skysight-inc/HackerNews huggingface dataset:
None of that is commonly required either. For the large majority of cases you stay home and wait until you're better. The primary danger here isn't that it's more severe than the flu, it's that it's more infectious to other people.

Contrary to popular rhetoric, only a small percentage of people in the US don't have health insurance. If so many people get infected that the intersection of people with such severe cases that they need ECMO and people without health insurance is any significant number of people, they're not going to have enough hospital rooms and equipment anyway. Which is hopefully not going to happen regardless.
Stora Enso is actually a merger of two companies; Swedish Stora and Finnish Enso.
It’s Stora that was founded in 1288 with the copper mine in Falun (https://en.m.wikipedia.org/wiki/Falun_Mine), which produced 2/3 of Europe’s copper needs at one point in time.
It was also the world’s first stock company apparently, and it’s still in business.
Even the test is thousands of dollars.

https://www.google.com/amp/s/amp.miamiherald.com/news/health...

And treatment for at least some cases involves hospital stays similar to pneumonia.
It depends on context. The question is like asking "what's the difference between 'x + x' and '5'"; the former is 'code', an algorithm with placeholders for data; the latter is data.

In another context, though, the function 'f(x) = x + x' might itself be data. Within a given context, however, the answer is generally unambiguous: data is what is acted upon by code.

(The breaking of this distinction is one of the reasons self modifying code is Bad.)
TBF, most of these libraries are not easily discovered. You have to luck on the chance that the library author used similar words as your search query. Barring major stuff (authentication, databases etc), you will rarely know about a library in existence. Search engines are still limited by the language of humans. Unless and until, you note down every possible library you come across for future reference, this problem is here to stay.

Maybe a language having a vast standard library won’t suffer from this problem but it will definitely have other problems.
You could read about bootstrapping stories here: https://www.indiehackers.com/
Nowadays (almost) no one will give you post-interview feedback. The risk of being sued for "discrimination" because of whatever made-up reason is just too high. In the World when more and more people belong to unknown 3 months earlier "oppressed minority" nobody wants to take chances.

The funniest story I read the other day on HN was about some company which needed to fire 10% of their employees. After consulting with the lawyers, consulting company they have hired to help in the process they decided to take a contractor, who would not have any knowledge about employees. That contractor's only job was to randomly select 10% of people to fire. Simple, cheap, safe, no risk of being sued, maybe they have fired some people who would be worth to keep (if they really wish they could hire them back anyway).

This is the sad World we live in.
It’s a joke. For some reason people like making these fake Gardena adapters.

Here’s a water-to-HDMI one: https://imgur.com/FHSFM9o
It's definitely an interesting article but he didn't go deep enough with subject of escaping the output.

I always recommend this excellent article from Joel Spolsky, Making wrong code look wrong.

https://www.joelonsoftware.com/2005/05/11/making-wrong-code-...
China's BGI says it can sequence a genomre for $100
> my (IT) company

IT as in Information Technology or Italy?
And when the retail investors get excited, smart money goes elsewhere, the parties already over...
I agree that you need to find a way to bring the costs down, I think that a lot of money are wasted, For example in Mathematics or computer science you don't need super expensive equipment, you need good professors that are good at teaching.

Some universities have buildings with cheap bedrooms for students, places with cheap but good cooked food.

What I think it happened in US is the capitalistic thing where you raise the prices until people stop buying so the final price is not the costs + some profit on top but just the maximum money you could force out from your customers , you could say that maybe true free markets can solve this but for medicine you can't have 1000 universities competing because this domain is not like math or computers, you need access to hospitals to train your students.
This absolutely isn't accurate. The website promoting this garbage is dangerous. Nobody knows the total infected, nor the real fatality rate. But pay attention to how many on the cruise liners have died. 14% is a joke. My completely off the cuff, uneducated guess would be closer to 3%.
> which means that in the real world you have to learn and deal with all of it.

That makes as much sence as claiming that to develop software in, say, Python on the real world you have to learn and deal with all of its standard library.

That is not the case. That has never been the case ever for any programming language, be it large or small. Specially in C++, where since it's inception the standard approach is to, at best, adopt a subset of all features and stick with it.
'Discard' in VSCode obviously means a 'git checkout' and this 'VSCode user' failed to read 'IRREVERSIBLE' and he clicked discard. The computer can never deletes your work automatically, it is always you telling it to.

Don't say VSCode didn't warn you.
What does the “basic SQL sanitization on the way in” consist of and what does it do for you?

The article makes sense to me; if I’m just storing strings in a database, I don’t see why they would need to be sanitized at rest, even if they contain malicious SQL code. Only when I actually come to use those strings for some purpose.
I'll use java where size and speed doesn't matter.
Approach to errors is what clearly distinguishes "old tech" from "new tech". Most recent tools, compilers, linkers, bundlers etc. go out of their way to provide clear human-readable errors.
Not preparing at all.

The virus is expanding just because of bad common sense from people who ignore the basic ABC of infections: stay at home if you're ill, do avoid meeting as much people as possible, but this seems to be hard to be understood by many
This reads more like reluctance to use the more functional paradigms react has to offer rather than anything being set back.
Oof, yeah, I misspoke. I was responding to the parent comment which said that r/wsb can’t move markets when, 30 minutes prior, I had read something (Matt Levine’s take on it) with a claim to the contrary.

Thank you random HN commenter for pointing out my flaw in the “perpetual upward” comment. Levine’s take still claims that r/wsb can technically move the market, no? Or should I go back and re-read? Maybe I interpreted differently. But I don’t know for sure, because I don’t study such things and hardly know options or markets. Neither does like 98% of the folks on this post based on their comments here (yourself included!)
Ok, how about ABC News? https://youtu.be/r9AvUuEPgvA?t=3m01s
I have one. I have a PC tower case with extra cages for holding hard disks - 4 cages with 4 drives each fill the front of the case. However that meant moving the slot where the power switch and front USB connectors were. I didn't need the front USB headers, and I also didn't want to cut a hole in the case, so moving the power switch to a empty PCI bracket in the back was the perfect option.
That quote is so spot on that I'm going to get it printed on a mug.

Lets call the adaptive people "Alice", like in cryptography, and use one of your examples at random: Air conditioning.

A hundred years ago, if it was too hot Alice just shrugged and didn't do anything about it. She just accepted that "It Is What It Is." Around the turn of the century, one guy, named Willis H. Carrier, decided "enough is enough, I'm going to fix this" and invented modern electric air conditioning machines. These days Alice accepts the new state of things: you can buy air conditioners, and once purchased, you can turn them on.

But lets be honest: If Alice had to use a building without air conditioning, or broken air conditioning, there's a snowball's chance in hell that she'll actually do anything about it, despite the ready availability of such devices and specialised tradespeople to fix them.

I've regularly visit a government office where 200 people have sat sweating for three years because nobody lifted a finger to I dunno... maybe see what's wrong with the aircon.

This observation exactly matches my experience of the world.

I'd love to live in your world where most people go out of their way to improve the status quo in novel ways. It would be... magical.
You could of been a contender, but I disagree with your basic tenants. You are so bias.

Reading this whole thread is nerve-wracking and puts me through the ringer.
Ask HN: Will Apple Launch ATSC 3.0 RF Chips for Over-the-Air Television?
With most in the industry secretly working towards the next boom of ATSC 3.0 and particularly it's ability of ROUTE Protocol to provide efficient two-way interactive communication opens-up a pandoras box for innovators. Do you think, apple will take the lead?
"3 months and 1-2 engineers"

That's nowhere close to the manpower you need for writing optimizations for your IR.
I think he is wrong on handling code as input and visible output (for sites like StackOverflow). No need to filter such input. Escaping your strings will handle that as well. The code <tag/> , for example, will be escaped to &lt;tag/&gt; , appearing in the rendered page as <tag/> (but not _interpreted_ as <tag/> ).
Output filtering is input sanitization. wtf is is that you think you are filtering? Inputs!

> the developer who builds sanitization has to guess at all the possible output domains.

No they don't. They need to carefully understand/document all the places input might be used and ensure no command injections are possible. In some cases (e.g., web apps, where everything is string) that works relatively well...

Until, of course, you're the one writing the input sanitization logic in the HTML purifier / prepared statements generator. And those code bases do have occasional CVEs. So, random PHP dev can put faith in a library but the system itself never gets away from having to sanitize input!

Output filtering has the complimentary problem -- you need to understand every possible input. That's not always trivial like it is in PHP-based websites. Think about e.g. an embedded system santiziing potentially adverarial time series data (what does this mean / how do you detect it? Harder, right?). Or a compiler. The blog post author even points this out: "...In these cases you’re best off using a proper SQL parser (like this one) to ensure it’s a well-formed SELECT query – but doing this correctly is not trivial, so be sure to get security review."

Ultimately, "Filter outputs not inputs" is incomplete advice that kinda sorta works well for the most part in web apps. The correct advice is, again, "carefully specify the semantics of your sources and sinks".
He literally made your second point - people _not_ going to the doctor because of associated costs
As a user of LADOT I think they are failing to do the basics, so I doubt they would put that data to good use.

The DASH routes are fairly short, should be pretty easy to manage it so it is reliable and frequent, but they are far from it. They have a web app showing the locations of all buses (a pretty ugly and inefficient UI btw) and I often see all buses very close to each other, often 4 of them (out of 5 or 6 in the whole line) in just two blocks.

This means that one day I can wait 5 minutes, but others I have waited 30 or even 40 minutes. This is by pure incompetence. I complained several times through the site, never got a response.
> What is the 'technical impact' of a defect, and how can you divorce it from the user impact?

TFA provides a concrete definition and also the method to classify bugs based on severity.

Severity does not divorce a bug from "the user impact". There is, however, also the problem of low-severity bugs or even tasks having low user impact but high business impact.
How exactly are you investing in Robinhood?

I dollar cost average, but I plan to pick up extra stock in corona bear market if I can scratch any extra cash together.
There's value in doing both in certain cases (as long as you're definitely escaping output), but I'd be careful about the motivation. You say: "Sanitize your inputs so that it can be safely stored in your data store" -- but it's safe to store any string in your database as long as you escape/encode it correctly (i.e., use parameterized queries).

For example, what if someone posts a legitimate comment on reddit helping someone with SQL syntax for deleting tables and includes "DROP TABLE users" -- did you sanitize that away?
I haven’t used Elm, but I’ve read that it uses strong typing to distinguish between escaped and non-escaped data. That sounds like a good general solution to the problem, as the compiler will prevent you from using unescaped data in a dangerous context.
I agree, the website looks nice, the content is great, thank you American tax dollars for this contribution to human history.

I just didn't want to leave that statement there and have people unconsciously take that statement about "commerce & ads" to heart without consciously realizing, that Wikipedia is probably our most popular counterexample.

Depending on your definition of 'backbone'... it's maybe not a truth humanity is particularly proud of, but I have this figure in my mind that 75% of the web's bandwidth is used by porn?

Was that ever true, is that still true, are those numbers accurate? Or is that just a common myth?
No.

"Sanitize inputs" means modifying the input before you even know where it's going. It's fine for stuff like normalizing user input (eg: "strip leading and trailing spaces") but should not be used to combat things like SQL injection or XSS.

For issues like SQL injection and XSS you should escape on output. Outputting HTML? HTML escape, or better yet: use templating framework that does it by default. Outputting to SQL? SQL escape, or better yet use prepared statements and pass in your arguments using an API that escapes by default.

In the "sanitize inputs" approach to handling these situations you can't store "O'Hara <3 Sue" as a value, because you need to "sanitize" the apostrophe for SQL and the less-than for HTML. In the "escape outputs" approach, you have "O'"Hara <3 Sue" in your SQL, and "O'Hara &lt;3 Sue" in your HTML, and the user's input is preserved.
Perhaps because those people who "want your stockpile" might have guns too.
How to raise money: it’s a journey not an event
I kinda foresee this spreading in US the worst, people who work in low paid jobs like McDonalds (which requires lots of people contact) rarely take sick days there as far as i remember.
And people will continue to go to work with C-19 unless they are physically stopped by authorities because that's what our culture teaches. Frankly, I can't blame them given the shitty economic conditions here, but it'll be horrific for any kind of containment efforts.
But what if at some point somewhere down the line someone forgets to sanitize the output? Surely better procedure to sanitize at both ends. Nobody is perfect.
During Hurricane Sandy in the New York area, I was flooded in Jersey City and there was no power — there were roving gangs stealing throughout the neighborhoods. The police response was impossible. So yes, in the event of a serious catastrophe, you aren’t going to be able to depend on police to protect you.

During Katrina, there was widespread looting but also violent gang rapes and other assaults. People, especially in inner cities, are easily victims of violence and theft.
> Incidentally, the mother in the xkcd comic says, “I hope you’ve learned to sanitize your database inputs.” Which is somewhat confusing, but I’ll give Randall the benefit of the doubt and assume he meant “escape your database parameters”.

What a strangely roundabout way of saying that programming advice found in a webcomic may be actually wrong.

(To be fair, that Xkcd comic was a product of its time, when ‘sanitisation’ was all the rage.)
Most Americans cannot afford several thousand dollars and that much time away from work.
To See How Coronavirus Outbreak Might Play Out, Look at This Virtual Plague
Which borders?

I think the border to Syria was at one point fairly porous, for humanitarian reasons, but as of now even that is sealed shut pretty tightly. It's actually third largest border wall in the world after Great Wall of China and US - Mexico one. [0]

[0] https://en.wikipedia.org/wiki/Syria–Turkey_barrier
No, this is what he's saying: Facebook has shown that they contribute good OSS and want people to use it with no strings attached.

His quip about Oracle was completely irrelevant to the content of his comment. In my opinion, Facebook proved themselves champions of OSS when they relaxed their license on React (which is now vanilla MIT with no stupid patent clauses).
I've raised money (not series A though) and I've got friends who have raised series A outside the Valley.

Expect the process to be slower but all the advice is very relevant.

Also I suspect most people raising series A outside of China/HK today probably at least consider a trip to SV when raising.
I went to Billboard's hot 100. I picked the top 10 songs.

The Box: Roddy Rich - It's 4/4 and the vocals use triplets and 16ths; basically monotone, very few pitches --> does not fit

Life is Good: Featuring Drake - 4/4 with triplet phrasing; basically monotone, very few pitches used --> does not fit

Post Malone Circles - 4/4, 16th note vocal phrasing at points, no swing feel, the main melody and chorus are free of accidentals, it uses no swing feel --> does not fit

Dance Monkey: Tones and I - 4/4 with swing; accidentals in the chorus (chromatic descent) --> does not fit

Don't Start Nau: Dua Lipa - Literally all triplets over 4/4 in verse... --> does not fit

:
:

ugh.

I can't listen to any more of these awful (IMHO) songs, but so far 0% fit "4/4, 8th note divisions, no accidentals" that was used to generate the 68B patterns.
> it's either working properly, or it's not

It can be normal, over-active, under-active, and likely both. "working or not" is too simplistic for this discussion.

> A 'boosted' / over-active immune system results in auto-immune diseases like Crohn's (which is what I have).

Yes, but that doesn't mean that a temporary boost couldn't potentially help in certain situations.

Along those lines, I bet if you really needed a specific live vaccine your doctor would have you suspend that drug for a little bit.
React Native Renderer in External Display (iOS / Android)
> Then there'd be two competing smartphone OS's powered by Java.

Probably not, there were iOS/Android competitors until not too long ago but they all died: Windows Phone, webOS, Symbian.
When you said it like that I assumed that stubble and chinstraps would be fine, since they aren't beards in my mind.

However according to the chart, they will interfere with the mask.

The chart is the best. It answers all questions, requires no reading, and also lets you figure out how to modify your facial hair to be "good".
> "Sanitize inputs" means modifying the input before you even know where it's going.

Okay.

That's not how I've ever used that term or seen it used. Prepared statements are a form of input sanitation. HTML purifiers are a form of input sanitation. Maybe this lingo is specific to PHP-land?

In any case, "You need to know the semantics of the sink in order to know what to do with an untrusted source" seems like an obvious truism not worth writing about.
One reason could be that this tends to require a lot of fiddling. If you take the Rome approach, you can (theoretically) have the community do the necessary fiddling collectively and have it work for everyone. If they're alright with the standard it provides.

I know from experiences in the last few days that even things like standardjs and xo, despite being described as zero-config linting/fixing solutions, don't reliably work out of the box.
What does "sanitize inputs" even mean? What do you do with a backslash? What do you do with a "? What do you do with weird unicode? What properties does your "sanitized" input actually have?

The meaning of "sane" depends on where you're sending it to. A backslash is a perfectly reasonable character, for instance. Put it in the wrong place in a SQL string and you have bad news. Put a ' in the wrong place in a shell command, sometimes nothing bad happens, other times you get pwned.

The right way to escape strange characters is different if you're sending it to an SQL engine, or writing it into a JSON string, or into some HTML, etc.
No, he made a good point. It's a matter of perspective, what is considered data in one situation, can be consider code in other situations. Hell, they even created the NX-bit to prevent malicious memory space becoming executable.
I bet some nice embedded platforms making use of Embedded C++ dialect.

https://en.wikipedia.org/wiki/Embedded_C%2B%2B
I often remember my excitement about Win7, and how well done it was.

I've switched to Mac after they started destroying and bloating things with Win8 an later versions, but am still sad to see what this OS has become.
> I'd also like a separate Network Access privilege for apps. There's absolutely no reason why for example a simple calculator app should need network access.

This is already available on iOS devices sold in mainland China. They just need to enable this feature for the rest of the world.
The Coronavirus and the Crisis of Responsibility
...and in some countries, those costs (assuming hobbies have any alignment with work skills) can be reclaimed via tax reclamation as well.

Apart from that, self-hosting is even cheaper, and easier, than ever.
Probably could have been said better, and there's also probably no need for regulation but at least people should be fighting back.

But ultimately the suggestion to build your own is definitely the best move you can make. Etsy will always focus on their own SEO before anyone else's.
Why do you always post archive links? Isn’t that a copyright violation?
Write up a "compendium of SF housing policy complexities" article and post it to HN, then :)
You dig a hole, you put a seed in, you put dirt on top, you install gentoo..
With the spread specially being high in enclosed spaces like the churches in Korea, Singapore and the cruise ship in Japan. I do think either it is airborne or the virus can live outside the human body longer compared to other flu viruses. Most of the high spread patterns outside china where we have information is in enclosed spaces like churches or the cruise ship.
It's funny imagining Oracle trying to undercut Google by competing with a half-baked iOS clone made (or rather, bought) by Sun, though. Perhaps they would've kept the fight just so they can hurt G, as they are currently doing now via litigation.
Are you implying that Reddit is concatenating SQL queries instead of parameterizing properly? Because based on the reliability of the website I'm not surprised by this, but it's still hilarious.
You might need to escape strings differently depending on where you’re outputting eg HTML or JSON.
OK, I understand all this.

> Hence selection pressures will skew it towards “Antibody resistant, lower fatality”

But that's my question: Will it in this case? If those with severe symptoms are more likely to go out and spread the disease, wouldn't the more severe version be positively selected?
And would you rather be in a Chinese hospital or an American one? And, before you answer, you might want to have visited a regular Chinese hospital first. In China, you would be safer far away from a hospital.