skysight-inc/HackerNews huggingface dataset:
Actually yes, in the (old) past they where not only "sloppy" but some (view?) where even malicious in _creating_ a virus which only theire program could handle (but which also didn't do much damage besides annoying the user).

Through instead of sloppy I would say it's often more on the line of misguided about what is secure and _overconfident_ about their own skill to write code without security vulnerabilities. And if the are no vulnerabilities no sandboxing is needed right (sarcasm).

Through there where and hopefully still are exceptions to this. But don't ask me which ones because I haven't been on Windows for a long time.
Many cars in BE are bigger than one would buy themselves because so many are company cars.
Before you proceed any further, please consider aquiring our patent: RU2559714. More details on our communication device: http://www.videoptt.com/
Medieval European artists try to draw animals they probably haven't seen
Open sourcing our Sentry SSO plugin
Production might not be disrupted, but in a quarantine situation distribution could be affected.

Having the National Guard called up in a neighboring county to NYC has a some people panicking a bit and buying up nonperishable food.

I use Amazon Fresh for my groceries and found the times I normally booked it at all booked up.

Plus certain foods that have never been out of stock were out of stock, e.g. beans.

Will it last? Who knows?
Because low-effort JS developers are now everywhere. Just as JS should not be found in the server yet is now prevalent, JS is now finding its way into other places where it shouldn't be. You can't have an entire industry push this terrible ecosystem, then expect security companies to miss out on the fun. Locating and hiring C++ engineers at a scale is something that has become very, very difficult.
It's good to keep things in perspective. Our grandparents lived through worse than the upper limit of what is projected for this virus. The virus is a terrible thing, and we need to fight, but at least it's not Spanish Flu/The Great Depression/World War II/The Cultural Revolution/...
It supports Unicode, but it purposefully strips emoji.
In my experience, anyway, you're absolutely correct. The family photos from my childhood that I've enjoyed the most are almost all either blurry, out of a focus, or just too dark/light. It's not the quality of the photo that anyone cares about.
But... javascript never allowed computer files to be read? Or are you saying that also include NodeJS? What exactly can javascript do? Fetch data from the internet?
Find me this survival rates statistic. Nothing I can find corroborates your claim. Here is some good data that shows off the poor U.S. healthcare system:

https://www.healthsystemtracker.org/chart-collection/quality...
It seems like quality lowered over time for several reason. 1) free products became popular, reducing revenue, 2) increased automatic updates and better Windows safety models reduced need and 3) Windows defender became decent around Windows 10 so other offerings became redundant.
Ask HN: How does DDG or SP use crawlers?
How do sites like DuckDuckGo and StartPage use crawlers? my understanding is that DuckDuckGo uses Bing under the hood, and StartPage uses Google. Do they just have a scraper? or are they using the crawlers directly?
In Rust user-defined types are copyable only if they explicitly opt-in. Even trivial tiny structs can't be copied unless they have `derive(Copy, Clone)` in their declaration.

This is very helpful, because you know you can't copy something expensive by accident.

It comes handy in libraries. Zero-sized non-copyable objects with destructors can be used as lock guards/handles that control exclusive access to a shared resource.
<select multiple> is in desperate need of a redesign. I made multi.js (https://github.com/fabianlindfors/multi.js) to fix this but hopefully browsers will take the matter into their own hands.
> Nobody thinks that and I didn't say that. I was talking about that specific file

I hope nobody thinks that, but unless you can come to terms with the fact that you're wrong, and that this is a completely fair comparison, you're going to be the guy who writes okon2 at some point instead of using a better tool.

> the only amazing things that have been talked about is that it's fast (in some specific use cases of data queries)

Those weasel words are preventing you from seeing what should be obvious:

The k program is faster, shorter, obviously correct, and it took less time to write.

That's the amazing thing. Who doesn't want that?

> What more reasons are there to use it?

This is the wrong way to think about things, because there's an infinity of such reasons. Instead, invert it: You should always use the best tool you can. If you don't know k, it can never be used even if it would otherwise be the best tool.

I don't recommend people use k (except when it works), but I recommend people learn k because it'll make them better programmers.

> which downsides does it come with?

The biggest downside is that you don't know it, and the only person who can fix that is you
AGPL licensing denotes Free Software. It is too free for Google.
It was a bummer read but what did it say that was wrong? It's not like they weren't right about the direction things are going.
They did state two accounts and not multiple, but I see what you're saying. It should be known, however, that you can share without paying. I also encourage people to pay -- it's cheap and the service is fantastic.
In US, most office employees get a set number of sick days year, get paid in full and all that is need is a text or email. I think I get 12, it's never an issue so I may have accrued more by now.
There's an entire literature on very closely related concepts and issues -- many of the same issues arguably -- in the psychological test and measurement literature. There it's discussed tn terms of internal and external validity but interpretation is at its core and the scenario (and often models, at some level) are very similar. There you are trying to discriminate between psychologically relevant states, or outcomes, or variables, based on inputs in the form of responses to items (inputs). Focus is on articulating how to interpret test items an model structural features vis a vis inputs and outputs.

The literature on this is too hard to summarize in a post, but basically in turns into an empirical-scientific question, of making predictions about model features and testing these predictions scientifically.
The issue is when nobody really knows...the fence have just been there as long as anybody remember. Then people start to make up justification. Maybe the fence protect against trolls? Maybe the fence is important for the moral character of the population, and if it is removed people will think there are no limits to anything and will soon descend into murder and cannibalism. Better safe than sorry!
My puny human mind struggles to comprehend the scale of things like that when I'm surrounded by things that "only" measure, at most, in KW.
What can a unsandboxed javascript engine do? can you read files? read data from my computer's memory? Send my credit card info to the internet? Is this reading my chrome's profile data or running Node in any way? Access my camera/microphone/keyboard?

I fail to see how this is a problema and I've been programming with javascript for 8 years...
I imagine the products themselves must be tagged in some way, or you could trick the system with sleight of hand (I don't think it's visually tracking what goes into your basket). In which case, I imagine there would be an alarm if a product floats out of the door, accompanied by a mysterious stranger while another shopper supposedly in the store is missing.

Or rather than an alarm, they would probably just sort it out later and charge your card.
I think this based on the assumption that R0 is about 2.3. That means that on average, one infected person infects 2.3 other persons. Then you need to have about 60 percent of population to get immunity against the virus by first being infected with it. At that point you reach the threshold for herd immunity and the disease will soon stop spreading.

However, R0 is not a constant. For example, with good hygiene, avoiding human contacts etc it is possible to lower the rate of average number of persons each sick person infects. If we manage to do that, the threshold for herd immunity will be lower than 60 %.
Drive-Thru Coronavirus Testing to Open in Colorado
Page down. So I read that instead: https://blog.emojipedia.org/whats-new-in-unicode-13-0/

I'm personally hyped by the new characters for Creative Common, that could come in handy in data processing (at least in my field).

It's cool the Bopomofo was extended to support Cantonese (didn't know this existed tbh), because it means multilingual Madanrin-Hokkien-Cantonese can use a uniform spelling for word and character readings.

And finally Khitan small script, while ghetto, was an interesting offspring of the Chinese script that targeted a Mongolian language.

PS: I won't comment on the ridiculous emoji shitshow.
I live in Thailand. In Thailand there are 60 confirmed cases of people infected with the corona virus. I feel this number is much too low. The Netherlands went from 1 case to 250 in just 1 week. Thailand has stayed around 50 or so for the last few weeks. I'm thinking the Thai government tries to keep the official numbers low in order to try to prevent hurting the tourist industry too much. With that said, tourism is at an all time low right now, for this season in major part due to corona and businesses suffer a lot.

With that said though, I am not worried about my (and my families) health too much. When I look at the statistics [0], it seems mainly old people should worry.

I do live together with my girlfriend and daughter and my girlfriend is quite a bit worried. I don't fear for my daughter since from what I've read no children below 9 years old have died as of yet from the corona virus. Our daughter is 3 years old.

My and my girlfriend are in the 30-40 age group and in our group about 0.2% of the people have died from corona. I suspect a large amount of people who died in this age group might have had some other sickness as well, weakening their immune system.

I live in the Chiang Mai province in Thailand and to be honest I worry a lot more about the air pollution here. AQI over 200 for the last 2 days [1]. The statistics point out an above average amount of people in our area suffer from lung cancer, asthma and COPD [2].

I've convinced my girlfriend to travel south to the beach for a few weeks for some clean air. My girlfriend is somewhat worried about corona when visiting hotels, restaurants, etc… but also agrees that the air quality here right now is horrid, so she's willing to take the bet.

We wear masks in public and we bought some soap with alcohol to clean our hands whenever we go somewhere.

---

[0]: https://www.worldometers.info/coronavirus/

[1]: https://thethaiger.com/hot-news/air-pollution/chiang-mai-has...

[2]: https://www.nationthailand.com/news/30369008
As much as I am tired of the crappy code produced by some JS developers this time they are innocent. If you had read the article you would have known that the JS code executed here is JS found on the Interent, not any JS written by Avast. The bugs are in Avast's C++ code (or possibly C).
Interesting. I’d think the opposite: I bet the number of times the average user looks at their own message on someone else’s device is pretty low, while they might have a chance to notice the differences in emoji between app A and app B on their own device several times per day.
If I remember correctly there is a version of Windows 10 which has server restrictions on what you can do, including it fully blocking "untrusted" installs. In turn it's a bit cheaper. But I'm not sure what they named it, maybe that was related to it. Also it's not uncommon for Windows to be able use features your version didn't had through the command line.

Edit: sorry swipey keyboard messed up some words.
Post by the researchers (Facebook AI): https://ai.facebook.com/blog/using-neural-networks-to-solve-...

Arxiv paper: https://arxiv.org/pdf/1912.01412.pdf
Go have a look at https://www.project-owl.com/ when you have a moment. They’re tackling similar problems but from a different angle. Doesn’t mean there isn’t room for both!
Before sending anything to cloud, I test it on a few different machines I have sitting in my office.

Then I sandbox it on some free tier cloud for a sanity check.

If you ever do send it to production on cloud, be ready to pull the plug if it ever goes crazy and wants to give you a crazy bill.

In China, electricity and parts and even land can be cheap compared to USA right? So I think that explains the lack of cloud providers.

Good luck!
Sure, I just wanted to say that the criticized behavior of blaming the problem on the person that is trying to solve it is something that also happen to doctor. Simply to say that it is not a prerogative of programming or safety.
I do understand the general reasoning of google complying with the embargo on Iran. In this case though I really hope this app gets an exemption.

I'm in europe in a region with lots of connections to Milan, and extrapolating from what's going on there right now to what must be going on in Iran exceeds my imagination.
The estimates in the article are on the order of 10^61 erg (not sure why they used this unit), which is around 10^54 Joule, or 10^42 kilotons. Even the biggest nukes are below 10^5 kiloton, so this would be about 10^37 of them.

Not that you'd ever get that many because 10^61 is about 10^7 solar masses worth of energy.
This is true. Android is a good example of where the line between a Linux distribution and an outright OS blurs. I'm not convinced that this really affects my overall point all that much though.
Most third-party AV software today is useless adware/bloatware. On my Windows machine I rely on Windows Defender + MBAM, never had any malware infection.
> if you can have alarms go out that something is wrong, you have that then why do you need to see that on a graph?

Because the trend the lead to the alarm might be important and only visible as a graph, for example when did the queue started growing ?

Because you want to fine tune your alarms, or handle near-misses again those are best visible on a graph.

Or because you want to quickly see some high level behavior of the system, number of users per hour of the day, errors vs number of users etc.
Doubt it. Frequency related laws mean it is unlikely any company would want to give the ability to modify anything that emit radio and microwaves.
This looks promising.

Some form of Repeater/Server or similar feature would be great. A small webserver that the phone can use as a backbone would be really useful. I might even try to help with developing one.
I was wondering, the Nvidia Shield uses a Tegra X1 chip, which if I recall correctly was nice in that it uses the full open GL rather than ES.

I remember seeing their have a Distro called Linux for Tegra:

https://developer.nvidia.com/embedded/linux-tegra

Shouldn't this make it an easy device to run something like Postmarket OS? Of course it's non free drivers. But in terms of getting a device working, I'm not sure why it isn't used more.
What's New in Unicode 13.0
I expanded my company to 150 countries and you can too
> What can a unsandboxed javascript engine do?

It can do everything that the user could do, and the user in this case is SYSTEM. I understand SYSTEM can do everything.

It could install a keylogger, for instance.
Sorry, it's a bit weird not sharing a lexicon. I get the impression Q is a whole different genealogy of programmers.

In Python, although you can just use shelve to store data on disk, in practice this is considered a bad idea beyond very simple cases. Valuable data wants the guarantees that real databases provide, like ACID. shelve doesn't provide this, and IIUC nor does kdb+.

So if you're handling 50 billion events a day, live, and you need these to persist, you'd use SQL or something similar. That would then ultimately determine how you add and manipulate records.

If you don't care that much if you lose the data on a crash, that's when we're talking about temporary calculations. In Python, rather than having two tables like (eg.)

URLs:

url_id url count
1 google.com 300
2 python.org 400
3 example.net 200

Requests:

request_id data url_id
1 'spam' 2
2 'eggs' 2
...
900 'ham' 1

you would make a custom type, aka. ‘Url’, containing ‘url’ and ‘count’ as object fields, and then store your requests as a list containing references to those ’Url’s.

urls = {
"google.com": Url("google.com", 300),
"python.org": Url("python.org", 400),
"example.net": Url("example.net", 200),
}

requests = [
Request("spam", urls["python.org"]),
Request("eggs", urls["python.org"]),
...,
Request("ham", urls["google.com"]),
]
I find it a very strange coincidence that the recent law in France to update the tax incentives against CO2 emitters and towards EV placed a new, previously nonexistent limit precisely right below the base Tesla price, excluding everything above (and thus every Tesla car) from the incentive.

As it turns out, local EV cars such as the Renault Zoe are below the threshold, not the least because you buy the car but rent the battery, so the price appears much lower to the consumer, and the price of the battery is magically not factored in against the threshold.
upvote for how awesome the product is.
What’s wrong with anti-competitive behavior in big tech
I'm sure there will be JS libraries that can compile them in the browser - a minor inconvenience for those apps.
It seems like there are far more people working in the antivirus sector, writing all kinds of different software, so the quality of code has gone done. One example is AV companies writing things like browser plugins that hog memory, or make browsing unusable slow.

Another thing to think about is that tons of features that were never added before, are in the products now. Basically being pushed by management because more features = more sales, even if it ends up bloating the product. I remember a few years ago when we were acquired and had to switch AV vendors to McAfee, it made our oldest group of hardware basically unusable (and these were basically kiosk-type machines). The application we were using required IE so we couldn't replace them with Linux machines either.
You can ask the delivery person to leave it in front of your door and heat/microwave it.
Anyway, some risk is inherent if you are depending on someone else preparing/bringing your meal, there is only so much you can do, but remote still helps a little to reduce exposure imo.
I followed the tutorial (https://svelte.dev/blog/the-easiest-way-to-get-started). It starts a local server and automatically reloads whenever you save changes.
love the usability, freedom to choose any video conference tool and "upload poster from url/upload now/upload later" - excellent!! good idea and well done
I don't think we will ever really find out what is going on up top but your theory is sound in my opinion. The US China relationship is badly strained and the US is the one straining it in many cases, not sure what the underlying motives are but Coronavirus will add to that strain I believe.
Fraud in the Google Display Network
As a small investor, you don't want individual shares, let alone fractional ones. Stick to vanguard and their excellent etfs. Don't try to time markets, if they're down, trade tomorrow or next week.

Pretty much anything else is just gambling.
> If you had read the article you would have known that the JS code executed here is JS found on the Interent, not any JS written by Avast.

I think this makes it worse.
You are probably joking, but I am seriously annoyed there's no donkey emoji.
Looks cool. How much storage do Github Pages or Netlify support for free?
Someone [1] mentioned this hash d0e7e0e0287cd5a6ee36c74557ebf70f38235f90c8ce07c75d49721e379503aa [2] for Tavis to have a look at. Another AV company that ships a js interpreter?

1) https://mobile.twitter.com/buherator/status/1237115773409206...

2) https://www.virustotal.com/gui/file/d0e7e0e0287cd5a6ee36c745...
The other way to do this would be to compile a test harness using winelib, since winelib compiled applications call in to both native and Windows DLL code.

https://wiki.winehq.org/Winelib_User%27s_Guide

I've done this myself to exercise a COM DLL from Linux. I had to use Microsofts "OLE/COM Object Viewer" to extract the IDL from the DLL and then compile everything with MIDL and wine-g++, but it worked.
Hi, thanks that's good feedback. We also oddly had the same discussion last week and we're going to change it to the Apache license.

I believe this has been done or is now in progress to make it more aligned to the wider industry.
Lifting Crypto ban will boost startup innovation and financial inclusion
I keep looking at Pixelfed, and even as a relatively technical person, I have absolutely no idea how to get going with it.

Right now, go to pixelfed.org and there's a "Join" button in the top right corner, click on that and there's a message telling me "To join Pixelfed, you need to pick an instance.
You can find a list of instances on the sites below." - click on either of those and it's a completely baffling list of stuff with no obvious way to continue. At this point I always give up.
Routing traffic through a giant cdn like cloudfront + eSNI + encrypted DNS should finally put a stop to that.
That reminds of part of an XKCD What If - Which of the following would be brighter, in terms of the amount of energy delivered to your retina:

- A supernova, seen from as far away as the Sun is from the Earth, or

- The detonation of a hydrogen bomb pressed against your eyeball?

https://what-if.xkcd.com/73/
Windows has a new wormable vulnerability, with no patch
Steve Schoger design tips (2018)
Is there a live demo or a screenshot? (What is this exactly?)
The JavaScript interpreter runs with SYSTEM privileges. A bug allowing for code execution would inherit those and thus be able to do a number of malicious things.
Show HN: CIS Force – we match tech companies with reliable vetted freelancers
Hi HN!

We save time and money by intelligently matching tech companies with reliable pre-vetted freelancers. We have a few customers from US and Europe, and over 100 freelancers.

Please check out our Team Wizard - we are very keen to help you and also we really need your feedback!

https://platform.cisforce.com/team-wizard

Best Regards,
Dmitry and Team
Thanks so much! Are you a user?
either that or when there are 2^24 used codepoints.
Well I guess you can get by with plugsurfing or virta but they add a surcharge so you'll be paying for the convenience.

But you need to know which networks you can use them on too, not all the charging companies are on plugsurfing and not all are on virta etc.

I hope one day they all will just have a card terminal like gas stations or charge ID like tesla with the superchargers or mercedes with ionity.
One interesting book I have read is Prisoners of Geography, and it really made me think differently on geopolitics. Natural resources, trade routes and defensive barriers have a huge impact on a countries geopolitical strategy.

It made me go from “Why the hell are they doing that!?” to “reality is probably more complex”.
Was skimming at your Space Curve writeup [1] and your mention of discreet internal components caught my eye. Are you open to expanding a bit on this statement:

"Discrete topology internals largely obviate secondary indexing"

[1]: https://www.jandrewrogers.com/2015/10/08/spacecurve/
Swiss Covid-19 risk self-evaluation tool (EN/DE/IT/FR)
https://platform.cisforce.com/team-wizard