skysight-inc/HackerNews huggingface dataset:
> S/MIME might be a failure

Primarily because very few e-mail clients support it and no web client seems to.

> Correct me if I'm wrong, but AFAIU CMS is the basis for various European digital identity systems

Yes, they're in theory trying to legislate the same thing across EU what Estonia has done.
The backslash as path dates back at least as far as CP/M which didn't have directories and used a forward-slash instead of a minus for command flags.

I had a CP/M machine in the 70's, and I remember it quite differently.

My memory was that CP/M used normal slashes for directory separation, and the backslash was a Microsoft bodge so it could pretend it didn't have Seattle Computer Products copy CP/M 80 to make DOS.

I'm not at home, so I can't verify the slash situation on any of my CP/M emulators. It's also possible that I am not remembering correctly because I was also using Vaxen and PR1MEOS in those years.
Bezos!
Don't wanna sound like a crazy sales guy, but I prefer Kano Kroil as a penetrating oil. A few drops of the stuff on any rusted bolt and it's friggin amazing. http://www.kanolabs.com/

I wouldn't use it as a lubricant though past getting seized bolts freed up, but really it's 100% replaced WD-40 for me when working on rusted and old equipment.
Emailing hn@ycombinator.com is the reliable way to ping us.
Added fun fact: if you click the chart link for .COM, DNSSEC adoption appears to have gone down.
Being able to power any external device (like a hard drive) or to be able to cleanly exit from whatever you're working on if you happen to be present (with a monitor) are both pursuant to these goals.

The average PC or workstation isn't configured for a clean exit just because the UPS said it's time.

Bridging momentary outages is also useful where that's common, disregarding data loss.
I don't think pointing out business connections between individuals belonging to particular nation states is an example of "casual racism". It's no kind of racism at all.

But the rest of the information you provided is very interesting! That the "Chinese capital" of Italy has no cases is very interesting, in particular.
Visualization (one of my favorites):

https://en.wikipedia.org/wiki/Simpson%27s_paradox
I think nature's growth will be like 1% or less, certainly not the stock market growth people are used to. To me, it is obvious there is a tight coupling: energy does work instead of humans/animals, thus allowing more productivity. When you look at a construction site it's just human directed diesel-energy (with some chemical energy in the concrete).

Much of the developed world is transitioning to a service economy that relies less on the fossil fuels, but it still relies on the inputs that do (agriculture, electronics, offshore manufacturing). And we've set up the economy around fuel consumption: long commutes from suburbia, inefficient houses, processed and packaged foods, etc. And what about the travel industry: burning fossil fuels for no productivity (just realized it acts as a mop for the excess capital).

If we're lucky, we can use the fossil energy to bootstrap the renewable energy, then we can eat farmed foods, drive electric cars, and work on computers remotely. But there just won't be the energy to drive the economy the way cheap energy does.
I'd be furious if the VC firm I gave a large portion of my company to wanted to give their equity, weeks later, to another firm. Even if it was a firm I liked.
I still hear ads giving URLs with inexplicable backslashes in them.

Can confirm. Just yesterday on NPR.
> Maybe in 4-5 years, AMD will be the dominant player. But it's still too early to call them this.

Highly unlikely. This is AMD's prime time because Intel screwed up, and they've peaked at 15%. I predict Intel to gain the pace in a few years and dominate the market once again.
>We are, as much of the world, importers from China, but many enterprises here are also, somewhat, strong exporters to China

Italy also has a surprisingly large number of Chinese migrant workers, mainly in the fashion and leather goods sector. Skilled Chinese workers in Milan and Prato provide the kudos of the "Made in Italy" label at considerably lower cost.

https://www.economist.com/special-report/2018/05/17/long-ter...
Answer: it does not. Pretty skeevy, since they're clearly hoping people will confuse it with a local ABC broadcaster.

https://abc14news.com/about-us/
> The distinction between intentional vs. unintentional is well established in law

Sure, this matters for things like negligence standards. Why would it matter here?

> and most definitely does matter if people are calling for things to be censored

Um... again, why? People usually call for censorship based on the content of the speech.

> This has nothing to do with the "state of one's heart" (nice strawman there)

I think you've confused our positions. I'm the one arguing that whether you're spreading misinformation has nothing to do with the state of your heart. You're the one arguing that it does. The whole argument you're making here is "even though this is misinformation, I would rather call it something else, because I sympathize with the people spreading it".
Doing something well means you already imagined doing something well first.
Or, in other words, "imagining doing something well" is necessary, but not sufficient to actually do something well.
Banking on bottlecaps
Yikes, please stop this now. You've been breaking the site guidelines left and right in this thread and others (https://news.ycombinator.com/item?id=22531394). We ban people for that kind of thing, but when it looks like someone going on tilt (it happens), it's usually better to ask them to step away for a while and let the problem correct itself.

https://news.ycombinator.com/newsguidelines.html
I appreciate you taking the time to research and share that link, but the third paragraph in that article states, "But Twitter says the president’s tweets do not violate any of its rules...". And once more in the 8th, "But in this instance, Twitter has opted to leave Trump’s tweets alone, finding that they are allowed under its rules." This does not seem to be an example of President Trump violating Twitter policy.
> Also, Google’s $6000 payout seems extremely disappointing: Google should payout on the total impact of the bug that they measure (not just the one place he happened to find)

My understanding is that this is what Google's bug bounty normally does. If for example, this was trivially extentable to access to a production user, that would be the payout.
> Rice and a good rice cooker.

I like rice, but am concerned by the number of people who don't wash it (arsenic) [1]. Then you have the issue of reheating/leaving to cool [2].

With the amount of idiocy going around it seems like a massive risk. Pasta is very difficult to mess up, worst case you're just going to get some crunchy or over-boiled pasta.

[1] https://www.recapo.com/the-doctors/the-doctors-diet/the-doct...

[2] https://www.nhs.uk/common-health-questions/food-and-diet/can...
And this is like that in an important way, for now.

Chrome and Safari both have browsers which implement a check such that you need to present enough "qualified" SCTs or the certificate is treated as invalid.

The easiest way to pass that check (for certificates you're going to sell or give to webmasters with no clue) is to log a pre-certificate with Google, and with at least one (preferably two) other logs that Apple and Google agree are trustworthy - then bake the SCTs you get back from those logs into the X.509 certificate you're issuing.

But these are not Trust Store policy requirements. If you in fact choose to issue (for a number of reasons some CAs do) without logging that's still permitted, the certificates just won't be trusted in Chrome or Safari. You obviously won't get far selling certificates that don't work out of the box in Chrome or Safari to the average punter, but not every customer is the average punter.

Apple's declared intention is that Safari will not trust long-lived certificates. But as far as I've seen it is not specified that they would consider a CA which chooses to issue such certificates to violate Apple trust store policy and pursue any sanction or demand revocation. The certificate just doesn't work in Safari.

Now, today Mozilla's Firefox is in a different situation from Safari and Chrome as I mentioned elsewhere. Firefox doesn't do a lot of technical enforcement. Mozilla works hard (and in public where we can all see) on policy decisions, but most of them are not enforced in its flagship browser product. Mozilla champions CT logging for example, but a brand new certificate presented with no SCTs works fine in Firefox even though it'd be rejected by Safari and Chrome. Today Firefox doesn't require 825 day lifetime limits, even though those are the limits set in policy, and so following Apple's suggestion wouldn't actually be easy for them, there isn't a line of code (as there is in Chrome for example) that multiples 825 * 86400 = maximum lifetime in seconds, which can be adjusted to say 398 or some other number of days instead of 825.
No, that's a misconception. They sent letter(s) to at least one person who had been purchasing products commonly purchased by [knowingly] pregnant women. In at least one case, family members "discovered" the pregnancy this way.
It would be nice if the trope of the "mad scientist" would die.
I would expect to see community oriented tools or products coming out of twitter then.
Isn't it when Windows and OSX would be ooen source we'd only be able to find the real number of vuln.
Can someone explain to me why Netflix puts their posts behind a paywall?
Who else is going to outbid Google for this serverside URL parsing bug?

The black hats. $6,000 from Google, or $600,000 from some shadowy company in UTC+02. Google makes these choices too easy.
Bury it?
I have used it on motorcycle chains before, it's better than running it dry on a dirtbike but as you said, it won't stick to it. View it as a chain cleaner (like kerosene is used to do). The silicone chain lube is the way to go.
My 4k Monoprice monitor is 12V. So it's not as impossible as you think.
Want to bet?
Batch Gradient Descent from Scratch in Python [video]
Definitely gives it more legitimacy!

Also, not sure if genuine mistake or sneaky "clickbait": The video has its `video_poster` image that's eerily similar to a YouTube screenshot, though the video itself is hosted on Amazon's servers, not YouTube.
Could you please stop posting in the flamewar style to HN? It's not what this site is for.

https://news.ycombinator.com/newsguidelines.html
Bookstores hit hard by coronavirus now deliver books using a food delivery app
I think the government are damned whatever they do. A massive fiscal stimulus admits there's a massive problem (and the government has been trying to project a quiet confidence that this is something under control), so markets will tank. A small response could be seen as inadequate.
They could waive information rights.
This. So far Amazon Go has just been a bodega disguised as a gimmick.
Did so about a year ago based on SMAs and momentum. Only wish there was a cash option to put have them move everything to for the time being, but only had bonds as an option.

Best thing is to watch out for the SMA support levels. Just got through a major death cross and looks to be heading further down
Hahahaha Spanish Inquisition likes this
> I think there are millions of people who wouldn't lose a wink of sleep over assassinating someone in cold blood, but wouldn't be able to live with themselves if forced to acquire and plant images and videos of children being raped so that a political prisoner could be falsely convicted.

Why?

I think if there are millions of people who can justify assassination for their country/ideology, they'll be able to justify planting child pornography too. They'll just look away from the pictures themselves, just like they've looked away from every single other atrocity committed in their name. It's not like they have to pull a trigger: they have to print out some paper, stick it an envelope without looking while repeating to themselves "I wasn't the one who took the pictures" (if they even get that far in their thought process), and go about their business framing someone. It's even easier if they work in tech because they probably don't even have to open the file. Just grab ten thousand binary blobs from the database and thats it. One will be enough! Then they'll go home to their children, look them in the eyes, and forget all about it.

Perhaps I'm just too cynical.
He seems to just treat everything as an us-vs-them argument. I get the impression he's facing an issue where there is no "them" and trying to figure out how to win this argument.

It should be almost irrelevant to the discussion, but by now he has enough appointees in various departments for the problem to grow roots.
Covid-19, your community, and you – a data science perspective
I do greatly prefer the smell of Kroil or CLP Break Free to WD40, but WD40 isn't bad.
10% is extremely high. Yeah, that shows that they are severely test restricted and the actual infection rate is significantly higher.

That tells me that case count will grow at a rate of test rate * 10% for days to come even if the actual spread has peaked.

IMO, and I’m not sure why more people aren’t saying this, the hospitalization rate in the general population under typical exposure rates is probably closer to 1% than it is 10%, and so just multiply the severe or critical cases by 100x to see the general population infection rate.

And if severe case count is not growing, than neither was the infection rate ~7 days ago.
Béla Kiss
Is that... a loading screen for a text-based news website? Christ.
Source? Literally everything I've returned on Amazon over the last couple years has had at least one free return option (usually via UPS / Amazon Hub dropoff).
Coronavirus should give us hope that we are able to tackle the climate crisis
Is open-coded that much of a benefit over wrapped? With something like std::string_view you can take any substring without new allocations, not just suffixes.
URL parsing is just a complete botch. I’m pretty surprised this sort of thing is so rare.
Give this a read. Supposedly verified by on the ground outside sources

https://twitter.com/AbraarKaran/status/1236680328875474944
How else would you distinguish e.g. 18 in the morning or 18 in the evening if you can't say 18am and 18pm.
Actually when Subaru first built their EyeSight system, it was almost Tesla Autopilot, but Japanese authority feared it’ll lead to Autopilot type crashes.

The authority was right in hindsight, but then couldn’t conceive the idea of mandatory driver monitoring system, and instead ordered Subaru to ensure driver is alert by making intervention too little and late.

So most LKA/LKAS should do just as well as Tesla’s, only the firmwares are built deliberately with different parameters. Technology wise it should be the same.
You would be right; Italy's private savings are in the ballpark of $10T+, which means a "patrimoniale" (tax on wealth) would be the last resort to avoid bankrupcy.
...and I wait, and wait for Stripe "clone" for adult industries that is more user-friendly than competitors in this field. Yes, I know that everyone is afraid sex, and VCs are terrified of legal struggles. But there's such a huge niche to fill in for some bright and brave minds. :)
How many times could you charge a Tesla with a nuclear reactor the size of a 40' shipping container before you needed more fuel?
You'd need to ask Microsoft about that, theirs is (as far as I know) the only Trust Store which demands they get unilateral override for revocation decisions.

That is, if Mozilla, or Apple, or Google reach out to Let's Encrypt and say "killtrump.example is not acceptable, revoke their certificate" Let's Encrypt says "No" and nothing happens. But if Microsoft does so, Let's Encrypt can say "Please reconsider this seems like a bad idea" and then Microsoft can say "We've thought about it, revoke" and the choice is only whether Let's Encrypt wants to remain trusted in Microsoft's products.

Nobody else has a rule like that, and it isn't a new rule, it's a published part of Microsoft's policy. Microsoft says they use it only to protect Microsoft's customers from phishing and similar attacks. Perhaps that's even true.
“Encourage” your children to use the net more 4 learning with Pi-hole 5.0beta
Beautiful! We'll begin work on this as soon as we finish planetzero's idea, the isBool API.
Wouldn't this be considered clientside?
If we can miniaturize nuclear reactors to the point that they can be drop-in replacements for batteries, then we can potentially run our electronics, appliances, machinery, vehicles standalone for decades without refuel/recharge.
Ask HN: What will you read while quarantined by Covid-19?
I will be reading Literature's Classics or at least what I can get of them.

What about you?
Hygiene Paper Used by White House Coronavirus Task Force
https://github.com/1stOctet/YouWillUnderstandWhenYouAreOlder
The hospitalisation part really is key here. At this point stopping it really isn't on the cards. We need to slow it enough that hospitals can keep up.

7M people catching it next month, vs 7M people catching it over the span of a year, are two very different 7M's. The rate is far more problematic than the actual number.
Doesn't actually mean much. A submission that eventually gets 600 upvotes can be posted a dozen times only receiving 1 upvote. It's mostly a lottery.

https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...
The lack of a universal US Health Care system with strong central control and a financial safety net for its citizens leaves the US uniquely exposed.

Many people cannot afford to access the medical system and the lack of a federal sick pay scheme means many workers will not take time off even if they are unwell.
>First, this already happened to some extent.

Fujitsu have been building PCs for a number of years with proprietary 12v-only PSUs, with SATA power being provided from an auxiliary connector on the motherboard.
I have been thinking about this for a week while monitoring travel alerts. I have two business trips scheduled—-one in May and the other in June. My employer just canceled my May trip today and I feel that the same is going to happen for June. While I can always reschedule, I fear that my colleagues and friends in Italy, whose families depend on visitors during the months of May and June, will not recover from this.
Must-have tools to grow your small business in 2020
Pre-Emptive Low Cost Hygiene to Be Implemented Before Covid-19 Transmission
There is good evidence the initial cases in Italy were tourism related.

As for praising the Chinese response - I think the reasons will be very clear soon to most people - without a very decisive and heavy handed response the health care systems in most developed countries will face very severe consequences or collapse.

We are at the denial stage still with people finding excuses why Italy is different, etc, etc

The US is 8 days behind Italy is 8 days behind Korea.
"Now, everyone is armed with the same millions of dollars in funding; they’re all targeting the same users, and they’re all driving each other’s marketing costs up. (Marketing software company AdStage analyzed its Facebook impressions data and found that the median cost-per-click for Facebook news feed ads has risen from $0.43 during the second quarter of 2018, to $0.64 during the second quarter of 2019.)"

Seems pretty expensive given very few clicks would result in any sale
Ethical open source licensing – Persona non Grata Preamble
A reason to buy a little extra would be simply to avoid going into populated areas (i.e. shopping). I think shopping is a very likely place to contract a virus given the number of times people handle the same items without washing them (think trollies, baskets, food on shelves, checkout machines, etc).

That said, toilet paper in general has been driven by media hype 100%. I think I remember some early stories where idiots purchased tonnes of it and emptied the shelves. I think the reason for toilet paper being purchased so much is because of it being randomly reported on in the beginning and that it's so cheap. A person on a modest income could easily purchase an entire shelf of toilet roll, whereas you're unlikely to see such things with higher cost items that have to be consumed within a certain time.
Yes, he recently advertised that they'll even hire ML engineers without a high school degree if they are good.

https://www.google.com/amp/s/www.cnet.com/google-amp/news/el...
Even if the flight isn't canceled, that's going to be a pretty unpleasant vacation. Make contingency plans and expect that there will be a change fee waiver for you to rebook your trip to later.
If I say that one way to improve early hand-eye coordination is to give all preschoolers loaded guns, and you tell me that the implications of giving all preschoolers loaded guns is that they will kill each other, that's not a strawman. You're just pointing out that my solution has problems.

I can't come back at you and say, "but I wasn't talking about mortality rates, I was just talking about hand-eye coordination. Your objection is irrelevant to my point."

Similarly, when Amazon makes a statement that using credit cards linked to email is a good way to get around making an Amazon account, and JohnFen correctly asserts that this does nothing for privacy whatsoever, and that Amazon will still make ghost tracking accounts for every shopper, that's not a strawman. They're just pointing out that Amazon's solution doesn't solve the problem.

The reason we don't want accounts isn't because making them is too hard or because we don't own smartphones -- it's explicitly because of the tracking. It's not a convenience problem; using a credit card and a smartphone are both equally convenient for most people.

Amazon is saying, "tell the people who are worried about making accounts that they don't need to, so it's fine." JohnFen is replying, "that doesn't address the reason people like me are worried about making an account."
But does it just mean that the best current strategy to buy is do either time-based or price-based spread out buying?

I.e. invest a bit every month or invest a bit when market drops another 15%.
This sounds completely dystopian from a privacy standpoint.
I’d argue that anything but bare metal is not a good compromise, but I’m not balancing the books of a large company.

People care about docker escapes so they’re getting more difficult, at least.

Edit: Plus, I’d rather $app_i_dont_fully_trust be sitting in a container rather than on my host. And no, not running apps i don’t fully trust is not something which is at all viable for me.
Most national flagship carriers will get bailed out, you can bet on that.
They aren't that fantastic either. They had issues today as well, I couldn't exit out of spreads, so I had to liquidate everything and that was failing too. It was a hot mess.
Edit: I didn't actually want to liquidate all my holdings but it was better than staying in and risking everything else.
Transmission fluid plus acetone is excellent for seized bolts. I wonder why.
Your whitelist loses in this situation? It accepts local domains (e.g. ‘a’) but not fully qualified domain names (e.g. ‘myhost.example.com.’ nor IP addresses. Generally when checking origin, you also wish to check port (e.g. :8000) which the Google code works for; and @username:password may need thought for some mostly obsolete purposes. That said, the whitelist does avoid a bunch of other problems (control chars, Unicode, high bit, etc).
Thanks for tracking that down. In any other administration I would have considered a White House spokesperson to be as good as a primary source but this administration's messaging does not hold to the same traditions of truth as previous administrations (of either party).