldn't have to be able to distinguish your received messages from other metadata. This is similar to phone call metadata leaking, where even if someone can't eavesdrop on the content of your phone calls, you still don't want them knowing precisely when you made a phone call.

So one weird thing about iOS is that the VOIP APIs did give you ways to silently send an encrypted blob of data from a server to an app. This functionality would be logical in the push notification API, but the push notification API didn't support it and the VOIP API did, so developers started using the VOIP API for it.

It makes sense that Apple wouldn't want the VOIP API used in this way. But secure messaging apps have a legitimate reason to silently transfer encrypted data from server to application. Making this impossible will weaken the privacy that apps like Signal can offer, not improve it, because Signal will have to know a little bit more about your messaging behavior in order to send you push notifications.
No. You're succumbing to the fallacy of group selection. Evolution operates on a gene-specific level. A trait that maximizes an individual's inclusive genetic fitness at the expense of the species will always out-complete.

Genes most definitely do not want to promote evolution in any sense. Since evolution by definition implies the replacement of currently existing genes with new genes.
thanks!

i’ll watch the video then, very interesting
See other thread that the Netherlands has one of the worst infant mortalities in Europe. It's not due to these gov't programs (or lack thereof), but rather the demographics of the population.
You are right. But then it boggles my mind even more that one would go through the extra effort.
Elections considered harmful.
> We're past the point

It never was a point. It was common sense since the old days to never expect privacy from what you publish on the internet. That's what publishing means.
I don't think it's that simple. From Google's research, SMS 2FA is highly effective against credential stuffing attacks: 100% coverage against automated bots and 96% against bulk phishing:

https://security.googleblog.com/2019/05/new-research-how-eff...

SMS 2FA can fail, spectacularly, for targeted attacks. TOTP would not solve this, only U2F/webauthn.
What would said dumb money be holding if not index funds? Single name blue chips? What would the blue chip holders do in the counterfactual world where there is a big downturn?

Perhaps there will be greater correlation between names in a downturn, but then again, factor-based investing might offset some of that.
> then you'll only show one angle of your life, and the rest will simply become invisible to facebook.

I feel like the opposite may happen? I.e. instead of only showing one angle of their life, the idea is that people share _all_ angles of their lives. Either way you end up with the same result "one persona".

The only people who care this deeply I think are the same ones who block ads or don't use facebook anyway.
Data on political polarization in America is really interesting. One feature of the data I find fascinating is that in 1994 many people were not "consistently liberal" because they opposed gay marriage. With the big shift toward acceptance of gay marriage these people are now considered "consistently liberal" and by Pew's reckoning this means that liberals have become "more polarized". In my opinion there is no morally defensible compromise position on whether homosexuals deserve their natural rights, so I find this quirk of the survey interesting.

If you look at the ten questions of the Pew survey, it seems to me that anyone who can answer on the conservative side of all ten questions (in order to earn the "consistently conservative" epithet) must be the biggest jerk on Earth, whereas someone who answers on the liberal side of all ten has sensible and morally justifiable views, hence I take all the hand-wringing over polarization with a grain of salt.

https://www.people-press.org/2014/06/12/political-polarizati...
It may be hard for even the patient to know. They may have been vaping adulterated cartridges for a while but it was less or they may be sensitive to the additives. They could have had a day where they vaped a couple cartridges in a day when normally it would be a few puffs but had done that in the past with no problems. They can't even confirm the brands they think they are buying are what they say they are. People are taking spent cartridges and filling them to resell them. It's hard to tell on a micro or macro level who is doing it. Seems to me it could just be that CBD Oil with Vitamin E is at almost every gas station in the US so it's a reasonable cut to local dealers who are not health professionals.

It's the same problem that guy had who sniffed like 10 bags of microwave popcorn a day fresh out of the microwave because he loved the smell, lipid pneumonia.

Also the reports have said that many of the patients also vape nicotine so it's hard to tell. This looks like it's cut cannabis vape as the financial upside for it are more in line. People have had lipid pneumonia in the past from weird nicotine vape brands using oil based flavorings but that industry has an established pack of conscious producers of fairly safe products.

If it tastes weird, don't vape it. If it produces too much vapor and makes you feel like your breathing is even slightly restricted, stop vaping it. Don't vape smuggled carts from legal states if you're in an illegal state unless you are really really sure it is what you think it is. Almost anything can be in a mildly viscous amber liquid. Your lungs are your life!
If anything you're stigmatized in the US if you don't breast feed. Not sure where you're getting your info from.
The life/reproduction cycle of jellyfish makes it difficult to talk about "common parlance" age. Someone even made a website about it: https://immortal-jellyfish.com/
In Apple's API you can send an encrypted message and have the app decrypt it. But you can't send an encrypted blob of data and have the app decide whether that blob of data was a message to be shown to the user, or a different sort of data like a read receipt. So the server needs to be able to differentiate the types of data packets sent from user to user, in order to use Apple's notification API, which is less private.
...so short CRE REITs, am i right?
Oh interesting. I've never actually seen a setup like that.

I will now consider negotiating for something like that if I ever again join a startup. Thx!
I am not sure Maudlin's example of counterfactual causal reasoning is counterfactual -- though, for all I know, it might be rung-three causal reasoning by Pearl's definition. All the subject seems to be doing is searching the tree of possible outcomes in order to select the most desirable one. She could only say “had I let go of the lamp it would have shattered” after having chosen an alternative course of action and then done it, and by then, of course, it can have no causal role in the decision-making.
I have never heard of that. I mean, I don't doubt it's true, but I think I just want to see the files usually. But then again, I don't know what that means.
From the article:

> The Thymus Regeneration, Immunorestoration and Insulin Mitigation (TRIIM) trial tested 9 white men between 51 and 65 years of age.

Who knows if this set of treatments will work for other demographics? I'd certainly bet it'd work differently for women, given the differences in hormonal balances. (And IIRC there are different recommended steroids for women - since at least one of the drugs in this cocktail was a steroid, I'd think that would come into play)
From the Readme:

> We take the security of this project seriously. Report any security vulnerabilities to the GitHub Bug Bounty Program.

I'm guessing that means it's actively maintained.
A camera on a stick does the same thing?
PowerToys: Windows system utilities to maximize productivity
Yes, if it were large enough... Say, bulb-sized.
Your clock as a guy actually isn't as different as you might think compared to women.

Yes, biologically speaking, having kids later in life is more doable for men than women. But you don't really want to put it off much. Kids require a lot of energy, and you want to be around for them growing up and moving out. And hopefully having their own children.

Don't be thinking you have all the time in the world!
That's far more compelling. If a % of the ~$15k+ we give stripe annually (via cc processing fees) went towards loan repayment, we'd likely have perpetual loans open :)
My set of monitors alone makes me globally unique.
If a mutation occurred in an individual such that it would not age, while everything else remained the same, that individual would have more reproductive opportunities and so would its offspring, but there would still be differential success, that is not all individuals would reproduce at the same rate. So you would still have reproduction, heredity and differential reproductive success. So evolution would continue. The fact that all creatures age suggest there is some fundamental trade off between longevity and other types of fitness.
Honestly, I'm past caring about upper length limits, however stupid they are.

What really pisses me off is not validating on it, so my too-long password is happily accepted, and I have no idea what it is except that it's some prefix of the one I saved.
"Fine" given that you eat such foods rarely and/or your time horizon is months not years. No immediately apparent health effects, but long term ones - sort of like eating fish high in mercury.
Designing Analytics for Growth Measurement
They use FB Messenger for sure. From what I hear it's still popular among younger cohorts.
Far easier said than done, I'm sure.
Nitpick: I'd think it's significantly more than that, not because the number of users is large, but because .000000001% is mindbogglingly small. Remove a few zeros!
Patrick, is that you?

I just wanted to say that I admire all that you guys are doing at Stripe. My favorite company currently. Please keep up the standard, even when you do eventually go public.

I feel much better now that I have got that off my chest.

Downvotes in 3..2..1
It would be nice if there was a HTML standard for specifying password requirement data, like length ranges, valid/invalid characters, character type requirements(3 letters, 1 number, 1 special character), etc, so that password managers/generators could use it to always create a valid secure, valid password for you.
Find My Friends rarely works reliably for me. It regularly says the person can't be located, while if I use services like WhatsApp this never happens. It's also way slow, I've tried meeting people while we were both on the move and missed them because the update rate was too slow. I don't use Life360, but Find My Friends hasn't worked for me for a long time.
Aggregations and the like require sequential access, but random access is very valuable for RDBMS where in most cases the vast majority of operations are random (write a record, pull a record, update an index, etc). Many of the systems in play have an extraordinary number of optimizations for sequential access -- assuming terrible random access -- but would still hugely benefit from something like this.

However those who say it obsoletes anything beyond the most trivial of KV stores are way off the mark. It's a possible optimization for all sorts of database systems, certainly including RDBMS systems (many of which are layered over a KV store or sorts). There are disk systems for Oracle DBs that can run a subset of SQL right at the storage later, filtering by predicates, doing index searches, etc.
Author here, happy to answer any Q's.
Thank you for sharing that. Reading material for tonight ;) I googled ECKD and it seems it is still in use and support by IBM (maybe through emulation).
Yeah, there's been five new frameworks since then, why isn't GitHub keeping it up to date?
> Admiral: Restrict the inclusion of a % character.

I guess the password is being used in a query template? Seems like a very bad idea.
Create and copy crypto-trading strategies without coding
iOS 13 has a background task API - why can't that be used?

The iOS 13 background task API limits your background tasks to a few minutes. So, they're useful for short batch tasks you don't want to interrupt when the app closes, like cleaning up a database. They aren't so useful for listening for a notification that could come after hours of inactivity.

Incoming notifications can trigger application code to run - why can't that method be used?

This is probably what apps will do in response to the rule changes. It isn't ideal, though. Incoming notifications can trigger application code to run, but only for notifications that include a visible display to the user. This means that a server has to differentiate between different types of data on their network, like knowing the difference between a new user message and a read receipt. It is not ideal for privacy to expose that information to the server.

So, this isn't the end of the world, but it will hurt the privacy model of non-iMessage private messaging apps.
That's what the Open Channel SSD concept is. It's been getting a lot of attention in the past few years, but it seems like many potential users still balk at the idea of having that thin of an abstraction layer. The open-channel stuff has been influencing the addition of other new features to the NVMe protocol that expose most of the information an open-channel SSD would, but don't break compatibility by requiring the host to use that information.

Several vendors are also supporting the Zoned Storage concept of making SSDs that have similar IO constraints to shingled magnetic recording (SMR) hard drives. Those constraints aren't a perfect match for the true characteristics of NAND flash memory, but it does handle the problem of large erase blocks.
Victims furious as judges dismiss 2009 Rio crash cases against Airbus,Air France
equal parts sad and funny

cargo cult driven marketing