skysight-inc/HackerNews huggingface dataset:
Just listened to the Darknet Diaries Courthouse podcast about the pentest gone wrong that was referenced in the article. Highly recommended.

https://darknetdiaries.com/episode/59/
Why? The original comment I was replying to claimed that Google is not a monopoly because you can easily replace Google with DDG. Which is bullshit. Google provides dozens of services (search, gdocs, photos, youtube, maps etc) where DDG only provides one. And even with the one it does provide, the search results are a lot less useful in about 50% of the searches I do. Which is why I don't use DDG even for search. So yeah, if you are going to argue that I can replace Google with DDG, I am going to argue that you can replace gigabit fiber connection with dial-up.
Am I reading this right? They're going to launch a browser update that removes support for most extensions and claim it's an upgrade?
> They obviously don't have beacons on the client side

Says who?
At least right now looks like some places [0] are selling the 1GB for $30. Maybe until stock runs out.

[0] https://www.adafruit.com/product/4292
While doable, you probably don't really want a web client talking directly to your RDBMS, if for no other reason than connection management would be a nightmare. The calculus there might be different if using something like DynamoDB, but I suspect you'd still find it challenging to be littering your code with DynamoDB calls. So, at some point you'd build your own little utility classes to abstract away the DB interaction, much like an ORM, and eventually it'll evolve into something with overlapping functionality of GraphQL.

If you accept that you don't want your web client talking directly to the database, then you need something that will interface with the database. That problem has been around for a while with many different solutions: SOAP, ReST, PouchDB/CouchDB, interface with various cloud services, something completely custom, and many others. GraphQL is just one of the latest solutions to that problem and with it, brings some advantages around flexibility in the API requests and responses. It also makes it easy to stitch together multiple GraphQL APIs. So, by being standardized* you don't need to develop the client code yourself and you gain the ability to pull together APIs from multiple sources to present as a single end-point. The most popular clients also provide caching mechanisms so you don't have to keep whacking the back-end for the same data repeatedly. There's also graphiql [1], which gives you a really nice way to query or modify your data on any GraphQL API, which I've found to be very helpful when learning new APIs.

So far, I've found GraphQL most useful for single page applications where the back-end really doesn't have to do much more than handle DB interactions. If you already have an application up and running with little churn in the API, adopting GraphQL probably wouldn't gain you much. In a greenfield application, I was able to use Hasura to replace a simple Rails CRUD application and that was handy. Hasura also takes care of JWT handling, so I could do my auth with Auth0 and not handle that in Rails either. I think GraphQL solves an interesting part of the serverless puzzle.

Don't get me wrong, GraphQL can be downright frustrating at times. Or at least the popular implementations of it can be. We use Relay at work and while it solves a lot of problems, it introduces many of its own that have cost me hours of frustration. I tried using AWS Amplify on a side project, and having to write new AppSync resolvers with Velocity templates is just not pretty. It really took using Hasura for me to finally be sold on what the GraphQL promise could be (side note: Hasura doesn't support the Relay protocol, so if that's important to you, you'll need to find a different tool).

* -- Standardized is a loose term. There is a GraphQL spec, but it leaves a lot available to implementation details. So, then there are other specs, such as Relay, built on top of that. Or de facto standards based on what the popular clients provide.

[1] -- https://github.com/graphql/graphiql
But those preschools build immunity.
It's a phase.

I like that every new cohort grows thru rejection and rebellion. Graffiti, bleached hair, ripped jeans, cathartic music, emoji, or whatever.

Source: Former punk, now almost a gray beard.
Overplaying increases the baseline of perceived risk, so you'll have to overplay it even more next time to provoke the same reaction. That's difficult, because once you're at "we're all going to die with 99.9% certainty", will people really care tomorrow when it's 99.99% or 99.999% the day after that?

It feels a bit like throwing antibiotics at everything. Sure, it's effective in the moment, but you're lowering the future effectiveness.
I've never heard of a school actually letting out early though. Last year my son had to go an extra week though because they used more than the planed days off.
"The risky thing" here is a text string. So yes, you should be able to accept an arbitrary string and store it in your database without shooting yourself in the foot, and the same when you read it out of your database and put it in HTML, or JSON, or CSV, or XML, or ASN.1, or protobufs, or in another database.

Handling escaping in HTML or REST API is web dev 101, this shouldn't be controversial.
Americans are skipping medically necessary prescriptions because of the cost
Mothers in Japan generally are not employed.
One interesting frame to view this through is as a stress test of Chinese state capacity. I.e. is the state able to rapidly deploy resources vastly and effectively, at the cost of very dear priorities, to achieve some key national security objective?

If I were a CPC member, I'd be pretty happy with how this has gone. It was able to turn an initial misstep into a triumph: the people I talk to tend to take the view that China got a pop quiz and scored a B+, while all the other countries around are getting the same exam take home and flunking it.
It’s evolutionary pressure; software is malleable and potential functionality is limitless. Software companies that didn’t ascribe to this philosophy were repeatedly killed by ones that did until it became the status quo.
I like the way react does it:

dangerouslySetInnerHTML={{__html: variable}}

Not only can you easily see every place in the code that is using this construct, but, the framework provides a warning.

I definitely don't think it's bad to sanitize HTML content. but in general MOST text in a web app should be just text, and rendered with whatever HTML it contains. In very few places should the web application give user rich-text (aka HTML) access. In any place that the application does that, sanitization should be used.
My company seems to be consistently behind the edge data with regards to policy.

For instance, self isolation is still 14 days. This isn't enough. They are also restricting isolation and travel only to "affected areas of Italy" instead of all of Italy.

It boggles my mind that people say "the risk is low" and "we don't know how to contain it or where these cases are coming from" in the same presser.
Audit of the RustCrypto `aes-gcm` and `chacha20poly1305` crates by NCC group
Can a Soviet-developed medicine treat coronavirus?
Agreed. PragerU doesn't appear to understand many things, but I think they understand Streisand Effect.
We processed over 46,000 restaurant bills – here's what we have learnt
could learn a few things from Netflix and chaos engineering...
FF73 on OSX, I see the same result as that image.
I think so too. If we had any hope of eradicating just one influenza strain we would discuss even a month of worldwide travel bans to get that.
It means their SLA bases on non 5xx and connection errors?
Would it be feasible (legally) to build a website which hosts user generated content and be considered a common carrier therefore not responsible for what users post? Illegal forms of pornography would have to be the litmus test here.

People get upset when content is censored which they view to be vital to the public interest. In the case of particularly gruesome combat footage or violent crime I don’t see how in some jurisdictions those sites could operate with the content NOT taken down. For instance, you recall how 8chan was taken down over the Christchurch NZ shooters manifesto and video.
Having to sort trash and manage a biological process are two that I can think of.
mSD is slower than an SSD.
In most parts of the world the government has authority over everything once they declare an emergency.
https://en.m.wikipedia.org/wiki/Mali_Empire
But that could be said about any disease. As is, it is mortality given that you have symptoms which is a pretty good measure to have. For everything else, you need some many more parameters, better tests etc. Even a test for antibodies in blood which would be the gold standard can fail. Also, we do not know how many people are naturally immune to the disease. May be 10 world wide, maybe 10%, who knows?
Did you know that the guy who wrote the First Amendment also owned slaves? It seems like a nuance we might want to consider!
Better tools exist. Someone was just trying to have fun, ffs.

Your approach to work/learning might not necessarily reflect the others'.

Picking a technical detail (bear in mind, almost everyone here knows about SVG, WebGL etc...) seems a bit ironic to me, as you mention "pain" and "self harm", whereas the reply by itself seems to lack empathy. Or, an understanding of context.
> Can Google skew and eliminate searches they don't agree with?

A main motivation behind PageRank was dissatisfaction with the quality and content of other search engines. And Google's SERP algorithm has constantly changed and evolved over the years.
Well I am glad nobody is going to lie. /S
>Freedom of speech makes sense when its my body - but who's body does the speech come out of with a corporation?

It comes from the body of everyone who holds shares in the corporation. Banning free speech from corporations would increase the influence of billionaires, not lessen it, by making it impossible for those who don't have the means individually of purchasing distribution from banding together and purchasing distribution as a collective entity.

Concrete example: let's say there's an evil billionaire, Lex Luthor, who's flooding the airwaves with propaganda for policies that you think are awful and evil. In a world where corporate speech was prohibited or restricted, you and your neighbors would have much less power to oppose Mr. Luthor, because you would be unable to band together and form a corporate entity (e.g. "Concerned Citizens Against Kryptonite Pollution") to oppose Mr. Luthor's advertising that kryptonite is a perfectly safe chemical which has no negative health effects.
It's not a matter of being exactly the same thing or not. The double standard is glaring.
And provide soap at sinks in public bathrooms.
I've been using postgraphile over hasura for while, initially because of some JWT business. That thing rocks. RBAC and JWTs are a killer feature for public facing stuff.

Congrats to the folks at hasura for the raise, long live postgres and graphql.
And so we pick and choose which ideals to carry on and which to throw away.

Do you see anything wrong with freedom of speech?
That’s over 10pct! It’s still very impressive!

Great job, and thank you so much!
It makes Planned Parenthood an organization one should judge in modern context separable from its origins, much like freedom of speech and ownership of other people from Greek philosophy.
> their interest is still to report factual trends and overall situation

Maybe, but it's important to never underestimate the value regimes like China put on image. Parallels can be drawn to how the USSR downplayed the Chernobyl incident and how many more lives were affected by their nationalistic pride.
Unfortunately it takes 2 weeks to show symptoms.
I think the quote from Pinkham is more about dealing with genuinely unavoidable failures, not those due to moving without appropriate due diligence.
Offtopic, but if you’d like an elegant hybrid† Markdown viewing/editing experience, I’d suggest https://typora.io/, another nicely-polished low-memory-consumption native app.

† I don’t know what to call this editing paradigm. It’s somewhere between source-editing and WYSIWYG. Document markup nodes are rendered as their source syntax when your cursor is “inside” them, allowing for plaintext modification of the syntax; but then, when your cursor leaves a node, it switches to rendering as its formatted output instead. You can cursor back into the node to edit it more at any time. It’s pretty unique. It’s the editing style that Slack’s new input box wishes it had.
Poincaré maps: Hyperbolic embeddings to understand how cells develop
Define thermal problems? They get warm, but newer firmware seems to do much better than the first ones.You could just add a fan and not worry about it.
Reminder, "Hacker News" is not about tech. From https://news.ycombinator.com/newsguidelines.html:

> On-Topic: Anything that good hackers would find interesting. That includes more than hacking and startups. If you had to reduce it to a sentence, the answer might be: anything that gratifies one's intellectual curiosity.

> Off-Topic: Most stories about politics, or crime, or sports, unless they're evidence of some interesting new phenomenon. Videos of pratfalls or disasters, or cute animal pictures. If they'd cover it on TV news, it's probably off-topic.

Ten years ago, this could have been an incredible forum to discuss the emergence of coronavirus, as it has the potential to affect economies and societies around the world. It no longer seems appropriate here, as there is little civility and open conversation here.

It's sad this doesn't happen anymore.
Initially, but that is subject to change or more likely evolve over time.
Do not visit this site. If you visit it once and then visit it after a while they will fill it with crap that you did not download in order to blackmail you or something I presume. Alternatively they might start tracking you only once you visit it. Even if they are honest it is extremely inaccurate (it had 8.8.8.8 torrenting anime a while ago for example)
I expect if schools get called off most business will tell their people to stay home. They will watch their kids while working.

Of course the poorest will be least likely to be told to stay home (grocery stores will still need to be open - and probably need extra staff for sanitation)
It cuts both ways. There are many more wealthy corporations than individuals.
A huge benefit that tools like Hasura, Postgraphile and PostgREST provide is using the native in-database row level security model.

Consider Django. Your django app logs into the database typically as a user with elevated permission that is a superset of all permissions required by your users. Postgres has no idea that django is acting on behalf of many users, all it sees is this django super-like user. If an attacker roots your Django instance, they have the same privileges. If your PHB decides to "help" and log in with creds found in the source code, the damage could be catastrophic.

Products like Hasura, Postgraphile and PostgREST switch databse roles on the fly per-request. The user that these tools logs in as typically has almost no privileges. You must be the bearer of a valid JWT token to elevate privileges, and then you only get to the level of the user you stole the token from. There is NO super-like user.
> there was no crime, everything pointing to a tragic accident

From just reading the Wiki article (key caveat), I would say the case is not "beyond reasonable doubt" thus a conviction is unwarranted. But that doesn't mean everything points to a tragic incident. This is a pretty murky case.
I've also much preferred GitLab's GUI. It seemed to be much cleaner and smoother than Githubs (not to mention the much better named Merge Request).
I tried drinking coffee through a straw one summer because it’s supposed to protect your teeth.

I’m pretty sure I’m at a greater risk of throat cancer now, and other than that I’m not too sure why you would want them.
I shudder to think about what will happen if they go down for whatever reason. Or get compromised, or the renewal gets bugged etc.

It is all cool and great, but is it sustainable long term, who guarantees that everything will work in 10 years? Monocultures are not desirable.

A ray of hope - you can get a two-year certificate for 10 bucks - so right there, another major benefit of Let's Encrypt, they makes for better competition. (ok I know Apple will stop honoring these starting in the Fall, but I still got two years since the expiration will be for new certificates)
As a private company, I don’t believe YouTube should be obligated to be a platform to host people’s free speech. However, they do advertise themselves as a public forum so by restricting viewpoints that they disagree with they really aren’t the public forum they claim to be.
"Manhattan Community Access Corp" doesn't seem to have the same market power as Google/Youtube. I still think this will be a novel SC case.

Interestingly Manhattan Community Access Corp is definitely in some regards closer to a state actor, being authorized by NYC to operate.
"In line with our commitment to long-term support, the 1GB product will remain available to industrial and commercial customers, at a list price of $35. As there is no price advantage over the 2GB product, we expect most users to opt for the larger-memory variant."
If you want to spread these kind of unsubstantiated claims around, go do it on 4chan or Reddit. It’s not welcome here.
You are exactly correct. With the formulas you described:

naïve CFR = deaths / cases

resolved CFR = deaths / (deaths + recoveries)

It can be shown pretty dramatically in outbreak simulations how more accurate the resolved CFR is than the naïve CFR. See for example the chart https://blog.zorinaq.com/assets/outbreak2.svg In that specific example, the naïve CFR underestimates by 5x, while the resolved CFR is only off by ~1.3x. I ran this simulation as part of my blog post on how to estimate the Case Fatality Ratio of the coronavirus: https://blog.zorinaq.com/case-fatality-ratio-ncov/
Not sure why you are downvoted, the theory makes sense.
“I am an old man and have known a great many troubles, but most of them never happened.” Attributed to Mark Twain in Reader's Digest, Apr. 1934

On the other hand, I'm fairly happy that many people wash their hands more, stay out of current hotspots like Lombardy, and do other things that make this less deadly. You wouldn't get this effect without significant coverage.
yes, the microSD card isn't known for being super speedy (but it's not absolutely terrible either).
Isn’t that what they said about theranos?
This is a great article, and one of the obvious but brilliant advice from the write up is :

> Don’t blindly assume.

I know I would be way more willing to allow a pleasant lady of mature mothering age and demeanor than a middle aged guy.

Its the stereotypes we subconsciously build up unfortunately.
I remember seeing documentation on this a while ago, but I can't seem to find any documentation from nginx-ingress that talks about how nginx-ingress uses readinessprobe or livenessprobe.

I was looking into this because if I have a pod with 3 containers, if 1 container wasn't running, nginx-ingress stopped serving traffic. I actually want to continue serving traffic if a certain container is still running, not all 3 running necessarily

Do you know or have any documentation on how nginx-ingress actually does its readiness/liveness checks?
I never get the argument that because we are not solving the entire problem at once we shouldn't make any step in the right direction. Changing mentalities is a big deal. Eventually it can trickle down to our entire way of life and make for a smooth (r)evolution, with no one missing the old world.
As someone on here aptly described it, AJAX was a "historic own goal" by Microsoft, who was desperately attempting to separate IE from all other browsers by giving it unique features.
The question is probably too broad to be useful. I see several situations where it is extremely healthy to a society and several situations where it can be harmful and even countries like the United States restrict it.

My freedom of speech (under US law) doesn't allow me to go around accusing my neighbor of pedophilia, for example, without opening me up to a hefty lawsuit if they are not, in fact, a pedophile.

Even in this forum we're using right now (founded by an organization associated with a man who once wrote an essay titled "What You Can't Say"), there are things I could transmit here which would result in a swift, merciless, and I argue just ban from our benevolent moderators.
The easiest way to eliminate food waste would be to eliminate fresh produce, meat, and baked goods. If it can't be canned or frozen, process it and pump it full of preservatives until it can.
off topic.
it took me a while to notice this isn't outline.com :)
These platforms don’t replace the public square. The internet is the “public square” and you can buy your own domain and do whatever you want.

These platforms are the giant retail shops that line the square in a capitalist world. They come and go. You don’t have to go into them and they can kick you out whenever they want.
I mean that seems like a question to ask an account rep? I'm sure it's also probably not a hard and fast rule for every single customer, hence the ambiguity in the general language.
I didn't see anything about removing any extension support. The word "upgrade" also isn't anywhere on the page that I can see. So my guess is no, you're not reading it right.
I thought cops lobbied for restrictions on this ammo
In the same article about 144 reported flu deaths, they cite the comparable Hong Kong flu stats (226 dead) despite Hong Kong having 0.5% of the population of China. Nowhere in that article do they mention differences in methodologies of reported vs estimated.

My point is that if the China CDC is counting covid-19 cases the way they count flu cases, that means the actual numbers are much worse. They underreport the number of flu cases by a factor of 50. eg: They claim 700,000 cases in 2018, which is less than 0.1% of the population. (In developed countries, around 5% of the population gets the flu each year.) Then they juke the stats to claim fewer flu deaths than there actually are (144 deaths instead of 150,000).

I don't think the numbers for covid-19 are off by two orders of magnitude, but my point is that the China CDC loves to publish numbers that amount to outright lies.
Yes. Because for the majority of users, who do not use extensions, it is an upgrade. And it comes with built-in tracking prevention and still supports ad blocking, surely the two the big reasons most people use extensions in the first place.

And they're going to restore extension functionality, so the power users who depend on extensions can keep the current version and wait if they wish.
Apparently being Zuck means you need to have an insane level of protection. But regular people also have things to lose when their privacy is thrown out the toilet. Thanks to z.
I'm a web entrepreneur and for my project i've been using Parse server project (1) implementation by Back4app (2).
For the non initiated, Parse server is a API server module for Node/Express + mongo + websocket and stuff you need to run a commercial app like auth, role management et all.

We chose this because :

1.Open source (no vendor locking although now i'm sure if i had to move from b4a it would be a small PITA
2. Ready to use
3. actively maintained (graphQL have been implemented although we have not used it yet) (3)

My question is : should i invest time on discovering nhost for my next POC ?

(1) : https://github.com/parse-community
(2) : https://www.back4app.com/
(3) : https://docs.parseplatform.org/graphql/guide/
Doesn't HN site guidance allow stories about politics, or crime, or sports if `they're evidence of some interesting new phenomenon` and `gratifies intellectual curiosity`?

https://news.ycombinator.com/newsguidelines.html