skysight-inc/HackerNews huggingface dataset:
It is a tool to have a discussion, not a solution to risk management. Security is one of the few fields that uses qualitative measurements, and any attempt of applying more quantitative techniques faces a lot of resistance.

CVSS in isolation is pretty good, but for risk management it lacks "context". A higher level framework would be needed for that.

A bug can have a CVSS score of 10 (critical), and still have little to no impact to the business. It's all about context.

I don't think it even ever intended to be more then a data point to consider for risk management but dev
The problem with relying on crowdfunding and social media to address issues is the same problem with using voting systems to select government representatives - you mostly just end up with media-savvy, charismatic people - and not necessarily the most deserving, talented, or qualified.

Perhaps the most deserving fundee (is that a word?) is not familiar enough with marketing tactics to build a fundraising campaign. And perhaps the most effective government leader is a monotone guy who gets nervous in front of cameras. But we'll never know, because our systems rely on popularity.
The point of the SE line is so Apple can bleed out older supply lines, not make a smaller phone.
Regus offers all the same flexibility as WeWork but without the flashy decorations and services, and thus offers a lower price premium.

If you still want all that then Regus has a new sub brand called Spaces: https://www.spacesworks.com/
Why would they name a new phone with a number that sounds 2 generations old? At least 8 and 10 were released together.

It would make to call it iPhone 11 Lite or something alone those lines (iPhone 11T?)
i bought the latest ryzen. very satisfied with the purchase so far :)
https://www.geoengineeringwatch.org/
the thing is, these rich people aren't storing their wealth under their mattress or burying their gold.

their wealth is tied in stocks, so a lot of it is on paper. They also would invest their wealth (as inflation would erode it). Investment means more jobs, more work opportunities for those who don't have any.

the problem lies in policy. Things like stock buy back schemes and tax "loopholes". But these have nothing to do with the rich, and everything to do with government.
Handling Exceptions Using the Either Monad in JavaScript
That part is (hopefully) obvious to the typical HN reader, but the fact that some things that make maintenance harder also make it easier for non-developers is sometimes missed.
> The worst nuclear power station accidents have killed far fewer people than the worst aircraft accidents.

This is just simply a lie.
Paypal Exit Attract MasterCard, Visa and eBay in Living Facebook Libra
I've never played this game so this is an outsider's understanding. It looks like there was an in-game event involving an asteroid destroying the game world. It created a black hole which leaked into the game's web presence, including social media.

This was precluded by the initiation of a new storyline. Apparently, it all may be leading to a massive update of the game. Players are eating it up. Amazing PR stunt.
Wow, thanks, I was planning to not even click the link because, well, 60 minute video.
I haven't tried coding live, but comment threads do seem real-time. Probably wrong assumption on my part, sorry.
LEDs could still have all the same issues, it depends on the LED and it's particular output spectrum and the energies for each wavelength. I would check all that before concluding they would be good or bad.
The paper refers to CO2 as "carbonic acid gas". At this time, did they know that CO2 was also produced by burning fossil fuels? Or by respirating living things?
I like how the website of the author of a book titled "How JavaScript Works" apparently has no JavaScript on his website.
Read their paper, they stated form the beginning that TON isn't able to launch decentralized. The initial investment to run a node is to high so they can't just put some binary on the net and ask people to run it. They planed to run every node in the beginning to show that it works and then everyone can join (with no control over who joins) but to join you have to have GRAMs so by stooping them to distribute grams they basically made it impossible to decentralized. Although they could still give out GRAMs, start the network and just ignore the SEC. Technically the network would decentralize over time but for that to happen there must be a market for GRAMs. Who's gonna obtain "illegal" GAMS to run a node and get paid with "illegal" GRAMs which can only be sold "illegal" again. And even people would do the services on TON are meant to be used by the masses if they can't simply buy GRAMs the whole thing can't fuel itself.
Targetprocess
WTF? That is pretty much the exact opposite of reality.
It's mostly oil money. They have to park it somewhere. The Vision fund is a nice cover to invest in fancy tech companies but there's no real selection process. Instead they relied on having so much money that they can just buy their way to success.

Now they're realizing it's not that simple to deploy $100 billion without vastly skewing the market and basically creating their own bubble.
Users usually post workarounds in the threads. They did in this thread.
And in a situation where there are multiple products the matter gets more complex and competing priorities mean the wrong vice is made more often.

I once nearly left a company because of being ordered to ignore a massive security problem in a legacy application that was actively used by many people to instead concentrate on tweaking bells & whistles on the shiny new thing that hadn't left prototype yet. That would have been fine if other resource was assigned to the security issues, but it wasn't. They did eventually see sence, but I didn't exactly make myself popular with the powers that be at the time.
Paypal Exit attract MasterCard, Visa and EBay in Living Facebook Libra http://www.torixus.com/2019/10/paypal-exit-attract-mastercar...
>There also seems to be a certain, somewhat outdated, concept of masculinity at play here.

Jesus Christ. If "airplane mastery" is what we call outdated masculinity, I really worry for what else is left in store for our rotting culture. Is it outdated to expect competence? Sully demands competence from pilots and careful design from manufacturers. That should go without saying.

>And, of course, combining these expectations with stereotypes of African and Asian companies (and people)

These stereotypes were correct because of cultural norms. In certain cultures it's wrong to correct your superior, even if his mistake will crash your plane.
Once you go through the cashier and pay... you're in the food court. Most food courts aren't designed to kick people out immediately.
> resident "IT person" isn't qualified

More and more, I think such a phrase should read, "resident management requested too many features without sufficient budget".

> code which was cobbled together by half a dozen barely-qualified staff

Idem, "code copy pasted to satisfy excessive requirements of pointy haired boss" is the more informative statement here
Same analogy was used for the internet and look what it gave us? It is also based on the Wild West of the USA and it turned out ok, not without its own problems but I'm not sure we would be saying let's just wipe the USA off the map because when it started things were not perfect.
This is the source of one of my favorite jokes from The Simpsons:

MONSTROMART

"Where shopping is a baffling ordeal"
> Amazon has their Essentials brand for vitamins which is apparently legit.

Right now, their policies may change in the future.
Yeah... Think it has more to do with removing the backdoors and malware in the code before the formal investigation of FB begins.

https://aim4truth.org/2018/12/04/facebook-no-name-sent-to-sp...
Usually when I visit web shops accepting cryptos as a payment all top coins accepted are pow coins.
>All cloud providers have prepackaged VM/Containers with all the versions aligned and GPU libraries + DL frameworks preinstalled with full GPU support enabled.

ah didn't know that. I've been spinning up blank nix boxes which does end up a little fiddly until you find a combo that works
it s as if we are regressing
The most obvious problem with WeWork is that the company has been run by someone who is some combination of corrupt and insane. Changing that element is an obvious solution to at least try.
Bags of debris from Fukushima disaster swept away in typhoon
Seems unlikely, it's not as though their core business lines are unprofitable.
wrong

BitCoin is $bsv and the first client is windows

satoshi has patented to replace central bank initially tiny country
The point of the SE was to bring down the price of a device with a more recent SOC.

They did this by creating a new device based on combining a discontinued body and screen with a recent motherboard.

A refurbished 8 would not have the A13 SOC and 3 Gigs of RAM that Ming-Chi Kuo reports the new iteration of the SE will have.

They did this for the original by reusing the already paid off manufacturing equipment from the iPhone 5s line and updating the motherboard and camera.

Eventually, that iPhone 5s manufacturing equipment wears out.
They don't in trains, too. Sweet blissfullness of silence in the train is not something you appreciate until you really live there for some time and come back home for a holidays.
The comparison isn't about the quality, creativeness or usefulness, but about on what kids spend their free time and attention.
Sure thing -

https://www.investopedia.com/ask/answers/difference-between-...

https://ftalphaville.ft.com/2018/11/13/1542091438000/How-acc...

These results beg the question of just how much weight we should give analysts' earnings forecasts. It turns out, not much, especially in the long run.

Peter Berezin, the chief global strategist at BCA Research, is out with a new report about stock selection and market timing. In it, he asks the following: "How can we distinguish between hidden gems and fool's gold?" The answer, he determines, is not the thousands of analysts Wall Street has bankrolled to do just that

PS - Just to be perfectly clear, I was definitely joking about WSB. Sister comment is right, WSB is the 4chan of "finance".
youtube and indie games literally started as flash
Given you assumptions, the difference between the 80th and 90th percentile is about twice as big as the difference beteen the 99th percentile and the 99.5th percentile.
Read a few Jules Verne books and give it your best shot.
A doctor doesn't have to be sick with all the diseases they know about.
If the court is in your home territory this may make sense. If, for example,you got a subpoena from a high court in Saudi Arabia, would you respond? Would you even hire a local lawyer? Nope,you would wait until it was filed in a court in your country of operations.
We're now at LXC/LXD version 3.x. Using LXD (LXC container orchestrator) is a breeze, with better and more polished UX than Docker, IMHO. Then again, LXC/LXD is more of an alternative to VMs than to Docker.
Now the young ones will understand why people with 9's and zeroes in their numbers were such a pain to call.
> bulk size prices can act as a secondary filter but an interesting mechanism is the membership cards are checked at the door and physically keep people out whereas bulk prices (even if low-income people don't buy them) don't accomplish the exact same effect.

But this is untrue. Costco doesn't check membership at the door. That would block you from purchasing things that don't require membership.

They check membership at the cash register. Anyone and everyone is free to walk inside.
That flows. I think "if as some suppose" is pentameter?
> can be safely deprioritized until your app gets complex enough to need it

I'd accept "until your app looks like it might leave proof-of-concept classification".

And always be mindful of how quickly PoC code can magically end up needing to be production ready overnight or worse being in production before it is... Retrofitting security can be a nightmare, one that can be so easily avoided.
Reviews can still be important. If you have a lot of positive reviews and don't need a brand name, it could be worth the risk to save money. But you don't want to be the first to test out.
Nuclear waste from nuclear weapons is quite a bit different compared to what civilan nuclear power tends to produce. Its pretty hard to come up with situations where civilian nuclear waste would be very harmful to anybody.
Even though I'm strongly biased towards agreeing with Rachel here, I'm going to throw this out here anyway: in case of 3), you could technically always fire the three subpar vendors and replace them with their better competitors (assuming there are any). Replacing a vendor may be easier than replacing an in-house team, but then again, it may not.

But with vendors come different issues. They can go out of business, or get acquihired. If their product is in any way not aligned to your business needs - and it almost never is - then you have to either throw a lot of money at them so they customize their service for you, or you can alter your business to fit the vendor's offerings (and keep altering it as they iterate on their product). Both options are terribly inefficient compared to just asking your engineers to tweak something in your own codebase.

(And then your country's government and the US government decide to unfriend each other, and suddenly 95% of services you depend on and their competitors can't service you anymore. There's that risk too. See e.g. Venezuela.)

I viscerally hate the idea of a business being assembled purely from third-party services, reducing itself into a pile of contracts. I really dislike the way how our economies start turning into NPM. But everyone keeps saying there are good business reasons for that. So maybe they are. I don't have a formed rational opinion on which way is better yet.
yup on “iphone 9” naming [0]. it just makes a lot of sense based on its positioning as the iphone 8 successor (rather than SE 2).

apple really doesn’t want to walk itself back on pricing, so this is its strategy to maintain premium market position while acquiescing to all of us who’ve so far balked at paying $1k+ for a phone. premium brands often end up going downmarket in search of revenue growth as the premium segment saturates. it doesn’t always go well (brand deterioration—>loss of pricing power) but apple has been relatively successful in other product categories (e.g., laptops).

[0] said as much here: https://news.ycombinator.com/item?id=21244783
I thought it stood for "Small Edition"
The best workaround I've found for this in large companies has been to sidestep the formal management structure as needed to actually get things done and working properly, and then give management credit for it.

The cleverest way to get rid of bad bosses (besides moving to another group yourself) is to get them hired by another company or promoted to irrelevance (though both strategies can backfire.)
Interactive Canvas in Jupyter Notebook
React: Lifting state up is killing your app
Almost all file systems have metadata. Its up to the apps what metadata to store and display. Music files have artist, album etc. photos have location, camera settings etc. The tree structure is just a feature. You can for example make one file appear in many folders. User rights are often linked to the tree structure, which is very useful.
> who bear hatred towards roughly 50% of the population

Either the word misogyny is not used in this sense anymore, or the word "hatred" has changed its meaning. It's too common nowadays to see men being accused of misogyny for poor control of sexual impulses (not necessarily at the time of the accusation, but at any point in the past), or for expressing scepticism about certain political claims of feminists. Whatever that is, it can hardly be described as "hatred".
I think the argument could be a bit clearer here.

A SAFT allows a party to offer the delivery of tokens at some point in the future. This offering is a securities offering under US law, and therefore has to comply with the relevant regulations. In practical terms, that means filing some forms with the SEC, ranging from fairly lightweight forms if you're offering the SAFT privately without marketing, to increasingly heavy burdens if you want to market it, and the "mini-IPO" leavels of bureaucracy that would attach to a Reg A+ offering. So, it's perfectly possible to offer a compliant SAFT if you do it right.

The problem comes when the tokens are to be delivered (which was imminent, in Telegram's case). The SEC argues that not only was the SAFT contract a security, but the rights offered to Gram holders are themselves constitutive of a security, despite not being registered as such.

The SAFT is a security, but one for which Telegram appears to have been mostly compliant. The tokens themselves, which are set to be delivered to those original investors, are not registered as securities, and this is the problem, because the plan is to distribute those widely to the public, or "retail investors" as they would be regarded in the context of a securities offering.

If the Gram token were not a security, designed in such a way as to avoid triggering the Howey test, then there would be no problem (aside from Telegram's other problems, but I'm keeping the scope narrow here).

So the "SAFT is dead" argument isn't that the SAFT is automatically non-compliant, or that nobody can do a compliant SAFT offering, but instead is this: that some people in the blockchain community erroneously encouraged the belief that whilst a SAFT offering is a securities offering, the tokens that result from the investment are somehow prevented from becoming securities because the "security-ness" stuck to the SAFT itself, and that this view was wrong.

This gets tricky to discuss because the SAFT contract is basically fine, but the mistaken understanding of what a SAFT can do in practice is what allowed people to believe that selling Grams to the general public was likely to be a non-regulated activity. So, that interpretation of what SAFTs can do is dead, yes. For my part, it's not something that I ever believed, so it doesn't register as being the real news here.
These things are incredible. I used to turn it on for my eyes, but i noticed that when on my laptop in bed, without it on, i wont feel tired at all. I turn nightshift on and suddenly i feel sleepy :)
It's still chugging along, the container image repos are still updated regularly, and there's a very nice command line interface package called lxd (however, the command line command it provides is is 'lxc').
In most cases, the scholarship also pays more if you have a kid. Yes, you have to pay around 200€ if you have a usual scholarship.
I think it's Rosa Luxemburg who said "freedom is always the freedom of dissenters". I believe that's true, the problem is knowing who are the dissenters, as many political groups want that label while many of them do not deserve it at all (obvious example: Trump presenting himself as an anti-system candidate).
> marketing an inherently unstable aircraft

The 737 Max is not an inherently unstable aircraft and to say so grossly misunderstands the term and what MCAS was doing.

MCAS existed to make an inherently stable aircraft handle in the same was as previous 737 generations. Design changes had forced the addition of this system in order to retain the same type rating because those design changes caused the aircraft to handle differently to previous generations.

MCAS was about keeping the same type rating and the same handling characteristics. It had absolutely nothing whatsoever to do with 'inherent instability' - the 737 Max is an inherently stable aircraft without MCAS.

Continuing to spread misinformation about what MCAS is and the 737 Max stability is detrimental to the discussion.

EDIT - There is clearly a lot of misunderstand about the terms 'stable' and 'unstable'. These has a defined meaning in aircraft handling. I encourage you to educate yourselves on the term, on what stability actually is in relation to this discussion.

https://www.boldmethod.com/learn-to-fly/aerodynamics/3-types...

The 737 Max is a stable aircraft. The 737 Max without MCAS activated is a stable aircraft. It is an inherently stable design.

The 737 Max can and was flown without MCAS activated (even by the same aircraft as crashed, the pilots of the previous flight pulled the stabiliser cut out switches and went to manual trim control).

It is a stable aircraft.
It really depends on platform. Adwords/FB are PPC. But many of the smaller alternate display networks charge by CPM (1000 views) or similar.

As a rule of thumb paying for views means lower value. Often networks try and justify it and say we are as 'premium network'. I treat those words as a red flag more than CPM as I'm yet to test a 'premium network' that has better ROI or customers than others. All that said, sometimes CPM can strike gold if you know what/where/who to buy, but if your taking sales pitches from reps its more often not good.

But sometimes your company is pushing for growth, you've maxed out the performing channels and you have to go for the low or negative ROI sources to reach total targets and when all things are merged metrics work out for the business.
The whole nuclear waste of the last 50 years of french nuclear fills a couple of buildings. The volumne is really not a problem at all.

We could fuel the whole world with nuclear fuel and not have any significant issue with nuclear waste storage.

Specially if we are moving to more modern reactors who can consume the current nuclear waste and massivly reduce the volumne (something we should manage over the next 500 years I'm sure).

In fact with modern reactors you can get to a point where you only have 300 years of storage requirment until it hits background radiation.

And even if you want a 1000s of year solution, we can absolutly build those already and its not really all that much of a technical issue. As has been done in Finland I believe.
Nice idea! I'm a bit sad though that this doesn't appear to work on touchscreens, isn't that sortof the point? (tried in Edge and Firefox, win10)
Sorry, but you are still taking an extremely narrow interpretation of what I wrote and then asking me to defend the thing that you made up in your mind. Finding some Democrats that support nuclear doesn't in any way invalidate what I said. Moving the discussion between layers of abstraction from generalizations to individuals and back is a disingenuous way to debate. The only thing I needed to support my position is the survey of support showing that the majority of Republicans support nuclear while the majority of Democrats don't, and that this state of affairs has held consistently over time.
Was there a "computing hotspot" where you were at the time? I think with all the school issues (and university issues) in South Africa it would be cool to have sort of (physical) computing libraries with Raspberry Pis or something like that–a sort of enabling environment where independent kids would at least have the resources necessary to build an eventual career for themselves (perhaps unwittingly at first).
Peter Ratcliffe's Nobel Prize Winning Study Was Rejected by Journal
That's exactly the spirit! The internet makes it so easy for "poorer" countries to level up damn quickly! Spread the word there! <3
When hard work is not enough: time to work on your personal brand
And it's not only kids. Grown-ups are supposed to do it at work, too. When casually I suggested in my office, London, that we should swipe our desks weekly people laughed at the idea, others were surprised and upset. It's not their job, isn't it?
This shows the letter: https://twitter.com/pipcosper/status/1182799512621977600