skysight-inc/HackerNews huggingface dataset:
We've never done anything like "swapping ads with their own". Stop repeating falsehoods you should know are false by now. The tipping UX that used unverified subscribers' favicons was a mistake we fixed quickly. Your comment here looks bad-actor to me more than anything we ever did.
Indeed. A month is more in the range of a fallout shelter.
Half of your comment doesn't make any sense but for the rest of it, its just incorrect. The change in firefox hasn't broken anything, security is certainly improved in combination with other efforts like encrypted SNI. And yes, your dns requests always leave your lan at least once. You can run your own DNS server locally but that dns server has to ask other servers for the data since it can't store a local copy of the entire dns system. A local dns server is just a cache but with a few users its likely not doing any more than your browser cache.
You didn't listen well in the history class, am I wrong ?
Your Own Bed in Economy Class
My father had the misfortune of being a civilian in Kuwait during the first gulf war. What I learned from his stories is that the line between normalcy and utter chaos is thinner than one would think.

The war itself from the perspective of someone not actively participating is mostly boring (his words) - you can't really go outside, cable is down(no internet back then), not much is happening.

But the brief transition period between peace and war is the worst. People desperately trying to stock up in the last minutes, quickly realizing that it's pointless to stand in line and pay when there are so many more of them than the supermarket's staff.

I, for one, "prepared" by weighing 10kg more than a few years ago. I have body fat to spare. My only worry is a good source of water-soluble vitamins.
This is a useful and interesting contribution from Google.

However, like a lot of current software and web-scale systems research, almost no attention is paid to contributions from other industries, or even current practice in automotive, aerospace, consumer or finance, to name a few.

The earliest reference in the paper is 1986, with most post-2001. A definition of availability is attributed to Toeroe and Tam 2012. It was most definitely in use decades before!

The authors and interested others would benefit from reviewing current systems engineering practice (see INCOSE.org organization). Texts such as

Blanchard and Blyler, Systems Engineering Management

Blanchard and Fabrycky, Systems Engineering Analysis

NASA, Systems Engineering Handbook (and accompanying management handbook)

and others would open a few eyes, I expect.

The biggest issue with the term "availability" for a single-instance system is well identified by Google. The term was originated, however, for many thousands-instances systems, such as procurement of combat aircraft, operating vehicle fleets and so on. Substituting another measure (and term) is a benefit.

However, one issue I didn't see addressed in the paper: how to measure success for the purpose of an SLA. Contracts would need a simple comparison to a single number.
I'm building a dashboard that behaves somewhat like a news program, with weather and scrolling headlines, as well as reminders for upcoming todo list and calendar entries, and streamer for the stocks that I and my partner own. I also plan to have something akin to spaced repetition of things I want to commit to memory included. The dashboard is still a work in progress since until now I'd been doing these things as separate items, but when it reaches a point that I'm comfortable with it, it'll be uploaded to github.

It currently uses more screen scraping than I would like, which is why I'm not uploading it yet. It probably would break some policies if I shared it in its current state.
That is a sandbox issue; obfuscating Javascript can get to really advanced levels.

If I remember correctly Google's reCaptcha work by interpreting encrypted instructions on an also encrypted interpreters that is Just-In-Time-Decrypted. Also it is entirely possible (and easy) to fully write an interpreter for wasm in Javascript. From an explot perspective literally the only thing that wasm provides is performance (hence the crypto bots).

The reason for vulnerabilities in Flash and Java was that the plugins were running in a different non-sandboxed (or badly sandboxed) process. The inability to inspect the Flash/Java binary was only relevant because of the many many bugs and exploits available in the runtime.

The reason being that both Flash and Java (and every other plugin) provided functionality completely absent in browsers (one example was the ability to open system-level network connections), this functionality was not sandboxed enough.

From a security perspective it was almost close to running `make install` instead of `ls` on a random project from github.

The reason people are confident in wasm security model is because it is almost implemented as a Javascript function that just manipulates ArrayBuffers.

There are currently proposals on the way to actually increas the reach of wasm code and allow a deeper level of interaction with the host environment, but (with the exception of threads) they all only offer functionality already exposed to Javascript
So... What they are saying is, we currently have a unique opportunity for some enterprising individual to steal a moon or spark an IAU brand debate on the meaning of the word "moon"?

6x11 ft isn't unmanageable bulk-wise, and we obviously have the mass figured out already.
To summarize the mechanism: the affected chips will transmit packets that are waiting in the Tx buffer even after the station was disassociated and because the station is disassociated (and thus the encryption key was zeroized), these packets are going to be transmitted encrypted with all-zero key.
Send a certified letter.

https://www.kalzumeus.com/2017/09/09/identity-theft-credit-r...
> The original Game Boy’s screen is also notoriously awful, with just 23,000-plus pixels on screen and contrast levels that make it a challenge to play even under a lamp. Couldn’t Nintendo have sent Tsusaka’s grandmother a Switch as a replacement? Or at least a New Nintendo 2DS XL, with its giant and bright screen as a better alternative that would presumably be a lot easier on her aging eyes? When you’ve got a loyal customer that’s already been through three copies of your product, it might be time to give them a free upgrade.

Yeah, no.

Maybe this was meant sarcastically, but:

- A front-lit LCD (i.e. lit with the room's ambient light) is arguably easier on the eyes than some bright UV-spewing modern replacement.

- Neither the Switch nor the Nintendo 2DS XL are able to play the customer's Tetris cartridge (even the Game Boy Advance can't run non-Color Game Boy games, IIRC).
Such a great post- https://www.completeconnection.ca/trending-mobile-phone-apps...
They also tried to frame him as working for the Russians before and when that did not work as a pedophile:

https://wikileaks.org/Background-and-Documents-on-Attempts-t...
In this context I assume it's Small or Medium Enterprise.
You can still disable wireguard at any time and fall back to "unsafe" use for chromecast etc
Google App Engine has been great for me and it’s free. I’ve hosted several personal sites on it since its early release for python, but you can now use many languages.
I host now https://www.appblit.com
The 2003 SARS outbreak resulted in under 8500 confirmed cases and the 2012 MERS outbreak in around 2500. Confirmed COVID-19 cases are currently over 80000. Only considering fatality rate paints a flawed picture.
I just started studying CLV models for a research project. Has anyone implemented/seen these kinds of models in production?
I mean, there was always that cache of Atari E.T. that they found buried in the desert...
Actually, looks like emscripten has support for a few different options, including IndexedDB[1]. I have a use case where we'd like to both use the local filesystem via Node APIs as well as in-memory in the browser. I asked the author of wasm-git and it looks like this is possible with a custom build[2].

[1]: https://emscripten.org/docs/api_reference/Filesystem-API.htm...

[2]: https://github.com/petersalomonsen/wasm-git/issues/3
If there's one thing public health authorities are going make sure stays on (fails last), it's water.
"In the past ~50 years in the US, labor has been on the back foot, and productivity gains have gone almost exclusively to the wealthy, rather than the working class. "

How so? The poorest working people in the US today are much much much better off than they were 50 years ago. It's not even close. A lot of people have recency bias, technology gains etc have given much more freedom to individuals, made work easier and less labor intensive, that is largely due to private industry. Globally, poverty has plunged.
> Chromium is built to share a lot of things between tabs efficiently

yey, currently using 6.6 gigabytes on my machine (RSS)... efficient...

firefox is no better, sitting at 4.8 gigabytes...
Become a better Podcast Host (in French at the moment)
Study suggests a median incubation period of 3 days, with a range of 0-24 days: https://www.medrxiv.org/content/10.1101/2020.02.06.20020974v...

Example of a 27-day incubation: https://www.reuters.com/article/us-china-health-incubation/i...
> The part where it's not obvious how to price individual offerings in a discounted bundle for refund purposes is precisely the problem

Well, GOG also does regular bundles. "Hollow Knight and Soundtracks" is a single SKU that just so happens to entitle you to the same content as three other SKUs (while making search results more confusing). But more normal bundles are common. It's very frequent for them to offer a significant discount when you buy several different SKUs simultaneously. Those show up as individual purchases -- the bundling is just that they were in your cart at the same time, and you got a discount -- and I feel pretty safe assuming that GOG will actually treat them as individual purchases when refunding them.

But obviously, the same algorithm that calculates the individual price of a single-SKU-included-in-a-multi-SKU-bundle will work just as well on part-of-an-SKU-that-just-so-happens-to-match-some-other-SKU.
They won't try to stop you. The average persons indifference will do it for them. Most people won't build Signal from source or let you install it for them. Anyone who does won't get any updates, so over time the installed base would be vulnerable to attack anyway. Since less people would have Signal then less conversations would be protected by it in practice.
The shorter form, before people complain again that PowerShell is too verbose:

gps | ? path -m keybase | kill
There are also a few hardened investment professionals on there who will throw bad picks just to watch the fallout
Is it any documents that describes secure couchdb architecture? Most of the articles I find are limited to authentication and basic permissions.
Gnome already is based on html/js. There is no need for 10 different UI toolkits if one standard can be optimized. The problem is html/js are far from well designed but due to their popularity a lot of time and money has been spent optimizing them.
Longest running CEO, too.

I always thought of the Pope as "COO, Earth Division."
Architects != concrete workers. And most concrete floors have a slight slope to make draining water simple.
You should definitely connect with Chuck McManis.

https://news.ycombinator.com/user?id=ChuckMcM
Future of Applied Science Innovation Powered by Computing [video]
This isn't the only case that has involved Sweden questioning people in another country, they have a treaty with the UK explicitly setting up a method of questioning people over video link in the UK. This was unacceptable for some reason with Assange.

And I doubt anyone involved thought that Assange has felt physically safe for the past decade.
> ...then why is it necessary to try to take wealth (by force)?

Ah. "[B]y force." The marker of the arrested mind of the libertarian.

> Why don't people willingly give up their wealth so that they can make more?

Because there is such a thing as a local maxima, as opposed to absolute maximum. The giving up of wealth by an inordinately rich person may not make that inordinately rich person any richer. This is exactly the basis of what is so adolescently derided as "by force," which actually means "by a law that I don't like."

At a higher level, the silliness of the "by force" objection is rooted in the reification or idealization of "the market." The market isn't real: It's a game that is played with laws and money, one that we participate in, at least initially, so that we may improve our (local) wellness. In short, we can't climb out of the muck in an every-person-for-themself struggle, so we regularize exchange with money. Every "free exchange" in a market entails the (regularized) threat of force through law. And the benefit of the market obtains not from "freedom," but from "regularization." The basis of taxation is that it regularizes the extraction of wealth for the common good, to raise all local minima. Taxation appeals to justice, a just apportioning of the common spoils of the market game, rather than a notion of absolute freedom or legal pacifism, the latter being especially empty once one realizes that the market itself is a constructed game whose mechanism is the regularization of force.

Put simply, winners can take much without there being any injustice at all in ensuring they don't take all or practically all.
I referenced my own comment because I didn't feel like rephrasing what I had previously written, nor just spamming a copy of it. A logical argument doesn't rely on a "source":

> A one-time pad XORed with a message doesn't provide integrity, and therefore can't reliably secure an arbitrary protocol

The point is that sure, one time pads "work" the way they're described. But their properties don't actually fulfill what we require from modern cryptosystems. Note the sibling comments talking about augmenting them with half baked authentication schemes. Which are all into the realm of computational-complexity cryptography, and no longer "mathematically unbreakable!!1!"
Thanks for the guide, although as a founder I'd say I have mostly given up on the idea of raising money from VCs. VCs care too much about vanity, and I don't fit the mold most VCs are looking for, thus they'd never invest in someone like me despite my track record of success.

These days I'm bootstrapping a couple small businesses (don't put all your eggs in one basket) and things are going well. It's tough as a solo founder, but I have a good set of friends who are cheering me on from the sidelines, and I make progress every day. I'm pretty skilled at most things, and for the areas I'm weak there's always Craigslist or Upwork.

I will say that the big advantage of not taking outside investment is that I don't feel any pressure to meet other people's expectations, I really enjoy the work I'm doing, and I get to reap 100% of the rewards.

Just to be clear, I intend to apply to YC again, and if a great funding opportunity came along I wouldn't say no, but I've also decided not to actively pursue VC funding anymore. For me, right now, the most sensible thing is to stay focused on building product and acquiring customers.
Just to add to your point. In old time mafia controlled villages in the old country, anecdotally you did not have to lock your car, but few would argue that an average person in that village was 'safe'.

It almost reminds me of some my parents' peers yearning for the good ole days of communism, cuz riffraffs would not dare to talk back to a cop.

edit: It is hard to argue with that kind of sentiment. It is technically right.
Thanks for the detailed reply. Appreciate it.
Totally a great point, and other apps in this space -- typically those that target a larger, non-"pro musician" audience -- do have more entertaining / fun engagement mechanisms, such as recording a video selfie while singing / karaok'ing, etc.

Really great idea, thanks a lot!
I'm on a phone so I'll try and respond more in depth later but the total income based on the yearly accounts was £4993M in year end 2011, and £4889M in year end 2019. That's not adjusting for anything, just total income.
> it doesn't matter whether the + operator binds tighter
to the left or to the right

Depending on the language, (a+b) + c may or may not be the equivalent of a + (b + c)

Interesting. Apparently this is true in Python because it uses bignum numbers.

As I understand it, it's true in Java too, because (signed) integer overflow is defined to wrap-around. It's not true in C, where signed overflow invokes undefined behaviour. In C# it depends on the mode whether you get wrap-around or an exception on overflow.

And of course it's never true with floating-point.
It is compared with flameshot...
Agree with this sentiment. With the exception of very specific topics that I've encountered in the wild but have no theoretical context on (e.g. Async JS), I have never been able to learn from a book. Tutorials/blog posts are great for this because you can stop and implement.
Exploits now avail: LPE and RCE in OpenSMTPD's default install (CVE-2020-8794)
> Yeah, the psychiatrist seems the easiest to explain since when choosing a medical professional people may ask their friends who they recommend.

IIRC, connections like those were often explainable by addressbook data. Please assumed Facebook didn't have access to that when it actually did (I'm pretty careful about this kind of stuff and found mine had been slurped at some point, for instance). It's not inconceivable that a psychiatrist and patient may have exchanged emails or phone numbers.
I don't know about US, but many European countries have access logging in police and health databases, which checks to see for unwarranted snooping. With actual convictions taking place when someone gets too interested in, say, the behind-the-scenes data of the latest celebrity news.
People don't always make the rational choice for long term benefits when there are short term gains to be had. Individuals, thanks to bounded rationality, tend to seek satisfactory solutions, not optimal ones. It takes coordinated effort to find optimal solutions.

Another way to think of it is, that by benefiting from public goods (roads, law enforcement, health regulations) already in existence you and your family have already entered into a social contract with the government, which acts as a representative of the collective will of all people towards a more perfect union, and in which payment is due for the benefits you have obtained.

See:
https://en.wikipedia.org/wiki/Tragedy_of_the_commons
https://en.wikipedia.org/wiki/Self-serving_bias
https://en.wikipedia.org/wiki/Social_trap
https://en.wikipedia.org/wiki/Bounded_rationality
https://en.wikipedia.org/wiki/Prisoner%27s_dilemma
https://en.wikipedia.org/wiki/Social_contract
Because some things are worth worrying about, and that anxiety is an impetus to take actions which may improve the situation for you and the people around you.
There's gotta be more to that sperm donor story. "Oh that must be my biological kid from that sperm bank trip 20 years ago" is not the natural train of thought when you see someone who maybe vaguely looks like you as a suggestion on Facebook. And whatever the other context was - maybe one of them searching for the other - probably gave Facebook what it needed to make the connection.
If we are constrained to work remotely, the network may experience issues too.

The 4G and internet also need actual interventions. If we must work remotely, internet companies may also have to.
> It is, particularly for non-violent prisoners

You're going to need to show that "non violent prisoners" are not searched, nor handcuffed and uncuffed probably multiple times a day in the process of moving them from prison to court holding cells to court to court holding cells back to prison.
> It’s not a typical food additive or ingredient

If you look at other stuff on the GRAS list (eg. tea, coffee), kava definitely qualifies.

> it’s a psychoactive drug which rarely can cause side effects.

It's a drug like tea and coffee are. As per the FDA definition of a food, kava definitely qualifies. Numerous foods on the GRAS list can cause side-effects, and there are certainly more dangerous foods on there (peanuts, eggs, and shellfish kill people all the time).

Kava has a very long history of safe use, is a traditional beverage of the US state of Hawaii, and is considered a safe to drink beverage by the WHO. There is no reason why it shouldn't be GRAS.
Does that mean it's not exploding ?

Super disappointing. Is there still hope to see the supernova in our lifetime ?
App engine is great. But I am looking for a Server. My use cases will vary.
If you want anything from the web to work on Windows as native why not just use PWA utilizing Microsoft's (1) own PWA Builder (2) including the availability of proper debugging tools and acceptance in the store? It doesn't matter what tech it uses. The more important thing is it will be supported and updated. There won't be any surprises.

(1) https://developer.microsoft.com/en-us/windows/pwa/
(2) https://www.pwabuilder.com/
Im assuming its more of a pay to be featured with an asterisk than a legal thing.
Ribbon (YC S17, A16Z) is hiring engineers. Help us simplify healthcare
Microsoft issues revenue warning for Windows and Surface business
I wonder if Apple would void your warranty if you use those and they find out.
"Automated trading systems will probably raise alerts on that stock since someone must know something for that to happen."

Unlikely. Automatic trading systems will not see their trades. Most (if not all) of WSB trades are done through the Robinhood app. Robinhood users are not charged transaction fees executing their trades, they can do this because they sell their flow (these orders) to HFT firms. HFT firms are willing to pay for Robinhood's flow (trades) because the average user is not an insider, has no idea what he's doing and is most likely gambling. If you're an HFT you'd rather trade with a common person, then an informed investor because maybe they know something you don't.
Because it has infected tens (probably hundreds) of thousands of people around the world, completely overwhelmed hospital systems, and there's very little reason to expect it will different where you are.
There's plenty of lower-income retirement communities in Florida too. You can buy homes there for $100K or so, so you don't even need to be a millionaire. I would say, that if 1 in 30 Americans are millionaires, that is direct evidence that it's not some impossible, unachievable dream. 1 in 3 have a net worth greater than $200K.
> Clients could do their own secure resolving without relying on a central service.

So in other words: privilege escalation.
To me offering feedback is an unnecessary attack vector for lawsuits.
> If the game hits a lock due to no one trading and no one getting a natural monopoly, the game can go pretty much indefinitely.

Yeah, I once played with someone whose strategy was "Never trade". In an act of desperation, I offered him $1,000 for a light-blue property, and he refused. The game lasted for nearly an hour before I quit out of extreme boredom.

A typical 4-player game of Monopoly should only last around 30 minutes, but people often have terrible strategies or play with ridiculous house rules that constantly inject money into the game, prolonging it. A lot of people don't even know that the house rule they're playing is even a house rule because it's what they were taught when they first learned to play.
Eh. Locks can be picked and doors can be rammed. Layered encryption is really hard to break and one time pads are impossible.
Yeah look at research group websites at major research universities that are working in your area of interest. The students are usually listed on the lab website. They’d love to be emailed.