skysight-inc/HackerNews huggingface dataset:
Ah yes, that’s 火の用心 I think. Thanks for the remainder! A friend explained it to me after I asked about (frankly I was a bit scared at first, I was thinking it was a cult before reading something about fire protection on their vests) but I didn’t take note.
Retrieving Reasoning Paths for Answering Complex Questions
The guy in Washington was near death until Remdesivir was administered. He was released a few days later.

Cool stuff.
Leave whatever jurisdiction was attempting to force me to build something unethical, and after being safely out of that jurisdiction, disclose absolutely everything I can about the attempted coercion.
Yes, work is being prepared. And yet, work was put off for decades and now work on the building is still going to be delayed for years.
Dark fiber refers to the fact that you have the entire wave spectrum to use. It’s in use. It’s not dark.
How to Do High-Bar Code Review Without Being a Jerk
4!!!!
Not original poster, but thinking this was a joke about Tonic water that contains Quinine, a close relative of Chloroquine.
Thanks for the heads up. Reenabled!
An interesting attack on WPA2 on unpatched devices.

This reminds me of the WPS reaver attack, which is a complete facepalm from an implementation perspective. Only 11,000 possible combinations, and trying 1 key every other second would net you the WPA password in < ~5 hours.

"In 2011, a security researcher named Stefan Viehböck discovered a flaw in this implementation. The concept he introduced was based on the following facts:

Out of the 8 digits of the PIN, the last digit is a checksum, which leaves 7 digits to guess.
The PIN is validated by dividing it into 2 halves. So first half leaves 10^4 = 10,000 guesses & 2nd half leaves 10^3 = 1000 guesses. So a total of 11000 guesses only, where it should be 10^8 = 100000000 guesses."

[1] https://kalilinuxtutorials.com/reaver-pixewps/
It’s not a perfect analogy, I will concede. C to assembly is closer. That said...

Assembly: raw html and css
C: A framework like Tailwind
Python: Components, like TaildwindUI or any of the React components I’ve seen

I think that’s not a bad analogy.
Ask HN: Why is the demoscene more alive in Europe than N. America?
I find demoscene code very interesting even if I can't fully understand most of it. I like the code golfing that goes into it to create some impressive artistic demos. Now what I've noticed is most of the demosceners tend to come from Europe, in particular the northern regions. How did the history of computing develop in Europe that gave way to a stronger demoscene than in North America (especially as US is home to many tech capitals of the world)? That is what I'm asking to find out here.
Why would they try to stop you, when they could just order Apple or Google to push out a backdoored update to the OS?
https://archive.md/zFF8Z
They restarted old lines. These are not terribly hard to make. There was just no demand.
Read up on melatonin and how light, esp. blue light, will tell your body through the eyes that you're supposed to be awake still. Turn the Netflix off!
Never underestimate the survivorship bias in public stock picking forums. Reddit is no exception.

There are a few honest stories of losses and failure in WSB, but the majority of loss stories or bad picks quickly fade into obscurity or are deleted by their original posters. What remains are the highly-upvoted success stories.
Understanding NIST Framework security controls
All GOG games are easily available on the pirate bay and other free sites. Anyone who just wants to get a game without paying already has an easier path than buying and requesting a refund.

This is in line with GOG's anti-DRM policy: No matter how restrictive your systems, people who don't want to pay won't. So why have systems which punish and inconvenience the people who do want to pay?
https://archive.md/GncCZ
Could easily be contractual with game publiasher. "You can sell this bundle for X dollars. You can not split the bundle up for individual sale".

I'm sure they don't want to argue over in court whether refunding half of a 2 part bundle counts as individual sale. Or, the bundle contract could easily out law partial refunds.
> I'm fasting regularly, which will realistically extend my food supply.

Isn't fasting the opposite of storing food for an emergency?

Surely storing food on your body as fat is one of the safest and easiest ways to store it.
Google Apple Facebook are all doing fine.
looks decent, have you used it? any opinions?
A normal human can sustain relation with 40 relatives, 150 friends and 1000 acquittances. FB algos are (deliberately) tuned for twice those numbers.
Eunice explains how to use the little bell to Ma:

https://www.youtube.com/watch?v=oNG1DkS_f4g&t=6m38s
Relatedly, Venmo has given me the identify of people I've contacted before by phone.
It’s a blog post, as stated in the URL and at the top of the page.
Ubuntu 14.04 is no longer supported by Canonical. No security patches etc.
Difficult things are rewarding, indeed, but you need infinite time to try them all. You have to pick your battles if you want to advance.
Europe has over twice the population of the United States, that could explain some of it.
The scary thing is that we don't actually know how many infections there are. The test used in the U.S. reportedly isn't accurate.
Nvidia: Exterminating Buffer Overflows and Other Vulnerabilities with Ada/Spark
Or white hats
Do not under any circumstances let the discussion move from "whether" to "how". Reject the premise of the question. Such a system cannot be built; the requirements are broken. Treat it as though someone asked you to build a system that solves the halting problem, or factors products of large primes in linear time: the correct direct response is patient explanation of impossibility, and the correct indirect response is good PR from real security experts who understand how to do good PR.
Comments moved to https://news.ycombinator.com/item?id=22423079, which was posted earlier and has the story this one refers to.
BMW Roundel: Not Born from Planes (2010)
The game is strictly zero-sum, you win by bankrupting your opponents. The amount of money in circulation has nothing to do with whether it's zero sum or not, it's the distribution of money-- and in monopoly, the goal is to have it distributed to _one_ person.

P.S. Just because this also bothered me: inflation doesn't happen during the game. Land itself does not increase in value during the course of the game, it only increases with direct capital expenditures. Example: if no one buys "Park Place" for 90% of a game, it does not increase in cost the cost for the player who eventually buys it[1], that cost is fixed throughout the game.

[1] Despite its marginal utility (i.e. value) for each player increasing as the game goes on. In that example, it's nice because utility increase whether you have Broadway (I think thats the other piece) or not (preventing someone from building on it is a strategy too).
Not a damned thing. I'm actually traveling outside the country (USA) in two days.
Related column: https://news.ycombinator.com/item?id=22425390
You’ve hit the nail on the head. It’s a “technically wrong” term that conveys enough meaning: unlit fibre you buy and light up yourself (usually).
> The data has to be on the filesystem. You can’t load data from a blob store like AWS S3.

You sure about this? You can mount S3 locally, and the filesystem should be transparent to the kernel.
Panasonic to End Tesla Partnership That Makes Solar Panels in Buffalo
I certainly hope patents be damned at a time like this. Maybe once everything is settled they can get a pay out. But if they can conscript human bodies to die in trenches they can borrow fictional gifts to fictional people
D-Wave Launches Leap 2 for Hybrid Quantum Applications
i guess i didnt think about it that way -- good point.
In that case you would not be forced, at least in a more extreme application of the word.

Regarding ethics, my opinion is that it’s unethical to offer strong E2EE to the masses at scale, without considering the needs of LE.
It seems odd, given that highly successful startups overwhelmingly were "easy" startups (including one of the examples he mentions - Instagram).
Is this new? Isn't this what they did to get all their users in the first place? Surely people haven't forgotten?
Programming with a lot of higher order functions won't feel as clean in Common Lisp due to the #' and funcall.

Basic Lisp programming with lists is a lot cleaner in a Lisp in which the empty list is false, and in which accessing nonexistent parts of a list (including the empty list) is a safe no-op that yields nil.

Ashwin Ram's (cdr (assq key a-list)) almost works in Common Lisp in the form of (cdr (assoc key a-list)). See: https://ashwinram.org/1986/01/28/a-short-ballad-dedicated-to...

Imperative programming is better supported in Common Lisp because the evaluation of the arguments of most forms, including function calls, is ordered, mainly left to right, so side effect embedded in expressions will show stable, portable behavior. Scheme function calls have unspecified evaluation order, much like C. (In Common Lisp, the only unspecified aspect is whether the function cell is sampled before the arguments are evaluated, or just before the function is called. It's extremely rare for the arguments of a function call to be redefining the function cell, needless to say.)

Common Lisp forms return a predictable value. If it doesn't make sense for a form to return a value, its value is not "undefined", but either just nil or else "no values". When a value returns no values, and an attempt is made to use its value anyway, then nil is produced as the value. You will not see some annoying #<undefined> in a Lisp REPL coming from a procedural construct.
Designing Even Larger Applications
If water treatment plant can't operate because the workers are sick...I would imagine the first step would be similar to a flooded treatment station -- a boil water condition. Provided you have gas/electric to do that.

We can't speculate at this point what kind/likelihood of a civil emergency we might face with this or any other disaster that hasn't happened yet.

However, having been through Sandy where we had 16 consecutive days of no power or heat and a snowstorm with a foot of snow and fouled treatment facilities with boil alerts, here's my recommendations:

1) Hold 10x24x16oz bottles of water and use them in FIFO. When you finish one flat, you buy a new one and put it on the bottom of the stack. It's not that crazy to hold 2 weeks of drinking water in your pantry/garage.
2) In many places around the world, the sink water isn't treated at all. Have some sterilizer solution available for washing dishes but don't risk drinking water that isn't treated
3) peanut butter has a really long shelf life, easy to store, is really cheap, and if you don't have nut allergies, not a bad source of nutrition.
4) figure out the electrical needs of critical devices - phones/tablets CPAPs, air machines, etc. GoalZero is a pretty user friendly brand of solar / battery combos.
5) get a 100W 12V adaptor for your car. If you need to recharge something that isn't USB, you can use your car as a simple generator.
6) be prepared to live without heat or A/C but if you do have power, make sure your filters are clean. Ask your hvac guy to recommend the max level of HEPA your HVAC can tolerate.
7) have squirt bottles with disinfectant in every room with a sink.. not just normal countertop cleaning stuff. Bleach IIRC needs 7 minutes to achieve a maximum log reduction of bacteria / viruses so keep in mind when you're cleaning, its not possible to kill everything, you're reducing the load of bad things over a period of time.
It's still mildly disappointing that we only have one offering for "dropbox" and co and it's nowhere near where it could be after several years.
Clearview AI, says its entire customer list was stolen in a breach
Ha, good eye for what I work on!

Appreciate the feedback and likely we'll have more tooling is this space coming out over the next 12-24 months, and the data for others to build these tools sooner than that. We need to get the data correct and easily accessible first and then the hope is we won't be the only ones building the tools on top and others like yourself can see gaps in what is useful and map that to data we have.

Specifically regarding "historic monthly data for the past 3 years..", you can tackle it multiple ways, but likely the most scalable for us is monthly averages of a "typical" year for a specific location rather than last X years we can look back on 10+ years to get a better idea "typical" and synthesize it down to monthly.

Combining cost comparison, batteries and individual energy consumption is another level of complexity again and not something that can give accurate answers to without knowing highly specific details. How much you could subtract you could take a guess at by looking at your electricity bills and having a guess that >50% of your consumption is probably during the day when the sun is out, but again a couple of heavy usage days when it is cloudy will throw off your averages. There are lots of websites about the economics of getting solar/battery, so while where I work will produce good data to help with those calculations, it will always be individual behavior that determines about worth while the purchase is.

As a rule of thumb (in Australia), it is around a 7 year payback at the moment, and batteries will not save you money at this stage.
But didn't malaria develop chloroquine resistance in some areas? Whats stopping sars-cov-2 from mutating like that?
I built two products on CouchDB 1.x starting in 2010 ... version three is another amazing step forward! For my more recent projects, I've replaced CouchDB with clustered PostgreSQL using JSON columns as I really enjoy the ability to write SQL queries for against the JSON and to use the built-in full-text search capabilities. I think both CouchDB and clustered PostgreSQL are amazing tools and it's nice to be able to choose between them as needed. The best advice I've heard is to choose CouchDB when you know your queries ahead of time and the data "schema"[1] is variable and choose PostgreSQL when you know your data ahead of time and your queries are variable.

[1] In this case, a JSON document but either with a JSON-schema or marshaled/unmarshaled into a strict type.
American cops are a mix, of Bobby Peel's London metropolitan constables, and of Southern slave patrols.

But Florida, being Florida, is likely more slave patrol outside the larger cities and tourist areas.
They are tools that solve different problems, imo. In CAP theorem[0] you have 3 groups of DBs.

CA databases: SQL databases that are hard to scale ("partition") but are always consistent and available.

CP databases: MongoDB style databases that are consistent and partition tolerant, but trade availability (sometimes your queries will fail during high load).

AP databases: CouchDB style databases. They are always available and are partition tolerant, but you may be querying stale data.

[0]: https://en.wikipedia.org/wiki/CAP_theorem?wprov=sfla1
Thanks for responding. Which part was factually inaccurate?
The US uses 4 trillion kWh per year. Assuming 3MW wind turbines at 30% capacity factor, you'll need around 3.5 billion wind turbines. They take around 23 million kWh to manufacture (each), so you'll need to find the energy for that. However, that's not really enough, as the entire economy needs to be carbon-neutral. Electricity usage accounts for about 40% of the total US energy usage, so you'll actually need to multiply everything by 2.5.

Seriously, I understand the "we only have 10 years to do anything" line, but the math is so far from adding up, it completely defeats the point. The only realistic way to achieve the 10 year goal is to radically cut energy usage.
Kids love causing trouble with that Pop-O-Matic!

https://www.youtube.com/watch?v=HfznucMwNuU
I cancelled recently and was prepared for the hard sell by the support staff. I was able to bypass it quite easily due to this, but they were quite abrupt in their conversation style and essentially hung up on me after they established that I really did want to cancel my sub:

Them: "OK so I am confirming that you wish to cancel your subscription and don't wish to take advantage of the current low rate you are on."

Me: "Yes that's correct, although I did want to..."

-- DIAL TONE --

Didn't have too much issue getting through to them on the phone (I am in NZ though, so may well have called outside their peak hours).
there's also an ideological component to it tied into all the libertarian crypto fantasies that makes people believe they're sticking it to the man and so on.

A lot of these crypto companies frame themselves as liberators from the banks who don't want to give you a share of the pie and so on, targetting vulnerable people who seek opportunity. It's very cynical.

Another space where I have observed this is online education startups. Lots of "you don't need a degree", "the universities are just trying to keep you out", "we're bringing education to the masses" etc. Same sales pitch.
> In 2019, Guo sent a cold email to Chris Dixon, a general partner at the firm, asking again for capital, this time for a tiny VC fund she was raising alongside tech entrepreneur Dave Fontenot.

hilarious way to start the article. fontenot is a perpetual idea guy, sv brogrammer-turned-mindfulness-and-meditation non-operator. guo afaik was effectively kicked out of scale relatively early on and has been riding the coattails and traveling since then. marc isnt getting any credibility from this opening, which incidentally backend cap surely helped put together as a content marketing piece

interesting commentary on the trend of dealflow, though. with so much capital floating around, VC differentiation is increasingly important. "thought leadership" a la naval is one way to obtain it; earlier and better dealflow via scouts (or scout microfunds) is another.
Sadly academia for a while now has been subject to the same short-term funding concerns as businesses but without the same flexibility and options for generating that funding.
I see two officers in the video. One who we does the handcuffing and one who's body-worn camera we see the incident through. I'm blocked from the article you posted, but through an other link [1] it seems only the one with the camera got fired.

1: https://time.com/5790482/6-year-old-arrested-florida-body-ca...
Your point is well-taken. I agree that such an upgrade is unlikely to be sold as a standalone product. What is more likely to happen is that it will be included for a nominal fee as an add-on to a new purchase or service agreement.

To understand how this would work, we need to 1) understand the lifecycle of big-ticket medical equipment (ME) and 2) recognize that ME products are at the core of multiple revenue streams. The first point has to do with the renewed/refurbished market for used/last-generation ME. The second point has to do with the service agreements/warranties/support contracts that are needed in order to keep the ME operational. These factors combine to yield a sales process with multiple negotiating dimensions.

How these negotiations actually play out depends on whether you're a deep-pocketed healthcare system or not (it sucks, but it's true). If you can afford it, you'll have lots of ways to sport the latest and greatest ME without breaking the bank on any single purchase. Some of your old stuff will end up in the renewed/refurbished ME market, thereby offsetting your total cost of ownership (either directly or indirectly). Once used ME hits secondary markets, the customer profile changes: these customers are not looking to keep up with the Cleveland Clinics and Stanford's of the world. They're looking for long-term value, so reliability and longevity is top priority - and this is where I see software "upgrades" coming into play. Some of these customers may already have one or two MRIs, while others may not. In either case, the software "upgrade" becomes a differentiator that speaks directly to the priorities of these customers.

TL;DR - Today, healthcare providers with limited financial resources (e.g. those in developing countries, rural areas) are incentivized to purchase capital equipment through "discounts" on service/support. In the future, we're likely to see software "upgrades" (such as those made possible by FB's work) bundled/leveraged as an incentive. The net effect is the same: extend the clinically useful lifespan of medical equipment (MRIs in this case) and greater access to medical technology around the world.
I think your advice is definitely sound for self-help books: unless you act on them they have no value, and given that most are bunk anyway reading a lot of them isn't going to help you.

If you are going to read a lot of books, then reading for pleasure (e.g. fiction) or books that are intended merely to convey information, is probably a better way to go.
Good choice. Just to elaborate: double opt-in is expected behavior from customer-centric companies, and expected behavior from good actors in the email ecosystem. It's not necessarily required by law in the US, but it's a good practice nonetheless: always make sure you have permission from a recipient to send an email.

Anyone can pass anyone else's email address as input to a form, so simply receiving an address as input is not actually permission. If a newsletter does not employ double opt-in, then it will eventually end up on a list of "single opt-in newsletters" which are used to harass people by subscribing their email to a ton (100s or 1000s) of newsletters that they don't want. People who are the victim of this will rightly mark those messages as spam, causing your email reputation to drop. Random Internet bots will also submit subscriptions using your form with weird addresses for who-knows-what reasons. It's a very good idea to have some data validation to make sure garbage doesn't end up in your list, and double opt-in is one of the best ways to achieve that.

Furthermore, competitors might maliciously attack you by subscribing random email addresses to your list. They can get these addresses from data dumps from compromises (like what haveibeenpwned is using). Sending to these addresses will harm your reputation because recipients will mark as spam, or will fail to interact with your messages which is also a spam signal. Smart malicious competitors will cause you to start sending to spamtraps.

The best defense against being manipulated in these ways is double opt-in. Lastly, your email list as such has more value overall if you know that every single entry was confirmed by double opt-in.

As a corollary, you should remove addresses from the list if messages to the address start bouncing, or if you receive a spam complaint from them; sometimes people are lazy and will mark spam instead of unsubscribing. Ideally, support the List-Unsubscribe feature so that people can unsubscribe from it directly in their email client. A good email platform will help with all of these things.

I consider single-opt-in use of email addresses to be a dark pattern or anti-pattern in most contexts, especially non-transactional contexts like newsletters. Any sort of recurring communication needs double opt-in.
> It's not feasible to ban people from using their own encryption unless you plan on severely restricting their freedom.

In practice even the tech types weary of using and maintaining truly secure solutions. So if they outlaw backdoor-less solutions then companies won't support them. And without commercial support the options will dwindle.

And even donation supported projects like Truecrypt will fold under pressure.

Crypto isn't a one-person job
If you're interested in common reviews, despite all its shortcomings, GoodReads is still a place where honest reviews can be picked.