skysight-inc/HackerNews huggingface dataset:
Go gets this very wrong, because you can still index strings as arrays - and you get bytes back, which 99% of the time is not what you want. But which also happens to "just work" on common ASCII inputs, so you get code floating around that is broken without its authors' knowledge.

(This, coincidentally, was also the problem in Python 2, and why Python 3 breaking the world was necessary, if inconvenient for some.)

At this point, the only sensible design for strings is as fully encapsulated, opaque values that are emphatically not arrays of anything. If you want to index them, you should be specifically saying what you want - nth byte, nth codepoint, nth grapheme etc. If you want content as an array of bytes in a particular encoding, then you should ask for that specifically. Internally, yeah, it should use UTF-8, because it makes the most sense - but that's just an implementation detail.

So far, the only language I know that got this right is Swift.
Err_SSL_protocol_error – How to Fix?
The 777 is also FBW. They wouldn't have needed the patch. It'd just be a change in how the stick forces are mapped.
Yeah, I mostly agree.

The most sensitive thing on Wikipedia I would think is the passwords. People often reuse passwords, so a password stolen from Wikipedia could maybe be reused against the victim's email or bank account.

Another possible sensitive item is the mapping of a username to an email. If there's an edit or account that a government doesn't like, that government might want to find what email is associated with the account, and then use information on that email to arrest the person. (Email accounts often contain phone numbers.) This reminds me of this comment[1], in which a vulnerability in Twitter allowed the Chinese government to map a username to a phone number, and then use that phone number to arrest the person.

[1] https://news.ycombinator.com/item?id=21874040
have a look at Love2D. Although it's Lua rather than Python, it's quite similar, and you have a bit more distribution options:

https://news.ycombinator.com/item?id=11633278

The docs are a mess though.
What? Some flat earthers do collaborate with each other. Some scientists do not collaborate. Collaboration is one aspect of being smart. It is definitely not a full indicator of intelligence.
uh Northface's top-of the line jackets use 'Futurelight (tm)' for their waterproof membrane.

Outdoor Research have 'AscentShell'

Black Diamond have 'BD.dry'

Marmot have 'Membrain'
vertical winglets are ways to get more lift:drag out of a wing that's constrained by some width limit (airport gate spacing) or an existing wing design that you don't want to redo. they don't generate lift. for a clean sheet design you can do better with a "scimitar" wingtip that actually provides some lift and might weigh the same as a winglet. see 787. also the navy p8 which has the most efficient wing of any existing 737, and doesn't have vertical winglets (because it doesn't typically park at a gate they could go wider with these little triangular extensions)
There's a 14 mile underground submarine communications system in upper Michigan. Despite being hundreds of miles from the nearest ocean, it could contact submarines all over the planet: https://en.wikipedia.org/wiki/Project_Sanguine

At it's peak the system used ~3MW power plant to run the system.
In some Rails projects i use Device gem, or simpler version made by my own (salted passwords in database, and user_id as jwt in session store).
Are you sure Apple actually gave up yet? I thought they still have related activity following their recent acquisition of Drive.ai.

If anyone, it could well be Apple that can catch up with Tesla's self-driving capabilities.

When it comes to Tesla, they might be sitting on better technology than it might seem at first glance.

Although I'm not sure they'll manage in Europe, pedestrians and cyclists are more common and have better rights. Does Tesla get enough non-visual wavelength information from front sides, to avoid pedestrians and wild animals? Tesla's self-driving story could be cut short in Europe the first time the car kills a cyclist crossing the road in low visibility conditions, like during heavy snowfall.

Can Tesla manage in low angle sunshine and snow or dirt on the cameras? Humans can shift their viewpoint, but cameras can't. This could be particularly difficult in North Europe.

Some Asian markets like India and Vietnam could be difficult for them because of chaotic traffic systems.

Addendum: If played "right", self-driving can be $100B+ business. I'd expect true poker hands to be only shown once time is right and legislation allows it.
The same salt seam is mined underneath Lake Erie near Cleveland as well. Here are some photos: https://photos.clevescene.com/33468-2/
AWS Cognito web interface is a dumpster fire if you expose it to people outside a small team. A little buggy, but terrible if your brand is associated with their out-of-the-box web flow. Password resets, username collision issues due to capitalization, login flow state can throw error messages that users can’t comprehend or fix, etc will all bleed customer support time.

The APIs seem fine, but you still need to build a GUI to replace all of the flows.

Okta is a far more mature solution for something directly customer facing and supports better 2FA options.
Are pro athletes prone to bankruptcy?
hey bro, where's your scholarly record of impactful publications?
This happened to me and the people interviewing me had left by the time I started!
Hmm. Doesn't look like very "hands on" to me (README.md). Or then I just couldn't find the document you mentioned in the previous post. But I guess one has to learn these things by trial and error then.
I'm using salt for every password with PBKDF2WithHmacSHA256 algorithm. It's an old algorithm, but it's not broken and it's supported in Java without any additional crypto libraries. I think that modern alternatives are bcrypt, scrypt and argon 2.
I’ve been using an air quality monitor and a few HEPA air purifiers around the house for years. It’s affordable and effective.
Hyperjuice is not a newcomer. They’ve been building such products for a long time and almost all major launches i’ve seen have been through crowdfunding platforms. Product reviews are almost always mixed though.

Anker makes a 100W charger but its ginormous compared to this one. They probably might be building a smaller one. Apple won’t build this product ever because its a very niche product. Most people don’t need this kind of power/setup.
Since you hadn’t mentioned PBKDF2 or SHA256 (or higher), a usage of salts, nor handling authentication across service boundaries in an enterprise context, this is essentially an advertisement for using a third-party service.
https://groups.csail.mit.edu/mac/projects/lpf/Patents/agains...

This article explains far more elegantly than I will as to why software patents don't make sense.
How Secure Is Your Build / Server?
Interior Views of the Central Social Institution in Prague, 1937
There are a lot of explanations besides Caucasians being less suseptable. Because of monitoring by authorities one could imagine any Caucasians becoming infected are buisness people and wealthy-ish travellers. They would be healthy with few co-morbidities, are identified during initial symptoms (because of screening) and treated at world class facilities and monitored closely (quarantine and research).
It really seems like you're asking, "Must I believe this?" instead of "What is true?" You picked a couple of questions on the survey to try to dismiss the study. Someone believing the opposite of you could have picked "attraction to male physique" (where trans women score lower) combined with "attraction to feminine males" (where they score higher) to bolster the autogynephilia theory. There's also the complication that trans women seem to be closer to men in other psychological measures (less masochism, less jealousy, preference for younger partners).

Pretty much all studies are complex enough that one can poke a couple holes in them this way. If that's enough to dismiss a study, then it's hard for us to believe anything in soft sciences.

And yes, the first study only looked at trans and cis women. But did you look at the amateur survey? It also surveyed trans and cis men. It reproduced the results of the academic study despite the creator of the amateur survey having no knowledge of it. That's some pretty convincing evidence in my book.

Also, do you have any studies that show that the majority of cis women would be considered autogynephilic? Because the only study I've found that asserts this is Autogynephilia in Women[1], which counted women as autogynephilic if they answered anything other than "never" to 9 questions about potentially arousing experiences. If someone answered "on occasion" to any question in that list, they were considered autogynephilic. When one of the questions is, "I have been erotically aroused by imagining that others find me particularly sexy, attractive, or irresistible.", it's easy to see what the authors of the study were trying to do. Nobody who is testing for autogynephilia uses such a low threshold.

1. https://sci-hub.tw/10.1080/00918360903005212
There's also a pragmatic reason:
When sampling the PAL/NTSC signal cabling will have applied low-pass filtering, causing over- and under-shoot of the signal. By setting the signal up to have the range 16/235 for an 8-bits A/D converter, this overshoot does not saturate the A/D converter.

Lots of consumer electronics is designed with these kind of rules.
one might assume that those who need to know are in response rooms and have more current information. Im not sure that a minor delay to the general public makes any difference whatsoever on outcomes.
I've used Firebase for authentication and it works pretty well and has good documentation. I haven't tried other options such as AWS Amplify though. I just keep a user reference in Firebase and then do everything else in my own app/db.
Google Analytics supports user IDs. When a user logs in, send the user ID to Google.

https://support.google.com/analytics/answer/3123662
Wow, there are 7 ways this can easily fail, and the script might not even notice.

How do you write in a normal language? With roughly 3 times the amount of keystrokes, but in a much more robust way. And if something fails, you will actually get a Python exception.
From the link it appears there were no deaths in this disaster. I'm genuinely surprised everyone managed to escape, I would expact that a lake draining into a mine is not escapable.
That is more true of old x86 hardware and older micro-computers (Amigas, Ataris etc).

The SGI machines are difficult to get hold of in the UK to begin with plus they are as other said short supply. There is one Octane in the country and it is the machine only (even though the monitor and keyboard are pictured) and it is going for about £800 on ebay.

If it was everything I would have said "that probably the best deal I am going to get" and went for it.
You would need to stack another adapter on top, but then the combined unit would do everything you want.
we've been plugging away at writing an open-source OAuth2 server: https://github.com/curveball/a12n-server
Phineas Gage did not live a normal life.
The I&O Organization Under Pressure
This is just one of the populor rumors during the 2003 SARS epidemic, that because no Caucasian died from the virus, the whole epidemic is a well organized biological war against China.

Like the other comments has pointed out, Dr. Carlo Urbarni is a doctor who died from SARS. He's the one who warned the WHO about the new desease.
The article states that no one died?
Beluga whale playing fetch:
https://www.youtube.com/watch?v=7uMSl28_8Rw
If you are handling salts yourself, you should probably use something else D:
What is the alternative? Roads that become icy probably destroy cars as well, although in a more pinpoint kind of way. At least road salt doesn't cause a lot of fatalities.
It’s a paid feature for YouTube. They want you to pay up for background playback, so they won’t risk the free version being too convenient.
Depends on the project:

Firebase Authentication[1] is an excellent easy add on for apps (both Web and Mobile) that I want to get running quickly. It's free, scales, supports lots of social auth providers and can take care of email verification etc.

When I'm building a website it really depends. Wordpress and Django have excellent inbuilt authentication and authorization systems. Djangos can be quickly expanded to support social providers with `django-allauth`[2]

For everything else I use KeyCloak[3] - Red Hats open source Identity Provider/Single Sign On which supports oAuth2.0, OpenID Connect, SAML, themes etc. Documentation and support is relatively good but can be quite overwhelming especially if you're not used to the relevant standards (knowing the different flows in oAuth2.0 and which one you want to use).

[Self plug]: I'm building a KeyCloak-as-a-Service for those who don't want control of their authentication without the hassle of setting up their own cluster. We're in closed Beta at the moment but if you're interested you can search for "Tromsso keycloak"[4] and leave an email to be invited in.

[1] https://firebase.google.com/docs/auth/

[2] https://github.com/pennersr/django-allauth

[3] https://keycloak.org/

[4] https://tromsso.com/
+1 for Auth0. I've used it for my SaaS cause I was sure that if I bothered rolling out my own I'd definitely miss some critical point opening up my users to a breach. Not only that but depending on your market your users may expect social-media signups/logins which becomes a pain to implement and maintain. The Auth0 free-tier up to 7k active users was more than sufficient for me when bootstrapping a new project.
Presumably checking user passwords for security is out of scope?

How do you mitigate credential stuffing attacks? Throttling per account? Globally? By source IP?

A user leaves their company. How do you automatically deactivate their account?

You're using password hashes. Cool. A secure password hash function, right? Scrypt, argon2, maybe bcrypt? (MD5, SHA1, and SHA2 are not password hashes.)

You're comparing them in constant time, right? Are you sure? The compiler hasn't "optimized" you into problems here?

You're working with enterprise websites. You obviously support 2FA; and you're probably going to want to support SSO with SAML2, and definitely integrate with Active Directory over LDAP.

And your password reset flow- just send an email with a magic link? do you generate the magic link's token with a CSPRNG? Is it long enough? When does it expire? And admins probably have to be able to reset anybody's password, but with strong auditing and accountability features...

You store user info in the session information- basically caching it out of the database? How do you invalidate sessions after a user changes their password or has their account disabled?

Can somebody put Unicode in their password?

You're writing a POST handler. You protect against CSRF, right? (yes, tricking somebody into logging in as another user can be very useful!)

Doesn't seem so simple to me...
I'd use a framework even for very simple authentication. There's just so much to supporting a decent UX that people expect now;

- limiting login attempts with a die off time between tries

- blocking automated brute force login attacks

- verifying accounts by email on sign up / invitation

- verifying username and password changes by email

- a friendly forgotten password workflow

- supporting even one basic 2FA factor (especially important on enterprise)

- logging user activity

- permission management

You could easily write all those things yourself. None of them are very complicated. But if you get any of them wrong it's very, very bad. Why wouldn't you use something that thousands of people have tested already?
Those are legit numbers. Also 3/5 of the North American cases are new from yesterday.
That "coup" was merely a staged action. Can't tell me a real coup is over in like three hours and nothing happened. Sounds an awful lot like the german "Reichtagsbrand" which led to political cleanings and more.
Best Tools for Java Developers in 2020
My users send their password over TLS. I check the password using bcrypt. I assume further communication over the same connection comes from the user.
Developing in Production
No, I'm trying to show is that offset-indexing is the right way to do it: because it makes sense, mathematically. If you need more and better arguments, have a look at Dijkstra's "Why numbering should start at zero" (it also argues why we should have left-inclusive and right-exclusive bounds).
As a rule I think if you feel you're outside the sweet spot of an AWS service before you start using it, I'd take that as a steer that it's probably not the right route to go.
Nobody is downplaying the health impact of overheated non-stick cookware. There just doesn't seem to be much of an impact. Think about this for just a minute. Millions of idiots crank the heat on their cheapo non-stick pans every day. I know people who sear steaks in their nonstick for fucks sake. This has been happening since the 1960's. If there was a significant hazard in this activity, don't you think someone would be able to find it?

The fact that cookware makers aren't overly concerned with temperature warnings should tell you something about the health risk here. There is little liability risk to them because apparently there is no demonstrable health risk. At the risk of repeating myself endlessly:

> read up on fluorinated polymer fume exposure, you'll find exactly zero known deaths, only a handful of known injuries, and no firm evidence of long term health effects.

If you can find any evidence of negative health impacts from nonstick cookware, there are thousands of ambulance-chasing personal injury lawyers who would love to see your work.
Your post is literally a problem that you have, and could potentially solve with a SaaS. Turn your question around and ask yourself: what problems do I have that could be solved with a SaaS?
Keycloak
Could you elaborate on the problems with VSBs or perhaps point me to a paper that discusses them in detail?
your opinion is not the only possible opinion. I used the hsl to paris once. it was amazing. In three hours i was home and could go on with my life. a plane would not have been faster. paris is a little bit too far to commute these days but one would imagine people will use it to commute to brussels. that's also the real weakness of sleeper trains: they are only useful for tourists. whereas most trains are being used for home-work commute.
Thanks for that, I agree simple password authentication doesn't require a library, but there are still pitfalls and mistakes so I don't mind encouraging libraries as at least there is (for the popular libs) some responsibility taken for quality of implementation, and things like password reset mechanisms etc.

As you mention handling multiple Oauth providers and stuff that is usually not worth the effort without a library, but anyway. Just looking out for people like the younger me (who would probably have tried to roll out things they shouldn't have, naively).
No tickbox for powered vs not, no data on psu if powered, no chipset information either.

So it ends up being not very helpful, sorry.
Can u recommend any?
> "Suspected patients were isolated using airborne precautions in the designated hospital, Jin Yin-tan Hospital (Wuhan, China), and fit-tested N95 masks and airborne precautions for aerosol-generating procedures were taken.

> This study was approved by the National Health Commission of China and Ethics Commission of Jin Yin-tan Hospital (KY-2020-01.01).

> Written informed consent was waived by the Ethics Commission of the designated hospital for emerging infectious diseases."

In other words, data from every patient they had is reported in this paper, with or without their consent. That includes radiographic imaging, blood and respiratory specimens, including nasal and pharyngeal swabs, bronchoalveolar lavage fluid, sputum, and/or bronchial aspirates.

In a western country, one of the tenants of medical ethics is that, if you have capacity to consent, you can always refuse to give it. In my country, I would be personally liable for assault if I (invasively) collected these samples from patients _without_ their explicit consent.

It must be a terrifying situation to be in: sick, in respiratory distress, and isolated from your family and friends in a large hospital, surrounded only by presumably somewhat scared looking medical professionals wearing tightly fitting face masks. I just hope that patients were _verbally_ asked if they consented to the collection of bronchoscopy-obtained samples for research and hopefully their diagnosis and management: it is an unpleasant procedure that, like many things in medicine, carries a small but non-zero risk of serious injury or death.
Good points. Difficult and unforeseen issues like these are exactly why you'd use a framework of some kind, where thousands of users have already tested and fixed various issues.
It's the physicist's definition, for whose purposes it is quite useful.

And yeah, the physics students at your ivy league school learned H = log|microstates| also.

Anyway, entropy as a count of microstates has to be packaged with a couple of additional ideas to give rise to the concept as used in chemistry/etc. First, that the microstates are randomly explored by the system, and second, that the number of microstates is so mind-boggling exponentially huge that the most common ones will be the only ones you ever see in practice.
What is the basis for these stats? new projects? new repos? new files? new commits? the lack of details makes me wonder.
If you had your choice, would you do something else? Like being in finance or becoming a dentist?
Maybe Google “fixed” the problem of google maps having better pan performance on iOS.
If I use a an external framework or library to let me users login via Google or say outlook, do I need to have my own outlook or Google account? Do I need some authorization to do this if say my company uses outlook for their emails and I want to let my co-workers use their account info to sign in through outlook?
Visual Studio for Mac has suffered quite a refactoring after the acquisition, as many of the MonoDevelop internals have been refactored into common libraries shared between Visual Studio and Visual Studio for Mac, one of the reasons why the new plugin infrastructure is based on .NET instead of COM.

There a release event happening next month, https://visualstudio.microsoft.com/vs/mac/event/
Who are they intending to catch? Drug traffickers and tax evaders aren't going to set foot in an airport with that amount of cash.
Auth0 is nice tbh but I find it quite pricey once you scale a bit.

I think it’s important to make good decisions at the very start.

I am definitely not against auth0 and I think it’s great, just think well enough before using it because it might come free at the start but after you acquire more users it comes at a hefty price
clickhouse could barely complete a 15 min moving average; last time I checked it required a very slow correlated subquery. That's pretty much where I stopped evaluating it.

edit: after looking it up again, looks like that is still the case, and you have have to be fairly limited with cumulative aggregates if you want the keep performance. maybe someday, but as of now, still not very good.
But 40gb? I feel like that includes training data or something. A model can't just be 40 GB or else all of the audio would have to be passed through all 40gb of the model during inference. That seems huge.
i did travel by sleeping bus. it was doable but no fun. sleeping on a moving vehicle is not something that will work for everyone. some people can, some can't. there's a reason these faded out of existence in the airplane age. besides, it remains somewhat of a gimmick that is completely outside of the core business of rail transport: transporting commuters.