skysight-inc/HackerNews huggingface dataset:
In this particular instance, it's a savvy understanding of the HTTP protocol. Both the 'Transfer-Encoding' and 'Content-Length' headers have opposite goals: one says how many bytes of response body data there is; the other signals that it is limitless until (IIRC) an empty newline is transmitted.

Realizing that different systems resolve the question of "Well, what should I (the system) do when I get both headers?" and you realize you can break the atomicity of the HTTP request-- which opens up a really interesting (and severe) class of exploits.

I'm not very good at finding vulnerabilities, beyond the obvious sql-injection attack types that we are generally trained to avoid. I imagine, however, getting good at finding these is a skill that can be learned with time. Alternatively, finding vulnerabilities might be more akin to pharmaceutical developments: with a 1,000 swings, you're missing at least 950 of them, or more. A dash of luck in there.
Being able to collect social security early is not as big of a negotiating tool as you would expect. It just doesn't pay enough to be an alternative for a lot of people, and it wasn't designed to be
> The interactions with gods, shops, and pets tends to be richer and more complex in Nethack. The things you can do to and with items is as well.

Agreed about all of these except for gods. In NetHack you can't easily choose your god during the game (though you can sometimes not-easily choose your god during the game) and the difference in behavior from one god to the next is minimal. In Crawl, you can usually choose your god and thereby get different abilities, status effects, and effectively mini-conduct challenges based on what each god disapproves of. I think that's more interesting than the NetHack religion stuff, although it's true that NetHack has a slightly more complex model of gods' feelings toward you.

I've been gradually writing up a document about differences between Crawl and NetHack and I think the items behavior you mention is a huge one.

NetHack has a substantial minigame about item identification, plus various ways that items can be damaged, destroyed, or modified (beyond magical enchantment), plus ways that they can be combined with one another (including an entire "alchemy" system of mixing potions to get other potions), plus ways that one item can be turned into another item. Also, some items give status effects when carried, while others must be equipped, or applied or invoked. Also, some items have a nonintuitive or humorous use -- one of many examples is that some harmful potions can be used offensively by throwing them at monsters or by hitting the monsters with them. Monsters can also often make intelligent use of items against you.

In Crawl, every item has essentially one and only one appropriate use, and every item is immediately fully identified when used or equipped. (Item identification is still not completely trivial because some items are harmful to use, or are consumed by use, so you might not want to use everything you find.) Items can never be permanently changed¹ except by enchantment or curses, and items can't be damaged, nor can they be destroyed except by using them up or dropping them into deep water or lava. Also, monsters make comparatively minimal use of items and don't pick them up.

You can see where various people might prefer one style or the other!

¹ The one counterexample I can think of is the dragon-slaying lance that becomes more powerful every time it kills a dragon.
Sorry, I agree with you, but I don't understand what your point is. This post is about Erlang, which is far from a "new language".
This is not a below-market rate.
It wouldn't be it was/is a fad? In the 2000s there was literally a zombie movie coming out every week it seemed. In the UK there was load of movies about the UK "underworld" e.g. Football Hooligans, Drug Dealers, Gangstars and Illegal fights (Layer Cake, Snatch, Rock and Rolla, Green Street, Football factory, The Business and my favourite Sexy Beast).

There is generally a new film genre that does really well and people copy it chasing the money as people tend to want more initially until it is played out.
Sounds like a non-profit startup problem to build out tooling to rapidly form, run, and govern unions.
Indeed. Although I always think that any software produced by the government should be Free Software. It's stupid for taxpayer funded software to not be open and extensible by citizens.
I don't think there are any humans alive on this earth that won't happily accept free money.
Disagree. I think it's important to think carefully about how "the way things were in the past" influence how we perceive "the way things are now". Tracing how opinions evolve over time is a good way to help understand why people behave the way they do.

Personally, my armchair theory on superhero media (and other fandom-oriented media) is that it's sort of becoming a nascent religion for people that aren't otherwise religious.
Yes. The 500 million they injected yesterday stopped the freefall for 30 minutes.
https://www.bloomberg.com/news/articles/2020-03-12/n-y-fed-t...
Except this time the federal reserve is paying money for loans collateralized by the federal government. It's a bit like purchasing your home loan from your bank and then giving it back after they pay you a bit of interest for it.
Getting rid of “real” bugs is no less than hacking!
Interesting development. Glitch used to be Fog Creek, where Joel Spolsky talked of treating developers well (latest hardware, private offices etc) and paying them well. I wonder if the culture has changed and that's why the developers felt the need to create a union.

[https://www.joelonsoftware.com/2006/09/07/a-field-guide-to-d...]
Ah, but you see, the CDC took it upon itself to fight Ebola in Africa. And that part went as well as you'd expect after seeing their current performance: they're still dealing with it, years later.
That's an exceptionally non-constructive comment. There's nothing hypocritical or inconsistent about suggesting that we change what we can and not what we can't. We can't change the "Spanish flu" moniker. It's too late, it having been written into textbooks for generations. If we could erase those references, I'd say we should, but we can't. The best we can do is refer to it by a different name - "1918 flu" seems common - when discussing it now.

The appeal to tradition here is the idea that we should continue that practice even when we know better and have an opportunity to do better. I reject that. Is "cling to tradition regardless of effect" really the hill you feel you must die on? An odd attitude for anyone in tech, I must say.
I've used sourcegraph quite a bit for my Haskell project. It absolutely changed the way I've browsed code on the web.

Also love their organization around a Master Plan: https://about.sourcegraph.com/plan You can tell they've been influenced by a certain Mafia..

Power to the Sourcegraph team.
Coronavirus could force ISPs to abandon data caps forever
Don't Touch Your Face
Every meaningful authority is suggesting you do the opposite — Do not panic, there is no need to freak out.

But you should still avoid getting it and spreading it to others. Having a slower, more controlled growth gives us significantly more time to find a vaccine and learn more about the virus.

People who are immunocompromised, whether by age or otherwise, are a vulnerable part of our society worth protecting.

This virus isn’t an inconvenience like the chickenpox, it is killing people.
> Google Hangouts

> likely to provide a better supported user experience.

Yeah, about that: https://arstechnica.com/gadgets/2019/01/the-great-google-han...
I'm sure they'd be open to discussing that with you! Try Fintan: f@shakti.com
I think it's a signal for the moderators to take some action about the article. If many people flag it, they take it down or modify it.
Live walkthrough – Raspberry Pi 4 with Kubernetes (k3s)
Because this will have more intrigue and appeal to a wider audience than a proxy server, which only technically savvy people are familiar with. I think entering a virtual library gives it some gravitas and higher sense of importance.
> Germany also killed Walmart there via existing entrenched shops simply complaining about the price competition.

First time I heard that. The generally accepted explanation over here is that they couldn't match prices of established chains that had well optimized supply chains, and that they absolutely failed to account for cultural differences regarding how to deal with customers and employees.

Edit: https://youtube.com/watch?v=58_BZjnbMyw
EdDSA, Ed25519, Ed25519-IETF, Ed25519ph, Ed25519ctx, HashEdDSA, PureEdDSA, WTF?
Guide for Remote Teams
I think what is being discussed here in liability for companies purchasing insecure devices, rather than the manufacturers of those devices.

It is reasonable to say that, even if companies are discouraged from purchasing insecure devices, that won't necessarily deter consumers purchasing insecure devices for their households. The threat from devices in households is perhaps even greater than in businesses, if the number of households in question is great enough.
The problem with Jitsi is that the video streams have to pass through the videobridge. That means paying for ingress and egress network cost if you are on AWS .
Bitcoin is dead, long live Bitcoin
I hypothesize without proof that if you enter "A, B, C, D" for any single-digit A, B, C, and D into http://oeis.org/ that you will find some reason why that is not a valid PIN.

7397: Digits 4-8 of the sequence "sum of iterated phi(n)".

1074: Sorry, that's digits 4-8 of log_21(8). Please try again.

6235: Sorry, that's digits 10-14 of an irregular triangle read by row's squarefree quadratic non-residues. Please try again.

2099: Sorry, that's digits 4-8 of the decimal expansion of the x-intercept of the shortest segment from the positive x axis through (2,1) to the line y=x.

Clearly, these are all way too easy to guess for an attacker for you to use them as a PIN number.
Instantaneous worldwide communication is arguably a game-changer. And while it's easy to be pessimistic about the state of science education, the ability and motivation to self-educate may have some impact on national and global consciousness. Neither of these things were even slightly possible 100 years ago.
With git and node it was the ease of deployment and scripting. I have done some TFS scripting which was always a total nightmare. With git it’s so easy. You can like npm or not but it’s pretty phenomenal how it’s set up and works. MS was way behind the curve with nuget. The more I look into Linux tools I find them way more practical than what MS has to offer. There is just more innovation. See containers too. MS is years late. Pretty much every new trend gets started on Linux these days.
The coming hyper-verticalization of labor marketplaces
Homeland security did used to watch games like WoW out of concern that terrorists used it to communicate; I dunno if that's still a thing with the rise of encrypted messaging platforms, though.

The same idea came up in the movie Four Lions, where the main characters use Club Penguin to talk about their plans.

https://imdb.com/title/tt1341167/
Physics is trying to fit reality to an equation, it is not reality itself. We don't know what an atom "is", we just know how it behaves with high precision.

If the simplest and most consistent math is a non-physical pilot wave, I don't think this really matters if it lets you calculate something more easily or correctly. I don't personally know how to use them (my five QM courses used traditional techniques) but if they give useful results it hardly matters if they're "real".

My good friend did his undergraduate thesis by noticing that Clebsch–Gordan coefficients could be used to describe grain boundary orientations in polycrystalline materials. Doesn't mean grain boundaries have spin. It's just math that was convenient and worked well.
I knew people would ask and I'm trying to find it. I promise to edit this comment or post under it once I do.

EDIT: Medium, not Twitter; sorry. https://medium.com/@scientiffic/on-the-aftermath-of-quitting...
Government Vs. Industry and Liberal vs. Conservative are distinctions that serve to obfuscate the true divide in our system: Capitalists vs. everyone else. Capital doesn't care about these distinctions. The difference between the Cabinet and the Boardroom is akin to a room with a curtain in the middle.

It is all the same with the large corporate unions. They are designed to be run by those cozy with the ruling class and stifle actual workplace democracy.
Pretty much this. Basically its an easy way to merge in instrumentation and a console when you need one.
Good thing about GitHub is that if you have email notifs enabled, they put a fake CC in the email

{review_requested | author | assign | mention | your_activity | subscribed} @ http://noreply.github.com

Then you can create filters in your email client and sort this stuff into different subfolders.

IMO this is still not enough granular (https://twitter.com/__jakub_g/status/1222918835172495360) but overall it's quite ok. Feel free to ping GH support if you agree with my tweets so maybe this gets prioritized.
What a horrible article, with yet another incredibly naive and short-sighted analysis. This focuses on "there's plenty of supply of TP" and ignores all questions of access to that supply. It ignores all issues of nth order effects, network effects, issues of mobility, distribution, etc., and just blindly assumes "well, if the plants are making it, people can access it."

In reality, you probably don't need to buy enough TP to last a year or more. But equally so, it's hardly a bad idea, or a sign of "panic" to buy a few extra packs. I mean, we are facing the advent of a global pandemic, about which there are still many unknowns due to dodgy data, etc.
If they can get it to work well with one wavelength, can't you just use 3 of them positioned in a triangle for RGB
They don't work. That option doesn't appear.

I'm not sure if this is a Home vs Pro issue, or if this is an issue with which Windows 10 Build one is running, or an issue with which particular Wifi driver is being used.
Screw these people and those like them. If you want to buy out the whole store, get a wholesale account of your own.
It detects if two participants are in the same network and then uses p2p.
No, that paper was heavily criticised and then retracted.
Probably took weeks to build his own suite of automated tests for these types of exploits. All he has to do at this point is reconfigure the scripts to point to a new site/app with a bounty program, post report, and reap the benefits.

Assuming he has done this for several other companies, I would say he has effectively earned more than what is put in
US government spending is 38% of the GDP. But don't call it socialism, it's economic stimulus.
How? Backloaded compensation is pretty common in many industries that in the . The employee gets training and experience, the employer has the security of knowing their investment will have some return. It's a win-win.
Can't access the article, but PCR = polymerase chain reaction and is a method for amplifying DNA so you can actually analyze it.
Well, say a weather data service is provided by the government but is only allowed to operate as long as they don't compete with a commercial service. At that time there is no commercial service so it's fine.

10 years later a commercial service is started and now the public service has to change because that's what the law says. The public service didn't do anything wrong and didn't change anything, but because something in the private space changed the public space now has to stop providing a service. That's what I meant by change in the weather data example.
Why a Data Analytics/Insights Company Uses Ruby Instead of Python
The reason germs spread in the winter
> I don't see how it should have been done differently

The automated email should have been sent to the building coordinator who could have acted on the automated request to assign a new roommate or not as appropriate. At the very least, there is a vacancy halfway through the year for a reason. How many of the possible reasons might benefit from considerate handling? Sometimes impersonal centralisation works well, and sometimes not.
If you want to use that analogy ...

You should compare it to a payday loan that is collateralized [1]. And then where the collateral happens to be insufficient because a glut of that item just came on the market (analogous to the sudden rush of banks needing to convert their Treasurys to cash).

For the ordinary person, "Sorry, can't help you, you just have to deal with the fact that everyone else is selling that product too and so it doesn't provide the value you want and you have to take a big loss or an interest rate corresponding to higher risk."

For banks, "Omg! You can't sell your bonds at par because everyone else is trying to sell before maturity? You poor thing, let me buy them up for you with new money!"

[1] Sometimes referred to as "title loans", as you might e.g. put up your (remaining equity in your) car as the collateral.
selective pressure should favor mutating to something not worse as the worse ones get more notice, avoidance and the hosts don't last as long.
I remember Fog Creek used to be a well liked company years back...
Thanks for the report, exactly what I was looking for!

This is something I wish had been in the article. Even something vague, like "Employees reported they were unhappy with management and the performance evaluation system. The union with CWA will work with management to blah blah blah".

Agree that it sounds like a management failure.

Thanks!
> Why can't I put ssh://nethack@alt.org in my browser?

Try KDE Konqueror, see http://enwp.org/KIO
It is a 20 year old company, but according to what I can find it's still between 11 and 50 employees.
It probably helps to know that this particular bug was a major announcement at Black Hat last year, by James Kettle, who is a vulnerability research celebrity. So lots of people are looking for this particular bug.

Black Hat talks are eventually published online for free; here's this one:

https://www.youtube.com/watch?v=upEMlJeU_Ik
How a supply chain officer got 14K McDonald’s stores to switch to fresh beef
Pro-tip: Use https://www.airbnb.com.au - the site will show the real final price, by Australian law.

What do you know, such issues can be resolved via proper regulation....

(Btw, you can also change the currency by clicking on the "world icon" at the top right).
"Set aside" is a funny way to put it. They "set it aside" in US Treasury bonds, causing a massive growth in the US government -- who still managed to run a deficit on top of that because they also cut taxes. That artificially boosted the GDP in a way that made a few people much richer while leaving everybody else flat at best. Now, their children inherit an oversized government that they must either cut or pay for with a big tax hike.

The people who pocketed that money have resisted any attempt to put the tax burden on them, and indeed, have demanded more and more tax cuts. The next generation is thus not only paying for their parents' retirements, as per the Social Security social contract, but also financing their parents' massive debt. The Social Security Trust Fund helped enable that by making a massive government debt seem smaller than it would otherwise have been.
Well, did you comply? And where was this? Very interesting but needs a lot more detail.
Some DNA viruses, such as the Herpesviridae, integrate into the host genome by injecting a circular plasmid into the nuclear membrane.

This is why you can always have HSV, chicken pox (singles), Epstein-Bar...

Granted, Coronavirus is an RNA virus, and RNA is much shorter lived and more susceptible to mutation than DNA.
> That industry seems notoriously bad so I wonder why people keep joining it.

Because kids romanticize it and think that their job will involve playing video games all day.
Just a shameless plug we've written thousands of queries to automate many compliance checks against major frameworks such as: NCSC-CE, CIS, SOC and ISO. https://www.zercurity.com/product/compliance/ It'll even collate all the evidence for you and help your employees improve their own cyber security posture based on your corporate policies.
Even RMS has no problems with using open source frontends to proprietary services. The reasoning is: if you can audit and modify the way you talk to the service to ensure you arent revealing any information you'd rather not, why do you care if the service itself is OSS, proprietary, or some dude in Qubec handcrafting TLS packets?
The Fairphone is also quite good for that
I don't think this is true. Moral ambiguity, anti-government, anti-wealthy people themes have been pretty prevalent in the movies of late. They're not especially deep or insightful, but the term comic-book evil seems unsuited to modern superhero movie villains. They're undoubtedly "better" than what I grew up with at least.

Large portions of fiction have generally always focused on people who were superior to others, at least in terms of cleverness, but often physical ability as well. Odysseus comes to mind. Extraordinary people are simply more interesting than ordinary ones, especially if your primary goal is to entertain.

I think the reason comic book superheroes in particular are popular is simply that they're easy to make and market than something that is less well known and less established; and from a business perspective, there's synergy in making lots of movies from the same universe because people like it when movies come from the same universe.
>Management was basically incredibly incompetent, for a long time

seems to be a correlation - back then like 10 years ago HN had various FG blogposts/articles appear on the front page relatively frequently while in recent years i don't remember any.
> I don't recall anyone complaining when MERS, NDH-1, and Hanta virus were prevalent and in the news.

That means absolutely nothing. People learn. General awareness of how such terminology affects people is a relatively recent phenomenon. For just about every racial slur you can think of, there were lots of people outside of the affected groups who could have said they "don't recall anyone complaining" either. Not hearing - or refusing to hear - such complaints is itself a form of discrimination, hence my "blind eye" comment.

> I won't be a partner to their attempt to clean up their PR through social censoring
> it will assist the Communist Party in controlling the narrative

I knew the anti-China sentiment would come out into the open sooner or later. Protip: not all discrimination, or defense of discrimination, comes from outside. Ask any feminist.
For me, grouping by repo was useful because I don't care about every repo equally: some produce few notifications but are extremely important, while other repos (that happen to produce a lot of notifications) aren't that important.
The link in the article that points to your website is broken.
Oh, I bet enough consumers will make selections based on labeling that vendors will find it worthwhile to meet those standards to get those labels.

I know I will.
Research finds a new way to hack Siri and Google Assistant with ultrasonic waves
what would be a typical salary range for 1 year kernel dev + 4-5 years in related experience? let's say BayArea/NY/Austin? I really did like learning about kernel dev before. Might be time to learn again..
Nice little info amidst the mass of misinformation and panic floating around these days! I'd appreciate it if you could describe what tools or technologies you used to make this.
I gave them the same exact feedback a few weeks ago. Got zero follow up so i suppose it worked for some. I will just stop using notifications i suppose.