skysight-inc/HackerNews huggingface dataset:
This sounds good in theory, but I'll give a counterexample.

Requirement: Name input box.

Implementation: We'll sanitize the input by rejecting any characters likely to be dangerous if mishandled, like single quotes, or anything else we don't immediately imagine to be useful. If a character turns out to be needed later, that's no problem. We'll just change the list.

Security audit: Passes

Later customer complaint: I can't sign up! — J. O'Brien

Dev team: Sorry, too bad. We'd have to re-audit everything and possibly modify code to allow your last name, because there might be code somewhere that relies on the original sanitization for security. That was the point of sanitizing on input, after all. If you want to sign up, it would be easiest for us if you would just change your name.
The Largest Trump Forum, The_Donald, Was Effectively Shut Down [video]
Apparently this is his idea of writing in a way that's not "a caricature or unfair exaggeration on [his] part"...
Are you saying the flu vaccine can help prevent covid-19? Just trying to clarify. I'm traveling to Asia in 3 weeks from US and haven't gotten the flu shot the past year. I got it in 2017 and got sick, 2018 and got sick, but last year I decided not to and didn't get sick at all. Maybe just a coincidence though.
I agree with this sentiment, to a point. Economic growth is, at least to Western eyes, the main point of derived legitimacy for PRC. If the calculation is that blowing containment of the virus was a worse threat to that than 2 quarters of negative growth then, yeah, this is a big deal. I think I disagree a little with Western countries' governments not being able to enact policies for containment. What I'm more concerned about is people who live in Western countries actually following them, and the government failing to force compliance.
The Raspberry Pi 4 gets more RAM for $35
We used appsync at my company and switched to a more classical approach of handwritten crud, a REST Api, a RDS (not entirely sure how well you can use them with appsync) away from dynamodb. Appsync was just not mature enough, had bugs and severe limitations. Without someone in the team who really knows Appsync, I would recommend against it and towards the tech you know.
You seen to be conflating a household's actual expenses with a city's relative cost of living.

I mean, I'd argue there are several things involved with having a family that have costs relative to where you live (access to schools/primary education for example), so I don't really see it as disparately.
IMO it’s one of the best data points we have. As I understand it, everyone on the ship was exposed, everyone was tested, we know exactly how many people became infected, and under close to ideal treatment conditions, there have been (so far) 4 fatalities of elderly patients.

Yes, this doesn’t tell you what happens with less than ideal care (higher fatality rates), or under different populations (lower fatality rates) but it’s a world of difference from the 10% fatality rates being tossed around elsewhere in this thread.

4/800 = 0.5%. And if you accept the very reasonable likelihood that actually everyone on the ship was exposed, 4/3700 = 0.1%.
Early Danger adopter here. The hiptop was great for its time but with the advent of the iPhone, it was obsolete. That was before the MS acquisition. Rubin (and presumably much of his team) had long prior left for Android.

Danger was already in freefall by the time of the acquisition. You can't blame Microsoft for that.
I think China has reached a tipping point in this one though and local governments are giving the information they have to the central government. When this started hiding things was a reasonable policy for the local governments, but now that this has so much international attention I think it is clear to everybody in local governments that being caught hiding anything is worse than whatever good could come out of the best case of hiding something.

Do not mistake the above for local governments having good information to give. I'm also not sure if China is giving everything out either publicly or internationally.

Of course I'm just an outside observer with no inside knowledge making what I think are reasonable guesses.
>GraphQL doesn't fundamentally change the fact that something needs to be responsible for enforcing access restrictions and talking to a database.

This is what I'm struggling with when it comes to weighing the pros and cons of GraphQL. I like the SQL model, ie pushing selects and joins and such to the DB, so why not from client to host too? But when you still need to enforce access restriction and such per user per action, how much time would it save me, really?

Seems great for internal apis or prototyping though.
AFAIK this talk aas given at DerbyCon in 2018 and there might be video.
>and it's definitely open source.

Not according to what open source currently means, no.
Zero infants or children between 0-9 have died. The article mentions:

> In general, relatively few cases are seen among children.

How come? My expectation would be something akin to an elderly range.
When did I say anything about a PR department? The only thing the article attributed to the CDC PR department was "The CDC did not immediately respond to a request for comment."

The CDC is legally prohibited from advocating or promoting gun control, so all they are allowed to do is think and pray. Maybe that same federally mandated approach to disease control will work for coronavirus too, now that Czar Pence is on the job, since he's now the singular entity in charge of leading the U.S. coronavirus response.

https://en.wikipedia.org/wiki/Dickey_Amendment

>The Dickey Amendment is a provision first inserted as a rider into the 1996 United States federal government omnibus spending bill which mandated that "none of the funds made available for injury prevention and control at the Centers for Disease Control and Prevention (CDC) may be used to advocate or promote gun control." In the same spending bill, Congress earmarked $2.6 million from the CDC's budget, the exact amount that had previously been allocated to the agency for firearms research the previous year, for traumatic brain injury-related research.

https://www.washingtonpost.com/politics/2020/02/27/mike-penc...

>Mike Pence was criticized for his handling of Indiana’s HIV outbreak. He will lead the U.S. coronavirus response.

>[...] The announcement has cast light on Pence’s record as a lawmaker and his handling of a major public health crisis during his time as governor of Indiana. The worst HIV outbreak in the state’s history happened on his watch in 2015, which critics blamed on Pence’s belated response and his opposition to authorizing a needle-exchange program.

>[...] “The governor wanted to make sure if we went this route it was absolutely necessary,” Dr. Adams said. “I believe he was praying on it up until the final decision.”

https://www.nytimes.com/2016/08/08/us/politics/mike-pence-ne...

>Mike Pence’s Response to H.I.V. Outbreak: Prayer, Then a Change of Heart

>[...] On March 23, more than two months after the outbreak was detected, Mr. Pence said he was going to go home and pray on it.
Most forensic science is complete BS. Very little has changed since the pivotal National Academies of Sciences report, "Strengthening Forensic Science in the United States" came out in 2009.
Maybe OP's use of the word "Coach" instead of "help" is not great here, but I read this as a coworker trying to help an under-appreciated colleague.

I do not think promotions or raises are a "one shot" situation, and I don't think having an advocate on your team is going to result in bad consequences, not unless they force the issue or management is truly awful.

As to coaching/checklists - I don't think someone has to be in the exact same situation to help. Every good coach starts from zero coaching experience, and it's easy to advocate on behalf of a teammate. I've had a lot of help from lots of people with different backgrounds, skills, etc. in my career - I would hate for them to think they couldn't help me because they haven't been in the exact same position.
Credit Karma’s acquisition; FICO’s new scoring system; Better tech for tenants
These stories always make me wonder how many malicious infiltrations occur that are never discovered or reported? It could happen all the time, especially at places much less secure. It's certainly far riskier to infiltrate a prison (where all the guards have guns) than a corporate office.
To be fair, they didn't say that was the cause of the current outage. They made a general observation that Microsoft-acquired companies degrade, which seems like a fairly reasonable observation: The goal of being the best Git service/repo falls by the wayside as other corporate goals push in.
And we thought only China was suppressing disease counts

I see from the downvotes that everyone thinks this is just a glib cheap shot. But the point is profound: no one wants to admit to this happening. Everyone in power[1], everywhere, still thinks this is "probably not going to be a big deal". So they deliberately avoid looking for those early cases, because they're sure they're just rare outliers. And that makes the eventual outbreak inevitable.

And it's happening here too.

[1] Also a lot of people not in power, like a distressingly large cohort of posters here who seem to be taking their cues from political sources.
Right. It takes 3+ weeks to die from CoVID-19, so if they're looking at people who were diagnosed as late as Feb. 11th then this is going to be a substantial underestimate of fatality. Especially since as awareness of the disease has increased, the time to diagnosis after first symptoms has fallen from 5 - 6 days to 1 - 2 days.
> And you can't share pieces across different torrents

So make each layer an own torrent?
The Residential Real Estate Market Is Basically Fine, for a Bad Reason
> “Since the patient did not fit the existing CDC criteria for COVID-19, a test was not immediately administered,” the statement added. “UC Davis Health does not control the testing process.”

That seems fair enough to me - testing is currently limited, and likely under high load.

The concern, rather, is this:

> Experts raised concern that the CDC's narrow testing criteria could mean that there are more cases circulating among the general public that have not been identified.

The narrowed testing criteria hasn't managed to just exclude false positives (the intent) - it is now excluding positives that need to be caught.
>Then why give anyone an iPhone?

Because apple paid you 1% of entire budget just for product placement.
Declutter Your Inbox. Subscribe to Email Newsletters Straight into Inoreader
One of my most important rules:

Whenever you say, think, or imply something starting with "So from now on we just have to remember...", you're really saying "Let's decide this part of the system will always keep breaking!".
> hey, we know you have a working phone

Sounds like a rebuke. I'd be pretty offended if a business tried to call me out like this for using an app that (presumably) they're willingly taking orders from. If they don't want to be on there then don't, but don't have a go at me about it.
Preparing the infrastructure for Windows open-source event?
I looked over the study to determine if there was a criteria for "yield" vs "non-yielding".

I think based on the study write-up under section "2.2. Pedestrian crossing", that yielding was based on:

- car in nearest lane is 200 yards away

- pedestrian placed one foot into crosswalk

- pedestrian attempted to make eye contact with driver

- driver reduces speed -> threshold for "safe to attempt"

- driver yields or does not -> fits criteria for "yields"

It isn't clear if they considered a failure by the driver to invigilate the entire crossing as a "failure to yield"; e.g. in my district, if a pedestrian is present in the cross walk at any part of the road, I cannot proceed full-stop, and that would be a "failure to yield" under my road laws act.

After thinking about this study, and attempting to not make myself look like a fool if my original issue was addressed, I noted a few more deficiencies in this study:

- road structure (other than mid-block crossing, and 35MPH; e.g. number of houses, other entry ways, number of business, two lanes or four lanes; traffic calming measures)

- road use (isolated neighborhood collector; retail zone; between two high-congestion areas; etc)

- volume of crossings by non-study participants

- recency of the crossing

- existing use of the crossing (inter-neighborhood? inter-shopping centre? school to park?)

- driver perceived age of pedestrians and pedestrian capability (infirm, underage, active)

This all leads into:

- driver awareness of existing pedestrian crossing

- driver familiarity with pedestrians at that crossing

- driver intention with the road

- brand new and underused crossing? old crossing with very low non-study volume?

- is 4x30 = 120 crossings at road 1 and road 2 high or low for that area?

I don't feel this study is useful in isolation, and I'd be irritated if someone used it as a basis for point-making.
Most Meetings Are Pointless (But They Don’t Have to Be)
His name is Dankmus.

https://www.youtube.com/channel/UCfITAHFPUbFwCbMYrhMJJCw
Gonna be that guy and say that this map almost certainly has inaccuracies at least in southeast and south asia. If individual owner/operator businesses count I'm sure you can find some hole in the wall restaurant in Thailand dating before 1878. Also the fact that still operating is a requirement obviously imposes a massive colonialism penalty.
5 people have died that were on the princess cruise out of 705 infected. At just over 1/2 a percent, it is more deadly than the flu, but not 2% and certainly not 7.8%

The princess cruise gives us a crucial piece of information which is a fully tested population.

2 things to consider:

1) population is like older due to being a princess cruise which would increase death rate.

2) not everyone is cleared yet, so more deaths could come
Thank you - I came to the same conclusion while still editing my post - I think my edit and your post coincided. I clarified this edit in my original post.
The infected might be terribly maimed for the rest of their life as well. Can you imagine if they develop COPD or some similar chronic inflammatory lung disease because of this?
Since the First Amendment acts as a constraint on Government, yeah, it makes sense that YouTube is under no obligation to protect your freedom of speech. This isn't a hard concept.
You also need to find an employer that understands how trivial it is to file a petition for a worker who already has an H1B. It is cheaper than paying a recruiter and the success rate of getting the candidate is much higher.
just noticed this is a thread from Feb 3. Not that it's not interesting, but was wondering I couldn't find it in foone's recent stream. (an HN re-submit I take it)
Awesome to see the GraphQL community growing, there's a GraphQL Landscape of tools out there, if something is missing please contribute, the GraphQL Foundation is tracking everything now: https://landscape.graphql.org/
Let's Encrypt Has Issued a Billion Certificates
Isn't it misleading to mention sales tax in the inclusion? You're always going to pay for it anyway, right (I am not from USA)? Why not simply either avoid mentioning it in the comparison, or add it everywhere (which is a long term fix).
>you can't break it because "you're hard at work"

Apparently you can...because it is broken.

A few days of degraded service is frustrating, but their up-time has bought them a lot of credit in my book - especially considering what they do.

This is the real world. No service is magically infallible.
> That would put the mortality rate at under 1%, which is close to the evidence we have from elsewhere (e.g. the Diamond Princess).

Since it takes 3+ weeks to die from this illness, we're not going to know the fatality rate from the diamond princess for another month. And that's still going to be a lower bound since they'll all be getting medical care from often before they're even diagnosed.
It looks like it completely depends on there being other types of radio waves and modifying them. If you were security conscious you could either check if radio signals were being modified somehow or just shield off certain rooms (faraday cage).
This is potentially quite interesting to me we are having conversations on/off at work about data reporting, visualising etc., which is leading me to pay attention to related topics.

However, it's lacking in any context explaining what you're trying to achieve and why.

It's probably obvious to some people but for me, it's not, which I think is a shame.
Over 335 million people own cryptocurrency. Who are they? Why do they buy it?
Why would you think a country under severe sanctions can have a very good health care system?
>WiFi people are much more interested in the radio-technical aspects than safety.

History shows us we should expect folks to build the thing then improve later.
> How do we calculate Uptime?

> Our Uptime calculation is based on the percentage of successful requests we serve through our web, API, and Git client interfaces.

Just curious, how do they measure this? What is the actual calculation?
Seems like a pretty weak argument they made regarding the first amendment. Google censorship being considered a "state action"? Yeah right.

A more interesting test case is Google removing footage of elected officials speaking in a congressional session: https://www.axios.com/rand-paul-whistleblower-name-youtube-v...
Was that not already well established?
The problem is in the healthcare capacities.

I live in a country with ~2mio people. If you're patient zero here, you get a comfy private room, your own bed, 5 doctors, 10 nurses, whole research teams, respirators, priority with all the tests, examinations, etc. Same for patient 1, 2, 3.

If 200k people get infected (10% of population), and only 10% of those need extra medical care, that's 20.000 people. We don't have that many hospital beds, doctors, respirators.. probably not even enough medicine (some test have shown that malaria medicine and aids medicine works on some people). You get thrown into an army tent or a school gym with many more ill people, and you get almost zero resources. Need a respirator? Sorry, only 5 available at that location, and are used on other people.. or kids.. or pregnant women... and you can just slowly suffocate.

China built a hospital in a couple of days. I don't think there's a country in EU that can do anything remotely fast as that.. we probably need 10 days just to discuss where to put the emergency tents, and even then we'd get protesters not wanting them there. Same probably in the USA.

We also don't have companies making respirators and other medical equipment. Large countries who do, are making them for their own hospitals (if they're not stuck in paperpushing hell with the government).

Basically, if there's a wide-spread epidemic, a lot of people will get really really fscked.
That's a huge tower of a heatsink. The motherboard seems to be bending from the weight of it. Am I seeing 2 fans attached to the sides of the heatsink?
Skype was bad before Microsoft when it was still part of eBay and stayed terrible after Microsoft. LinkedIn was legendary in dark patterns usage way before Microsoft.

Nokia... I don’t know about that one. Change to smartphones hit every “old” phone brand... Ericsson did not survive, Siemens did not survive, Alcatel is just a brand now, even Sony has a hard time... Nokia would probably die no matter what. All the Maemo/linux based OSes (that kept changing names all the time) were nice, but so was Palm’s WebOS...
I live in North America. I'm not doing anything special at all about this. However, I am always extra cautious about the ordinary flu this time of year, and what I do for that (primarily frequent hand-washing and avoiding touching my face) is probably helpful against coronavirus as well.
New York Times Guide: How to Dox Yourself on the Internet
Small Business with Big Business Problems
Reliability/coherence in actor-based distributed systems
They held a workshop for stakeholders a couple of weeks ago. And while they tried to hide the time involved it broke down like this: 2 years for them to get their "essential safety requirements" in place (which is itself wildly optimistic, given they've essentially did that for over 11 years and say they're now starting again. Then the go to British Standards. The British Standards rep then butted in to say they will need 5 years (again, wildly optimistic). When I met them on Tuesday I said they will need to add another two to that for consultation and implementation, which they actually agreed with. That makes 9 years - at an absolute minimum. Industry will want 2 years run-in too, making 11. I'm saying more like 15 because given what they're trying to do, that's more realistic. In practice they're not planning to implement anything.
How much data does BitBucket have to process on a daily basis compared to GitHub, or GitLab?

I imagine that there are stability issues that any provider will have to deal with as they scale to account for the masses.
Mortality is overwhelmingly restricted to the elderly and particularly those with existing health problems:

AGE DEATH RATE* 80+ years old 14.8%

70-79 years old 8.0%

60-69 years old 3.6%

50-59 years old 1.3%

40-49 years old 0.4%

30-39 years old 0.2%

20-29 years old 0.2%

10-19 years old 0.2%

0-9 years old no fatalities

PRE-EXISTING CONDITION DEATH RATE*

Cardiovascular disease 10.5%

Diabetes 7.3%

Chronic respiratory disease 6.3%

Hypertension 6.0%

Cancer 5.6%

no pre-existing conditions 0.9%

https://www.worldometers.info/coronavirus/coronavirus-age-se...

If there is any 'plus' to this situation, its that Coronavirus will rapidly de-age many Western countries. This could lead to large economic benefits in the form of long-term savings on pensions and healthcare, as well as freeing up housing for families.
I'm not talking about helping a movement. I'm talking about what best helps your users/customers. With the SSPL, certain users do not have legal rights to use, share, modify or even compile it, as they can't reasonably comply with section 13. It can hardly be called open source because it discriminates against them.

Think about this from the perspective of another engineer in your community. Say that engineer loves your product, contributes pull requests regularly, deploys it at every company they go to work for. Some of the companies convert and buy your service offering. Everything is well, business is good, that engineer is considered a valuable member of your community. Now at some point in their career the engineer goes to work for Amazon, or their company gets bought by Google or something. All of a sudden they can't deploy it at work and they're not allowed to participate anymore? It doesn't make any sense. I'm not really going by the strict word of the SSPL here either, this sounded like it was your intent a few posts ago.

Edit: If you do end up in that situation, the only thing you can really do as a startup to correct it is to hire the person before they get snatched up by BigCo. But if your company is still in early growth stages then you are probably not going to have the resources to make this happen with every community member. So I can't see how the SSPL is helping here.
Indeed, so there was a point to be made.
The article misstates what 'sanitizing inputs' means.

I agree with posters who recommend passing data as parameters to methods that don't require sanitized input (e.g. stored procedures or KeyValue APIs).

Also, sanitizing input means transforming input so you retain the original content, but without escape or control characters. Sanitizing input does not mean throwing part of the input away (except when you know it is meaningless in your context, e.g. spaces at the end of a name).