skysight-inc/HackerNews huggingface dataset:
Not even sure it's still available online, but you need the dead media project's working notes.

The problem with rubber-duck aqueducts is that they so rarely go where you want to go.
I use the 1gb as a public facing webserver. working super fine.
New Wi-Fi Encryption Vulnerability Affects over a Billion Devices
This isn't always true. On GKE for example, LoadBalancer is very expensive first of all. Second of all, if you use LetsEncrypt such as cert-manager, the GKE load balancer is awful to configure and takes forever to get a cert.

Also by using the GKE load balancer for ingress, you lose out on a lot of things, like password protection, or certain rules you want with nginx.

I've tried my best to stick with GKE LoadBalancer, but it's just an awful experience. Now I have GKE to load balance traffic to nginx-ingress, the level 3 load balancer is just not flexible enough and in general annoying to configure.
...and was a man. And guaranteed freedom only to men.
After using GraphQL with code-generated Typescript types on the response, I can't imagine going back to REST and it's "hope and pray" the JSON looks how you expect it to look
Well I've heard that they are moving to a new extension api for the mobile release and it seems like ublock origin is the only thing thats supported for now per this webpage. I use that and umatrix so I'd like to know if uMatrix is going to be supported for mobile in the future... Does the developer for umatrix browse HN?
Yash: Posix-compliant shell with fish-style predictive completion and more
They've distributed around 200 test kits, that can each run 700-800 individual tests. [0]

Unfortunately, a number of these kits have turned out to be faulty, a discovery only widely noticed a few days ago. [1]

It'll take time for them to redistribute the kits.

[0] https://www.cdc.gov/media/releases/2020/p0206-coronavirus-di...

[1] https://www.washingtonpost.com/health/2020/02/25/cdc-coronav...
You can see this in provincial level mortality rates: at low infection concentrations, it's a more deadly than flu but nothing insane. But once resources are swamped (e.g. in Hubei), the mortality jumps an order of magnitude.
Folks, I think it's time for as many bay area workers as possible to WFH. Let's get ahead of this.
The question is why YouTube and Twitter shouldn't be treated as common carriers. Is it because they're one-to-many instead of one-to-one?
Absolutely brutal comment
It is an election year. One says says Trump cut needless dead weight and there is still plenty of staff. The other side is going to play this crisis and call it a gutting.
Needs a /s tag......
Kubernetes is a nice choice for specific usecases (like, well, battle-tested container orchestrating & scheduling), but overhyping it with references like "Kubernetes is a data center operating system" is absolute mess, IMO. You can't put everything in Kubernetes.

And it's also applies to OpenStack which is more than alive. While its ecosystem consists of horde of different solutions, plain nova/neutron/cinder are matured and efficient solutions to roll your own private IaaS.
Then again, most people elsewhere dont wear masks at all and dont stay at home when they are sick. While there is definitely less stigma for staying home, people still dont want to do it and act offended when you complain about them being sick in work.
think please! How old are parents of children?? Children can give the virus to their parents..
So if I order the 2GB version I can be assured that it would be the one with the USB-C fix. Is that correct?
Yeah, I really should - I even bought one for it all those years ago that I was working on this thing.

But, y'know, it's not hard enough to pick up the screwdriver and poke (I do keep it right there, solely for that purpose) that I've bothered.
Since they are owned by Amazon. I would think their cost is close to nothing.
But luckily most of the contamination happens through cough, so that these people that don't show symptoms are also less contagious.
See Ruby on Rails and why Heroku was invented.
And at the same time, Google claiming that prageru is "sensitive content" is kind of ridiculous too.
All of the above filled into a blending machine and spat out by GPT-2
> Sanitize your inputs.

Sadly, there is no "the sanitization". JSON, SQL, HTML, CSS, and URI (and the future formats not invented yet) all require different escape schemes, so while you can indeed filter out anything that can be interpreted as an escape sequence in any of those formats, that's not something you can always do.

Instead, render your data properly (yes, that includes escaping whatever you're outputting).
Corporations are not "extensions of the government allowing a bubble of state/federal government."

The word "corporation" derives from the same Latin word as "body" -- a corporation, in the eyes of the government, IS a legal person. In other words, the corporation itself is the "body [where] the speech comes out [of]."
You're spreading rumors. If it's not your intent to do so, consider deleting your post.
> which is now vanilla MIT with no stupid patent clauses

Except a patent clause actually gives you more protection, not less. That's why some other licenses explicitly include a patent grant, like the Apache license. I think the patent clause was a misunderstanding more than anything else. In any case, Facebook responded to what the community wanted.
It’s worse than that. They go on to sue—to try use the government to force someone else to publish their content—and fail to see the irony.
Joe Lubin Answers the Question, “Who Is an Ethereum Developer?”
Well, you could, except that if cloudflare doesn't like your content, your site isn't actually on the internet.
I'm serious though: I've seen people refer to Google Maps as Google Earth, even though they're separate products - and it's not clear to me whether you're not aware of the former or of the latter.

Google Maps: https://maps.google.com/

Google Earth: https://earth.google.com/web/
sensitive content

Presumably schools don't want their students ogling T&A during study hall. Does that mean students shouldn't see any politics? These are two entirely different things that should be placed in different categories.
The nice thing about ACME is that it's a standardized protocol, so its really easy to configure most clients to use a different provider. All we need is a few more CAs supporting the ACME protocol, and it'd be trivial to switch over to them if Let's Encrypt ever had a problem. (Come to think of it, automatic failover would be a pretty interesting feature to include in an ACME client.)
Nature has had quite some time to figure out what works well (or at least better than before).
Nintendo, Microsoft, Epic Games, Valve, Adobe, Autodesk, Intel, Google, have not announced. Most of them usually have a very large presence at GDC.
Straws were originally introduced for public health reasons, so that your mouth need not touch a surface previously touched by someone else's mouth (and which was not well-cleaned).

I'm not aware of any studies confirming or denying their advantage in the era of modern food safety standards.
Why is causing people - kids or otherwise - to contemplate their footprint on the earth or their impact to other people a bad thing?

I’ve never been a straw user, but frankly we bought some reusable metal straws (my partner uses them), some reusable portable utensils, and regularly carry our portable coffee cups when we go out in public. All things that can fit in a purse or bag. We don’t find it an inconvenience and we like that perhaps in a small way we are reducing the amount of generated waste.
You can calculate how much power is needed based on past data. That part is complicated, but not really unreliable, although of course the demand may look different in 20 years.

And yes, we're going to need extra longer-term storage, but less than you'd think (IIRC up to 10% for a large grid).

Nobody knows the cost of that storage. You can calculate an upper bound by using today's prices, but once these things actually come in demand, new ideas are going to spring up and the prices are probably going to fall, just like it did for PV and wind turbines.

It seems to me that investing in nuclear tech today is a really risky proposition.
I like this browser and usually have it set as my default on my phone. I like that I can set links to open in private mode by default quite a bit.

My wishlist: 1. collections syncing to my Firefox account and desktop Firefox 2. a menu option to move a page from private mode to normal mode where I'm logged into things; right now I copy/paste the url 3. (sadly) an easy way to open the current page in Chrome.

The biggest issue I've run into is some app sign-in flows that roll through the browser or webview break when using Firefox private by default. I switch Chrome to the default temporarily to work around this.
It's a field that has many startups and government basic research for decades. Power plant flue gas seems to be the primary feedstock people are interested today.
Being "immune" just means your body can fight the infection effectively. It doesn't mean you don't get infected and can't spread the disease for a short amount of time.
The most sensitive test is polymerase chain reaction PCR, which multiplies tiny remnants of DNA of the virus

It can take up to a day to get results, a team of four can only do roughly about 100 tests per day

Then you have serology test, which checks for antibodies against the virus, The signal is strongest after the peak of the disease

The Koreans are working on tests which can be applied at home but I don’t know details
One of the judges on the panel was Jay Bybee. You might know him from signing the Torture Memos authored by John Yoo.

If they can't convince that level of hack, they don't have a chance in the SC.
A long time ago I was a sysadmin for a company that gave us a Windows client desktop, and a desktop running Windows Server. The rule was that you had to name the server after a brewery. I'm not a beer drinker, so I named mine A&W. Spelled as "Ayeanddubya." (Aye and dubya) That was fun for a while, people would call it names like "Abbadabba." I later switched it to Duff.

During that time our manager, who wasn't that bright, rushed over and exclaimed. "There is a rouge server on the network!"

We did some looking around and discovered that she had seen my coworker's server, named after Rouge Brewery.
From the project website:

> Yash is intended to be the most POSIX-compliant shell in the world while supporting features for daily interactive and scripting use. Notable features are:

* Global aliases

* Arrays

* Socket redirection, pipeline redirection, and process redirection

* Brace expansion and extended globbing

* Fractional numbers in arithmetic expansion

* Prompt command and command-not-found handler

* Command line completion with predefined completion scripts for more than 100 commands

* Command line prediction based on command history

I'm particularly taken with it's support for configuring the relevant keyboard
commands, with strong support for both Emacs and Vi bindings.

It also uses much less RAM than many other shells with similar interactive features, to the extent that matters to folks these days.
Youtube has been doing that for a long time now, manually adjusting specific search results, basing it sometimes on geography. I don't know if they are still manually adjusting results in this example, but one example a couple months ago was if someone searched for "Louder with Crowder change my mind" in the US, Crowder's videos were buried several pages in. If you hop onto a VPN and try another country, the expected natural search result came up instead.

One could possibly blame it on poor engineering and bugs, but given Google's talent pool, that seems unlikely.
Would like to know if there are any cool projects with RPI for elementary kids, just to get them understand the importance of these mini computers. Hope they can pick up light programming too with this. Any pointers please.
BigCo Judo and other tips for startups doing deals with big companies
I think most people are blowing it out of proportion. It's just a bad flu

This isn’t science, it’s someone’s opinion on how concerned other people should be based on their interpretation of some very incomplete data.
No, there is nothing to remember. Every decent HTML templating engine these days will handle all free form text as unsafe and escape it automatically. The same for SQL libraries.

Input sanizitation doesn't work, because it doesn't know what is dangerous and what is not dangerous. That depends completely on the output domain, and at the point where the inputs are received, the output domain is often unknown. Data can flow through many layers of business logic and then be passed to an SQL query, an HTML templating engine or anything else.

If you don't consider database strings to be free form text when constructing HTML, then there's a good chance there will be vulnerabilities anyway, regardless of whether any sanitization has been applied.

The article is fine.
"the data should be treated anonymously"

The problem is "anonymous" data is often really easy to de-anonymize, especially when there's so much unique, identifying information there, as there is with the census.

Even if it did somehow manage to remain anonymous, they could still tell that a person with some undesirable characteristics lived at such and such a location. That would be enough to round people up. They don't necessarily have to know your name.
> Yes, my point is blah blah

Yes, and that’s a ridiculous “point” however you interpret it.
Well if you're uncomfortable with its priviged daemon, you can always switch to CRI-O with Red Hat tooling for it. But for all my years with Docker as the container runtime, all security related problems have occured within the backend code, not Docker, not Linux cgroups, not Linux itself.
Yes, only certain masks will even do anything. But...

Even then you need to make sure the mask fits. In hospitals, they do tests to find the right fit for nurses and doctors to check airflow.

They can be a good tool in certain situations, but random people placing a bunch of faith in them over other solutions is probably not helping.
Why not get excited about cassette tape to 3.5mm adapters (very real and also very useful)?

I use one of these nearly every day, since my truck doesn't have an aux-in jack, but it did come with a factory cassette tape player.
Lack of privacy in online activities can be even more damaging today.
I had a similar issue with CentOS 7 on AWS. Turns out there is another customer creating AMIs with the same name and they show up as the "latest" with Terraform. Talked to AWS, wasn't a scam, rather an inconvenience they can't remove...

Glad to be on GCP now
> "[...]everyone using the Firefox browser on their Android phones and tablets will get the update."

Well, everyone who has at least Android 5... which excludes about 10% of the android landscape[1].

Most of these people probably still haven't upgraded because they a)can't afford it or b) use their devices until they're broken and will not buy a new device simply because it's newer.

I understand the move, but still, Mozilla has to communicate this in the right way and not "Everyone will have to update and if you can't, sorry for you, not our business"

[1] https://developer.android.com/about/dashboards/
> A huge benefit that tools like Hasura, Postgraphile and PostgREST provide is using the native in-database row level security model.

I agree with your overall comment. Note that Hasura doesn't use the native row level security in Postgres. They implement the layer themselves. There are two reasons:
1) Hasura is older than the first release of Postgres that included the row level security feature.
2) Their implementation scales better when there are a lot of users subscribed to the same GQL Subscription. When using row level security, every user's query result looks different, so they need to create a database subscription / polling for each user GQL Subscription. Their implementation allows them to have a single PG subscription (well they mostly do polling), get all the data back, then strip down on the way out to the GQL subscribers.
These points could be stated for any major certificate issuer. They could encounter an availability issue, bugs, vulnerabilities, etc. The funding model doesn't change these risks.
So in what way have you been harmed then, if you are using a reusable straw rather than one that would otherwise end up in a landfill or require recycling? We have metal and silicon ones we use - chances are our family will never need a disposable plastic or paper straw ever again, so I fail to see how we’ve been harmed in this ban.
How do I earn through YouTube?
> 1. This was sent by Jesus and is a prelude to the rapture, literally.

This one has me concerned. There's a lot of overlap between that group and the preppers with itchy trigger fingers.

I've seen remarks from some about believing the virus is the case ("pestilence, floods") with others responding "Yes, praise God. It's time to make your peace".
Are you seriously arguing the cuts to CDCs budget is not needless?

Stop making politics a spectator sport. There's lives on the fucking line.
As a South Korean citizen it is jarring that other countries including the US and Japan isn't really trying to test people. Japan has people that died due to COVID-19 and they don't know how it was spread - the US didn't even test everyone that came from Diamond Princess! Why aren't those countries tracking down how the viruses are being spread?

I don't like conspiracy theories, but seriously it looks like they are trying to lessen the numbers on the paper instead of really trying to find the patients. Compare the numbers that the countries are testing[0], US is less than a thousand and Japan is about 1300.

Edit: Just for people who are curious in how things are working in South Korea, we test everyone who has: pneumonia symptoms, or has been in the same place with already discovered patients for free - and anyone who is concerned can test with about $100 - which is refunded if one turns out to be positive. We track every COVID-19 patient's routes and test everyone who was in the same place; which means that the government (mostly) knows exactly how the virus is being spread. Based on data that was announced 10 hours ago[1] (we announce data and roadmap twice every day), we have tested 66,652 people with 1,766 cases found, and currently 25,568 tests are on-going. 1,727 people are being quarantined, and 26 people have fully recovered from COVID-19.

Second Edit: Okay, I'm not really skilled in English; if this felt like bragging how South Korea is well handling this situation, that is not my intent - we have a lot of complaints of how the government should handle this. My intent was asking why the US/Japan is not doing at least this much, considering that both countries are much powerful & richer than Korea. Both countries are basically the Korea's wannabe-countries; and everybody here is pretty shocked (literally - there is a lot of news/SNS posts/internet memes on how Japan/US is handling the situation) that they aren't doing well.

[0] https://i.imgur.com/BAROczt.jpg

[1] http://ncov.mohw.go.kr/tcmBoardView.do?brdId=&brdGubun=&data... (Korean, sorry :-()
That could still be true. I imagine there are a huge number of variables that influence mortality rates, to the point where finding correlations is difficult.

If I understand correctly, even the effect of weather/heat on various strains of viruses is extremely difficult to predict because of how many other factors play a role (air-conditioning, for example).
One nice project is Data Selfie. The project is no longer active but may still work, or you can self-host (it is OSS).

Watch the video to see how it works. Especially the predictive analytics may be a powerful way to provide insight into how much of ourselves we give away while surfing the web.

https://dataselfie.it/
Client side beacons would have to be implemented in the git client, and making parallel requests. I've seen no evidence of it myself, and I'd think people would freak out if found inside git's source.
Best case was ambiguous phrasing, but I intended it to mean "in the case of the best possible treatment."
The argument is that YouTube is the big private park (with its own rules restricting speech) that everyone goes to while the actual public park is some square of concrete off on the edge of town that no one visits.

There's at least some merit in an argument that YouTube is so dominant in user-uploaded video that, absent a big budget and/or notability to drive viewers elsewhere, if your video is not on YouTube it might as well not exist as far as the broader world is concerned.
14 days is still probably enough. There are scattered reports of people staying asymptomatic for longer, but they're hard to confirm (maybe you weren't actually exposed at the start) and certainly very rare. The goal of self-isolation is to severely reduce transmission, not to make it 100% impossible.

People say the risk is low because it's probably good on net if the cases are coming from everywhere; it would indicate that the visible clusters where people die a lot are anomalies, and most cases aren't that bad. The worst case scenario is that containment is impossible but it really hasn't spread widely yet.
Brutal truth is that not only consumers/customers, but also the climate does not care about saving on energy use. Consuming of energy is not a problem, only producing it is. Wasting energy does not generate any greenhouse gases or pollution. We just need to produce 100% clean electric energy from certain renewables or nuclear, and it should be so cheap and competitive that all the industries (including e.g. cement producing) would just move over to it.
Please don't use quote tags if it's not a quote.

Also it's clear by your mockery that you don't want to discuss this in good faith.
Is the Moon a Stepping Stone or a Cornerstone for Human Exploration?
"that go viral"
:)
Have you tried Google Earth VR? I highly recommend it.
Never used Cloudflare. The internet has existed without it for quite some time. I’m not even sure what they do, to be honest. Aren’t they just another CDN?

I’ve used AWS and Cloudfront for years, never had a problem. And that’s only for high traffic applications.
>The other side is going to play this crisis

I would prefer to have more people looking into this than less.. The idea of err on the side of caution really does apply right now.
Since LE has certificiate transparency, can we determine which cert was the billionth? I registered two certs with them today, here's hoping it was me ;)
Everyone here is saying 1A doesn't constrain private parties. But that's missing the heart of PragerU's claim.

Section 230 gives internet platforms immunity for what users post. But at the same time, platforms want to moderate their content selecting which views are acceptable and which are not.

These are inherently conflicting things. Section 230 gives special protection on the assumption that platforms aren't involved in selecting what users post. But then with the other hand, platforms are selecting what users post via their content guidelines.

We have common carrier provisions for other communication mediums with no liability (ex. TV, ISP's). And we have liability for communication mediums with editorial control (ie. Newspapers, Magazines).

Tech companies are running up the center and making huge profits with an unfair legal advantage that no other communication medium gets.

Newspapers have to vet their classifieds and editorials. Facebook/YouTube/etc doesn't. And that is inherently unfair.

So either Congress or the Courts need to fix the law. And it's fair game for the courts, because the law is not being applied correctly to these platforms, given their abuses.
In the same vein:

It’s not young thugs that come in to medical centers trying to score painkillers; it’s middle-aged suburban moms.

The former know where to buy on the street. It’s the latter that think of trying to lie to their doc.

But in practice we tend to be more suspicious of the former.