skysight-inc/HackerNews huggingface dataset:
key results:

Results: A total of 72,314 patient records—44,672 (61.8%) confirmed cases, 16,186 (22.4%) suspected cases, 10,567 (14.6%) clinically diagnosed cases (Hubei Province only), and 889 asymptomatic cases (1.2%)—contributed data for the analysis. Among confirmed cases, most were aged 30–79 years (86.6%), diagnosed in Hubei (74.7%), and considered mild (80.9%). A total of 1,023 deaths occurred among confirmed cases for an overall case fatality rate of 2.3%. The COVID-19 spread outward from Hubei Province sometime after December 2019, and by February 11, 2020, 1,386 counties across all 31 provinces were affected. The epidemic curve of onset of symptoms peaked around January 23–26, then began to decline leading up to February 11. A total of 1,716 health workers have become infected and 5 have died (0.3%).

Table 1 shows significant skew in fatality rates by age
Cases deaths CFR
total 44,672 1,023 2.3
Age, years
0–9 416 (0.9) − −
0–19 549 (1.2) 1 (0.1) 0.2
20–29 3,619 (8.1) 7 (0.7) 0.2
30–39 7,600 (17.0) 18 (1.8) 0.2
40–49 8,571 (19.2) 38 (3.7) 0.4
50–59 10,008 (22.4) 130 (12.7) 1.3
60–69 8,583 (19.2) 309 (30.2) 3.6
70–79 3,918 (8.8) 312 (30.5) 8.0
≥80 1,408 (3.2) 208 (20.3) 14.8

where average fatality ratio was 2.3% but 3.6% of those 60-69, 8% of those 70-79 and 14.8 of those over 80 died.
Good. They’re a regressive wealth transfer from the poor to the well off.
I've known about Poolside for a while, looks like they've changed their format a bit (it used to just be a full sized 80s videos with background music.) When I used it often, I discovered some artists which was nice.
> did not say that the hacks were not Russian

He also did not say that the hacks were not leaks. There are many things he also did not say. Are all of these things therefore true, or only the things you believe to be "well known" ?

> It's well known [...] were Russian GRU

Any Russian state or GRU involvement is completely unsubstantiated.
Hi! Will add this feature.

Also, a new feature called alias_dsn was on the way.

https://github.com/laixintao/iredis/issues/268
Yes, I clicked on the link without reading carefully and was disappointed because that's what I expected.
There just isn't a way to speed up comprehension of computing systems and computing technology. Software development is highly conceptual and concepts don't materialize in the brain in a way that's independent from the time variable.

I initially thought bootcamps would be a good idea because I thought they could use a streamlined curriculum to put difficult concepts in front of students and then winnow them quickly based on the reactions of said students. Like a phone screen that you spend 2-4 months performing. It costs you up-front to do all that education and subsequent scrutiny of the candidate, but you win by identifying people with the potential you want to migrate into the SD workforce. With public funding and a long schedule, I believed this could be a sustainable way to populate those vacancies.

That's not how bootcamps work. Bootcamps are trying to launch people into careers, and I just find that absurd on its face. No level of training is going to compress years of plastic changes in the brain into a shorter amount of time.
I'm not what you'd call a self-driving car "skeptic" since I do think that we will eventually be able to iron out these types of rules, but I think it will be another 30-50 years before I feel comfortable truly trusting one.
The sad part is that they do use <a> tags! The site just does other stupid shit to break basic expectations about primary functionality, because "design! (handwave)". This is the kind of sewage that bubbles up when programmers learn about the web through single page app frameworks. There's a whole generation of front end developers now who seemingly don't know what a hyperlink is or why they might be worth using. Not every stupid website needs to be an app.
I have about 20 Hyperikon dimmable BR30s that are 4-5 years old and have been excellent. But I bought some cheaper ones for the kitchen more recently and they have had a bad failure rate. The older Hyperikons were excellent, the newer ones, not so much.
Today's terminal has some difference, the fonts should look anti-aliased, flickering should be as minimal as possible, should be able to theme it based on preference. One terminal able to support so many different terminal type VT100, rxvt, and still need to perform fast. I have worked enough on text only and 256 graphics terminal in yester years and feel today is still better.

Another case, Google maps is a bad example in tours. Used it to explore many cities, not only turn by turn direction. It worked get although personally like openstreet maps, because I feel one company s shouldn’t control so many aspects of life and like open source nature of it.

Indeed able to discover a onsen built by community in Hokkaido. That’s based on a lake I saw by just zoom in out of the map to do exploration and saw it built by Ainu community living there. In that turn by turn map helped quite a lot to reach there subsequently just by click and dropping a pin there. Submitted a text describing it and subsequently visited by many people.

Took a journey through treacherous mountain and went up to 2500 meters high and crossed it via a tiny off-road designed for motorcycles. That too did based on exploration of map on phone.

Paper maps didn’t provide such convenience. Yes POS is slow, but then it has different expectations today. Try integrating old POS with 10 payment network working under milliseconds to authorise transactions. Worked enough since 1990 with dos based POS and also wrote IBM MQ C++ code for integration. Don’t want to go back there.

I think today is a step forward. Like always there will be good and bad as it was in 1980 or 1990. But largely today we do much more with computers than we ever did in those days.

So not everything is perceptually slow on computers. Apple Watch, iphone, androids are responsive and usually fast. Windows 10 for certain tasks might be slow but then overall it’s not that bad either.

As far as exploration goes you can do the same or even more today than before. I can discover planets. Built3D model in physical form, use CNC on desktop, do laser cutting in my home.

Built a computer like BBC micro, raspberry pi, fly a computer using fly by wire and test it using real physical model plane. Can do farming on a small scale using hydroponics at home. Can just go on and on about it. All possible thanks to advancement in speed and reduction of size in computing devices and peripherals.

So I feel it’s not slow, just the work we do with old computers is very different from what we do with modern one’s.
Mostly local font manipulation tools, including a GUI editor, but I can imagine some of the work ultimately becoming useful inside web services.
TensorFlow object detection API with custom objects
Yes, per [2], our US refund policies are roughly the same.
This is the same problem faced by another worthy goal, replacing DNS. What does cipherboy.example.com even mean, without DNS? Similarly, what does cipherboy@example.com mean without SMTP?

It's a hard problem. If I tell someone "my email address is samatman@newawesomeemail.com, no, you can't email me from gmail you have to use AwesomeEmailClient", they're going to be confused and nonplussed.

If they can email me from gmail, well, they will. And I have to reply with SMTP, and nothing useful was accomplished.
If someone should be pardoned, withholding the pardon for the purpose of coercion is extortion. If they should not be pardoned, offering a pardon for the purpose of a political favor is corruption.
Last I read, Authorize.net is never going to be updated to provide for PSD2/SCA authentication flows, which means it will not be suitable for charging customers in Europe in the future. Whether Spreedly will really be able to wrap those flows up in their API is an iffy question to me still.
Goodbye PGP
DRM was added to DP later on, IIRC, it wasn't part of original standard.

HDMI adding audio and DRM was the core of the proposal, plus a connector that was more consumer friendly.
Very likely it was dogs domesticating humans, rather than the other way around.
Microphones pick up harmonics of the input frequencies. So if the ultrasound white noise is a multiple of the human voice range, it'll get let through.
Or in MySQL: innocents.
The Referer header will leak what page you were on and you probably already have connections to Google from the same client IP address. Even if you have Referer blocked, the particular font requested could indicate information about what page you are on when combined with other data.
I don't see why this must be a breaking change.

(1) Add a flag when opening a database to show that you want data types enforced.

(2) Add code to all the input pathways to check for type compliance. This way a database with correct data types will stay correct.

(3) Do not change anything in the storage layer.

What am I missing?
I'm shocked by the lack of diversity of those who win Pioneer, given that this is supposed to democratize funding for anyone across the globe.

Right now, it's mostly peer recognition which is prone to favor projects the dominant demographic finds cool. But I could see the competition based on revenue be more democratizing.
35kb sounds like the basic (mostly latin-1) subset. The size will vary a fair amount depending on which subset is selected, etc. In any case, fonts will almost always be served compressed, with WOFF2 being the vast majority of requests.
I have never needed these channels, but it appears Slack, SMS and LinkedIn are not supported. I’ve never spoken to customers on Slack. Is this a thing?
Candidly: I've never LARPed or even watched anyone LARP. I just assume they're swinging foam swords at each other's tin-foil armor. That's as sophisticated as the analysis behind my choice of words is.
The "cheap shite bought from Poundland" is what makes his channel so disappointing and tedious, and the reason I unsubscribed. He is capable of so much more, but insists on appealing to the lowest common denominator. At this stage, he might as well just review and tear down incandescent bulbs.

(Hello to the anonymous down-voter who likes reviews of cheap shite from Poundland. Is that you @bigclive?)

Oh, no, it's only @teh_klev. Never mind, nothing to see here.
Amazon launches app-based health-care service for Seattle-based employees
If memory serves correctly, about a year ago there was a shift in Bitmain Bitcoin miners towards a 3D chip architecture that was fairly effective; it might be a domain specific application, though.
Which is to say, sometimes valuable, sometimes "oh crap!"?
> Testing production flows with fake numbers is tricky

And yet Authorize.net and many others manage it without drama. I know of one account you did not land because of this.
"It's the difference between able to go for the day or not"

Which points to how increases in capability and efficiency can stimulate demand, which could be a bad thing from an environmental perspective.
Telegram requires a phone number and the server code is completely hidden away from you which does not exactly evoke trust.

Wire might be a good contender. However, last time I looked at it I wanted to stick with options I could confidently self-host and Wire looks way too complicated on that end. (The recommended way to do it is over Kubernetes which is something I don't wanna touch in production.)
I agree. I would love Stripe 10X more if they'd offer much lower prices. Their fees become really huge as your business grows beyond 50k MRR
Encrypted email is not substantially better than nothing in the cases where security actually matters. If the metadata of your message can get you arrested, or if an accidental plaintext reply to a message can get your bank account zeroed out, then using a system that carries those risks is worse than nothing. When we talk about secure messaging, those are the use cases we must consider.
Seems like once you've done that due process is violated.
Bad Stat Is Their Product
Who cares? Just set up kiosks and give gift cards to anyone that votes. Pick the key districts (i.e. where people are likely to vote D but have low turnout) and you could easily push the electoral college over the tipping point for a few billion.
Ask HN: How to vet dev candidates to make sure they can code at desired level?
The following seem to be popular methods used to determine if developer candidates can perform the coding aspects of the job you're interviewing them for:

* Public source code profiles (Github, etc.)
* At-home coding assignments
* Code katas
* Live coding
* References

I know at-home assignments, while commonplace, and even live coding are sometimes looked upon badly, but which of these methods above are best? What about other methods that I'm missing? Are there any good online resources/services that help make this part of the hiring process easier and better for all involved?
It came about after seeing a few YouTube videos based on the book "The Geometry of Musical Rhythm." So the idea definitely wasn't mine but I'm a hobby drummer and the idea really intrigued me.
I dunno... the only alternative seems to be storing as a float everywhere, since most coding languages don't support a decimal type... and using floats for currency honestly just feels scary to me, since they're not fixed-precision.

I mean I know there are min/max ranges in the float specification that can guarantee no loss of accuracy to two decimal places... but then I need to manually make sure there's never anywhere in the code that might ever sum up transactions to beyond that, or whatever. Or people thinking it's OK to divide and then multiply, which you're hopefully less likely to do if it's an integer.

I feel much more peace of mind storing currency data as integers and doing the conversion. It feels quite natural really, since I'm already used to doing that with datetimes for different timezones.
I send an SMS every few months, the vast majority of my messaging happens through Signal or iMessage.

And yeah, Signal isn't exceptionally reliable, I've had messages go missing for hours and even days. I hope it gets better, I'm willing to put up with it for security's sake.

I'm not sure I understand what SMS can do that Signal can't, the difference can't possibly be that Signal requires a phone number, can it? And SMS does nothing to indicate delivery and used to lose my messages all the time back when I relied on it.
Why I attended a conference on "Fixing Science"sponsored by the National Association of Scholars.
I wish they used the famous Doge meme image for the mascot.
> we built an ML engine to automatically optimize the bitfields of card network requests

For someone who's not in the payment industry, could you elaborate on what this actually means?
A few months back, I was hit with an attack from a spammer, who managed to place a few hundred orders through my Stripe checkout. It seems they were attempting to place thousands of orders, and looking for functional credit card information.

When I reached out to support, they acknowledged that this was a type of attack, and I needed to manually go back and unapprove all of these purchases coming from a single IP address, that wasn't being stopped by Stripe.

Would I still need to pay to do all those fraudulent charge backs? If so, that single attack would have cost me hundreds of dollars out of pocket.
The 1-on-1 Disclosure Framework
Yeah extremely hard to come by with solution right?

Visa test / approve / record account:

48 XXXX 01

Visa test / approve / donot record:

48 XXXX 02

Visa test / donot approve / record account

48 XXXX 03

Visa test / donot approve / donot record

48 XXXX 04

Hard to let it to client to decide how to test...
None of your sources are evidence; they are just unsubstantiated opinions.

The era when an authority could simply issue a conclusion, and expect the great unwashed public to just believe it without question, are long gone.

We all have access to much more information than in the past and if we wish, can perform our own analysis and reach our own conclusions, independent of old media, private sector experts, assorted propaganda sources etc.
There might not be a good answer, but that doesn't make the existing attempts good. That argument is the same logic I could use to say "Why did you criticize their plan of hitting people in the head as treatment for stage IV cancer if you haven't got a better proposal?"
Oh, right, Keybase. How did I forget Keybase?

Don't use it as much as the others because of network effects, but it works just fine. Requires a user account but no phone number.
How do you handle things like multiplying by some interest rate of 3.125 or (1 + 0.03125)^-354 as examples.

Sure you can round at the end but then you have to worry about compounding errors.
> they officially say it is Postgres-Q-L.

I always interpreted it as Post-gr-S-Q-L. Which is basically the same thing but makes more sense to me because it’s as if the name had a silent “e”.
HTTPS: //Web.facebook.com/Pakoa.loui.1
Put that way it's ridiculous enough if you are not refunding. Someone should do a points-free card with decent security (2fa on each purchase?) to minimise fraud that just gives say $50 cash of that to the consumer. They can then knock off 2.5% of whatever price they see in the store when thinking about what to buy. Such a card would be popular for expense accounts!
Summarize to Save Time
I am a 17 year old high school student, and for the last 3 months I have been working on Summarki (https://www.summarki.com/): a simple and powerful way to automatically summarize extracts meaning from text!
What is Summarki?
Summarki helps you to stop wasting time reading useless text, and summarizes your text or a URL in a few sentences. You can use it for all types of text including: news articles, wikipedia, readings for school, financial documents, whatever you want! Stop wasting your time and energy on excess useless information so you can focus on more important things in life!
If you’re interested, I also posted Summarki on PH, you can check it out here!
Product Hunt (https://www.producthunt.com/posts/summarki).
Thanks for your time!
The onboarding experience is so good. I was dropped into a nostalgic interface that I recognized and I immediately knew what was going on and started exploring. Everything made sense and I happily signed up. Good Job!
The state of design is in shambles. Every designer out there is heavily influenced by trends and frameworks. No one uses tables anymore even for legitimate uses. So much excess whitespace everywhere (Discourse forums vs. phpBB for example). Infinite scroll. Dark mode everywhere (hard to read text) and general copy-cat behavior from designers.

Every website today looks like Stripe, every startup has a magenta theme, gradients are back (even Apple embraced it).

What the fuck are designers doing without understanding the fundamentals of unobtrusive design? What happened to the principles laid out the Otl Aicher, Muller-brockmann, Anton Stankowski, Elliot Noyes and the likes - what we call the International Design movement?

I absolutely hate design of everything today. And the designers. And their ecosystems and frameworks. Javascript is the worst programming language of all. The whole thing reeks of amateurs running around making the world a noisier place.

Google's own design page doesn't meet their performance test. Last I checked, it scored 55/100. Who is Google(and their designers) to tell the world how to design things? In science, we have to write papers, provide data and get the work peer reviewed. In design, you just publish and the louder one gets heard.

Sigh.
How can someone "reference" an old certificate with CT data? CT logs only contain precerts and certs, right?

I suppose one could compare the public key of two leaf certificates, but reusing the private key is also a bad practice.

From CA end, it could check if the certificate is requested from the same account key. One can even use a DNS record to public the account keys (CAA + TLSA).
Sent an email!
SMS works fine for me for some reason. You're right in that it's really bad though. I use it because it's the only thing that even really works at the moment but I wanna get off it as soon as possible.
> My current approach is to raise an issue once, raise that same issue a second time but on the third attempt, bite my tongue and just leave it at that.

The same thing goes for when you aren't a contract worker and management has slightly different (but not necessarily invalid) opinions on what the right thing is. Depending on your point of view, that and what you said are exactly the same thing with a different lens applied. That is, the "right thing" as viewed from the angle of engineering best practices may or may not be the same as the "right thing" for getting some product out the door, even if many of us wish it was.
One of my suppliers sends me PGP encrypted email invoices using an automated system. It works perfectly well for my threat model. Security vulnerabilities in processing this may exist, but so they might in every other system; there's no special vulnerability in email or PGP here.

I understand that this article is for the secure human-to-human messaging use case. That's fine; I have no argument with this. But outside that context, it makes no sense, yet generic claims like "encrypted email is bad" are being made. This is too broad.

I understand that the majority of perceived demand* for encryption may be for secure messaging. On that basis, maybe you think it's OK to disparage encrypted email because a win in getting universal secure personal messaging with the modern desired properties would be worth the cost. But isn't this a strawman? Who exactly is a proponent of encrypted email for secure personal messaging anyway? Who is using PGP for personal encrypted communications today who is being harmed?

* Because most people don't care; it's only a minority of advocates who, rightly or wrongly, believe that everyone should.
Agreed, that phrase strikes me as without intrinsic meaning (though I can't say I ever grasped the meaning of "sorry" in the non-apology sense). It always seems to me like the person wants to say something that appears comforting without actually meaning anything, and seems disingenuous.
Hundreds Released from Diamond Princess Cruise Ship in Japan
Everybody Lies: FBI Edition
Then again neither were the languages you were expected to do your homework in. I think there was one "Pascal language" class no one in the Major took. The faculty cared about the Computer Science (Math) underpinnings; the language dejour was just a speed bump to help separate the wheat from the chaff.
The plant on the East Coast was because Boeing was busting the machinist union that runs the Seattle plants.

It’s also why Boeing has been cutting their key engineering staff in Seattle — they also unionized. In fact, rumor has it that the entire reason MCAS/737MAX debacle happened was outsourcing and contracting shenanigans to break the engineering union.

It turns out moving senior management away from the rest of the company and getting in an ugly fight with your talent before petulantly building a non-union plant elsewhere leads to low quality products and out of touch executives.

Who could have known?

Oh yeah, my friend’s uncle who flatly said when his generation of engineers retired, Boeing would lose the ability to make planes.

And everyone else.
Safe deposit boxes are just awful.

https://www.nytimes.com/2019/07/19/business/safe-deposit-box...
The Internal, External and Extended Microbiomes of Hominins
Please give this a try. It's a very minimal extension that I created it for myself and have been working on it for over an year.