skysight-inc/HackerNews huggingface dataset:
When distributed to end-users it could be an executable with node DLL/SO bundled that has no UI (or maybe a simple tray/menu bar icon with an Exit to terminate and a Show to open a local browser to /localhost:1337).

When developing locally I presume it would be very similar to an Electron project, with npm dependencies for express / fastify on the "backend" side and React or whatever you need for the "frontend" side.

During build, you'd produce 2 bundles (frontend and backend) that tree-shake, etc. such that all js dependencies are optimized together. The frontend bundle should load in any browser (it'd be just a normal website with the only difference being that all REST calls go to /localhost). The backend bundle + any native modules will be loaded in the embedded node runtime so they can be distributed as loose files or packaged in something like Electron's asar.

There, I designed the whole thing, now someone go build it :)
Sounds like a solid Wired (or whoever) longread!
Alert Correlation Algorithms: A Survey and Taxonomy [pdf]
Face masks' prices in Amazon going up as much as 25X compared to January prices
One of our two parties is actively working to get rid of even the existing insurance programs for the poor (Medicaid) and elderly/disabled (Medicare). The people who support them would rather their fellow Americans die than to help them. This is the culture here. The other party is just now starting to think about providing people with insurance. It doesn't matter that there is huge support among the people to have proper insurance as you do and every other developed country in the world does. That's why things are the way they are. On the other hand though, we have just lowered business taxes and have no problem spending money on the military and other garbage while people suffer and die from lack of healthcare. Greatest country in the world.
One would think that was obvious. But, we elected a deranged sociopath who placed a religious zealot with a poor history of dealing with public health issues in charge of managing the government's response to the emerging pandemic, so here we are.
Reading this makes me so glad I picked Postgraphile.
Include Me Out: In-Browser Detection of Malicious Third-Party Content Inclusions [pdf]
I found this article on this topic from a lawfirm specializing in entertainment law interesting:

https://rodriqueslaw.com/blog/how-use-brands-and-products-fi...

It references some of the existing caselaw. My reading suggests Apple would be very unlikely to succeed in court if they legally challenged a filmmaker for simply giving an iPhone to a villainous character.
These "animal based" optimization algorithms are a really weird scene, and based on my brief encounters with it I'm quite sceptical of it. A lot of it is based on "models" of animal behavior, but in reality this is more a marketing gimmic and connections to animal behavior is mostly in the imagination of the authors. And for some reason the animal (and other) metaphors seem to be a substitute for rigorous study of the algorithms' properties.

There's a good elaboration of this here: https://web.archive.org/web/20131102075645/http://antor.ua.a...
Might be helpful to add an example. This is google before/after type thing.
No, thank you. If I'm going to buy a hobby computer it absolutely shouldn't have a proprietary SoC without a public datasheet. This rules out anything by Broadcom.
If you live in China maybe. Otherwise no.
It should be noted, however, for spending a much larger percentage of GDP they are still only providing coverage to about 1/5 of the population while most other countries you're discussing are covering 100% of the population.
inputmode=”numeric” and inputmode=”decimal” have different quirks between Android and iOS. inputmode also acts differently on iPad and iPhone, and the keyboard shown varies from that for pattern=, and support for inputmode is missing from iOS11 (or iOS12?). Tread carefully!

Note that type="number" is particularly horrible on iOS because it allows typing non-numeric values and then input.value just returns zero. Instead you must check input.checkValidity(), and perhaps use the CSS :invalid pseudo-selector to show the user that their entry is not valid. You cannot read the actual invalid value AFAIK on iOS (although you could simulate it by looking at key events, if you ignore selection and cut/paste).

Data entry with HTML is one area where you really want a native app, and you can get severely burnt trying to use a WebView. I have wasted months dealing with a variety of quirks over the years trying to make time entry friendly in HTML: all solutions have terrible compromises, and different browsers act quite differently (and can have nasty bugs).
the test result shows it is flu, why panic
Unveil: A Large-Scale, Automated Approach to Detecting Ransomware [pdf]
Sure. However, it costs nothing to have multiple providers with automated retries and fallbacks.

I like my automated functions to stay that way as long as possible!

Redundancy of suppliers (of anything) is a general good practice.
Correlate Network Connections with Community ID in Osquery
That's what you get when you put TV personalities that get off on the words 'you're fired' in charge of critical institutions.
It's instances like this that reveal that the system is a joke. I don't know how people can witness the incompetence of entire nations and then have faith that the government will do the right thing given more money and more responsibility.
No, we just love money and no panic over everything else.

In cologne we went from 2 to 20 and probably hundreds of unknown. But nothing will be done...
Two Ways to Stop Ransomware in Its Tracks
They're worried about false negatives, if you test someone before they're showing severe symptoms, its best to go ahead and quarantine them, but we've seen to many cases where we clear people as negative and turns out they had it the whole time. The viral load needs to be high enough for the test to work.
That's not a very good conspiracy theory, because ultimately more people will get infected and the numbers will be worse because of "lessening the numbers on paper".
There was an incident just last year with Kazakhstan:

https://bugzilla.mozilla.org/show_bug.cgi?id=1567114

Not exactly the same as for-website certificates but in the same realm of government certificate issuance.
Systems Analysis Through Postmortems
I wonder if government involvement in the creation of Google makes the case any stronger.

https://qz.com/1145669/googles-true-origin-partly-lies-in-ci...
Are there any documented cases of HSM breaches anywhere or involving a CA?
Better Ransomware Detection: Follow the Shouting
Not every piece but if it’s prominent yeah, a product release authorization. I think it has to do with protecting against defamation actions.
You’re not willing to sacrifice good food to save the environment?
But that would be an Apache or Nginx config, no?

Afaik PHP is not the webserver.
California is crazy, this will surely spread to San Francisco and kill all the sidewalk shitters.
Then they can't be counted in the census or vote democrap.
I think the title here is misleading. The title is, "Don’t try to sanitize input. Escape output."

The article itself is only talking about sanitizing user input to "prevent cross-site scripting attacks". He later on does require input checking: "Input sanitization is usually a bad idea, but input validation is a good thing... by all means validate it and return an error if it’s invalid."

It's vital for secure programs to check their inputs and minimize what they will accept. I do think it's a good idea to reject "&" and "<" when you can.

But I also agree that in most cases you can't completely forbid all inputs that have HTML metacharacters. In the case of cross-site scripting, the best countermeasure is output escaping. Many modern frameworks do output escaping by default; Rails (for example) has done it for years (in Rails, any "normal" string is automatically escaped when sent back out as HTML). A good reason to prefer one framework over another is because it has secure defaults; if your framework doesn't escape by default, you should consider using a better framework.

You can't depend on just one thing to suddenly make your software secure. You need to validate inputs so that only valid inputs are accepted into your program. You need to escape output, because there are often legitimate input characters that must be escaped. You need to prefer tools that have safe defaults. Use tools to scan your results, to find what you missed. It's not rocket science, but it does require a set of approaches; there is no silver bullet for making secure software.
That wasn't anonymized, strictly speaking, it was (badly) hashed/encrypted, and it didn't actually reveal anything, it was pairing the data with photographs of the celebrities (and photos that included the cab license number).

And after all, out of 173 million rides some 5 (five) were "identified".
Franchise management isn't just about any particular film at Disney. Star Wars represents films, TV, vehicles for SVOD subscriptions, merchandise, parks, and hotels. Franchise roadmaps are regularly put in front of the board.

That said, I agree. Ousting the CEO is a move the board does to restore shareholder confidence, and there isn't any indication confidence is low...especially when Iger is so close to retirement already.
I think what this is saying is that the area of the focus indicator needs to be 300 pixels, not that the longest side needs to be 300 pixels. So for your button, using a 150px by 2px underline (e.g. with “border-bottom”) would be acceptable since the area of that underline is 300 pixels. But making it only 1px thick wouldn’t be okay since then the area would be 150px.
https://www.nbcnews.com/health/health-news/trump-cuts-nation...
Free-Electron Laser
William Barr's criticism reveal a 'genuine frustration' with U.S. president
Tracing Information Flows Between Ad Exchanges Using Retargeted Ads [pdf]
To your point around the business model, yes we know its for us to figure out. The simple option is we continue to use "open-source" for promoting us and leave it to our users to make their final judgment (from experience, 99% of our users are perfectly fine with SSPL license and eventually we will pay for lawyers and create RudderLicense). This is just like with any other marketing where end-users make the final judgment.

However, we believe that it is good for the overall community that someone takes a lead to figure this out. Our situation is not unique to us but being faced by every commercial open source company in the world. It is not a dispute between just two parties that we are requesting OSI to get involved with.

Fair point around getting involved in the licensing discussions. Engaging with Google/Microsoft/Amazon etc is where I believe OSI needs to take a lead
GraphQL by itself won't save you time, and might even increase it (it's a huge buy-in). You'd still have to implement the logic for those 4 endpoints, except now in a more complicated system.

In contrast, tools like Hasura and Postgraphile can potentially save you time because they generate the GraphQL part for you. Then you only need to handle the authN/authZ parts – in theory, at least.
Yet it’s a US company that came up with the best treatment so far.
Conspiracy makes zero sense, what would be accomplished?

I'm going with a large bureaucracy reacting slowly, which is also hampered by being staffed according to political alignment rather than by the best candidates.
Trump literally axed the portion of the government responsible for international pandemic response. Many links included here:

https://www.snopes.com/fact-check/trump-fire-pandemic-team/
> a good interface will accept leading, trailing, or interior spaces

Won't pattern="[0-9]*" do the exact opposite of what you're suggesting?
Identifying Extension-Based Ad Injection via Fine-Grained Web Content Provenance [pdf]
PWA is actually hybrid app (web container inside app husk) compiled by Google for example. On Android once you install it, it's actually APK that has WebView.
I don't have any data either way, do you? HN users don't represent a geographical region, per se, but I suppose you could argue that they're mostly in SF? Regardless, I imagine there are other communities that might also have a higher-than-baseline failure rate, but absent any evidence I have no reason to assume they're not fairly randomly distributed geographically. Especially at the granularity of US states.
Arguably, an unstated reason is that they are still uprooting and replacing/fixing their rendering pipelines, standard assets, having no built-in multiplayer, and the whole dots thing, and I hear they are preparing for an ipo. They are going to be extremely busy this year

Edit: not sure why the downvoted. Their hdrp pipeline doesn’t even support terrain grass yet, and you can’t use line renderers without it throwing a hundred errors at you. This is a huge year of tech transition and it’s been bumpy
Yeah, I'm not a hardcore extension user on mobile, and even then losing HTTPS Everywhere is going to suck (HSTS isn't everywhere still).
Excerpt:

"The free-electron laser is tunable and has the widest frequency range of any laser type,[3] currently ranging in wavelength from microwaves, through terahertz radiation and infrared, to the visible spectrum, ultraviolet, and X-ray.[4]"
That was the point, thank you.
“Recommended for You”: A First Look at Content Recommendation Networks [pdf]
> sick enough to wear a mask in public

As I understand it, the bar is really low on that. If you're coughing or sneezing, you should wear a mask. It doesn't matter if you otherwise feel fine. I don't think it's necessary to stay at home simply because you're sneezing, and I doubt it's a valid excuse to skip work or school.
The point is, the CDC came up with guidelines on when it’s appropriate to test a patient and this patient didn’t qualify until 4 days later.

That shouldn’t surprise anyone that they do this.
How Docker Works – Intro to Namespaces
No, every piece of clothing actors wear is not easily distinguishable nor do people relate it to mischief.

But if you use a iPhone to hack the matrix and bring down the Italian government. Someone somewhere is going to assume iPhone is better at being "bad" than other phones. Regardless how true it is.

Apple is attempting to prevent their phone from being used to do bad stuff.
Does this look like a competent response to you? Or do you think is was thought of by a bureaucrat within the CCP? This is one of many examples. https://www.youtube.com/watch?v=Yw7M-fUaIb0

Also fecal matter might be part of the transmission. Gutter grease is produced from sewage waste (in many case.) https://www.bloomberg.com/news/articles/2020-02-20/fecal-tra...
Actually, it comes from the author's belief that CS majors should know that, A. DRM at best delays cracking, never prevents it, and B. That it ends up hurting the legitimate users, not the pirates, and C. That the more efficient it is at A, the more likely it will cause B. As even when I was in college, that was the case (I asked some of the students to give me an instance where a piece of desirable software was not available illegally within a week of release date. They were unable to provide one (in fairness, since then there have been a few cases of less desirable releases that went longer; nothing that had the attention of all the major cracking groups). I also asked if they were aware of some of the issues at the time (such as securom's huge issues, the installation of rootkits by some, the inability to use when moving computers, etc), they were not, despite having explicitly chosen the topic to do research on for the class. They went into the topic with the expectation that DRM is just a good thing, and even when researching it, only sought out sources that enforced that bias. Which shocked me, given they should be technically literate enough to know the issues, and the greater nuances involved.
Error codes are not numbers. But they are. Can we exploit that?
Any metrics on time saved bundling a project from source with Rome versus other bundlers? Is there any minification support in Rome?
Yeah I experienced this too. It took me a month to cancel my subscription. Had to call several times. They said they’d do it, but I still got a bill next month.

Signup is a breeze online. Cancelling is almost impossible.

Seriously fuck NY times. Such a bad experience, I don’t want to get any news subscriptions.
Do you have a story? I've never experience more then 120°C in electronic equipment as it's usually the safety limit where it would shut itself off. Although in theory the silicon would still be fine at 300° where wood starts to burn.
Thou Shalt Not Depend on Me: Analysing Use of Outdated JavaScript Libraries ...
It's an "installable" web app - ie creates a desktop icon or mobile launch icon and removes the chrome from the browser so it looks like a native app. For mobile I believe there's a pop-up that prompts for install, on desktop you have to do it in the options menu I believe.
PWA is basically a mobile optimized (read: responsive) website that caches page content and data (see IndexedDB). Mobile browsers have the option of "installing" them, basically saving the data and making a shortcut in your app drawer / home screen. There is also support for push notifications but not on iOS. The idea is basically a web page that still functions if you lose connectivity.
Why not use any of the other social schedulers? What exactly sets this one apart? Is it the customized view for each platform?
What?

If the people who do the basic research patent their work, sure they get financially rewarded for it.

Go talk to the chemist at Northwestern who discovered Lyrica. Or the CF Foundation who made billions from Kalydeco.
Sharing also the medium post describing the details of the implementation - https://medium.com/hiredscore-engineering/multi-language-doc...
Because as a reader of Hacker News, I am driven by knowledge and information, even if it is to my detriment. My personal condition is irrelevant, the only thing that matters is The Knowledge.
Just because the certs they issue are "public" doesn't mean the information can be decrypted.

But if you compromise the security of a PKI, you can decrypt the traffic.
If you watch any of the AppleTV+ shows that are set in modern times, they all have iPhones, Macs, and lots of other Apple stuff.

Not sure if it's "paid" product placement or just part of the contract for being on AppleTV+, but it can't be a coincidence.

In Mythic Quest, there's a scene where you can see some iOS code on one of the screens. (Which wouldn't be that odd for a MMORPG game, except that it's code for controlling the camera.)
> Cloudflare already MITMs like 2/3 of the traffic on the internet.

Cloudflare (MiTM [0] or not) is on record that 10% (and not 66%) of the all internet traffic now flows through their networks.

Ref: https://news.ycombinator.com/item?id=19204085

[0] https://blog.cloudflare.com/keyless-delegation/
The title is exactly correct, the Raspberry Pi 4 that costs $35 does come with double the RAM now. The title doesn't say anything about any other price point configurations.
Maybe the real issue is studios don't want to loose out on any future product placement money with Apple?
Thou Shalt Not Depend on Me: Analysing the Use of Outdated JavaScript ...
All of those "Mature Subjects" sound like things that kids in schools should very definitely be allowed to access, IMO.

And somehow I'd imagine that CNN's YouTube channel isn't limited in the same way. (Or Fox News, for that matter)
I wonder if this type of thing will have the bad guys using open tech thus giving a bad impression.

The bad guy's computer can't be a Mac (Apple objects) or Windows (Microsoft objects) so it is Linux.

To type up the evil manifesto, they can't use Google Docs (Google objects) or Microsoft Office (Microsoft objects) so they use Open Office.

To find directions to their target, they can't use Google Maps (Google objects) or Apple Maps (Apple objects) so they use Open Street Maps.

To chat with their evil buddies, they can't use Messages (Apple objects) or WhatsApp(Facebook objects) so they use Matrix.

Basically, in the movies of the future, the bad people will all be using open software/hardware.
If the free market doesn’t determine what diseases are targeted, then it’s just some govt official doing it. Which, undoubtedly, will succumb to political games.

There aren’t enough resources out there to tackle every disease.
Turning 4 or turning 5? If turning 4, canceling is reasonable. The kid won't really know what a birthday is and won't realize anything is missing or changed. The parties are almost more for the adults.

If turning 5, I'd probably keep it. On the other hand, you can scale back how you do it. The kid won't really know the difference. Besides, at that age, bigger isn't better. More friends is just overwhelming.
And that was a flu test, not a coronavirus test.
In the short term, I keep finding myself asking: if people fear this new virus so much, shouldn't they also fear the flu virus every year?

In the long term, I believe we're going to see more cases of novel viruses spreading around the world as global warming unleashes dormant viruses. High density urban planning and new viruses is not a good combo. We'll probably need to drastically change our lifestyles to really combat future global epidemics.
other discussion.....

* https://news.ycombinator.com/item?id=22427546

* https://news.ycombinator.com/item?id=22430397

* https://news.ycombinator.com/item?id=22431243

* https://news.ycombinator.com/item?id=22426385

* https://news.ycombinator.com/item?id=22425435

* https://news.ycombinator.com/item?id=22425435

* https://news.ycombinator.com/item?id=22424848
I won't give away any spoilers, but The Morning Show is a proper Apple fest, and most of the characters are either borderline psychos or sociopaths.
Silicon Valley Fuels an Informal Caste System (2018)
Under the same Restricted Content scheme, Google also flagged LGBTQ+ videos (https://www.theverge.com/2018/6/4/17424472/youtube-lgbt-demo...). I don't think anyone argues seriously that the company's politics (in general) are at odds with supporting LGBTQ+ causes and people.

It may be worthwhile to ask not what YouTube wants, but what the audience for these features wants. Are PragerU videos restricted because most schools think they're worthy of restriction?
The previous episode: https://news.ycombinator.com/item?id=22406070.
I think that means "get a better offer and leave". Ultimatums are considered a bad idea regardless of what your visa status is. For a person on an H-1B it's basically impossible because they can only make demands after their visa transfer is successful. But if they were to stay at their current employer after having a visa transfer approved, the other company is going to be (rightly) pissed off - not a smart move.
Roll out accurate test kits _world_wide_. There is a very high load globally.
Thanks for pointing this out. I literally bought a Pi4 yesterday to set up a Pi-Hole on, and I was choked when I read this headline!
For me it did a few updates ago, now it's pretty much stable. I really do like this release and i can live with not all extentions being enabled on the nightly, but for releasing this to stable users i would think they should first fix the extentions.
Yes, please say more. I've been idly looking that these both from a distance and I would not have expected differences along that dimension. I would expect the expose nearly identical GQL types from the same pg schema.
Your hands dry much quicker under a hand dryer if you rub them together. I see so many people who just leave their hands flaccid and it takes a lot longer