skysight-inc/HackerNews huggingface dataset:
There’s some comedy in that URL standard:

Calculating file origin: "Unfortunate as it is, this is left as an exercise to the reader.”

3.7. Host equivalence: “To determine whether a host A equals B, return true if A is B, and false otherwise.”

“The application/x-www-form-urlencoded format is in many ways an aberrant monstrosity”
This is a podcast interview (2015) with Dr Emily Mitchell who did the research referenced in that article.

http://www.palaeocast.com/episode-50-rangeomorph-reproductio...
Thanks for the link, I was not familiar. I'm not sure if any current commercial systems use these methods.
I know the defense industry uses a lot of advanced techniques because they're their own regulators.
This idea is what created "standups" in scrum.
Not if your strategy is to short the contracts instead of buying it.
Senior Software Engineer

* ~2 hours of 1-1s with mentors/mentees/manager (manager is weekly, others are biweekly)

* 1 hour team operations meeting

* 2 hour company-wide operations meeting that I don't have to buy enjoy attending

* 1 hour sprint planning every other week

* 1 hour demos every other week

* Another 4-10 hours worth of ad-hoc meetings throughout the week

So somewhere around 10-15 hours worth of meetings, but all of the pre-planned meetings are either very early in the day or very late in the day. The worst weeks are when the ad-hoc meetings go way over 10 hours (several design cycles lining up or several emergent emergencies that need attention), but otherwise I really enjoy it.
One of these days, I'm building an integration test suite of all the weird corner cases in HTTP and whatnot to throw at libraries.

God help the poor engineer here. Let's say he or she (reasonably!) looked up the grammar for a URI in RFC 3986[1], the standard that defines them. Well, according to that grammar, the browser is wrong: backslash isn't valid in that position, and the exploiting string isn't a valid production of the URI grammar.

But of course, the browser has its own standard — the WHATWG URL spec — which doesn't even define a grammar for a URL, but instead defines a program in pseudocode to parse them. Normally, \ isn't valid after an authority … unless the scheme is http or https or one of several other Chosen One schemes.[2]

Uuugh. We've wrought this upon ourselves.

Also included in this test suite would be the wild and wonderful things you can type into a browser's URL bar that result in malformed HTTP requests hitting the wire… AFAIK, WHATWG doesn't yet have their own copy of HTTP…

[1]: https://tools.ietf.org/html/rfc3986#section-3

[2]: https://url.spec.whatwg.org/#hostname-state

Maybe one should argue that regex should not have accepted the URI, since it's isn't valid according to the RFC.
> He did so, prosecutors said, by reinstating his administrator-level access that the C.I.A. had removed after his workplace disputes.

Er... what? How is that even possible? I'm assuming that the NYT got some details wrong here.
As a lubricant I prefer white lithium grease.
Actually the limiting factor is the amperage rating of the molex terminals ("pins") that make the physical contact. I have expertise in this area back from the days of Bitcoin GPU mining where I built custom cables that I crimped myself after buying the molex housings, molex terminals, and wire.

Each individual terminal, formally called a Molex mini-fit junior terminal, is rated either 7.0A (typical for those with 2 contact springs) or 9.0A or 13.0A (for those with 4 contact springs.)

As you can imagine, most cheap PSUs and wire harnesses are made of terminals with 2 contact springs, so the three 12V wires on the ATX12VO spec allow a max of 3×7.0A = 21.0A or 252 watts.

As to voltage drop caused by resistance in the wire, it will be sufficiently small with 16AWG wire which will easily carry 7A over the short distances in a PC case.
Hear hear. I got a few sentences in and was like "Oh. The Diablo problem"
Preferred Number
> user patience and goodwill, basically political capital with the user base.

Or they can go down the Trojan Horse route and bolt one of their A-series chips as a co-processor to a board with an x86 CPU, begin the process of rewriting the OS and other assets in their control to run on ARM and provide some encouragement for dev's to make the switch over the next 4-5 years.

By having an ARM co-processor lightening the load running system assets they could balance the parts cost by using a previous generation x86 CPU.

They've already offloaded the System Management Controller, image signal processor, audio controller, and SSD controller to the T2 chip (64-bit ARMv8 A10 derivative: https://support.apple.com/en-us/HT208862) - the next step would be integrating T2 into a full blown CPU/SOC. Maybe T2 was the beginning of the Trojan Horse?
To me it's the real problem with the American consumer
Both of us are using averages here, do you not see the flaw in this logic?
This question answers itself, wouldn't you say?

Edit: guess not, suppose I should spell it out: "Gypsy" is widely viewed as a slur, and thus is not appropriate as a cutesy spelling of a group of countries.
It's perhaps worth noting that even in the U.S., these wartime mobilizations have often been carried out by comparatively authoritarian governments (especially in comparison to peacetime U.S. government), e.g. the suspension of habeas corpus and mass arrests during the U.S. Civil War, German internment and the Espionage and Sedition Acts of World War 1, and mass Japanese internment camps and the Office of Censorship during World War 2.
“Artificial sweetener” is often used misleadingly. Natural sweeteners, the most common being sucralose, are not healthier. I had an unpleasant realization from eating a low-calorie yogurt which advertised “no artificial sweeteners!” only to read sucralose on its ingredients list. I’d guess that >90% of protein bars/drinks contain sucralose (which is ironic because carbs from sugar would be more useful to athletes than the emptiness of sucralose).

Instead of artificial sweeteners, people have to avoid low-calorie sweeteners in general. This is difficult - there are dozens of different low-calories sweeteners besides sucralose. They are often low on the ingredients list because a small amount packs a ton of sweetness (which is why they’re low calorie. E.g. sucralose is 1000 times sweeter than sugar in the same amount).

To the point - low-calorie sweeteners do not help with weight loss, and do not have any added health benefits. [1] Mere sweetness has a profound effect on body functions.

I’m not sure whether DouxMatok would be classified as a low-calorie sweetener, since it just extends the sweetness of real sugar. However, it definitely creates the same problem - it emulates the sweet taste of sugar when there is none (or less).

There is no shortcuts, no magic pill for health. Eat a balanced diet, with fruits and vegetables, and moderate consumption of sweets.

[1] https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6313893/
I've only started seeing good measures being taken in the last 5 to 7 days as the confirmed cases are rising, but only at the state government level. Currently, I'm sure I can't just show up at the hospital and say I want tested.

In Michigan, they just launched michigan.gov/coronavirus last week, and have commercials on the radio to inform citizens.
It was done with cooking oil at one time. Problem is it gave most of the test subjects diarrhea after eating a bag of potato chips that were fried in it. Of course anyone that eats a bag of potato chips is at risk of that anyway...
Your logic is vacuous because you can use the exact same rationale to justify the opposite conclusion.

"It's always good to buy when sentiment is good. If the bullish trend continuous, then you got in early and got a nice discount on your equities. If it is the start of a major downturn then you have taken the first step towards buying at a greater and greater discount and can continue buying all the way down"
Just realized all the info I’m giving Amazon by using the app. Time to change up habits for 2020
> *... is actually to use tabs but have the tabs insert spaces instead of \t"

So... spaces?
Another issue is that it can cause osmotic diarrhea since it essentially stays in the intestines.
No, Twitch specifically. It's an interactive chat and live video streaming application that happens to be built out of web tech. If you don't have AJAX, you could maybe-kinda-sorta kludge it together out of forms and video elements, but it'd degrade hard, and need to be built completely different from the normally-interactive version.
> It seems like these actions taken by governments will ultimately be futile

Why do you say this is futile? Quarantines work. They're just very expensive.
Inevitable. At least in the US, the govt will certainly act to preserve the big 3.
If all you needed is something that a person with no training could handle they’d send you home and have a family member care for you.
Hi, are you hiring?Because I am looking for internship.I can send you my resume if you are.
This is why many new reactor designs do not use water as coolant but instead molten salt[0] or inert gas[1], to avoid the risk of steam explosion. This alone does not make those reactors inherently safe but it can help keep radioactive material from being violently spread outside the reactor in the event of catastrophic failure.

[0] https://en.wikipedia.org/wiki/Molten_salt_reactor

[1] https://en.wikipedia.org/wiki/Gas-cooled_reactor
> I hope Amazon comes up with an awesome way to help the cashiers this technology replaces.

They can be retrained to work in fulfillment centers. Amazon will provide the piss bottles.
On the bright side, SO warns you that it might degrade, but it does actually work fine (heck, I can browse SO in dillo without issue), which is far better than most sites, and actually pretty decent.
In Russian at least, a closer translation would be “half of 8th” because it means something like “half of the 8th hour [has passed].”
Wonder if they’ll finally start looking into thorium salt reactors again (which were originally designed for civilian use).
Not sure if I would've viewed it as a prank. Maybe some ambitious plan involving physical RFID tags, that was doomed to fail.
We should be quarantining every city in the U.S. right now. You're 100% correct, and it's going to be just as bad here.
Chief Architect.

About 15h per week, or almost half my time basically.

* ~1h daily for status meetings

* ~2h twice a week for project coordination and discussion

* ~4h once a week for overarching architecture decisions across all projects

* Various other 30min to 1h meetings depending on the week

It's terribly inefficient, but I cannot change it; believe me, I tried.
I have that book. Basically I’m the last in a giveaway chain and can’t honestly recommend it enough that someone should lug it home. Next time I move it’s going on the trash.

It’s really not very good, even for executives who shouldn’t care for technicalities. The best thing are the calibration exercises. But my advice is, skip this one.
Ordered an alarm keypad it came in a box with zero padding.. just sliding around. A lot of my wife’s orders have been in blue bubble wrapped packaging

Other things however come just as you would expect (paper wrapping or bubble wrapped). So it all depends on the amazon worker doing his or her job..
For a lot of purposes where you might reach for WD 40 red and tacky seemingly works well in my experience.
CircuitPython PewPew M4,a PewPew with a Display
Reminds me a bit of when my dad asked me what was a good sort algorithm to use for his problem. When he asked I was mentally trying to weigh complexity to implement vs performance (he was a firmware programmer, it had to be in assembly).

Then I remembered to ask: how many things are you going to sort? He said 10. Always 10.

So, yeah. I didn't really even know the answer at the time.
This seems pretty brittle. Did anyone look into Closure to see what the motivation for the regexp based checking is? There's a browser native URL splitting function available to JS after all.

But I guess Closure dates from the IE6 era where trusting browsers for correctness was probably not a good idea..
> Ah, something that tracks you based on appearance, and can later do so outside stores, is very different from a keychain fob that you can register with 555-867-5309.

That's a fair argument, but I think Amazon has enough about me that what you're suggesting is a minor concern relative to what they already have.

I'm much more concerned about my Amazon search history getting leaked as a .txt file than I am about Amazon using imagery of me to train their ML models.
Typical ESR

What are "attempts to subvert OSD clauses 5 and 6."?

A link would have been helpful...
> For reference think back to how many stories you’ve read about say managers short changing employees a few minutes at the end of work shifts.

Curious what you're talking about here. I've never heard of that, and in all the time sheets I've ever done 15 minutes is the smallest unit of time - not possible to bill 55 minutes, only 45 or 60.
Newbie on pentesting here.Is there a way to bypass HTML Sanitizer?
I'm new to pentesting I really don't get the grasp of it yet. Is there a way to bypass HTML sanitizers? (ex. < = &lt;)
Oof, claiming there is only one tool in the toolbox. Painful.
CircuitPython PewPew M4
Coming at it from a different and lay angle, could a cure be devised that would be even more contageous, spreading around fast and eliminating the virus?
This is literally, one among many reasons (ha!), why I use Firefox. Every other browser vendor is a for-profit entity, and as such will limit good ad-blocking measures as Safari and Chrome have done recently with their new "security" policies.

This is also why I don't use a VPN I don't run (or certainly not one that hasn't been audited with a good reputation), and I certainly would never fucking dream of using a free VPN unless all the traffic over it is absolutely worthless.

... How many of these things install root certs where even after you've canceled your subscription you're still accepting their bullshit?

On the other hand, this could make for a hilarious experiment using adversarial neural networks to troll the assholes mining data from the VPNs.
When I deleted my account, I went through one additional step:

6. Delete your account. Create a new account under a pseudonym. Add a single friend, who can add you to group chats.

At this point, you should have a near-empty news feed; Facebook is only for staying in touch with the group (eg, not missing out on social events) until people have gotten used to texting you to invite you to things.

You won't be able to comment on anything public because if your account gets reported as a fake, you'll be locked out of the account unless you provide ID (which of course you can't do, since it's not your real name).
More likely, there's a work queue and sometimes it gets a bit backed up or falls a little behind while autoscaling resources kick in. Having fully dedicated capacity for something that's handled asynchronously, fluctuates with time, and can tolerate many minutes of processing delay would be a waste of money.
A circular connector would be sweet!
And of course in the US there are not as many testing kits as in other countries, so the numbers are basically 3 months behind.
Maybe solution would be freezing certain asset for a week/day/hour after earnings announcement?
> I think there are millions of people who wouldn't lose a wink of sleep over assassinating someone in cold blood, but wouldn't be able to live with themselves if forced to acquire and plant images and videos of children being raped so that a political prisoner could be falsely convicted.

Even supposing what you say is true, why does it become unlikely that there's a disjoint set of people (sizeable enough to assume that some work for some law enforcement agency) who wouldn't blink an eye at doing the latter thing, if they truly believed it was for the good and safety of their country? I think there are absolutely people like that, and suggesting that there aren't feels incredibly naive.
Maybe just me but I never feel that? Seems like cashiers are routinely grumpy and silent as a trend.
Centaur is somewhat derived from the original Atlas. The Atlas V itself has very little lineage from the Atlas SM-65, other than name, though it is somewhat connected in a weird ship-of-Thesus way. (It uses the same engines as the Atlas III, which uses the same tank construction technique as the original Atlas.)
I am an engineer (ie, IC), and I currently have about 8-12 meetings per week. At my worst I've had over 20 meetings in a week, and in a previous position (but same company), I had about 15 meetings per week. A decent chunk of these meetings are interviews, which are two meetings each (the interview itself, plus the debrief).

I'd say anywhere from 5-15 hours per week in meetings. But the real killer is the dead little "pockets" between the meetings. Hard to get any real, deep work done when your day is chopped into pieces.
> It's a good company but I probably won't apply because I've no idea if

You could ask them when you talk to them...
Teflon is inert - you are probably thinking of PFOA, a chemical that used to be used in making Teflon.
Last time I checked all phones with lineageos support were made by Google, China or were like 5 years old. For this reason I never got it.
I know very well why I am still using FB: there is a single group that I am working with that uses it as its main channel of communication. And I don't want to invest the effort to make them switch right now.

What I did was an alternate plan that can work for many:

- Don't install the Facebook app, but the FB Messenger lite app. No access to the walls.

- Mute channels you don't want to be pinged about (most of them except two in my case)

- Logging out of FB on the desktop is a good idea but I really type faster on a keyboard so often when pinged I'll just open up FF (with all the fencing in place) for a quick answer.
Please do not consider this comment to be commentary on the ongoing coronavirus outbreak, especially considering the situation at the nursing home in Washington state.

Out of curiosity, I tried to find examples where many people died of a flu outbreak in nursing homes. Here are some articles I found:

This article describes a nursing home in Sheffield where 9 of 60 residents died from the flu during the 1997--1998 season: https://pdfs.semanticscholar.org/e54b/27d527dd0612d0899f22ea...

This article describes a nursing home in Honolulu where 6 of 37 residents died from the flu during the 1989--1990 season: https://www.ncbi.nlm.nih.gov/pubmed/7657975

This article describes a nursing home in Los Angeles where 8 of 101 residents died from RSV in 1979: https://www.ncbi.nlm.nih.gov/pubmed/6527041

This article describes a nursing home in Devon where 4 of 50 residents died from RSV within one week: https://www.ncbi.nlm.nih.gov/pubmed/6736667
I believe his complaint is that SI defined 1 Hz as 1/s, not as 2π/s. So 2π Hz in the new definition is 1 Hz in the older.

It does make the Hz unit a bit redundant (saying "hertz" is no faster than "per second", and tends to obscure rather than elucidate). Though I do believe it ultimately has saved confusion as it means the 2π multiplier must be explicit,, which prevents accidental confusion between cycles per second and rate of rotation.
The tone of the article dips a bit too far into sensationalism and fear mongering for my taste. While the concerns expressed are absolutely legitimate, I grow weary of people spreading fear for the sake of fear (or worse, clicks) without any mention of what we can do to protect ourselves. Spreading fear and then calling people to action based on that fear is not really leading us down a good path.

I've noticed the effects of this reaching normal people. It can be debilitating when they're spoon-fed fear without a corresponding dose of digital safety education. They're afraid of these companies or the internet in general but don't really know why. That kind of environment makes it all too easy for someone with an agenda to step in and take control of the narrative, manipulating people for their own purposes. "You're afraid. Let me tell you why you're afraid and how I'm going to fix it. Vote for me."
The theory I've heard and find most probable is that Germany has more ICU beds per capita than Italy. A lot of people think hospital beds in general are most important, but a lot of experts disagree. You could setup a hospital bed anywhere, ICUs are much more involved. Both Germany and the US have very high ICU per capita rates relative to others. Were it not for the nursing home and some cruise ship patients not getting the ideal care early on, the US rate would probably be about as low as Germany's.

According to this article, Germany has 4x as many ICU beds per capita as the UK (the most in Europe,) and the US has upward of 10x as many. https://www.theguardian.com/commentisfree/2020/mar/03/icu-do...
Atlas evolved quite a bit over the years. They added Centaur to the top. They changed from the stage and a half staging. They added solid rocket boosters. They went from balloon tanks to iso grid based rigid tanks.
Also, your whitelist is vulnerable to redos DoS attack - according to http://redos-checker.surge.sh/

I’m just trying to point out that securing via Regexps is never simple, even for the very skilled. If someone posts a comment with a Regexp, it is often broken and one can usually find problems with it.

Edit: and what are the $ in there for? They look redundant.