skysight-inc/HackerNews huggingface dataset:
Your company forbids the sending of urls with fuck in?
Just found this great free tool for Python and pandas users
This is totally alien to me. I could understand - though not relate - if you were offended, or just thought the use of the word "fuck" here was awkward or tonally inconsistent. But "puerile" and "why should I take you seriously" and "you talk like a teenager" is an absolutely ridiculous reaction to me. I've honestly not met a single person in all my life who reacted like that to a superfluous curse word.
> I personally wouldn't use TV as a source of information in this regard but that's a personal preference.

What are you using as a source of information?
Who defines what "AV" is? Isn't your whitelisting solution also an "antivirus"?
How does the performance compare to other implementation either for GPU or not?
had to spend a few months back in the states to take care of my cat. The instant pit is a godsend! throw in some frozen veggies and a whole chicken -> enough chicken soup to feed two people for 2 days. Beans + 1-2 ham bones -> a 5 days worth of beans for less than $8.
Actually it is worse than Spanish flu.
Mortality rate for the Spanish flu is estimated at 2-3% according to the WHO. COVID-19 currently stands at 3.4-3.6%.

We do have the advantage maybe that the world today is better prepared at handling this kind of events, but we're only just 50 days in, the Spanish flu ended up lasting 2 years.

Source Spanish flu: https://apps.who.int/iris/bitstream/handle/10665/44123/97892...
Source COVID-19: https://www.who.int/dg/speeches/detail/who-director-general-...
Buddy if you're dying, go to the doctor, but make sure to call first.
Thanks for sharing, I'll definitely read that. How do you balance between the threat being real and the anxiety not necessarily being helpful? I can think of many situations where my emotional reaction to things are the correct reactions but are disproportionate to the point of being unuseful
Amazon develops a new electric vehicle
France is well known for lawmaking to help companies with french values outcompete rivals.

Airbus wanted to build a new freeway through a protected forest to deliver planes on, but EU rules prevented it. Instead they built the road and put a thin surface of gravel on top so they could claim it was a "forest track", and it became legal.
>edgy/cringe-y

It's upsetting to me to see these "meme" adjectives used sincerely on HN.
Does King County have enough hospital beds to deal with the coronavirus?
The site needs to mention this.
Why new diseases keep appearing in China?
Just wondering, Has it got anything to do with [1] Sciter, the UI Library many AV software are using?

[1] https://sciter.com
Amazon Battles Counterfeit Masks, $400 Hand Sanitizer Amid Virus Panic
Looks awesome! Downloading the app, going to try it out on my T-BEAM that's been sitting dusty, and will definitely have an opportunity to test it soon.
Generally the interpreter is probably better, once you have enough memory-managed code that it outweighs the number of vulnerabilities in your native code by virtue of its significantly lower bug rate.
Thumbs up. Respect
Why TV Is So Worried About Free Will
"there's no hospitalization crisis here."

Yeah, there wasn't a crisis in Italy 3 weeks ago either.
Same in Germany. An aquaintance of mine had a fever after a trip to Singapore. He called the hotline, the local health department, the local clinic. nobody helped him, always directed him to call someone else. After 5 hours a doctor called and told him "its just the flu, get a bath and rest". No testing, no quarantine, nothing. He's in self-quarantine now...
Where on the site does it say telephone your doctor to determine whether or not you should go? Nothing. Horrible site.
A paper notebook would be so much worse. You would have to carry it with you physically (which is clearly an unconscionable imposition), it can't show you relevant ads, and it cannot send every glyph you scrawl to Google, Microsoft, and the NSA. How could people ever use tech like that?
There is nothing called a controlled infection outside of a vaccine. As we saw in Wuhan, several youngish doctors and medical staff died as well. When some of the "controlled infections" turn severe, now you have to take care of them as well(probably with a higher priority since they volunteered for the good of the community), which adds to the burden.
I got caught in the same net. Spent a year as a dev trying to make a career happen, but all I found were a few short term contract gigs. This was in 2018, just after market all time highs. I'm pretty convinced that the demand that the industry talks about really isn't there, or at the very least, they are recycling old 2017 data (ico craze) and passing it off as still true.
In the AGPL version of the nightmare scenario, all software is still accessible only over the Internet. You have all the exact code, but running it yourself has no meaning because users and all their data will not migrate to your installation (which doesn't even have the capacity, but never mind that).

The code does all sorts of nefarious things in plain view, but you're powerless to change the installations of that code. You can't stop using those services because life depends on it. Hundreds of millions of them continue to use the services, forcing you to do the same. Most of them don't understand the code or your objections to it.

If the fictional character Don Quixote came up with a software license, it would be the AGPL. It's full of nice sentiment, but ineffective and self-defeating.
A real Game Boy reads the logo data once to copy it into video RAM, then a second time to validate it, so a cart with clever hardware can make the boot-up logo display whatever they want:

https://dhole.github.io/post/gameboy_custom_logo/

Of course, you still have to include a copy of the Nintendo logo to get past the BIOS check, even if it's not displayed, which I think is supposed to be the trademark infringement.
I guess the test shortage is not limited to the US?

When my son got a cold, I also preferred to get him tested, but couldn't. Soon it became pretty obvious it was just a cold, but still, without a negative test for him, I'm not allowed to come to the office.

It's pretty clear that it's spreading faster than they can keep track of by merely tracking who you had contact with. I can understand they don't want to waste time or resources on people who obviously have a simple cold, but I'd rather they did test people who report flu cases.
Corona Virus changes business culture via digital transformation
> How are doctors this stupid? ... the doctor can't fucking say that you can't have it. What happened to evidence-based medicine?

You clearly have no idea what youre talking about. When something 100x less severe than the coronavirus happens, there is an ABSOLUTE AVALANCHE of people calling in on the full spectrum of sickness, from psychosomatic, to actually sick but with the wrong thing, to actually sick with the right thing but minor cases, to people that will actually die if not seen but cant make their case clear. The reality of the situation is that without instant, free, over-the-phone test results, this is a reasonable response from oversaturated medical systems.
Madagascar’s mysterious, lemur-eating cats started as ship stowaways
> Popular JS VMs have huge attack surfaces

No, not really? Depending on the browser they have generally have a small-to-medium attack surface. Yes, they can JIT, but often they can't do much else.

> and are prime candidates for gray and black market vulnerability hunts

Because they are remotely exploitable, nothing more.

> They are often not maintained

The world's deepest pockets and countless hours from the world's smartest minds go into maintaining them…

> once a vulnerability is discovered, the entire app is compromised

Not in modern browsers.

> In the case of a highly-privileged process

Oh good, so not the JavaScript process, right?
I wouldn't read too much into their stake into Renault, they give a lot of money to PSA also.

On the subject matter, Tesla cars are a problem, they are too big and heavy for Europe. And European car makers should stop increasing their car sizes too.
Pretty much every definition defines antivirus as software that inspects files and attempts to decide if they are malware or not (and then blocks access etc).
Building a Minesweeper game using React Hooks
> the mean difference

Yes, but later the article shows that "mean difference" is really mean difference divided by variance.

> an important point is that whether something qualifies is really a question of the scale

It's one of the concerns, but I would say it's the main one. An effect size needs to distinguish between the two cases here, both having the same expected difference: https://imgur.com/a/hg2NNl2

If you care about units, you can talk about the expected value/difference, but that doesn't make that a meaningful effect size. What you need to do in those cases is to, at least, mention both the expected difference and the variance.
How Rational Math Catches Slippery Irrational Numbers
The lab courses and to a somewhat lesser degree seminar-type classes are the really tough question. A course like 2.007 [1] which is one of the best known and most useful classes in the Mech Eng curriculum can't be replicated online to any meaningful degree--especially with zero notice and planning.

I'm honestly not sure what you do at this point. Finish up the semester as best you can and just give everyone a Pass? Force people to attend a summer session whether or not they can afford to not be working? There aren't any good options.

[1] https://me-2007.mit.edu/
It's not about C++, it's about selecting a more appropriate tool that JS. JS is often used only because the developer knows nothing else. What's even more ridiculous, often JS is not even the easiest route.

Serious question, what are reasons to use JS in non-web contexts, apart from developer familiarity?
Highly disagree here. Javascript's DOM parsing functionality has but one purpose: presentation manipulation, i.e. rendering. Having something like that running as SYSTEM is a security issue in itself, regardless of where the code comes from.

FFS, even display drivers don't run with full system privileges anymore.
I don't know if it's regional at all, but I recommend the Swedish meatballs.

Side note: I propose that vegan meatballs be called peatballs! (Peat is made out of plants, correct? I'm not super knowledgable about that stuff.)
This looks really interesting, I like the focus on developer ergonomics, launching with a fleshed-out tutorial is a nice touch. The deployment story, however, seems to be tied to using Netlify as a hosting platform, which could affect adoption. I understand that that's where the roots of this project lie, are there any plans to decouple Redwood from Netlify to enable the framework to be self-hosted or used with other CI/CDN/FaaS services?
Introduction to Apache Ant
In brutal honesty, it is probably highlighting that one lab is underperforming vs the other one.
Sure, it isn't every bad thing your grandparents survived, but I think it might turn out to be worse than Spanish Flu.
The runtimes are also written in “memory unsafe languages” (C++). The runtimes bring a whole lot more code than if you wrote own tailor made code, meant to do something specific, in “memory unsafe languages”.
Children work. Be it mowing a yard, working on a farm, or illegally violating labor laws and having an actual job. In some places, even in first world countries, there are children who are working under the radar (children of undocumented immigrants or children who are undocumented immigrants being an example). These children do not get paid sick leave, and thus if the standard for 'universal paid sick leave' is 'everyone gets it', then nowhere meets that standard. If you make your definition require perfection to meet it, then it won't be met. You set the standard on being literally universal a few comments ago, and I'm just showing that nowhere meets that standard.

> Or is this just some sort of language-is-imperfect cul-de-sac you're in?

Come now, have you forgotten when you said the following?

>It is a literally true statement. Universal means covering everybody. That some slices of the population have it in no way contradicts that.

Please do not suggest me being in some language-is-imperfect cul-de-sac when you were the one driving.
Great products don’t require permission
"Everything we do before a pandemic will seem alarmist. Everything we do after will seem inadequate" --M. Leavitt DHHS
> Optane claims performance 1,000 faster than NAND SSDs with 1,000 times the performance, while being four to five times the price of flash memory. Optane is proof that storage class memory is not just experimental.

This was a very bold claim from Intel. That was in 2015. It’s 2020 and I haven’t seen any benchmarks that meet this. And it’s not clear the roadmap is going to scale to that figure. Right now it’s still not quite good enough to be a main memory (but as a caching tier between main memory and disk).
I think part of the issue is some places (where I am too) use medium for their blog and medium requires an image. Not sure if other blogging platforms do the same though.
> Dynamic languages are generally require less LOC, which generally equates to faster implementations

That's not what I observed. My understanding is dynamic languages promote people to think more higher level and care less about performance and program structure. While dynamic constructs can be efficient, the freedom they give is often misused by developers to create baroque structures that hurt performance mainly because developers don't know how to use them efficiently.
It is very common for car regulations to favor local manufacturers. It's one kind of those "non-tariff barriers" that are a big issue in trade talks.
> In software, most WTFs are just bad engineering. You should figure out what the code does and how you can do it better

This is exactly what Chesterton's Fence suggests
> Just as JS should not be found in the server

Said who?

> You can't have an entire industry push this terrible ecosystem, then expect security companies to miss out on the fun.

I would expect most security experts to push you to use JavaScript instead of C++, since the former will protect you from a number of rather common security issues in the latter…

> Locating and hiring C++ engineers at a scale is something that has become very, very difficult.

Is it really that hard? Here, I can help: I know C++, and I'll be graduating soon. Hire me ;)
How do you encode floating point delta into one byte?
Is his claims baseless or grounded in reality based on accurate historical data?
https://translate.google.com/translate?sl=auto&tl=en&u=https...
Students' genes cannot accurately predict educational achievement
How many vulnerabilities have existed in Electron apps, sandboxing and all?

I meant maintained by app developers who include the runtimes, not the runtimes themselves.
> In my opinion the best tool for basically all jobs is usually the main programming language of your project / team / company.

I read a wonderful article some time ago (here maybe?) arguing exactly this, and positing that any language unsuitable for replacing every other language in a company is insufficiently powerful. As I recall, by 'language' the author meant every single computer language: shells, interpreted scripting languages, compiled languages, perhaps even markup languages.

IIRC, the author came from a Lisp background, which shouldn't really be surprising: so far as I am aware only Lisp and maybe Forth would do a decent job at all those tasks.
as an example, two weeks ago i made sure i had enough supplies to last a month. started taking precautions. social distancing, hand washing, etc. doing the best i can. then co-worker takes a coronavirus vacation due to discounted tickets. others are driving in from around the country for spring break. i've done all i can, but it's almost meaningless because others don't understand the risk and the government hasn't taken steps to limit movement and test.
We don't need open source blobs, we just need documentation on how to use them.

Open source blobs would be good for other reasons, but it isn't required to use them.
JavaScript is one of the fastest scripting languages, for one. It often has pretty decent bindings to native code as well.
TechMart, MIT's At-Cost Grocery
I think it is a great counter example given the word play people are engaging in. It is a silly example, but if a silly example fits, then it suffices to show the standard itself is also silly.

It seems a variant of reductio ad absurdum but I'm not fully certain it qualifies.
The key part here is "Facemasks may be in short supply".

There is aplenty of reasons why healthy individuals should wear the masks, including:

1. They could be sick, but don't know it

2. Sick people avoid masks if healthy people don't have them

3. It could help them avoid touching their faces
It also doesn't (yet) handle use cases like FOPEN -> FREAD -> FCLOSE, where all of them are queued at once. This because the read and close need the file descriptor the open operation need.

Perhaps not a problem for databases (which probably keep all relevant files open anyhow),
Alcoholics Anonymous vs. other approaches: the evidence is now in
No, back then, compute cycles were a scarce resource, so an antivirus had to be lightweight and targeted. They only started to get sloppy when processors started getting faster than real software had a use for.
> UTF-8 is the standard for representing characters as eight bits, allowing every code-point between 0-127 to be stored in a single byte...

Hmm... this makes it sound like UTF-8 uses one byte per codepoint and can't encode codepoints beyond 127, when it actually is a variable-length encoding where one codepoint is encoded into 8 to 48 bits (1 to 6 bytes, although in practice 1 to 4 bytes are sufficient to encode all currently defined UNICODE codepoints).

The same is true for UTF-16, it's not "16 bits per codepoint", but variable length with either 16- or 32-bits per codepoint. Only UTF-32 is a fixed-width encoding.

Basically: all UTF encodings are able to encode all UNICODE codepoints.
Everyone's a Socialist in a Pandemic
The Day After 35 years later, Carl Sagan and Henry Kissinger on nuclear war
Thanks for elaborating! I think we mostly agree. Perhaps the biggest question is whether it's ok to profit from the pandemia? I would say in general it's ok as long as your prices are reasonable and there is no surge pricing, but media outlets can have a conflict of interest between reliable reporting and attention-seeking. For WSJ, the middle ground might be to fund their pandemia coverage from their profits elsewhere, and to profit indirectly via new readership.
Small correction, but it's optimized to int31 by all the current engines with the last bit used for tagging.

BigInt is now available on Firefox and Chrome (with JSC/Safari support in the works). That gives arbitrarily-large integers (with the JIT deciding the best size.
cool

> Of course, you still have to include a copy of the Nintendo logo to get past the BIOS check, even if it's not displayed, which I think is supposed to be the trademark infringement.

Yeah i think this is the bit that a brave publisher could have argued in court, I think for it to be a trademark violation it would have to be visible somewhere beyond the raw content of the ROM. That's why i'd argue it's essentially being used as an API token, and trademark definitely doesn't cover that.
I wouldn't be surprised if Sciter comes bundled with a VM for running JS, but it's not explicit on their website. They do position themselves an an alternative to Electron. And it looks like every anti-virus package uses this product.

"In almost 10 years, Sciter UI engine has become the secret weapon of success for some of the most prominent antivirus products on the market: Norton Antivirus and Internet Security, Comodo Internet Security, ESET Antivirus, BitDefender Antivirus, and others. The use of HTML/CSS has allowed their UI to stay in touch with modern GUI trends throughout all these years, and will continue to well into the future.

Sciter Engine is a single, compact DLL of 5+ Mb in size. Application using it are 10+ times smaller than the ones built with Electron or Qt. And size of the distribution matters, one of main Sciter’s customers discovered “golden 40 seconds” rule: for the user, to buy a product, it should not take more than 40 seconds from the click on “download” button to the UI to appear on screen."

---

As mentioned by others, this would be separate from the JavaScript VM mentioned in the OP and would not run as a privileged account (it would just be the UI people interact with).
Have you never spent a few hours (or even days) on a back and forth over email, only to solve things in two minutes by giving the person a call? Spoken communication is way more efficient for certain things
Hmm, this looks great. I'd really love to pair it with a simple way to add text or tags to my photos. What is the simplest way to write "Visit to the creek after the bushfire" and save it with the two or three photos I took that day?

I wish (hope?) something simple like this is supported in a linux picture viewing application, and I just don't know which one it is. Can a line or two of text be stored in an EXIFish field? Has someone already written a script to take care of this?

But back to the main point - this is a great app and I can see myself using it to share photos with friends and family. Thanks for making it :)
You probably also need to set the flag that enables the events to be linked, so that they happen in the correct order.
Do you think any other countries are different?
I'm not sure about actual implementation, but one approach would be to copy this function 100 times and invoke those copies sequentially. Of course linker must not optimize it into one function, so that's why I'm not sure about actual implementation. May be naive approach would work or may be not.
Can you expand on this? What about these adjectives are a meme?

To me, the “tech person gives advice while brazenly cursing to show how serious and authoritative they are” is a meme.

Edit: I just learned that “cringey” is not In most dictionaries yet (which explains why spell check is saying it’s not a word). That said, the term fills a void where no other term conveniently comes to mind.
Pay No Attention to That Man Behind the Curtain
I always would want a company blog to be under a company domain, which Medium doesn't allow any more. For various reasons: from a branding/search perspective, for flexibility (e.g. being able to embed whatever you want for visualizations, examples, ...) and to be able to move it without breaking all the links (e.g. when you finally decide Mediums constant popups are a bad look for your professional representation)
GM Needs Cybersecurity to Drive Future Success
Most of the bad things predicted by the media wouldn't have happened even if no effort was spent. However there would have been a lot of things not predicted by the media that would have been bad. The bad things the media predicted were easy to put into a sentence, while the bad things that would have happened would take books to explain. They would only really be bad because of the sum total happening all at once.