skysight-inc/HackerNews huggingface dataset:
That remind me of one of my first contracts, 10 years ago, for an Android mobile app. It was an app made to quickly record something using video, audio or picture, that would then be uploaded through their API. The API worked essentially like you said, it was converting the binary file to base64, adding it to a JSON, which was in a GET variable (thus urlencoded) and sending that over an HTTP connection (I don't remember if it was HTTPS or not though, I hope it was, but at the time I could have ignored that part). Android didn't allowed more than 16 MB of memory for an app, thus I had to build streams to support each things individually, that was an interesting challenge. I was amazed to find out that there was officially supported Base64 streams, but their API strangely didn't accept the default Base64, it was only accepting the one for URL (which replace a few characters with others one), so I had to add another stream on top to do this.
District 9 (2009)

Set in South Africa. Aliens come not as invaders or exploitable natives, but as confused refugees. Lots of action and spectacular special effects.
At least he did not contract a computer virus. That would be embarassing

(this is a joke. The coronavirus is not very lethal for young people. In italy, the average age of people who died is 81. Only one case <50 died)
In APIs I've integrated in recent years, I've seen:

1. ISO UTC
2. ISO local
3. Epoch
4. 2018-04-20
5. Jan 01 2016 11:58am

Probably others that I can't recall. It's a damn mess.
Because there's 10 times less of it there.

Hypothetically, if maltodextrin was equally bad for you as sugar, then you'd consume 10 times less harm.
So would you judge money losing startups as harshly? What about YC darling Dropbox that has never made a profit? Netflix is borrowing billions of dollars trying to create and license enough content to stay competitive.
Essential parts of C language are actually really a small set.

What I'd suggest is, learn syntax and try to understand linux kernel (which is one of the very well crafted software piece we have written in C). If you don't want to go that much of a deep dive, you can check sqlite source code as well. Writing code starts with reading it. Do yourself a favour and spend more time on reading code than reading books.
>For those who can't live without a framework: What would you miss?

Well, my favourite of choice is Elm, and it's correctness guarantees are really a huge deal to me. Whenever I have to do react or even just vanilla js for work, unless it's really miniscule I will nearly always run into runtime errors because I just forget to check something for null or do something stupid like not awaiting a promise (and that's before any other developers get involved). Typescript helps out a certain extent but I find it isn't nearly prescriptive enough. It's not like I'll ever convince my company to adopt Elm though (and believe me, I tried), so c'est la vie.

Although I suppose these might be considered different languages rather than just a framework, which is where the benefit comes from? It might be just that I'm not very good with dealing with JS as a language rather than needing a framework specifically.
What is light therapy and does it work?
I did some pretty extensive benchmarking of various schemaless serialization libraries a few years back. All of these libraries have advanced quite a bit since then so it's a bit out of date, but the relative speeds of MessagePack vs JSON and BSON are probably still relevant:

https://github.com/ludocode/schemaless-benchmarks

I haven't compared them to schema formats like Protobuf or FlatBuffers yet because the use cases are pretty different. I like MessagePack for small projects or rapid prototyping because you don't need to integrate any big libraries or set up code generation as part of your buildsystem. (Mostly I got sick of integrating the C++ Protobuf library into embedded projects.)

The MessagePack format is a lot simpler than Protobuf and the best implementations are nowhere near as allocation-prone as the reference implementation so I expect they would beat it flat out on performance, though the messages may be slightly larger. They would probably beat FlatBuffers for encoding speed as well, but I don't expect any schemaless format could beat FlatBuffers for decoding speed.
> there's no official Rails graphql solution yet either

I use https://github.com/rmosolgo/graphql-ruby!
Agree. Techcrunch is almost always just a poorly written article that fails to link to the real source.
I'm not agreeing or disagreeing with anyone here. I'm merely asserting that we should use facts to back up our arguments.
Tons of links are to scientific publications, some through the tweets, some direct.
As Jobs mentioned, "We are going to be the last company that gets into the workstation market, or the first to fail". (He probably worded it better.)
"It needs to be more actively. Like a field the user has to fill out with a URL" - I like that.

Can I tell them what to fill? Also once they fill it, can I cache it?
There are more hardware exploits. New classes of exploits using physics and side-channels are circumventing the formal models used to build CPUs.

CPU designers have made complex architectural decisions to speed up execution. In the case of spectre, it's to speed up single-threaded execution. In the case of this, it's to optimize security features. An analogous case is AES256, which was chosen because it's fast. But it's fast because the s-boxes use the private key as an index into an array, so there's caching. But this introduces a side-channel, because based on time to execute you can infer the private key.
> The only possible improvement would be to substitute "watch" for "binge".

Unless you're taking a stand strictly against 24 hours cable news, you still need to be informed, and that'll involve viewing some form of news.
jQuery was a tool to make DOM manipulation more concise and work across browsers. You don’t need it in 2020 at all. Use vanilla JS.

You also don’t need a framework yet. Just write code encapsulated by functions until it becomes a pain to maintain, and then look at frameworks.
https://www.youtube.com/playlist?list=PL4RrBxLcT1nZThUvIFjS0...
Why it was not written in TypeScript? (Sorry for fanboy type question)
I really miss their Mac reviews. What they did was immensely better than anyone since.
Chances are, by that time I will have a decent user-base. I will build out the API myself at that point.
Great question! Realized I was mixing different company sizes in the original post.

This would most likely be hitting smaller to medium sizes firms (e.g. Hedge Funds) that are holding a larger position in a security. The small/med firms don't "self clear" so they tend to depend on a larger firm to do that for them.

I should also point out: I used the example of one big position but it could also be a bunch of medium sized positions and then the PB says "Hmmm, we don't agree with 1 or more of those positions so we are stopping trading with you on all of them."
I'm an M1 finance guy, but that might not be good enough for most people.
The London whale, Long Term Capital Management, etc etc.
So what is being cooled is really the backend of the turbine, not the reactor.
(Pre-)FOSDEM+++++IloveFS+++++Comunidad
There was a CTF this weekend (UTCTF) featuring a task to exploit a program running in a secure SGX enclave. As part of solving that task I spent some time looking into the design of SGX, and I gotta say it doesn’t sound promising.

The basic idea is to be able to run code on an Intel processor that cannot be tampered with or even examined by any other part of the system, including the OS, hypervisors, etc. The entire code and data segment of this program runs in its own world, the “secure enclave”, in user mode (ring 3). The attack model is that every piece of software executing on the CPU (user code, OS code, hypervisors) and every bit of hardware outside the CPU (network interfaces, hardware buses, memory interfaces) could be compromised and attempting to leak data from your Secure Enclave, and the enclave code/data should still remain tamper proof and unreadable. The SGX implementation even includes an attestation system, using a trusted server operated by Intel, which will attempt to verify that the CPU itself is not compromised.

The entire thing depends on a lot of cryptography. Sealing keys to encrypt data that will be persisted to disk from the enclave. Memory protection keys to encrypt everything going to RAM. Page encryption keys to encrypt any memory that the OS tries to page out. Attestation keys to cryptographically verify that the CPU measured itself to be OK. Cryptographic signatures to validate the initial enclave code and data to protect against tampering of the initial state. Session keys to protect the enclave’s communication with whatever application server is providing the code/data for the enclave’s computation. The OS and even the ring 3 application hosting the enclave have a MITM position on absolutely everything the enclave does, so the disclosure of just one of these keys breaks the security of the whole system.

I am not surprised at all that SGX wound up being vulnerable to a low-level CPU attack. The attack surface is way too big and there are too many points of failure.
Everything you need to know about HTTP security headers (2017)
> Healthcare is a politically charged issue

Which is kind of amazing in itself given it's a basic human right in so many countries and taken for granted.
Seattle-area official outlines possible coronavirus crackdown
We have a similar insurance for cash deposits in Canada. I've always imagined that for some balance (perhaps in thousands of dollars), you're better off just letting it go if the company goes down. Now that you mention taxes, I think letting go may not even be an option.
Most of the real sales are on carder forums. https://krebsonsecurity.com/ writes in-depth from infiltrating some of them if you're curious
I first saw TinaCMS a couple of months ago and absolutely love the concept. From what I’ve seen it looks to be React based, any plans for it to work with other client frameworks? I’m a big Vue fan and am getting into Svelte too.

Can’t wait to see where this goes!
The Smartphone Society: Technology, Power, and Resistance in the New Gilded Age
The risk of reinfection is based in part on the amount of immunity in a population. Without a vaccine the way a population gains immunity is surviving an infection.

Unfortunately, even young healthy people are a significant risk of death so there are few good long term options.
The question is is it harder to make true AI or the human mind on a chip than it is to colonize the solar system?

Furthermore past that if we ever get to move beyond our solar system and FTL is impossible then amount of Gs you can take and total mass will be extremely important to who gets out and when.

If silicon life exists by the time we are sending extrasolar missions it will likely be able to travel much more quickly and cheaply than current day humans.

Humans as we know then today won't be living outside of a few select and hard to find environments. Ships that carry current day humans will need to be huge and have shielding, meaning Delta V will be a problem.
Kind of unrelated but love how we moved on from Docker in development. Most of these new frameworks are not suggesting you run the app in Docker.

I hate docker in development!
Co-occurring Acheulian and Oldowan artifacts with Homo erectus cranial fossils
Yeah if you're building a relatively simple webpage, a frontend framework really isn't needed.
>As noted above, many of the federal criminal statutes associated with the type of stolen data that tends to be sold in Dark Markets—e.g., passwords, account numbers, and other personally identifiable information—only apply if there is intent to further another crime: for instance, an intent to use the information to defraud.33 For this reason, a purchaser of the stolen data who lacks a criminal motive is unlikely to face prosecution under those statutes.

Which part is unclear?
That's the thing. It is not an API, I happened to figure it out digging around the Network Tab.

Their product has Terms and Conditions. Like no reselling of data etc.
Doesn't Africa at least have the benefit of being a warmer continent, with the current claims of the virus preferring milder, wet climates? Or has that last statement been debunked yet?
Your site doesn't seem to allow login with just phone number ?
You and the other commenter I believe are not seeing other sides to positions, which is common amongst almost everyone.

Those "facts" (facts, themselves, are subjective because they judged so by man) presented are highly selective in order to lead to a specific conclusion.

For example, it doesn't state that you can't purchase health insurance across state borders - also a fact and also contributes to increased prices.

The reason that insurance is "tied" to employment is because only a company can deduct health insurance on their taxes.

Building a new hospital is nearly impossible due to, among many other regulations, being required to get permission from other regional hospitals before building a new hospital. This both increases prices and reduces the number of available beds.

And to yet further demonstrate my point, we can see that even mentioning the political agenda on the site generates discussion on the politics.
This vulnerability targets SGX enclaves (although I believe it would affect all memory loads?), which run code that is meant to be isolated from the rest of your computer and is probably currently only being used by DRM on your computer. This is a flaw in your processor and at the moment you probably cannot do anything to protect against this, although work is being done to come up with mitigations. Currently, it seems like they’ll be the kind that’ll slow down your computer.
I agree with everything you said, and was merely pointing out the evidence is far from overwhelming (or even conclusive, in my opinion).

If we're going to talk about making dangerous statements, mentioning that antidepressants are effective while ignoring the fact they increase suicide for some people seems a lot more reckless to me. Of course, you don't know if they will do that until after you are already taking them.

https://www.bmj.com/content/358/bmj.j3697/rr-4

Since at this point it seems unlikely I really "have no dog in this fight," for what it's worth I think antidepressants likely help more people than they harm, but I do think their positive effects are exaggerated by health professionals.
How about a startup, for starters? Where people spend years burning themselves out?

How about when you have a big project coming up for a client and your team is depending on your contributions?

I'm not advocating for this sort of pressure, but I'm saying that even a law requiring paid sick leave is not going to guarantee that people go home when they're sick. Even in low paying jobs, managers still have to cover shifts. There's always pressure to work. Laws aren't magic.
Not messagepack, but if protobuf is ok, then nanopb has given me good results on uC projects.
Paid sick leave (including caring for family members) is one item that can absolutely be dealt with in the moment during this ongoing pandemic, and MUST be dealt with to have an effective response. Same for how we deal with a lack of hospital beds. Same for the problem of financial support for those trying to self-quarantine. Same for issues related to how uninsured folks can get care. All of these things are politics.

There's legislation being discussed as we speak that may deal with many of these things, even if only on a temporary basis. It's simply false that the only things we can do, we must do as individuals and cannot do through government and with political leadership.

If you're making a narrower point about Medicare for All, I'd put that in a different category than most of these political recommendations simply because it would take years to implement. But that's different from arguing that we should ignore the merits of sound public health recommendations on the basis that some people have an ideological aversion to hearing it.
https://sci-hub.se/https://doi.org/10.1016/j.jmr.2014.12.001
In times past, Solaris' /usr/bin/clear was a sh script which ran "tput clear", but the amusing parts was the notice which includes

# Copyright (c) 1987, 1988 Microsoft Corporation
# All Rights Reserved
# This Module contains Proprietary Information of Microsoft
# Corporation and should be treated as Confidential.
I've dealt with depression and anxiety on and off, and one thing that's missing on the list that helped me a lot is purpose and service.

It may be your job, caring for another person, volunteering for something that has impact, taking responsibility in a community or anything else really as long as it's meaningful. It's a pain if you feel crappy to take on more responsibility but in my opinion, it helps because at least if you feel like crap you're still doing good for others and you can get through a lot of suffering with that in mind.

For me personally mindfulness and talk therapy and exploring your feelings and whatnot is fine but it's also very self-centred and you can do it all day and still be miserable so at some point, I just thought getting out of my head and getting on with life as best as possible is what matters.
An intervention free birth would be extremely hard, but C-sections have a very high success rate. If we have a large enough base we could easily make areas that have constant acceleration
>The thing is, everywhere you use your password is probably 'closed source' and probably has 'lots of bugs'.

Well, that's the argument for a password manager, no? You can't trust any of these services, so you generate transient, strong, one time passwords for each of these, and then use a password manager you trust to manage it all instead. If one gets leaked, then sure it's a pain, but at least it doesn't mean they can log into every other service too!
"solved by higher-order functions"
Then C is enough for everything.
What a waste !!!
I can't agree. (BTW, I don't like K, and I don't use it, but if I did I'd like to think I'd be productive in it.)

This little system runs circles around entire sub-industries of other software. The fact that it exists and uses one or two orders of magnitude less time and code than other systems is significant.

It's like axes vs. chainsaws. If the job is to log a forest the latter will be better than the former.
The security comes with the Trusted Device feature, where users can only login from a trusted device. This works like DUO, when there's a login attempt from a different device, the Trusted Device will get a prompt and the user can choose whether they want to approve the login.

We only use SMS otp during Sign Ups and not for login, even if someone gets your customer's phone number, they can't login into the account without a trusted device approving the login.
Engineer Who Attended RSA Conference in San Francisco Contracts Coronavirus
What's required for all these to be supported is just developers being able to buy 64-bit ARMv8 processors running a standard 64-bit Linux kernel, not necessarily the exact same processor Amazon has. And the Raspberry Pi 3B is an inexpensive 64-bit ARMv8 processor which can run a standard 64-bit Linux kernel. Sure, it's ARMv8.0 instead of ARMv8.2, but as mentioned in the article software compiled for ARMv8.0 works fine on ARMv8.2.
> But, not for organizing actors that must share data and carefully coordinate the which and in what order functions are applied to modify that data.

you mean... the actor model?!
Why Washington State Is Desperate for Trump to Declare a Covid-19 Emergency
Some reports are showing that a little under half of those infected get no symptoms at all. Otherwise it can be anything from mild cold symptoms all the way to deadly pneumonia. That's from what I've been reading in the UK anyway.
Specifically, for things like medical advice I look to the experts because medicine has been around for a few centuries and is backed with science.

New concepts such as cryptocurrency I just walk away.

My comments are about how a lot of people tend to put the person ( + credentials) before the soundness of their arguments.

(edit:
The scientific method is well documented. This is a good place to start if one wants to learn about it, https://books.google.com/books/about/The_Scientific_Outlook....)
There is another page that shows the case numbers by country.

https://mackuba.eu/corona/

A few countries look like they have reached an inflection point (see number of daily new cases going back for example) but that could be a problem of testing (or lack thereof).
The problem with JSON is that it's just human-readable enough that people think it's a config file format. It's not.

That attitude is misguided. Many people do in fact use JSON as a config file format, so it is a config file format. Real world usage outweighs prescriptions about what is and isn’t correct.

Looking at the first standardized JSON spec, it’s not particularly prescriptive about usage, simply saying:

JSON is syntax of braces, brackets, colons, and commas that is useful in many contexts, profiles, and applications.

Of course, it would be a better config file format if it supported comments, but people use it even despite that. I think we should try to understand the reasons for that rather than just telling people they’re doing it wrong.
A laughable shortage of test kits. Combined with a CDC ban on third-party testing that was recently lifted.

The retirement home in Kirkland that had 18 deaths from the virus over the last 2 weeks currently has ~30 patients in the ICU... Who still have not been tested for the virus.
React isn't a framework either, nor is it marketed as one. It doesn't have routing, state management, etc. baked in.
judgement is still out on them but potentially. At the end of the day you have a service that is being subsidised by VC. Vis. Uber, Lyft, WeWork, The Warby Parker clones...

The real question to come is if a drying up of liquidity is going to torpedo lots of ships. It is simply not possible for a loss making entity to continue losing money forever (unless you are the US Government)
Let me reword some things in the article:

> and is now backed by venture capital firms including Index Ventures, Andreessen Horowitz and Sequoia

So these big players (aka "Smart Money") have granular access to everyone's personal & financial details, have access to trading information, are gaining deep knowledge on how Retail (aka "dumb money") operate/trade, their patterns, per age/gender/region/etc. That information is priceless, and then this happens: Sardine Feeding Frenzy: Whale, Shark, Dolphin and Sea Lions | The Hunt | BBC Earth https://www.youtube.com/watch?v=6zOarcL1BSc
It is fairly well known that the class of viruses that the coronavirus belongs to is fairly fragile. I think my question comes down to; does soap actually make any real difference in a case where almost everything destroys the virus? The only viruses that survive are pretty much only those that are embedded in some other substance. That would mean that the discussion on Twitter about soap coming intro direct contact with the virus was pointless.

One source suggested that the reason that soap is better was simply because it caused people to wash their hands for longer.
Please excuse my ignorance, what is JAMstack? I couldn't find an explanation on the landing page or the README.md.
1. You could use a float. 2. Probably in the documentation of whatever it is that's using it