skysight-inc/HackerNews huggingface dataset:
Any CA can sign any certificate they want, including ones they generate themselves. If a bad actor got control of, or even could coerce, a CA, and could do the same for DNS, the end users would be hard pressed to know.

It's a very valid attack, although minimal. To say they don't have any way of MITM'ing a connection is wrong even if it's unlikely.
This only applies if there's a product placement deal in place. If you just use it for free there's probably not much they can do.
I had a professor in my graduate education who was a mathematician focusing on criminal forensics. She was involved in the AAAS report amongst other efforts. The short version of the story that she told about two years ago is that, in all of criminal forensics, there is only one method which has been subjected to rigorous research: DNA matching, due to it being a topic of interest in many fields (e.g. genetic anthropology).
That's just false. The US federal government spends over $1,000,000,000,000 on healthcare per year. Only Social Security is a bigger expenditure. It's almost twice what it spends on the military. It's 8.5% of its humongous GDP. That's a larger percentage than most European countries. Germany's the only country I'm aware of where the government spends substantially more of the country's GDP on healthcare than the US.
Here's a global tracker: https://gisanddata.maps.arcgis.com/apps/opsdashboard/index.h...
All the sibling comments touch on valid points. I'm going to try and summarize them for clarity.

- The US has a few nationalized (single-payer) insurance programs... TriCare for military, Medicare for retirees, and Medicaid for the indigent.
- Obtaining Medicaid is not easy - you have to be truly indigent in many states (it's federally funded, but states manage their own programs)
- Everybody else is left to buy their own insurance policy. Sometimes this is partially funded by an employer, but not always.
- Due to the high cost of insurance (and health care in general), many plans have very high copays and deductibles.

So, even with an average health instance policy, a person could be stuck with the full cost of that test because of a deductible. In the past, I've had deductibles as high as $5000/individual, $12,000/family (note: I don't know, we're back on a PPO with a $2000 deductible).

When I use a medical service, I usually receive a statement that lists retail prices for services rendered, negotiated fees (between MD and insurance), and sometimes an excess amount that I owe.

If the hospital is "out of network" (no contract between insurance and hospital), I could be due a larger chunk of the bill personally (up to 100%, depending on insurance plan). This is called "balance billing" - google will give you all sorts of insane results from $50,000 helicopter rides to entire hospital centers that don't work with a single insurance provider so they can bill whatever they want.

As noted elsewhere, it's a complete mess and embarrassment for one of the wealthiest nations on the planet.
That's pretty interesting. Where I can read more or check your products?

Found the site: https://www.probablygenetic.com/

Doesn't seem like it's available for india or outside US.
That's not the case on the Raspberry Pi 4. RAM is a separate chip that sits next to the SoC.
Apparently this is the main reason why Burnout games had fictional cars.
> They add a piece of paper to EVERY ORDER indicating that if you call or text

This is very wise. Money and orders from Uber Eats aren't your revenue, they are a little recoup on your ad campaign. They're basically treating the service like a more successful Groupon.
As european, don't count on Europe neither. Italians are already backing up in their statements as they clearly see they are the only fools that were willing to make any sacrifice to try to contain it.

Another instance of pathethic european leadership.
I'd imagine trademarks play a role.
> but if you want to contribute code back, pretty much all popular open-source projects would want them to assign copyright back to them.

This is not the case.

> Licensing will govern what you can and cannot do with the repo you clone or fork.

And this is _precisely_ where you and the open source ethos differ.

> the argument on whether it violates open_source ethos or not has to be around that clause.

The argument has been settled. Over and over again. Restrictions on use = not Open Source.
Protection that looks silly is protection you will wait too long to start using, that's my philosophy anyway.
Regarding Google, there's already an abundance of evidence that they can and do.
Let's Encrypt has caused a revolution in the world of public XMPP servers. Now they are pretty much all properly encrypted for both client to server and server to server. The list of servers shows a sea of Let's Encrypt:

* https://list.jabber.at/

I suspect that there are a lot of other non-web applications out there that have hugely benefited as well...
> Basically, the government doesn't pay for anything; only private insurers do.

The US government spends about the same on healthcare as many other governments, which makes the terrible standard of care even more confusing.

https://www.ons.gov.uk/peoplepopulationandcommunity/healthan...
I noticed interesting and opposite pattern in various TV shows: when somebody drives a Tesla then he is at least morally shady if not outright bad guy. And it looks like that is intentional.
>Is this a culture/mind difference, or does everybody in the US doesn’t like this but has no time to fix it?

This is just the way it is. We don't know anything else and when you start talking about changing it a lot of people lash out and can get quite heated.

Our government is not the best at managing things efficiently, socialized medicine means it gets paid via taxes, the medical and drug companies have lobbyists and can largely get away with setting whatever prices they want right now, etc.

Personally I'd be fairly hesitant to get on board with socialized medicine here in the United States purely for the fact I would fear it would be just as corrupt and I don't know if the increased taxes would be more than I pay for my insurance currently considering my employer pays more of the cost of my insurance than I do and I doubt that sudden savings would be passed on to me as increased pay.
Zstd by default will write sparse files when it detects runs of zeros during decompression, but isn't aware of it when reading a file.
Everything thermal throttles these days, but the early Pi4 firmware did it particularly poorly.

Bonus tip: if you want a performance boost on an old laptop, open it up and clean out the caked in dust. Extra points for cleaning and upgrading the thermal compound on the CPU
> I do not disagree with you on the point that China's response has been herculean, but we must not forget that this also comes at a hefty price, one that I am personally not willing to pay.

One that you're not ever willing to pay, regardless of what you'd get for it? Even if it saved a million lives?

Given N=1, we obviously don't currently know how effective these quarantine measures have been so far, compared to whatever platonic ideal that does not come at a 'hefty price'. [1]

I think it's more likely then not that we will have a better grasp on it in a few months, when other countries start having outbreaks, especially if they don't react seriously to them. It's becoming quite clear that travel restrictions on their own are not going to keep the virus isolated.

[1] I have no idea what exactly you mean by that, so I'm going to assume you are not a fan of the quarantine, as implemented in China.

Edit: Thank you for clarifying your point, by pointing out that your concern is for the overall context - the other repressive systems of the CPC. I am very deliberately not addressing them in this sub-thread.
From the article being discussed here <https://blog.mozilla.org/firefox/firefox-android-new-feature... >: "The biggest ever update to Firefox browser for Android is on its way. Later this spring, everyone using the Firefox browser on their Android phones and tablets will get the update. ... This update will initially include support for one of the most popular extensions on Android, uBlock Origin. Additional extensions will be supported in subsequent releases so you can customize and expand your mobile browsing experience even more."

>I don't know what else you can expect? That add ons will never be deprecated?

I thought we went through the whole round of destroying support for non-WebExtensions so that we wouldn't have to do this ever again.
The old rumor is that Apple doesn't pay for placement but others do.
And if you have vr, it is available on steam and it is an amazing experience!
Lessons on Prioritizing Product Ideas
> I believe the law assumes that platforms are treating all content equally.

Can you cite anything about the law that supports this?
Hackers Cashing in on Healthcare Industry Security Weaknesses
> in that case a person getting a blood test won't have to pay anywhere near the $3000 or $1700 amount. It'd probably be free

Oh, that’s much, much more assuring to know. Looks like

> Anyone that pretends that the way the US health care system functions right now is good is either lying or an idiot.

Looks like the general consensus of HN agrees; I hope the US decides to overhaul the healthcare system to provide better care if everything I’m hearing in this thread is true, it’s a topic that’s saddening to hear about.
There’s a political drive to force Apple to provide encryption back doors on every phone, an argument = you can’t have privacy anymore because bad guys now exist. So I think this is a good move by Apple. I don’t want an uninformed and propagandized public from electing someone who takes away privacy because some producers want to collect that data-gathering lobby money for their movie.

EDIT: Here’s some research on how lobbying works in Hollywood:

https://tobaccocontrol.bmj.com/content/17/5/313
Isn't it the same for GTA?
Apple could sue if there brand was used without permission. But having a phone without the logo would be fine.
Mind to explain how it works? At least on the mobile website there is no way to find out...
Agree. my 4GB model is at around 50C most of the time with pihole running. I don't have any heatsink/fan attached to it either
Honestly the best way is to follow the Cordova setup guide to get started and then test the app and see if you need to make tweaks. Make sure to test on physical devices too, not just the emulator. We saw differences in a few cases which happens even with native dev.

Stuff we noticed in general is that if the site works well on (e.g. is designed for) mobile devices today it will typically do ok in Cordova, but sometimes you'll find slight variations during testing so you have to tweak a specific control or setting. If you have lots of third party plug-ins in your react code you'll need to be really thorough in testing. I found in some cases I had to move where .css files were loaded to make sure it worked in Cordova as it did on desktop (possible a webpack issue too so I can't for sure blame only Cordova for that). Other thing is make sure you watch your versions (SDK's, engines, Cordova, node etc), keep everything in line with what it says it is tested for and it makes life way easier.
Why? Do I have to go around getting approval for every piece of clothing actors wear? The furniture and appliances?
It says they even closed a whole section of the building, and there are cases of patients being asked to accept postponed hospitalization dates.

But there is a bit more to the story: that hospital is also the only one in the region designated for handling infectious disease outbreaks, and so in the face of the staff shortage, they are also planning to have the capacity to respond to cases of the virus.
Can't that be achieved with POP3 email? It downloads emails to your system and then deletes them on the server.
What an Indoor Ski Area in a Mall in New Jersey Could Mean for Skiing
My understanding is that a lot of people had this attitude when seatbelts were first introduced as being required for vehicles. And I see it now with respect to things like straws and mandatory bicycle helmet laws. It has always come across to me as very, "Old man yells at cloud" talk. Eventually you or your children won't even miss straws and the world will be better off for having banned them. We all play a part in making things better and it's very hard to argue that not being able to use straws is a bar thing.
That's pretty much it

If anyone is curious about some of the details https://www.youtube.com/watch?v=NNuGdv536mM (starts around 2min in)
I mean:

- Like Hasura, has ALL the features of Hasura

- BUT really FOSS with no VC funding, supported through Patreon by a super nice team.

- AND I have all the source, in the same language than the rest of my stack, the language that my developers know

- AND it does not require to run yet-another-microservice but is just part of my graphQL server

- AND it is extensible through plugins that blend seamlessly in the server (unlike Hasura where I see no sign of plugins, and I don't want to write plugins in Haskell)

- AND it supports native, super-fast Postgres Row-Level-Security instead of rolling their own!

That is very clearly compelling enough to support my conclusion, from my point of view.

Let me also mention that I have been burnt by another VC-funded GraphQL server company, namely Prisma, which left us stuck with an old, non-maintained buggy version which is near impossible to patch and build ourselves, while they work on their pie-in-the sky Prisma v2 which is totally the wrong direction in my opinion.

We jumped ship from prisma, considered hasura, but went for graphile and love it!
Third paragraph in the documentation says that a Pod as a whole is only considered ready if all containers are ready:

https://kubernetes.io/docs/tasks/configure-pod-container/con...
It's a kakistocracy. The conspiracy is the spread of incompetency to paper over the mental illness of a malignant narcissist. It is better that the VPOTUS is taking charge of this, he's one of the few senior officials who isn't temporary, acting, unconfirmed, or insane. But conveniently, if everything goes to hell, the narcissist has someone to shift the blame to. And the only reason why someone accused you of bragging is classic "whataboutism" to deflect from your question, you can just ignore that nonsense. By the way, at least SK successfully impeached and removed its corrupt president from office. It's called taking responsibility and keeping power with the people.

In the U.S. we're papering over incompetency, corruption, and mental illness as much as possible. What will be the CDC version of Clownstick's NOAA Sharpie incident? I'm supremely confident there will be an equivalent of ordering scientists to lie to the American public, because that's what he does. It isn't a conspiracy, it's incompetency. And it is contagious. Defending incompetency is itself incompetent.

Edit: Oh look it's already happening. U.S. health officials can't make their own statements on the progression of Coronavirus, they have to clear their statements with Pence first.
https://www.nytimes.com/2020/02/27/us/politics/us-coronaviru...
People with excellent health care insurance are often over treated. People with no insurance or high deductible insurance are under treated. There's also an ethic of pushing through colds and flus and not going to the doctor for them.
This comment was posted by an account <1 year old.

Make of that what you will.
Good guys use Motorola in that case.
>> AFAIK no Chinese people occurred secondary infection

I've seen reports this has happened, but the medical reporting is saying the person(s) may not have completely recovered before showing signs of the infection again. I saw two interviews with doctors who related the infection has ups and downs and while someone may have been feeling better - they might have thought they were over it, when in fact, they really weren't.

The reporting on this is all over the map and most of the stuff I've read is pretty tentative in what they actually know and can document as fact.
Thanks for adding the link! Probably forgot the most important thing but just added the website :)
LastPass's Android app works. But maybe you can try out Bitwarden while you're at it. It's open source and can be self-hosted (and is audited).
I'm not really sure that is relevant. The question is how much control can you exercise over the content that is presented or carried by your service without incurring liability for that content.

The OP was saying that choosing what content is allowed => liability (such as with newspapers), and ! liability => not choosing (such as with common carriers).

My point is that bookstores do get to choose, but do not generally incur liability, showing that the idea that except for internet under section 230 everything else follows a simple liability <=> choosing model is not really accurate.
https://rodriqueslaw.com/blog/how-use-brands-and-products-fi...

Trademark owners may object to the use of their trademarks in fictional films or other media productions without their consent, and seek to enjoin such uses by filing a trademark infringement action under section 43(a) of the Lanham Act (15 U.S.C. § 1125(a)), unfair competition in violation of the common law of New York, under the Federal Trademark Dilution Act ("FTDA"), and dilution of trademark in violation of New York's anti-dilution statute (section 368-d of the New York General Business Law).
I think it's a matter of scale. Since F8 is an international conference there's more of a risk, and they have to make the decision sooner so people can get refunds on their plane flights and hotel rooms.

OTOH a birthday party is unlikely to increase the risk much compared to work/school. In a few months that calculation might look very different though, e.g. Japan closed all its schools. But the US is more spread out so a lot of regions will be protected by their isolation.
If so many services use Let's Encrypt, do you think there's a risk they become a target for sneaky surveillance activities?
Under the Appeals process.

If you mean criminally liable though, we don’t hold them liable for the same reasons we don’t hold lawyers criminally liable for defending a convicted criminal. At the end of every human process, you need someone somewhere to exercise some human judgement and be able to rely on it. Humans are not infallible though, and neither is anything else we create whether it’s court systems or computer systems.

This is one of the reason’s why we have trials by Jury in cases where life, limb and liberty are at stake. It is one thing to convince one person, the judge presiding over the case to pass judgement one way or another, but a whole other thing to convince several of your peers of equal social standing to pass judgement. It’s still not perfect, but nothing ever will be.
> ok I know Apple will stop honoring these starting in the Fall ...

Do you mind expanding on this? It’s not clear to me what status quo Apple will stop maintaining.
Ahh, I love seeing these kinds of snarky comments go grey.
Trademarks do not prevent people from using or commenting on products. Trademarks exist to prevent confusion about which products are really produced by the brand owner, not to prevent honest depictions. It might come in to play if you show a trademark while doing something that the trademarked object cannot do.
> If the CDC tested everyone who got a fever, they'd have a massive backlog.

The problem with that argument is that's not what anyone was asking for. The patient went through an extensive triage before doctors identified a significant risk of coronavirus and requested a test. The CDC overrode that judgement.

Note that amount of CDC resources directed toward coronavirus so far is minuscule, so we should be no where near their capacity to respond.

In the face of a burgeoning pandemic where there are many cases with uncertain origins, it doesn't make sense to override the medical judgement of the doctors on the ground because the case has an uncertain origin.
If you want to use a product prominently, you need to get a product release to minimize risk, and that's not paid placement.
Wouldn't it be equally easy for a CA to MITM a site that got it's real cert from them vs from a different CA?
To be fair, children's parties are a hive of disease sharing opportunities.. so even forgetting COVID-19, if you're not really into birthday parties and this give you permission to not have it, I'd take it ;-)
One big optimization that could help in some cases for container platforms like Fargate is not downloading the entire image just to run the container. Instead read files (or even just blocks) from network storage on demand.

This is basically how booting from a disk image works on most cloud platforms too.
Why are so many things that have such a high environmental cost (water, gasoline, food, etc...) so heavily subsidized to the point where gross waste is inherent?
Why are fast-growing remote companies building their own intranet?
"Shouldn't" in what sense? Are they leaving money or users on the table by failing to increase the granularity of the filter?

The core market for the feature is schools, and that group is generally okay with the filter being conservative and low-granularity (read: little thought required for configuration)
That's not how CAs work.
I have a funny question. I have a FB internship this summer at the Menlo Park office. I know interns get health insurance but if I get Coronavirus while I'm doing the internship will they cover my treatment for the duration? I don't think my University provided health insurance will cover me while I'm in California...
There needs to be a website to see if you can use caniuse website on your mobile browser. The site is unusable on mobile Firefox. The irony.
"According to the U.S. Department of Labor, the average number of paid sick days often corresponds directly with years of service. Here are the averages for workers in private industry: Workers receive 7 sick days per year with 1 to 5 years of service. Workers receive 8 sick days per year with 5 to 10 years of service."

+

"For colds, most individuals become contagious about a day before cold symptoms develop and remain contagious for about five to seven days." / "If you have the flu, you'll be contagious one day before developing symptoms and up to five to seven days after becoming ill."

=

One cold would take up all your sick days. By following your recommendation, someone falling sick more than once a year would have to quit their job.
Pretty sure this was a thing in the 24 series. One of the good characters oddly did not use a Mac like all of the others. Yeah, bad person.