skysight-inc/HackerNews huggingface dataset:
This appears to be the open-source PHP project (an alternative to Yubikey's cloud service) that validates OTPs. Most people who use Yubikeys don't use the OTP feature at all; I don't know how many of them use the PHP yubikey-val service.

Not that it's not important, but I assume this story's placement on the front page is a consequence of people thinking this impacts Yubikeys themselves through U2F (the way most people use keys) or SSH/PGP (the way most of the rest of people do).

Here's the commit that fixes the bug:

https://github.com/Yubico/yubikey-val/pull/59/commits/d0e4db...

It's... not great; it looks like they were accepting SQL metacharacters in hand-rolled non-parameterized SQL queries.

If you were running this project: (1) you should fix right away and presumably disregard the summary at the top of the advisory that this vulnerability would just allow DoS, and (2) once you do, tell the rest of us why you were running this thing; I'm sure we'd be interested in hearing your use case.
That stinks, I actually had the same idea on my project list, but as proxy server not a browser extension. Good job though.
You should probably label your columns, but that seems to be wc output.

The Scheme and Haskell versions are actually shorter than you imply since they include the pairings in the count (when the pairings in the code are examples). Additionally, the k version is one line longer than you suggest. The definition of a is on its own line is used in the solution. Still only 2 lines, but if you want to persuade you should probably have correct numbers.
If you buy a bespoke suit, then change the design because you've gained weight, then it'll cost you more...
We've already learned in the last couple years that there are no physical characteristics whatsoever that are associated with gender. And no mental characteristics either.
Also available as a free textbook: Fuzzy Control by Passino & Yurkovich - http://www2.ece.ohio-state.edu/~passino/FCbook.pdf

I recently read Fuzzy Logic with Engineering Applications by Ross. Helpful and interesting, though he does tend to occasionally spend pages performing every step of a calculation.
One of my favourite performances of his was in another Jan Troell film, Hamsun (1996) [1], which was masterfully co-written by the great novelist Per Olov Enquist.

In it, von Sydow plays the Norwegian author Knut Hamsun, who, after WW2, was accused of having collaborated with the Nazis. His portrayal of Hamsun is one of the most nuanced, moving performances I've seen on the screen. It's a superb film. He didn't play many main characters in his life, certainly not in his American movies, but he should have.

(An interesting fact that will elude most non-Nordic viewers is that the cast is made up of a blend Norwegian, Swedish and Danish actors, and they all speak their own native language; von Sydow performs the role in Swedish, for example, even though Hamsun was Norwegian. The film is so well made that it doesn't make any difference at all.)

This and Jan Troell's other films used to be on Criterion's streaming service, but they're not there anymore. Hamsun is only available through Kanopy, I believe, which requires a library card from one of their supported libraries. The Emigrants can be rented on Amazon Prime Video and Vudu, and the The New Land is on iTunes/Apple TV. But it's often difficult to find these masterpieces.

[1] https://en.wikipedia.org/wiki/Hamsun_(film)
XSELL Technologies
| Sr. Software Engineer (ROR) | Onsite | Full-time | Visa

Our cloud-based machine learning engine uses predictive analytics and
natural language processing to equip sales professionals with the best real-time responses, driving
improved conversion rates and customer experiences.

Tech Stack:
Backend- ROR, Sidekiq, Python and Flask
Frontend- VueJS, jQuery
Infrastructure- AWS, Linux
Deployment- Capistrano, Anisible

5+ yrs of software development
2+ yrs of ROR

Please apply on website: https://xselltechnologies.com/careers/
Robinhood operate on razor-thin margins and if you just look at where three-month implied vols were trading in early Jan, we are in a 7-sigma event. To be fair to Robinhood, it is probably hard to anticipate and prepare for such an event when you're not charging commissions. They are not the only brokerage that has had problems in the past seven days. And they lose money when their customers can't place orders.

"You should assume you can reasonably control your assets at any given time." Sometimes you can't reasonably control your assets, because you can't control them at all. So you shouldn't assume that you can reasonably control them in those times.

I hope it is clear that I am not trying to be argumentative; I actually think it's a complete let-down that Robinhood has left so many people frustrated as their wealth whip-saws around in the market. I'm just saying that tail scenarios don't usually fit into our predictive model of what's "reasonable," even when the solutions seem crystal clear in retrospect.
This is good to know. One of the things that holds me back is choice paralysis on picking an instance.
CDC may ground flights if airlines fail to collect data on Covid-19-prone flyers
Sorry, 7000 US prices. 48 G ram and 2 Tb storage, rest default.

Not everyone needs more than 8C/16T or uses GPU compute. Which was my point. The price may be inflated (not sure by how much, a similar Dell is what, 5K instead of 7?), but there are configurations that cost less than a good car.
The spread of the virus to humans is the direct result of Wuhan ‘wet markets’ and the terrible policies of China’s communist regime.

To suggest otherwise is at best objectively wrong and at worst conscious whitewashing of the truth.
I'm not sure many people use K to write crud applications in the way you're thinking.

Kdb+ is fully integrated K and a K-like query language running on an SSD array database built for array languages and stock/banking usage. Can you write a web app in it? Sure, but I doubt very many do and those that do probably just use K as the numerical engine and JS for everything else.
I searched out the article: "Reading Chess", 1990, HS Baird and Ken Thompson. (Yes, that Ken Thompson).

http://doc.cat-v.org/bell_labs/reading_chess/reading_chess.p...

It doesn't actually quantify the human proofreading time. I might have recalled incorrectly; I heard about this in the late 1990's as a war story from another OCR researcher.
On one hand, now is a fun/important time to be messing with your side gamble. It'd be like if a betting site went down the day of the Super Bowl. If you're just using RH to gamble and day-trade, periods of high volatility are some of the most fun times to be actively trading!

On the other hand, I don't really care. I'll be fine. Most of the folks I know who use RH are just joking about it being down. It's annoying, but no one's broken up about it. A lot of the folks casting their anger at RH seem to be folks who already dislike it and probably don't use it?

Professional or large-scaled investors with large sums invested probably aren't using RH for a lot of reasons even before you get to the downtime issues.
But this process requires even more traction than simply moving, which the vehicle had problems to begin with.

My guess in answering the initial question would be bad engineering.
How CSS Grid Works
It's forked from LineageOS.
The best compost design for worms is called "horizontal migration". It provides a gradient of temperature, moisture, decomposition stages, and allows for eggs to develop undisturbed.
The history and future of Daylight Saving Time
Since money can be exchanged for goods and services, having more money directly translates into having more options to pursue your interests. If I had a bit more money, I could get an even better device, or if I was a billionaire I could pursue interests like making rockets, or any other fancy.

So, my stance is that money directly translates into increased opportunity in a capitalist society. Meanwhile, the relationship between capital owners and works is asymmetric where the capital owner keeps majority of the profit from the value that the workers create.
Anecdotally, it would make sense, right? Back when I used to smoke, whenever there was the flu season I went full blown bronchitis most of the time, while the rest of my family had only mild symptoms. Smoking is already known to aggravate any flu symptoms to the point of escalating to a more serious condition.
Hi - Startpage person here. Sorry to hear you stopped using Startpage. We hope you'll give us another chance. Here's more info on the investment by System1/Privacy One: https://support.startpage.com/index.php?/Knowledgebase/Artic...

Just FYI: We don’t collect or share your personal information. The Startpage founders continue to run the company as before and they have control over the privacy components of Startpage. With this investment, we hope to further expand our privacy features & reach new users. You may have already seen some of these new initiatives taking place.
1) Unfiltered News Tab launched in November: https://www.startpage.com/blog/product-updates/launching-unp...
2) Privacy Please! Newsletter launched in last month: https://www.startpage.com/blog/company-updates/welcome-priva...
3) We're pushing out more info via our blog & social than before, giving greater insight into how we make money (https://www.startpage.com/blog/privacy-awareness/advertising...) and how we keep your search private (https://www.startpage.com/blog/privacy-awareness/how-does-st...)
Documenting the largest population migration in canadian history
Are You an Anti-Influencer?
I don't even know why facebook could possibly be considered useful for news, considering the high density of plain idiots who post. Twitter is quite better , because you can unfollow idiots; they aren't forced upon you by social convention by being real life friends. But i d like to extoll the virtues of Reddit. Communities like r/china_flu or r/covid19 are moderated, contain a reasonable amount of rumors and early information that a moderately smart person can benefit from, and the density of information is quite high.

Makes one wonder why those facebooks and instagrams get all the advertising money ...
>A: We don't know yet

That's a gross oversimplification of the article. They have identified proteins and associated host-cell enzymes and can postulate why this combination would result in greater spread (and additionally why other organs are affected).
The truth value being 0.8 can be mapped to one or more fuzzy sets. That's what you're typically doing. Saying "I don't know" is still possible, because you can define a fuzzy set representing "I don't know". But now you can say how strongly you don't know.

An overlapping alternative is Dempster-Shafer evidence theory, which has "belief functions" and rules on how to combine them.
Thanks, that video is way more informative that the wikipedia article.
In terms of ships and other equipment, having a commercial manufacturer step into the military space would be like asking Ford or GMC to make Bradley Fighting Vehicles; they don't have the know-how for combat ready manufacturing. The systems in any combat vehicle are an order of magnitude more complex than commercial offerings in terms of design, verification, and manufacturing.

Strangely enough, seventy years ago commercial manufacturers ...GM, Ford, Chrysler, Food Machinery Corp(!), General Mills(!!), Western Electric etc. had the know-how for combat-ready manufacturing...what changed?
Stanford University will move classes online due to coronavirus
There doesn't seem to be statistics about how an enthicity affects the virus spread and severity.

From reported cases it looks like certain communities are more endangered than others.
Forest. Trees.
1) They were lying about what documents they did or didn’t have so Wells (and others, but largely Wells) were foreclosing on the wrong house—like borrowers who previously had a Wells loan but paid it off—or on people who were not past due. That’s unjust.

2) Play by the rules. If the rules say you have to have a documented chain of title and transfers of ownership of deeds of trust, do it. You and I would be laughed out of court at best, arrested and charged with fraud at worst, for doing what these people did. But they, because they did it at the behest of a large bank and “who could really know any better?”, got almost completely away with document fraud. Even if someone didn’t pay, the bank had no right to foreclose if Wells couldn’t prove it owned or had the right to enforce the loans. Everybody playing by the same rules and being rewarded or punished under them is just.
Calling an engineer with 5 years experience "senior" isn't nearly as ridiculous as all of these kids calling themselves "CTO", "CEO", etc, of their 1-person unfunded webapp.
The font is really thin, even when I zoom it's difficult to read. A thicker sans font would be easier to read. The one you're using looks nice visually, it's just hard to see.
They were foreclosing people who were paying. Thus the name robosign - signing foreclosure without proper review.
While true, the Wells Fargo company that Wells and Fargo founded was taken over in 1998 by Norwest, which ended up rebranding itself as Wells Fargo.
It's worth noting that finding that delicate balance between suppressing false information and preserving freedom of speech (plus privacy) still requires a lot of human attention. At the same time, many thousands of workers at Facebook, Twitter, and just about every other major service are adjusting to working from home (in Facebook's case having to overcome what's often a severe addiction to in-person interaction). Plus a good many know somebody who's affected and might not be at 100% effectiveness due to anxiety. So response might be a bit attenuated, and even before that it was always easy for NYT reporters to cherry-pick examples from the company they consider a threat to their own livelihoods. Should these companies do better? Of course. Is it realistic to expect that they'll do a lot better than more traditional sources, including NYT itself? Of course not.
Seismic imaging tech could deliver detailed images of the brain
Feels too complicated to me.

Back in the day when ICQ and the first instant messengers showed up, there used to be a "find a friend" feature. You just specified what you were interested in chatting about and it would return a list of people who had said the same thing. That was all it took to meet interesting folk and make meaningful connections.

Needs to be simple for civilians I guess is what am saying.
You're the only one talking about business logic. By definition business logic is not the same as fundamental algorithms or mathematics. Inverting a matrix doesn't change.

A business wants to be able to change its logic to evolve how they do things. You keep trying to conflate these things but they are polar opposites.
You can agree, but it doesn't mean you should have changed anything you did. The only thing I would add is the meta analysis you have included here. To write your post in a language without those features would have either made it into OOsagne or tripled the lines of code.

The metaidea is to stay at a richer abstraction level for longer, and then drop down in the last moment for execution? One doesn't always have a chance to do this, being able to detect when to apply the technique would be a good lesson.

Rather than reworking the post to meet the imperative programmers in their safe space, it could entice them into your crystal palace.
> Reality is the regulations on the financial system are a feature.

As with anything, the answer is sometimes.

You want those rules for your retirement account, because if someone can steal a six figure sum from you instantly with no takebacks, that is bad.

But the overhead of that system is not always required, and it's the major reason that we don't have e.g. micropayments. The overhead of allowing transactions to be reversed eats the entire transaction amount for very small transactions.

So it would be good to have a system where you could, for example, transfer $50 into it from your bank account, wait the month or so until the transaction can no longer be reversed, and then transfer it from there a few pennies at a time with insignificant transaction costs because the small transactions are instantaneous, anonymous and can't be reversed. Which isn't nearly as problematic because even if you get scammed, your loss is limited to the $50 you put in. Instead of getting wiped out, you pay a reasonable cost for a personal lesson on security and trust.

And there is no reason we couldn't have both. Then you keep the bulk of your wealth in the inefficient safe system and some petty cash in the one with lower transaction costs and get the best of both worlds. But the existing rules don't allow that, which is bad.
MaidSafe Releases Baby Fleming: Version 1 of Standalone Network
The name (and editor extensions) are taken by another 'K framework': http://www.kframework.org/index.php/Main_Page
Automatic gearboxes, ABS, cruise control, some plant controls. Fuzziness saw strongest uptake in Japan, so any control system developed there has a decent chance of having a fuzzy system at its core.
Add is a piece of data, not a function. The equivalent in C would be something like:

enum function { add, ... };

// then inside your code
switch(myfunction) {
case add:
return a + b;
...

Defunctionalisation is about removing higher-order functions, not about naming anonymous functions.

It's not a new trend, the first citation on wikipedia is to a paper in 1972.
The kilowatt measures precisely the same thing as horsepower. 1HP is approx 3/4 kW.
Intro to Hyperledger from Ethereum Dev Perspective
That's amusing, except that the first failure was during a market rally...
There will be a lot of pressure on universities to stream lectures, at the very least.
Duplicate: https://news.ycombinator.com/item?id=22525494

On front-page, with more comments
AFAIK the closest they got to working vaccines for SARS and MERS cause lung damage from autoimmune response in each tested animal model.

The issue with these viruses is that they have a property known as Antibody Dependent Enhancement (ADE). Where normally neutralizing antibodies instead facilitate entry into your cells.
Do you have an HD monitor? If so the game is in HD. Many tiny games and demos like this are rendered to a smaller canvas and will either not stretch to fill your monitor or are rendered at a lower then HD resolution.
All brokers were able to do it, they just didn't because commissions were easy profit and there was no competition.

$0 commissions aren't a big deal either. If you just buy and hold, it makes no difference. If you trade actively then a real broker with better tech and order management is worth way more than the fees.
Starlings are amazing...

They can be taught to speak words...
https://www.youtube.com/watch?v=yhBaVInb3jI

and check out Brian D Collier's art project Teach the Starlings
http://teachstarlings.societyrne.net/html/intro.htm

Also, murmurations behave like magnets...
"To achieve their extraordinary coordination, starling flocks in flight behave mathematically like metals becoming magnetized, researchers say."
https://www.wired.com/2012/03/starling-flock-dynamics/
Somehow people in the tech bubble like to believe that any "theory," "law," or "effect" that has a name on it is true. Gell-Mann Amnesia effect is one of the ones that simply doesn't hold up.

Why? Because it makes the false assumption that the person who wrote a flawed story also wrote every other story in the newspaper, which is both untrue and impossible. It presumes that because someone underqualified was interviewed in one article that every person interviewed in the rest of the paper was also underqualified. Again, untrue.

Worse, it doesn't understand that the editorial section is not the international section is not the comics section is not the classified ads.

It's perfectly reasonable to start each new story you read in a newspaper with a bit of amnesia. It was written by a different person in a different place in a different time. Just like if I buy a crappy video game in Target, that doesn't mean that every single video game in Target is crap.
You're assuming your conclusion there, buddy.

The point of the robosigning scandal was that Wells Fargo (and a bunch of other banks) were often swearing in a court of law that a) Fargo owned the mortgage and b) the homeowner was in default on the mortgage when one or both of these things was not, in fact, true.

It continues today:

https://theintercept.com/2016/05/18/foreclosure-fraud-is-sup...
So are you saying his claim is false? I really don't care if his claim is insulting or not. Just if it is true.
Theres a huge influx of virus misinformation in China itself, not just Taiwan, worth noting. See: https://www.lrb.co.uk/the-paper/v42/n05/wang-xiuying/the-wor...
"But that $3 billion represents only a small part of the bank’s takings from just this one scam—customer money to which, by its own admission, it “was not entitled.”"

This is totally incorrect. The best estimate of how much money was made from the fake accounts scandal is... about $2m gross. That's for a pretty obvious reason which is that it is very hard to secretly charge people money and very easy to secretly open an account for them which then goes unused.

Essentially, WF did not really profit from this, it was the employees and officers who were fleecing the company and fraudulently opening accounts to do so.

Branch employees were incentivised to sell products like accounts and cards to customers on the theory that WF profited from such sales. Compensation for the employees was set based on an assumed / historical profit per cross-sold product. Senior management had incentive packages that were also based on that assumed link. But of course that was calibrated based on real accounts. Shadow accounts that are setup but not used by the customer (because they don't know they exist) do not and cannot produce profit for the bank. What the bank would have seen over time was number of products sold going up but profit per product going down. Since the former is a leading and the latter a lagging indicator, it can be a long time before that becomes apparent.

From the point of view of WF, this was the dumbest possible fraud because it didn't make them money. I bet that $2m in account opening fees actually comes from the less experienced crooked branch staff because it seems like a rookie mistake that would lead to you getting caught.

Of course there is no such person as "Wells Fargo", and from the point of view of the branch and management employees whose compensation depended on these cross-sales numbers, the scam worked just fine until they were caught.
No, that's not the point at all. We are not replacing an anonymous lambda with a named function call; rather, we are replacing an anonymous lambda with a specific (finite, inspectable, small) piece of data. Then, later on, we decide what to do with that small piece of data: often, we replace it with a genuine function call, but sometimes (e.g. in the "testability" section) we might just decide to inspect it instead.
I probably need to look into supporting this in my federated social network thing. It does work with Mastodon and Pleroma right now, but it certainly could do better.
Golfing is not seen so negatively for Perl. "Embrace the language" they say.
Finnish Government Agency Warns Global Oil Industry Is on the Brink of Meltdown
I'm not sure I trust the "it's SQL injection but you can only use it to stuff bad records into the database" summary here. SQL is usually an easy thing to pivot from.
Up-to-date overview of JavaScript and TypeScript tooling
An unfixable flaw in Intel chips could create ‘total chaos’
5 GHz band wifi? Or 5G wireless?