skysight-inc/HackerNews huggingface dataset:
Didn’t look at the code that closely, but there’s an option to only test the server for the exploit. As long as that is enabled, it doesn’t appear to write any files, etc.

I would say it might be better to just test against a localhost server in a VM to be on the safe side though.
Can you define lamettrieism for me? I haven't heard that term before, so just curious.
The page you're looking for isn't here.
Either someone gave you a bad link or there's something funky going on.
I question why doesn't some amoeba just maximize its fitness and so turn into effectively a bioweapon that eats all the mammals on the planet? It has some sort of intelligence that restrains it from wiping out its food source? I do wish for Genetic Science and all relevant fields to take that mystery very seriously and solve it securely before its confident to mass replicate novel species in the huge system. Species which have evolved somehow over ages to not be routinely in massive flux between champion species. The microbial world could liquidate swathes of the phylogenetic tree repeatedly, if all it needs is a chance mutation to create a new alpha species. What stops an experimental GMO containing such an over-competitive mutation, or a precursor to such?

There is so much yet not known or controllable in microbiology, it does worry me that the prevailing attitude is so confident with the little that is known and doable. Its alarmist and uncertain, but so is the foresight that significantly increasing ghgs through the whole atmosphere is too dangerous, or filling the sea with more plastic waste than there are fish left in it is not worth the price and risks. Hopefuly culture is on the verge of accepting these concerns have had rational basis. It needn't result in the end of modernity, but in the appreciation and protection of some older things.
Ask HN: Health Insurance Plan Translation?
Is there any portal site that aggregates, normalizes and translates U.S. health insurance plan descriptions from the major providers into conversational English?

I would pay a subscription fee for such a service.
As anyone who's had the misfortune to be involved in commercial decisions will know:

> Investing in [something that sounds like infrastructure]

CapEx

> Paying off technical debt

OpEx

See also: https://twitter.com/swiftonsecurity/status/64279083695501312...
Would be cool if the service was a bit better integrated into Twitter.

Writing a Tweet, adding code that gets displayed as an image plus a link to some text-representation of that code-image.
just fwiw as an independent musician and someone who is trying to get by on monetizing my creative output, I certainly have spoken to many creatives who will just keep their music on loop on Spotify all day to accumulate royalties. there are also loose groups based around making playlists of music by independent artists that the entire group then commits to streaming all day to help generate those streaming royalties. just figured a bit of relevant information might be nice to share :)
Personally I think the idea of applying IP rights to living things is perverse and despicable.
This piece and the book it refers to talk a bit about that idea: Essentially that the diminishing marginal utility of wealth and its growing concentration is creating a problem of inadequate aggregate demand:

http://bostonreview.net/class-inequality/jonathan-kirshner-w...
Isn't the problem there the application of improper, illegal pesticides? The story linked for the 45 deaths from poisoning directly states that the pesticides involved were siezed by the state.

Then later in the article:

> He, however, pointed out that the failure of this technology is unique to India. None of the 14 other Bt cotton-growing countries have faced the problem because they follow pest management strategies such as short-season crop, pheromone-based monitoring and so on.

It seems from even your source: no deaths were the result of either variant of Bt Cotton, and India's failure to maintain the crops is directly linked to shortsighted mismanagement of crops, and possibly unique conditions in India.

I'm no great fan of Monsanto, but it doesn't seem like there's a case of killer cotton here, but instead a predictable tragedy of routine human foolishness.
I wonder if something like the Kickstarter model could be applied to this sort of research.

Novel investment models and the increased accessibility of bioengineering technologies to individuals have the potential to revolutionize the field in the future.

Witness the blossoming fields of biohacking and citizen science.

The fruits of individual, independent experimentation and development may get out in to the wild, if they haven't already, and no patent is likely to stop them.
Yeah I think that's fair too.
I don’t understand how my iPhone 7+ can be so identifiable. There’s a kazillion jillion iPhones on the market.

I am disappointed :(
There’s some serious dishonesty going on here, trying to portray end to end crypto as some kind of horrible thing only criminals use. Yet I’d imagine the combined userbases of WhatsApp, Signal and Apple iMessage make up the majority of all message traffic worldwide, excluding countries that restrict internet traffic significantly. For example, you can’t subpoena to get the messages in any of these... this is the same for all E2E chats.

It is not a bug that police and governments can not access and hear all of your “offline” communications. It is likewise not a bug that police and governments can not access and see all of your online communications.

This could be an interesting story if half of it wasn’t just unabashed fearmongering.

I look forward to going to prison some day for dual booting my computer because some criminals did it on phones once!
It doesn't make much sense to state things, I can't back up with references (I do not remember where I read it), but a few months ago I read, that by 2006 (or 2008) 60% of all web pages were XHTML. Now, whether that means, that they have been served with the right media-type, I do not remember, but what I know, is that "nerdy" places, and that includes Steam, HumbleBundle.com and GOG.com, were all running on XHTML. So, it was not just a bunch "the minds of a relatively small number of developers".
strncpy notoriously doesn't necessarily 0-terminate.

(It also always pads the full length with zeroes if necessary, so it's almost never what you actually want to do.)

The C standard library is full of these footguns.

I won't say C++ doesn't have its bad parts, and I certainly wouldn't say that it's impossible to avoid the bad parts of C (some would), but you probably aren't going to manage.
Permissions are not authentication, they are authorization. AAA Schemes exist (authentication,authorization,auditing) such as TACACS. Perhaps a web version of TACACS+ with modern public key cryptography and back-end agnostic standard would be ideal?
From Wikipedia:

"The hydrazine antidepressants...were discovered and initially marketed in the 1950s and 1960s. Most have been withdrawn due to toxicity..."
Check out AWS Cognito
I distrust my fellow software engineers when they say they need time to pay tech debt.

There were many times where I refactored code that never received any additional updates or to have the feature removed. I wasted a lot of time without any real gain for it.

There are real costs to paying off tech debt and it is easy for engineers to spend their time on low value refactoring.

Software engineers are not always good at prioritizing the business value side of their work so they aren't trusted there.

If you can show you can prioritize business value then it is easier to convince management to give you two weeks to clean up tech debt.
> when the direct analogy is to capital underinvestment

https://www.google.co.uk/search?hl=en&gl=en&q="capital+under... (479 results)

That's because you've just made the term up. If you meant instead "the underinvestment problem", then that's actually the opposite -- that's avoidance of pursuing new features because it'll incur technical debt.
Yeah, this is the reason why I don’t donate even a cent to charities that ‘claims’ to help Africans and North Koreans.

I’d rather give a dollar to the local homeless shelter and watch them burn fuel with it at night, than my cent going straight to corrupt governments and militias.
> Yes, of course people usually trust the US government. We do so every time we get on a plane, keep money in USD, or run Windows, MacOS, etc.

Trust isn't binary, nor does it exist on a single dimension. I might use the products and services of US companies, I might conditionally trust the judgement of some US government bodies, but there's always a heavy set of caveats.

I wouldn't trust a drug that had been approved by the FDA until it had also been approved by the European Medicines Agency. I would trust a NIST standard for metrology, but I certainly wouldn't trust a NIST standard for cryptography. I wouldn't ever allow a European customer's data to be stored in the US, or to transit US networks in plaintext. I trust US-made hardware and software about as much as Chinese-made hardware and software, which is to say I assume it's heavily backdoored. I haven't ever trusted the words of a US administration, red or blue; I do broadly trust that Merkel or Macron will mostly keep their word and mostly honour international law.
Very interesting, never heard of this before. I gave this some thought, and I think I can come up with a simple reason for the observed behavior and also why it does not apply to humans. Female mice mate with dominant, territorial male mice who's role after conception is to defend the nest from the attack of rival males, who will kill/cannibalize the babies if given the chance. At some population density, there are way too many rival mice for a dominant male to defend, and this reproductive strategy breaks down. The imagined limiting conditions like food and housing were not the actual limiting condition of the colony - the killer rivals were. Human females don't form harems under the protection of dominant males, and thus this would not be a limiting factor for humans.
That's fair, and no one disagrees that this asymmetry exists. But the point wasn't to compare. The point was to highlight what can still be done on an individual level, because change there is easier to imagine happening than on the level of entire industries. Change has to start somewhere, so starting from the bottom and nurturing a healthier ideal of consumption could end up being the force that eventually pressures industries to change (by changing voters sentiments that indeed climate change is real; voting with their wallets by supporting ethical companies; etc).

That's the idea anyways. Countering this disinformation with efforts on all fronts (education, activism, lobbying, personal statements like recycling) is one of many ways to stem the tide.

Because the alternative is willful inaction on the excuse that we are not the largest wasters, which is an unproductive and defeatist mindset. If this line of thought takes root among individuals, I wager you and I both will agree that the problem of climate change will take a darker turn.
Well, the tone of the Pando CEO’s sale announcement was almost of mourning.

While Lacy didn’t go so far as to talk about failure she does recognize, with regret, that she is no longer able to do her job effectively. I found the frankness very emotionally touching.
The fun part in the video is when they neutralized the HF with sodium carbonate to make sodium fluoride which is used in toothpaste. Keeping in mind the concentration again.
G could make the spec,sure. But some other fully independent entity should manage the data.
Very cool.

It would be nice, if you could add a behind the scenes page on how you did it.
Wonder where it could have ended up… The oceans, perhaps. We may never know.
Universal Studios in China to Use Facial Recognition
> I think both applications and media would benefit
> from a split of html into seperate language for
> defining app-like sites, and traditional content pages.

This! I would go a step further, even. The "web-applifier" community should just leave the classic web and do their own:

* protocol (I am sure, HTTP is not ideal for serving apps)
* GUI description language (document markup language for UI design, really?)
* runtime (let them have WebAssembly and whatever they need)
* each app then could have their own window, making it look like a traditional app
How can you jump to such conclusions? There's a middle ground between "no ads ever" and "intrusive ads 24/7". Better targeting actually is an improvement for the receiving party too, but our solutions for better targeting are just really bad.
AI Terms Every Beginner Should Know
Your plan usually has a data sheet that distills the most important things but if you can provide specifics I will be happy to help. You can also call their customer service, or your employer's broker, for help :)

The premium is what you pay every month for the plan subscription.

Your deductible is the amount you pay before insurance does anything. Some plans are 0 deductible, 500, 2000 etc.

Then after you fulfill the deductible, your insurance maybe covers 80% or 90% of expenses. So if you get a $1,000 medical bill, you only pay $100 or $200.

A co-pay is a separate fee you pay to see the doctor. You pay every time you see the doc.

Out of pocket max is the maximum amount you pay in a year. So if it is $12,000, and you get a huge $500,000 medical bill, you will only pay $12,000.

Good luck!
Free Solo and Innovation
Thai would be fine if you increase line-spacing, and get proper ligatures for เเ◌ vs เ◌
That's not so bad. Only 1 in more than 200,000 have my browser's user agent (emacs-w3m).

I wonder what the most common user agent is.
In theory Julia is supposed to be fantastic.

In practice, things either don't exist, or are poorly implemented:

Plotting simple things take 30 seconds.

And that's if you don't count the time it takes to
`] add Plots`, especially on Windows!

And the REPL is broken.

And the editor is slow and annoying (Juno or vscode).

And documentation ranges from poor (no examples, buggy between platforms, broken links due to version updates) to non-existent.
For example, lots of tutorials will often link to broken links to official documentation, links that one time were thought to be working but now aren't.

And so on...
The stream of new security threats is never-ending, thus security must be a process that incorporates the reality that employees sometimes have days when they aren't working. Clearly, the OP is not being paid for 24/7 on-call security consulting, so why should they sacrifice their day off to investigate and patch security vulnerabilities?
Yes, and Amazon.
If they'd used webcrypto the private key wouldn't be extractable.
Ocean City Says It's 'Under Siege' by Chaotic, Unsanctioned H2Oi Car Show
You're right. No claim was made that he was correct on all matters. However, that comment provided no substance beyond a list of credentials.

The claim is that he is an expert on all matters related to programming; none of those credentials have anything to do with OS, ISA, or hardware development. Certainly a claim that he is more of an expert than anyone here, which is absurd because HN does not consist of a uniform sample of human beings. Much less uniform in the comments section. People who care to comment on posts like this are passionate about what they do; meaning that they are most-likely very good at it.

He might be able to design the best computer system for a narrow scope - which has already happened in some respects: we have Vulkan, which he very curiously avoids, instead opting for the heavily abstracted OpenGL.

His opinions are valuable and worth listening to. Others' opinions are not worthless merely because of his CV and social network status.
> He also said that even a small drop of HF on skin will cause a heart attack

I really wish people in the know wouldn't spread stuff like this.

HF isn't untreatably deadly like dimethylmercury.

HF is a strong acid and should be treated as such. Most effects of HF are quite treatable as long as you haven't managed to somehow convert it into elemental fluorine gas.

They key is that you have to know that you've had an HF incident.

What IS nasty is that an HF burn probably doesn't hurt until far too late. HF reacts with calcium and can inactivate pain neurons. And, while a small droplet won't do it, a large HF burn can cause a heart attack because it soaks up a lot of the free calcium in your bloodstream.

So, when you go in for treatment for an HF burn the doctor needs to start giving you calcium gluconate in order to resupply your calcium.

HF is nasty, but not so nasty that semiconductor fabs work terribly hard to get rid of it. Piranha etch (HF and HNO3 at 70C) is bog standard and people work with it every day.

Constrast this to Arsine gas (AsH3--flammable and toxic--oh, the joy!) which everybody works to get rid of.
Dumb question from someone who knows very little chemistry; is it possible for a malicious actor to use some sort of distillation process to take that 1% solution and concentrate it into something much more dangerous?
i would say that most rap music really isn't about that a all. there certainly is some obsession with this ideal of masculinity and of being able to solve problems with force and such but that isn't unique to hiphop, that's just a toxic obsession that many parts of society fall victim to. it's the same sort of obsession that leads to things like gang affiliate and the like. but i guarantee you that for every hiphop song you come across that talks about violence, or really any sort of glorification of illicit practices, that you can also find a song that is more positive and optimistic and more about hip-hop as a vehicle for self expression and for entertainment first and foremost. sometimes it does break down to talking about some of the real stuff that does happen to these people and that real stuff sometimes happens to be violent and not very desirable, but that doesn't mean that all of hip-hop is automatically that.
> Now you are confusing security of PHP as a platform with security of applications

The parent comment explicitly made this distinction
I assume the point is that you can’t mistakenly make a insecure call on the SIM if it’s data only.
Ads are worth it to some people, because products do have customers and some of those customers had to learn about the product from the maker in some way. They're not worth it for everyone that sees them, but that's exactly what these types of ad middle men are trying to improve - to be able to show relevant ads to relevant people. I say trying, because they've pretty much only failed at it.

The company you work at creates a product. How would people find out about it without any advertising? Keep in mind that even just having a sign in front of a store is advertising.
Show HN: CloudBrowser – Free 30 Minute Internet Cafe for Secure Browsing
> The whole technical debt discussion often makes me wonder if there's a fundamental distrust (or even disrespect) of software engineers as domain experts.

Yeah.

I think, sadly, this is mostly on software developers though. Look at all the pop culture stereotypes of programmers: whether those stereotypes are true or not, that is what culture thinks of us. Would you take seriously what a big-bang theory character would say? The problem is, I don't see most software engineers valuing social skills to better relate to other professions. Instead, there's a lot of whining about being misunderstood. And we are misunderstood! But man we're not helping it at all.
> Why doesn't some amoeba just maximize its fitness and so turn into effectively a bioweapon that eats all the mammals on the planet?

Evolution takes a long time. It's not totally unfair to describe humans as that amoeba, now approaching the nightmare scenario of consuming almost everything on earth.
Interesting! It’s definitely pretty difficult to read some of the variations but it is quite stylish, I don’t think I’ve seen a typeface quite like this before.
A fair algorithm would look like this. A user pays $10 per month. They listen to music for 1hr per day. That is 1,800 seconds. The bands they listened to should be paid 0.55c per second.

You need a per user second rate (Calculated monthly), applied to the streams they actually listened to on a per second basis. Yes, it is a large calculation, but simple compared to most ML problems.
Foucault did not come up with the idea of the panopticon. The credit for it goes to Jeremy Bentham, who died nearly a hundred years before Foucault was born.
Would love to hear more about your experience.
KeyDB Is Adding Features That Redis Has Ignored for Years
It doesn't decrease the volume of shipments, but most delivery trucks aren't 100% full. So they could make fewer trips if customers were willing to tolerate delivery delays.
With the latest macOS it is no longer possible to install uBlock Origin in Safari. Do you have a different recommendation that works with Catalina?
Perhaps a turing machine that can rewrite its own logic and microcode... but that still makes it a turing machine, right?
Buy Negative TripAdvisor Reviews
Star Control 2 is free now (and on many platforms): http://sc2.sourceforge.net/

It will probably surprise first-time players with its depth and breadth and non-terrible UI (which you might expect in an early 90s game).

Save early and often, there are no autosaves.
I've recently started listening to the Happiness Lab, a podcast by a Yale professor called Dr Laurie Santos which covers scientific research about happiness: https://www.happinesslab.fm

Some of early episodes touch on the highly-counterintuitive beliefs that pretty much everyone has with the relationship between happiness and direct in-person contact with other people (namely that they'll be happiest if they never have to talk to another stranger again). It's worth listening to and reflecting on.
This is the official docs

https://kotlinlang.org/docs/reference/multiplatform.html

I've also done multi platform recently.

I've taken a contract first approach. Swagger / openapi for rest clients. Outside of that I use vertx which has bindings for almost every platform. With those two I can account for interoperability across all platforms.

Big hitches

* No ts.d defintions at this time. But:
https://github.com/vojtechhabarta/typescript-generator

* Dukat for automatic typescript definition importing (beta)
https://github.com/Kotlin/dukat

* I've not done LLVM iOS. But I've read of some generic issues.

They are improving dependency management to handle multi platform. I can't find a link but it was on their blog
It does, though. A single line might not change - but the world around it is always shifting. Libraries in frameworks, Operating Systems, drivers, external data structures - nothing stays static in the environment our code lives in. As long as code is running, it needs to be maintained. (Most of the time it can be negligible, sometimes serious...)
I'm not putting additional power cycles on my battery and necessitating early replacement unless you pay me for the privilege.
I have a similar use case where the crux of my business is really data / analytics centric. The user experience is pretty much limited to mostly information consumption with a few click events (favorites, like, dislike, delete and the occasional standard input forms).

I'm leaning towards using [Meteor](https://www.meteor.com/) to share code between mobile apps and web apps.

Using cordova shells is pretty neat for business applications. Would be interested in thoughts.
developed and then sold to a private rent seeking party, don't forget that detail.
Most farmers already buy their seeds from somewhere anyway even if their non GMO