skysight-inc/HackerNews huggingface dataset:
People who are actually concerned at this stage while ignoring the scientists who say there's no proof it's serious are prime examples of the types who get worked up by the media hypetrain and should be actively avoided. It's a harsh assessment but honestly think it's the case.

The media sell stories. People click on those stories, the stories that get clicked on most get other stories written on the topic. This is how the industry works. It's actually quite a simple model.

Human beings are fucking terrible at risk assessment. What do people here think the risk is for them of dying of coronavirus compared to say dying in a traffic accident? Which is more likely to happen to you by a few magnitudes?
Mostly I used pandas Series/Dataframes, and they've always had built-in protection for not printing too much.

But I guess if you're manually printing in a for-loop, then I suppose you could make the browser crash - whereas tools like MATLAB wouldn't.
Show HN: Web app to track Coronavirus with city/state breakdown and graphs
Or the higher death rate in China could be due to them concealing the real number of infected people.
That assumes being acquired is good but that's only a probability.
They can have a closed ecosystem so you can't even begin trying to integrate everything. But they can use those internal APIs themselves.
Huawei stole the Cisco iOS source code. I'm also sure the CIA/NSA has other information. However leaking such info might compromise a source.

Guess we'll need to wait 50 years to get an idea.

https://www.wsj.com/articles/SB10485560675556000
> Made with :mask_emoji: in Taipei

I died laughing at this! It of course is very serious and not funny, but I still laughed at this detail.
I wanted to improve my coding skills and decided to work on this small part-time project. I hope you'll enjoy it.

Please let me know if you'd like to see more features. I'm looking further on improving it.
Ok well then the people I worked on an engagement with at an enterprise offering of Druid flat out lied to my face then. Good to know.
How Amazon Is Shifting Power from US to Chinese at an Unprecedented Scale
An increasing number of papers in my field have the DOI the cited paper as a hyperlink to dx.doi.org which will redirect to the publisher website. Note that this is often done without optical hints (text in black not blue, no underline) so it can be hard to miss.
Can you point to Ukraine on a map?
not Solar, we have battery ways of storing it now..my local high school uses it in fact.
KDE is prepared for such a case and has an agreement that is stronger then GPL https://kde.org/community/whatiskde/kdefreeqtfoundation.php
Fun thing is, it is very easy to do a convenient multitasking on iPad that a toddler would understand:

Just make a multitask button in slide up menu or dock, which, when press, would present a user with his own home screen and an overlay titled "Select an app", maybe with slight clarification, "the launched app will be run next to your current app". Maybe not the best solution, but way better than the current one
The hospital story for sure, they have alarms on patient devices and battery backup for some, but I was there for the mmac-8 being unplugged.
Remote Kubernetes Development with Garden – The Best of Both Worlds
That major point is plain wrong.

https://sysdig.com/blog/friends-dont-let-friends-curl-bash/

https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-b...

These attacks can be mounted on the network side.

Also you can inadvertently execute data from a benign captive portal or a server error page and so on.
I only ever experience red waves.
AIUI Huawei supply a lot of the current infrastructure (so it's unlikely to be getting worse?). Also, a GCHQ spokesperson gave an interview on BBC Click late last year and said, basically, there's very little risk. The programme pointed out that China are ahead on the technology.

I trust the Chinese more with our data than USA, tbh. Businesses should be end-to-end encrypting any way, so ...

I'd like to have seen them [UK politicians] tell Trump to go suck it, like "we'll use the technology we want and aren't going to be bullied into using USA companies just so you can get access to our data through NSLs". That would have been a display of this mythical sovereignty we're burning the country down for.
In other industries, this is what patents are supposed to be for.
Your mistake is assuming that people only do that for curl|sh — in my experience, the same percentage (high) will manually download and run a program / shell script, add an APT/YUM repository, etc. Once someone decides they need to run something the details aren’t very significant.

The problem isn’t curl but the challenge of trusting code. The default needs to be either Apple-style sandboxing (note how you get prompted if a new program tries to access your pictures, contacts, etc.) or something like Docker where the default is private with exceptions for the resources you enable.
> while conveniently ignoring to mention the countless hours spent aligning everything just right

It's really not that hard. E.g. people working on browser exploits have been working on exactly this for years and years, back when just having an out-of-bounds read due to a regular browser bug was the mechanism. Turns out that programs are absolutely chock full of pointers and it doesn't take long to run across one that points to what you are looking for. Especially because programs tend to have lots of data structures that end up pointing to more and more important data structures, funneling you into the guts of the program.

Sure, reverse engineering takes work, but blindly hunting in memory with no clue it is definitely not.

Side-channel attacks are basically a persistent out-of-bounds read mechanism. That is a very bad thing (TM).

There are literally thousands of people who work on this day in and day out, and millions in bug bounty programs out there.
Is the key here to signalling to the enthusiast that they’re understood through consistency of a product over time?

Consider the Chevy brand. Their trucks/large SUVs have stayed the same, and have a cult following because of it.

Same with the VAG lineup (or any other manufacturer). Porsches, Audi, and VW each have a group of enthusiasts (obviously representing different slices of society) because there has been consistency in each brand through the decades.

This extends to the non-car world as well. Apple is doing a good job of losing that enthusiast crowd by churning out crappy products and coasting on brand loyalty alone (though the tide may be turning).
The iPhone SE had a metal body. I have one in my desk drawer right now. It was fantastic hardware. It just used cheaper cameras and a smaller screen.
Zero margins. Scientific authors get exactly zero money from academic publishers. In fact, sometimes it's negative money (the journal charges you to publish, i.e. if it's open access). Zero or negative. They get exactly zero dollars of that $40-per-article fee. Which is why authors will often GLADLY give you the article for free if you email them.

Scihub is in a legal grey area (not really legal, so I can't technically advocate for its use in my position), but in a way it's automating the normal process of asking researchers for a copy of the paper, thus saving the researchers' time. (Researchgate is a more legal version of this, but with much less access to papers.)
Yes, very true, I was sort of assuming that the Hacker News folks would know to check for "https" and that any person offering a curl|sh solution would be sane enough not to offer it over http. But yeah, it's a good point that it's easy enough to miss.
Demystifying How Impact Investors Define Impact
If you're suggesting the virus is approaching population saturation levels in Wuhan, then 20 is far too low a number
My only issue is that it's far more complicated than Java and for a language that fills that same niche it's hard for me to justify putting my resources into learning it even though I do like a lot of the features.
But you can trust the large userbase of a popular Linux distribuiton, especially when big companies use it.
> My bank card is registered to their app, so every time I swipe my card or scan my app (when paying with cash), I get a receipt on the app

That's great but why does this need to be an app? Why can't it be sent via email or have a website I can log into? I'm not downloading an app for every company I want to do business with.
From experience, and supported by the Sqlite docs, I can tell you that trying to run sqlite on files on an NFS mounted filesystem will not work. See section 2.1 of this document [1] and the related discussion HN discussion [2]

[1] https://www.sqlite.org/howtocorrupt.html

[2] https://news.ycombinator.com/item?id=22098832
Consider looking into iSH, it let's you access a Linux like environment where you can download and use common packages like vim and python in a terminal. It has to emulate x86 calls, but for my use case of writing notes in vim and compiling and running simple c++ programs, it works.
You can see some more information here: https://www.reddit.com/r/ish/

But I completely agree that it's practically a moral crime that the OS is so locked down. Just a sandboxed native terminal would make this device my main coding environment. The cheap wireless keyboard and mouse I use with it makes the lack of a native terminal where I'd have complete control the one thing holding it back for me.
You would be hard-pressed to find a list anywhere. That being said, MoPub is a significant player in the AdTech market – you'll most likely find that they're integrated with most major apps that have in-app advertising. The only foolproof way is to really delete any apps that serve you ads.
Nope.

California comes in second on the list of states with the highest gas tax at 72.76 cents per gallon. Rising fuel prices and increased taxation are the primary reasons for this.

A law that was passed in 2017 allowed the state of California to increase the gas tax by a steep 12 cents, because it seemed like the most viable way to obtain the funds needed to replace several bridges and fund other important road projects.

You can expect the state’s gas tax to increase further by 7.5 cents per gallon in a few months.

We consume 10% of the US’ gas consumption i. California.

We consume more than 40 million gallons per day. There are opaque additonal taxes on each gallon sold at the nearly 9,000 gas stations and billions in taxes are also missing.

https://www.sandiegouniontribune.com/business/energy-green/s...

And not all taxes are hitting our roads...
I too am pro-nuclear, but isn't it too late for traditional nuclear to save us? We need solutions very quickly and the typical nuclear power plant takes 10 years to build.

In my uneducated opinion, the only way I see nuclear working is if there are small modular reactors that are produced quickly in a factory assembly line.
> Turns out, “just a big iPhone” was a fantastic idea for a new product - music to tens of millions of iPhone users’ ears.

Was it?

I've never personally been interested in tablets, but my perception is that they're not especially popular. Over the last few years, I've rarely seen them being used for anything other than mobile video machines for little kids. A lot of people bought the iPad, but very few people appear to regularly use one.

I'm aware that the iPad extremely useful for some people. I'm just not convinced it's the breakout success this article paints it as. My personal experience and observations show that it is more of a niche product.
"without a single branch" I thought it meant actually a branchless version of wc. Turns out it's just no explicit if statements.
Did you not read the article? He addresses those points for the most part. The primary idea is that when you run ANY SOFTWARE in reality you have no clue what it might do, you didn't look through every single line of code. There is nothing wrong with 'curl .. | sh' as long as you're running a script completely blind.
> I've never quite understood this pattern.

It's a pattern that dates from when nobody really knew how to handle persistent storage with containers. The idea was that you could then move the data around using only the docker api I guess? I've seen it become 'best practice', and then disappear again in favour of "volumes" - which imho are just as useless, and failed to see the bigger picture.

When running 'non-cloud-native' applications in docker-containers on snowflake servers, it - in my opinion - is indeed better to just map a local folder into the container, with docker-compose you can specify one relative to the docker-compose.yml file location, which makes this even more attractive.

On k8s, you have storage providers/volumes/pvcs that attempt to address these needs, but I'm still a proponent of storing your data outside a k8s cluster as much as possible, and nothing that needs persistence should be stored in the containers, unless these are cluster-aware and handle their own clustering/replication and data storage.
And furthermore, it's a matter of trust. If I don't trust the source that I'm running the software from, then curl|sh isn't the problem.
It sounds to me like universities should just stop wasting space in the library on study areas, and downsize the library a lot so it only has rooms for books and nothing else.

Then, they should separately have buildings (or separate spaces within that building maybe, for existing structures) that are dedicated entirely to studying, with both quiet areas with cubicles (there were things like this at the library when I went to college), and more open areas where talking is acceptable. Then, the university can put a cafe there to sell overpriced coffee drinks and snacks, and the building should be very profitable.
"That sucks" is valid criticism for many people, as well as "who would want that?" and "why did you waste your time?".

Your categories are all logical responses, what about the immediate emotional effects of the responses?

If you have never experienced an immediate emotional response from criticism I count you extremely lucky that you don't have to face it. But for those of us that do, we are looking for answer to the emotional side of things.

Is there some technique you have used to blunt the emotions and look at them only logically?
I know that you said "For obvious reasons it wouldn't be recommended..." but for anyone else reading please do not do this under any circumstances. If any of your applications get compromised the attacker will have full control of your entire AWS account.
A couple of points with comparing coreutils,

* recompiling with -march=native can give significant wins over more generic binaries provided by linux distros.

* parallel processing helps with bigger files, and it's easy enough to leverage the existing wc binary to process in parallel.

Both points are discussed at:
https://www.pixelbeat.org/docs/unix-parallel-tools.html
They're not moving away. They've just opened up a new field.

https://www.cnn.com/2020/01/19/business/norway-oil-field-cli...
The major problem with 'global zero' initiatives is that if one nation can achieve nuclear primacy they become the de-facto owners of the world. No one wants to risk that.

Alternatively, the problem with not pursuing global zero is that the probability that someone will eventually use them approaches 100% in long enough timescales.
That's strange. It seems not only wasteful but much riskier. Do you have some guess for why they operate that way?
You have been to a grocery store and seen the store brands? Same thing.
Well, in 2020 people are more sensitive to privacy issues, malware and spyware are still much easier to hide in closed source software, and bugs are much easier to correct if one has the sources at hand, therefore I'd say the request would be even more legit today compared to the 90s.

I however agree that's is not going to happen both because of the nightmare of relicensing 3rd party code, and because an OSS Win7 release with community updates and security patches (no telemetry) would probably displace a good number of Windows 10 installs in short time.
>As an EU citizen from a country

Does your country provide healthcare and/or housing while you are unemployed and looking for non-profit work based on your values? Or does you country also have 500,000 homeless and 44 million without health insurance?
Gene overlap is also possible and exists in viruses, so the true amount of data is actually usually a bit larger than the the sequence's length because of this "compression".
The obvious answer is public distrust of nuclear. There have been several high profile nuclear disasters, not to mention the universal distaste for living anywhere near a nuclear waste dump. Plus reactors are very expensive to build, and they have to compete with cheap fossil fuels for energy cost. In 30 years we haven't been able to tie fossil fuel companies to the carbon cost of their product.
The NT kernel itself has fallen from one of the best kernels technologically to significantly behind Linux. The design is still solid, but after tens of years of under-investment and little internal political willingness to make substantial improvement (they're a very conservative company at heart) it has just been allowed to rot.

I think WSL (V1 and V2) has been showcasing just how bad it has become. From locking issues, to small file performance, to scheduler problems, and beyond.

Everyone said Microsoft would never dump the Trident rendering engine either (used in IE/Edge/WebUI Controls). And that was true, until it wasn't. They may not move to Linux tomorrow, but ten years from now as NT continues to get little love, and Linux sails ahead? We'll see...
Nice! I do currently filter based on username / groups in my firewall policies on my virtualized Linux hosts which has been pretty effective but yes there are some places where I've had to give an otherwise unprivileged user the ability to query the metadata service which is not great. In most cases restricting this to root is sufficient.
That would all be nice, if volumes would not be the exact same thing, where only the in-filesystem location is being managed by the docker daemon and not by the admin. In the end, both are just bind mounts to existing folders on the filesystem.
The only things that work are:

- Stay under the radar.

- Change your product into a product that threatens their core business model. (for example against facebook you would offer privacy because they could not offer that without weaking their core tracking you/selling ads business)

- You offer something that bridges two other companies. Think plug-in that pulls from all major crmes.

- You offer something grey market.

- You compete head to head with a better product.

Never let one of these big companies pretend to buy you while they delay and steal your ideas either.
I expected Stadia to die off in a worse way on the developer side, failing paying customers so badly is a particularly bad sign for Google.
Love when I get these. Give me more!
> In the UK, in 2009, it was revealed that the Department for Transport had previously discouraged green waves as they reduced fuel usage, and thus less revenue was raised from fuel taxes. Despite this government Webtag documents were only updated in 2011. It is still unclear if the economic appraisal software used to apply these guidelines has also been updated and if the new guidelines are being applied to new projects.

Lovely.
Renaming stuff is just Microsoft's marketing department flexing. Don't ignore this history of bad names that group has created. ".net", WCF, WPF, Vista, etc.
I can do similar attacks on ANYTHING in the form of grabbing code and running it on my machine.. If you aren't doing 'curl | bash' recklessly it isn't a problem.
Absolutely not. Patents are for encouraging disclosure of useful things. They aren't to grant monopolies to whomever develops a slightly different business.
Right, exactly why I mentioned it, because it is a good example of a different path in open source, and one that still hasn't necessarily proven itself to be "better", but certainly different.
> If you're piping it, it's impossible to know what you're getting and executing. That's the problem.

Exactly the same problem as with apt-get, brew, yum, npm, yarn, cargo, <the list just goes on and on>.

Most of those will run any number of scripts during execution without your knowledge.
I think it's a bit arrogant to think you can differentiate virtue ethics from consequentialism.

1. Consequentialism requires us to model reality in order to predict consequences. Thus two consequentialists with different models of reality might prescribe different actions even if they have the same goals. From the outside, it's impossible to understand their model of reality entirely, so you can't assume that they aren't consequentialists just because they have different prescriptions from you.

2. Virtue ethics isn't always an ethical belief system in itself. Virtue ethics can be a strategy of using social pressure to reach consequentialist goals. From the outside, you can't tell whether they're using virtue ethics as the basis for there beliefs, or merely as a strategy for implementing a consequentialist ethic.

Combining these two, it's almost always premature to assume that people are virtue ethicists just because they prescribe different actions from what you would prescribe, on what appears to be a virtue ethics.

In a more general sense, that feeling of smug superiority I feel when I think someone is just virtual signaling is a sign of bias in my own thinking. To quote Scott Alexander[1]:

> I will make a confession. Every time someone talks about the stupidity of creationists, moon-hoaxers, and homeopaths, I cringe.

> It’s not that moon-hoaxers, homeopaths et al aren’t dumb. They are. It’s not even that these people don’t do real harm. They do.

> What annoys me about the people who harp on moon-hoaxing and homeopathy – without any interest in the rest of medicine or space history – is that it seems like an attempt to Other irrationality.

> It’s saying “Look, over here! It’s irrational people, believing things that we can instantly dismiss as dumb. Things we feel no temptation, not one bit, to believe. It must be that they are defective and we are rational.”

> But to me, the rationality movement is about Self-ing irrationality.

> It is about realizing that you, yes you, might be wrong about the things that you’re most certain of, and nothing can save you except maybe extreme epistemic paranoia.

TL;DR: Don't dismiss people because they appear to be implementing a virtue ethic; they may actually be implementing a consequentialist ethic.

[1] https://slatestarcodex.com/2014/04/15/the-cowpox-of-doubt/
Not many outside of finance though..
Futurism, maybe? Speculative fiction to get people talking and thinking about the future, but in the form of prototypes† rather than fiction.

† ...prototypes of single components of ecosystems that don’t exist, usually.
If we tell Huawei to get lost then we annoy the Chinese, if we use Huawei then we annoy the US.

In true British fashion we'll end up with a compromise that upsets everyone.
Same happens in brick and mortar stores. Im germany a drug store chain had a decade lomg partnership with an organic products / plant milk producer who did a lot to buold the market, and when the market actually got more mainstream and profitbale, they kicked them out and replaced them their new house line of organic products.
I'm aware you said its still a ways off but "green bridges"[1] as well as other persistent pests could become a big issue especially in a broadacre monoculture operation (which is what agriculture generally is if we're talking staple crops). Also from experience with dealing with perennial pastures removing them should the disease get out of control would be a nightmare when the root systems are established. Victory Gardens definitley sound like a good idea though. Just my 2c

1: https://www.agric.wa.gov.au/grains/control-green-bridge-pest...
Hah! I did the same with an iPad. It loops me singing “the wash is done” instead of an email.