skysight-inc/HackerNews huggingface dataset:
The CDC has denied the existence of persistent Lyme for years. They fact that they are now mentioning it as one possible theory is significant in itself.

The old page from last year https://web.archive.org/web/20180921231605/https://www.cdc.g...
Can you point to a law that makes it illegal?
... and then these games were put on Steam, and Steam's (optional!) DRMs were added to them...
Instagram demands date of birth from new members
The robocall operations will just outsource to some foreign country.
Chiplets are more significant than you credit them for. They allow higher yields and make the production economics much more favorable for AMD, whereas Intel is throwing out a lot more silicon.
AWS is running on very thin margins, and every couple precent in extra productivity could easily mean doubling profits.
So now people are complaining that Apple is using an industry standard port - USB-C - instead of something proprietary?
Cataclysm, Mass Extinctions, and the Consequent Myths
Which is about 18% of the original investment, not 20, assuming no gains or losses.
Simplest terms:

Our sample comes from a true population that we don’t know. Looking at the data we got (primarily the variance and the sample size) we try to infer what the true population mean is. If the spread is small and the sample size is large, odds are pretty good that our sample mean is close to the population mean. If the sample size is small and the variance in the sample is really high, then odds are good our sample mean is pretty far from the true population mean.

We can quantify that. Basically saying, if the true population mean is x, how improbable would a sample as different as ours have been? When we construct a 95% confidence interval we’re saying “assuming the randomness of my sample is no more improbable than a 1/20 dice roll, the true population should be this far or closer to my sample mean.”

For an intuitive example, consider a 100 sided die going from n to n+100 (e.g. 7 to 107) where we are trying to guess the middle value (n+50) based on a single roll. We get 100. If we want to be 100% confident, the then confidence interval should be 0 to 200 as that’s the range the true value must be in. If we say, nah I’m sure I got it exactly right, your 0% confidence interval is just 100 to 100. If you put on your scientist hat, you say you doubt your particular roll was in the top or bottom 5% of the die, so let’s call it a 90% confidence interval at 5 to 195.

Note that you don’t have any particular reason for that last statement, and you could be wrong.

In other words a 95% interval says here’s the range that the true population mean should be in assuming our particular sample was no more improbable from the truth than 1 in 20. If the null result is in those bounds, in the article, 1.00 (for no effect) then even though your sample mean might be 7%, your data says it wouldn’t be outrageous to get a sample mean of 7% by chance from a true population mean of no effect.
> For SecuROM blocking after expiration is a better strategy, because blocking games that were purchased will encourage publisher to renew the subscription.

Yes and no. Stories like this make me even more nervous to acquire SecuROM-protected content.
How do you avoid feedback and other audio issues for people in the same room?
We already sort of do. Qt officially supports wasm and renders to a canvas element:

https://wiki.qt.io/Qt_for_WebAssembly

And if you wanted to build your own wasm + canvas GUI toolkit, CanvasKit might be a good place to start:

https://skia.org/user/modules/canvaskit
No, which is why I raised the question - why isn't it illegal? Given the acts with a social cost that soon follow to "pay" for the company's acquisition? Redundancies etc.
I don't think anyone could relax within a 50 mile radius of John McAfee:

https://en.wikipedia.org/wiki/John_McAfee#Legal_issues
This is the Libertarian conception of UBI. In my understanding, the general progressive conception of UBI does not advocate any corresponding reduction in the welfare state upon implementing a UBI. And UBI has many more progressive supporters than Libertarian supporters.
Nvidia tipped to release a 7nm GPU
No, because you have the client treat the inability to reach SecuROM's servers as failure, but on the server treat non-renewed license as success.
Here's the counterargument:

Regardless of language, all software has bugs; that's such a banal argument it barely even needs to be made. Offensive software security is the practice of refining and chaining bugs to accomplish attacker goals. You can make it easier or harder to do that, but in the long run, more bugs classes are going to be primitives for attackers than not.

Rust is a fine language to teach people. But what Rust accomplishes for security is table stakes. People building software in Java in 2002 had largely the same promises from their language; Rust just makes those promises viable in a larger class of systems applications. But Java programs are riddled with security vulnerabilities, too! So are Golang programs, and, when Rust gets more mainstream, so too will Rust.

Aside: I'm really frustrated by the advice to validate all input. That's not useful advice and people should stop teaching it. It begs the question: validate for what? If you know every malicious interaction that can occur, you know where all the bugs are. And you don't know where all the bugs are.
This piece definitely raises some very valid and interesting points, however the tone in which they are presented make it seems like a hit job tinged with a bit of jealousy.

The details of the fact that Snowden had contact with the Russians has never really come come to light outside of the intelligence committee and there’s not been anything shared publicly, so the jury is still out and I’m sure one day more light will be shed on that.

Overall, notwithstanding the amount of data that was taken making it look like a snag and grab, he has done the citizens of the US, and the world a tremendous service.
Oh true, I forgot that. Still the bug is not remotely exploitable, but I always wanted to send Xlock to /dev/null and propose a patched slock as an alternative. If OpenBSD got evilwm/cwm in base, why not slock? If the problem is the lack of keypresses' feedback on the screen, that could be solved in a easy way.
Thirded. The posting of climate-related stories on HN brings out a lot of un-informed skepticism. The resulting back-and-forth tends to crowd out everything else.

In many of these cases, it's clear that the commenters have done no background reading, and have no climate science background. Their comments thus consist of simple armchair speculation (your "lowest of the low-hanging fruit").

In these comments, I have found people with strong opinions on the lack of seriousness of climate science, who have no idea we have gravimetric measurements of ice sheet mass. This is a dataset going back almost 20 years that has revolutionized geoscience. HN commenters have expressed strong opinions about melting ice, with no knowledge of this data and what it means.

I have found people who think that climate science consists of having a stable of models each with a host of knobs, and the research method is to turn the knobs or choose new models until the results look dramatic enough to publish.

The gap between the firmness of these claims and the knowledge to back it up just boggles the mind.

The most basic step people could take to fix this is to read the executive summary of the IPCC AR5 report, or (even better/easier) the executive summary of the NCA (https://science2017.globalchange.gov). This report was specifically written by people who really know this stuff, for people like us.
Lol. I laughed out loud when I read this.
Needs more love for BSD make.
5 second boot time? Most Java programs I have worked on start up near-instantly.

Small programs can be written in java. It's a general purpose programming language. You could write grep in java.
This post isn't really about "LangSec", and I'd ask, in the years and years we've had "LangSec", what have its major contributions been? I find it hard to pin down, and not especially instructive, but I'm prepared to be schooled.
Greed? Supply and demand baby. I don’t know what pictures you take, but most likely, they’re a commodity and anyone can do it, especially nowadays. Maybe you feel like you are working hard to make pictures, but the labor theory of value isn’t correct. You get paid based on how easy it is for someone else to replace you. And while I don’t exactly understand the intricacies of stock photography, I’m guessing it isn’t that hard to take some pictures. Ergo, you get paid less.
I think the parallels have a lot more to do with the resulting demands for action, not the academic battle.
I've discovered Restic while playing with Golang, looks pretty neat. Have you had any issues with stability or corruption of your data? what are you using for encryption (if any?) thanks in advance.
I'm not speaking for or against this product. It's just remarkable how so many see the current podcast ad tactic as somehow wholesome or less obnoxious, when really it's a world worse. And then they'll claim that it doesn't affect them, caveat emptor, etc, which is simply bullshit -- if they've bought into it being wholesome and "valuable", they are in every way the mark. They are the reason advertisers love this gimmick in podcasts.
Had a meeting today where three were in an office together and I was remote on Zoom. Very sub-optimal setup. I like your philosophy.
I use the evcxr repl all the time. It has some rough edges but it's incredible to finally have a rust repl that's functional. I had been using rusti on an ancient rustc. One thing I really like is that you can add a crate with one line (`:dep rand = "0.7"`).
Wow, thank you for this. I admire your team's dedication and bravery. I found the details of all the assets of your company fascinating, since I myself know very little about classification or fashion. This is a bit of a business review type article, and I hope you write more about this and things go well for you all.
Biofilms and persister cells are the problem with chronic Lyme disease.

https://rawlsmd.com/health-articles/understanding-biofilm

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6287027/

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6521364/

It's pretty simple, if the disease is able to enter the form where it starts producing biofilms it can use them to evade antibiotics. A patient then must explore treatments to break up biofilms, and eradicate whatever infections or co-infections are present within them. There's medications that do this and more functional methods such as hyperbaric oxygen chambers.

The people who have symptoms after antibiotic treatment and the people who relapse after antibiotic treatment still likely contain Lyme disease biofilms and persister cells which are capable of causing a full relapse given enough time and the right conditions.

Those who receive early treatment and success with a single round of antibiotics are the lucky ones, and not the standard patient experience.

Even people who have been bitten by a tick, immediately started antibiotics, and caught it immediately can still get chronic Lyme disease, especially if their initial round of antibiotics was for too short a duration.

There is a lot of shit on the Internet, and what's happening to the people who have Lyme disease is an absolute travesty and crime against humanity due to our corrupt and failing medical system. The actually science and research on this is clear though: biofilms exist, Lyme disease can become chronic due to biofilms and persister cells which can evade antibiotics.

Everyone talks about how theres super bugs and infections that evade antibiotics, well Lyme disease is literally a super bug that evades antibiotics and is probably one of the most successful super bugs of our lifetimes and yet people try to deny its capabilities despite countless medical research studies proving otherwise. It's baffling really.
I'm not too familiar with the relationship between developers and publishers, so maybe this doesn't matter, but Disney is the publisher. Tron 2.0 was made by Monolith which is still around today. Tron Evolution was made by Propaganda Games which shut down in 2011.
Which Countries Have the Most Female Developers?
http://archive.is/0ltdM
> Not using an index because it isn't cached ...

I'm more saying the opposite-- perhaps the real cost favors scanning the table if it is already resident while the normal costing would heavily vote against it based on the amount of disk access.
Why should they? The high end Android market is minuscule. It’s all a race to the bottom.
Except MIPS and the network.
I'm useless without a compiler to check my types!
http://archive.is/0cLvz
It isn’t illegal because no one made it illegal, it’s pretty obvious no? But being a little less flippant, I can’t see any reason why it should be illegal. If I buy a company I should be able to do whatever I want with it. If shareholders didn’t have the power to make choices about the company they own, the very fabric of capitalism would be undermined.
There's kind of three problems you run into with that sort of thinking.

1. Is there a difference between great recommendations and random recommendations?

Maybe purchases are bottlenecked on money rather than desire, so your customers can already find as much stuff as they can afford to buy. Maybe your customers want to browse and look at literally every product on your website and will find it on page 1 or 100. Maybe your customers need to see a lot of options to realize how much they like the perfect recommendations, so showing them what they'll end up purchasing first doesn't really make a difference. Maybe your customers are lazy and will buy the first shirt you show them regardless of how good it is.

2. Can you get by being dumb if you have enough data?

A company like Amazon has soooo much data on shopping preferences based on past purchases. They can construct extremely naive models from their 20 years of logs and expect them to perform very well given your ten years of personal shopping data with them.

3. Does your superior algorithm create a moat?

For any interesting problem, you can get like 80-90% of the quality while spending 1% of the programmer-hours as the best of class. So if you're best of class, does your extra quality buy you anything, or is 80% as good as you good enough for most customers? Eg, can your potential acquirers just halfass something and get all the value you provide for a fraction of the cost, or do they need your extra years of experience to compete?
Interesting, RSA-230 was factored a little more than 1 year ago.
I agree with your last point. A lot of programming advice boils down to "do the obvious thing to avoid the obvious issue" and sidesteps the point that it's the "unknown unknowns" that really ruin our day.

'Taint mode' ala Perl[1] turns non-validated input into runtime errors, rather than security bugs. Crashing is nicer than being pwned.

"You may not use data derived from outside your program to affect something else outside your program--at least, not by accident."

Bugs still exist (as well as bugs in languages themselves), but languages can help mitigate the surface area.

[1] - https://perldoc.perl.org/perlsec.html
When was the last time you checked? Because the last time I checked I found it hard to tell the difference.
I like the idea of open hardware/software with end-to-end encrypted cloud services that are compelling enough to be a competitive advantage.

Home Assistant Cloud is one example of this: https://www.nabucasa.com/
http://archive.is/gHIew
Arm Thumb is a compressed ISA. Intel has been decompressing x86 instructions into an internal RISC machine since the Pentium Pro. The benefit is getting more instructions through the chokepoint from DRAM to L1 cache.
https://web.archive.org/web/20191203120942/https://literaryr...

https://outline.com/r2mP4v
Remember how the same company basically made a (copyright-violating!) rootkit installed on 22M CDs, and now makes Denuvo, a DRM that Steam doesn't list as DRM ?
Senate Defies China Threat, Smoothing Path for Human Rights Bill
Like machismo i assume
Option traders use sophisticated heuristics, never the Black–Scholes formula [pdf]
Perl has various levels of bolted-on type-strictness too AFAIK, I don't have much experience with it due to being stuck on an older version professionally.

I personally think it's a great idea. Loose types can get a POC or even early production models up and running quickly while you're changing your opinions on the data every hour, then once it grows to a size that's hard to reason about and static analysis can really pay off, start tightening it up.
Not if they keep changing the data to fit a need. Check out Tony Heller https://www.youtube.com/playlist?list=UUprclkVrNPls7PR-nHhf1...
I think many companies built around one successful product will hit that point in their lifecycle... where putting more work into perfecting and improving the product provides diminishing returns, but there is a solid demand for the current version of the product.

At that point, it is absolutely the best thing to get rid of everyone and just keep selling the product you have. Too often a company tries to hold on to long, adding new features that don't actually improve anything.

I wish more companies were willing to admit when they reached that point.
Are you saying that memory safety is valuable or not? If you do think memory safety is valuable, then I don't see how you're disagreeing with the author. Nobody is claiming that memory safety eliminates all bugs.
"One common theme in the chronic Lyme communities is that people who go into remission tend to attribute their response to whatever technique, supplement, or medication they were trying at the time."

This is spot on. People probably have always been doing this - but now they also publish their theories to everyone on the Internet where all the outrageous claims live and prosper, because nobody writes a blog post that a given supplement did not work. This is https://www.gwern.net/Littlewood Law again.

For some time I have been thinking what is the rational thing to do when you are seriously sick in the internet era: https://medium.com/@zby/rational-patient-community-6d3617dff...
FIRST build a successful business, THEN try to sell it.
You try so sell something that's essentially worthless, and even worse: you have zero negotiating power. So at best, you would accept an offer of ~10'000 USD. This is the cold hard truth in this case, and I don't mean it in any bad way.
That's probably it. Their vague terms make me suspicious.
Sounds like an opportunity for Israel and America to sell cyber defense and/or monitoring products. The EU on the other hand will probably continue trying to forge a partnership with Iran since taking meaningful action in the world has been beyond their politicians for awhile.
IIUC, I think the distinction between sourcing and assessing is not relevant here. Assuming the females in the pool of viable candidates have already been exhausted, then sourcing only females is suboptimal, as they are less likely to pass assessment because (by construction) they are not in the set of viable candidates.

It will always make the most sense to source the best people without regard to anything but job skill. If the best people aren't diverse, then chasing diversity requires you to look outside the set of best people, by construction. You can't have your cake and eat it, too.
I don’t see anything to apologize for. I posted the link since there might not be a discussion this time. FWIW, I find HN’s Search more useful than Google for searching HN. I used “pyodide”.
Then we brand robocall operators as terrorists and bomb them. America, fuck yeah.
Well sure, phones are a greater evil than doorbell cameras. I'm not disputing that. It's not like you're only allowed to dislike one type of device.
> AWS is running on very thin margins

Incorrect. Amazon is a public company, and their own report tells us that AWS margin is 25%, as of 2019 Q3.
Credit card numbers as customer identifiers on printed and emailed documents? Seen it.
I was thinking about server farms in general, not AWS specifically. You’re probably right that AWS-type server are more likely to skew towards software that is available in source form.
But now you added the GraphQL layer on top of HTTP.
Mainly its contribution has been the linguistic study of bugs, and the recognition of the importance of well defined recognizers as opposed to shotgun parsers. That is the contribution to theory. In practice, people still write shotgun parsers, because the incentives to avoid them are not there. The market does not reward security. Also, if a programmer has an incentive to alloc() for their program to function but no incentive to check that all control paths free only once, you are left with memory bugs. I think that PL can help with that, but LangSec cannot.
There are other ways to proceed when your running low - in my experience it depends heavily on how hungry a bulldog you have built (i think paul graham said this) which is often a function of when you raised cash. If you have to make payroll and can't proceed without all those people sat in their we-work seats with computers you need to buy them thats a difficult spot. We have tried to stay lean for as long as possible and avoided taking cash because we work in medtech and don't want investors that do not understand our roadmap and milestones. We have found partnerships with academia, government, and research institutions have helped drive our project forward without needing to play the VC game. We advance our product and havent given equity away.
That's one proposal for geoengineering (either sulfate particles in the stratosphere, or marine particles over the oceans). More for a "pause" or slow down rather than a solution to stop it.
For the curious, look up the kelly criterion, it formalizes this thinking.
Arms crossed and rolled up sleeves!
Memory safety is valuable! I wouldn't want to implement anything in a memory-unsafe language if I could avoid it, and, thanks to Rust, I can virtually always avoid it now. There's ways to make bugs easier to chain and exploit, and memory unsafety is a big one.

But, while I know nothing is a panacea, memory safety is especially not a panacea. We have over a decade worth of experience with software built principally in memory-safe languages; it's hard to find a modern web application --- increasingly, it's even hard to find a modern mobile application --- built in a language as bad as C. And, as you know, all these memory-safe applications are riddled with vulnerabilities. They don't have memory corruption vulnerabilities, but I'm still game-over'ing app pentests, and very unhappy with myself when I can't.
And yet many region have taxe based on the value of the house, so a tax on capital, a tax on wealth. Often the only capital middle and lower class have access to.
Google Fiber: All in on a Gig
Steam doesn't even list Denuvo, a DRM by basically the same company as SecuROM, as a "3rd-party DRM"...
(Not to mention which one of their own DRMs, if any, a game uses...)
It seems in a lot of places (where I live, Austin TX) all the little mom/pop dry cleaning shops are actually shipping the dry cleaning off to a central location. The EPA/etc regulations apparently have forced that part of the cycle to converge.

That is part of why it costs more/takes longer than simple laundry which is frequently still done at the mom and pop location. Although, I think the larger chains (Jack Brown) are entirely just storefronts sending the laundry and dry cleaning off to some centralized location.

So, I doubt there is much advantage to further centralization that hasn't already happened.

Also, I'm not even sure about the hotel bits, most hotel's I've stayed in recently _DO_ their own laundry. They have a couple giant commercial machines sitting in the basement for the sheets/towels. I know this because I always take the stairs and often take a wrong turn and end up in the basement/etc.