skysight-inc/HackerNews huggingface dataset:
1. If the union is complacent and is willing to put its financial situation in the hands of the employer, to be used as leverage against any struggle - then the union and the employer arrange for a fraction of each employee's salary to be deducted by the employer and passed to the union.

That, at least in the US, is the common case. It is also extremely tempting - and I say this as a past union activist - to go for this option.

2. If, however, the union values its independence from the employer, then union dues are collected either:

2.1 By hand from time to time (much harder, but you get independence from the banking system), or

2.2 Each member signs a standing transfer order, transferring a certain amount of money from their account to the union every month/quarter/year. It's still a challenge to collect anything from non-members, despite them enjoying everything the unionized workers have achieved.
Prehashing doesn't just solve the storage issue. Imagine you want to sign a 1MB or even 1GB file with a typical hardware token. Without prehashing you'd have to send that entire 1MB or 1GB to the token, which has a throughput on the order of KB/s or maybe MB/s, and process all that data with a CPU clocked at MHz, not GHz. Breaking up the file into chunks doesn't help, and might even make things slower, not to mention the added complexity introduced to your file signature format.

The obvious solution is to hash the data and sign the hash, just as is done for every other signature scheme. The downside is that now your signature scheme is only as strong as the hash. But if it turns out that SHA-512 isn't collision resistant, you have much bigger problems.

PureEdDSA has its elegance, and, sure, use it if you can. But supporting off-chip private keys (e.g. hardware tokens) is sometimes far more important to security. If you're creating an API, keep that in mind.
After we the taxpayers paid them $400B to cover that expense, and the telecomms pocketed it, I have the world's smallest violin to play for this particular argument.

https://nationaleconomicseditorial.com/2017/11/27/americans-...
Exponent Podcast: A Search for Everything
(I'm assuming here that customhttp means you've got hand-rolled code and isn't somebody's terrible name for their product)

If your customhttp isn't smart enough to handle Chunked encoding it might also just always Connection: Close every request or even just act like an HTTP/0.9 server, in which case it isn't vulnerable.

Request Smuggling requires that both the intermediary (for you nginx) and backend (your customhttp) believe it is possible for one TLS connection to contain multiple HTTP requests, they just disagree on where the boundaries are between those requests.

If either of them insists that no, one TLS connection = one HTTP request, that's legal (but has poor performance which may or may not matter to you) and immunises against Request Smuggling.
I hear that also, and I'm also curious.
They clearly did hide things with their previous scandal about smuggled Iraqi artifacts. In this case it was less about hiding things and more about their desire to acquire showy artifacts being more important than authenticity or scholarship.
Classic, archetypical superheroes don't often just punch their way to justice "with all rules set aside." It's typically their strict personal moral codes and dedication to law and order that sets them apart from from supervillains. Superman as a character, for example, is anything but fascist.
Multiple sources indicate that’s the severe percentage, and we know a bit about untreated ards.

Moreover, deaths from lack of capacity will not be limited to covid cases. And many of the current non-covid icu cases may be exposed to medical staff who are not being tested (in the USA) and die that way. This is what happens in nursing facilities like Seattle.
I changed the title because the original one is "Slow Code HATES him! Optimising a web app from 1 to 60fps".

The article is good though.
Sure, I guess I automatically interpret the connotation of "forgeries" and a museum as referring to a museum being the defrauded, since they typically are either given or acquiring exhibits, and less often are selling/trading them.
Video conferencing is not the only thing people do with their residential internet.
If it's providing a WiFi hotspot, then it's their router that you're using, not just their modem.
I am really excited for this startup. Opioid crisis needs to be addressed and I think this is one of the many steps that can help the people/families who are suffering.
They have had this sort of thing happen since before they opened. They claim to be victims etc each time and it’s many times now.
They give you a combo router and modem by default when you run their modems (for the reason given above). The WAN port is just a downstream port for the internal router.

I don't think there's a way to disable the router itself in most cases these days, just some of the services it provides.
I recall that this became possible due to the development of a small jet engine for cruise missiles.
Yeah, I'm flagging this post. Incredibly irresponsible.
The same contrived reason why Twitter and Facebook required mobile numbers for setting up 2FA.
This is a bad reference that completely misrepresents the economics of the situation.

The unit cost of bandwidth is obviously very low, that's not where the costs come in for ISPs. To suggest that Verizon is on 97% margins while ignoring all of the other costs is to promote financial illiteracy.

If ISPs were actually doing 97% net margins, they'd be the 10x bigger than Google.

The surpluses are in fact in high tech companies like Google and Facebook - they are the ones with 'massive margins' wherein there's obviously more opportunity for competition.

There's probably an economic case for pricing alteration, but gross misinformation is not going to help.

FYI: VZ's actual income statement [1]

[1] https://www.nasdaq.com/market-activity/stocks/vz/financials
The problem is that 3 narrowband wavelengths doesn't add up to very much light. If we call visible range 400-700 nanometers, and bandwidth is 1nm, then you are throwing away 99% of visible light.
Covid-19 theoretical spreading prediction (march 12)
Answer came through later in the press conference. There's a screening website that will direct people to testing clinics.

Source: watching the livestream. This may get transcribed later. https://www.nytimes.com/2020/03/13/world/coronavirus-news.ht...
I like your term.

> cupertinology.com

> Make offer

Oh well.
Game studios especially need this. I'm a conservative in most other labor-related things (liberal on social issues), but holy shit the devs are abused by the game studios.
diatomaceous earth
They are developing an online system to determine whether or not a person who "thinks" they are affected should go get a test done and where they can get it done.
Yeah it only works when the have a monopoly on public infrastructure that they didn't pay for and get to hold the general public hostage for its use.
Show HN: Ask recurring questions and get aggregated answers in your email
>Is the Shroud of Turin the real shroud used to wrap Jesus at his burial? Pretty much certainly not. That said, it is still clearly historically significant.

Clearly it is not something worthy of a museum then. A fake thing being old doesn't make it historically significant for a museum. A church, maybe.
Re cheap travel and open borders, Jiangsu province, China is 300 miles from Wuhan, has 21 active cases, 610 recoveries and 0 deaths and presumably cheap travel and not much borders to Wuhan. On the other hand the US say is expensive to travel to and has a leader that goes on about closing borders, 2000 cases, 41 deaths and rising rapidly. The difference is competent policy not borders and cheap travel.

I'd like to hope, wishful thinking here, that there might be a trend towards requiring more scientific competence in our leaders going forward.
If your union is actually _your union_, i.e. yourself and your co-workers, organizing together to do something - then you're not paying to get a "return". You're participating in your own collective effort. Pecuniary union achievements are an added bonus (though a frequent one).

Unfortunately, with larger unions, or those with weaker consciousness and mis-perceptions of what a union is supposed to be - there's alienation between the member worker on one hand and the union and its operatives on the other, and then dues payment seems to be something transactional: "What will you get me in exchange for what I pay you?"
No one doubts the authenticity of the scrolls in the Shrine of the Book in Israel. They have undergone detailed radiocarbon and paleographic dating.
Looks cool! My first impression from the title though was that it was a book about building a compiler for in in the graphical MIT Scratch language [0] and I very interested to see how someone would do that.

For clarity, it's "from Scratch" like making an apple pie from scratch. I'm looking forward to the book!

[0] - https://scratch.mit.edu/
Note that this says nothing about the Dead Sea Scrolls in general, which are absolutely real, and mostly in the custody of the State of Israel: https://en.m.wikipedia.org/wiki/Dead_Sea_Scrolls
Well they're basically fantastical adventure stories which have always been popular to greater or lesser degrees. It's just that special effects got good enough and their producers had 30+ years of comic books to mine for decent storylines which allowed them to produce a lot of movies in a relatively short amount of time without tiring people out.
So Twilio's SDK counts, but Jitsi's doesn't because ...? You can build custom interfaces with all your requested features with that too.
Well, it depends on whether or not "4-5 years in related experience" means systems programming or if it means making single-page webapps.
The idea was to use a lot of gouraud shaded polygons (i.e. polygons with a gradient that goes to black) and the color space was designed, with the blitter chip, to make those kinds of polygons fast.
The first set of speakers for our free, remote React conf
Yes, this was precisely my question. I agree with you that the post does a great job of explaining the how request smuggling works, and how they used it to trick Slack's server into responding to the user's client with a 301 redirect to the hacker's server. But then, when they got to the part where the cookies are sent, they just said, "and the cookies are sent" with no further explanation.

That's the part I'm stuck on. Is there some browser behavior I'm not remembering where it sends sensitive cookies across domains just because one redirected the browser to the other?
I've worked in a cross functional organization as a product manager for about 8 years now and I finally feel as though I can articulate a need that has existed for quite some time. There are a few problems.

* Someone isn't asking a question to team members that should be asked on a regular basis
* Someone is manually asking a question to team members on a regular basis
* Someone is asking a question during a meeting that should be asked before or after the meeting

Here are some examples of these types of questions

* As a team leader - Is there anything you'd like me to specifically address to the team during our weekly status meeting?
* As a sales manager - What feedback did you hear from customers this week about our product?
* As a product owner - What do you think should be our top 5 priorities for the next 3 sprints?
* As a scrum master - Is there anything that is blocking your current objectives?

There's an interesting side effect of not asking these questions regularly and asynchronously. Instead of getting the best answers from the group, you get the perspective of the loudest, fastest talking person in the meeting and it becomes the focus of discussion.

We built Keyory to solve this problem. You can ask recurring questions to a group of people and have the aggregated responses delivered right to your inbox. You can configure your questions to be sent out daily on specific days, weekly, biweekly, or even monthly on the first day of a month. Then you forget about it and read the answers all in one place, in your email.
heliocentrism and geocentrism are also belief systems.

it’s choosing one that gives better results (and makes more sense).

you already have an implicit belief system, too
Even so, if those volunteers who are going to be performing dangerous and invasive (but potentially life-saving) procedures (like intubating people) and making snap life-or-death decisions (that require aptitude + years of medical education + experience, to avoid inadvertently killing their patients), we're going to need to have a very different set of expectations about these emergency volunteer medics/nurses than we would have for professional medics/nurses. With respect to death rates, expertise, errors, negligence, professional standards, how they will respond psychologically to the work. They would probably be better than nothing, but I imagine that an average person would rather have professional treating them than a volunteer, so that would be something that we would have to work through as a society.
I read it and didn't understand now questioning my software engineering career choices.
sorry, i misled you. you cannot add sticky to thead, you have to apply it to the cells:

thead th {
position: sticky;
top: 0;
background: white;
}
https://www.coronatracker.com/analytics/
It definitely has a lot of potential but nobody is going to re-assign a bunch of engineers to code up a solution to their immediate need for massive teleconferencing capabilities today - as I imagine the timing of this launch is heavily influenced by the Coronaviris and current demand of these tools.

Where I think it does play in is that while Zoom is probably making a lot of sales right now, they are probably starting to regret their start-up friendly pricing model now that they have to fund large engineering efforts to keep up with demand. I imagine Zoom prices will go up while Twilio APIs will stay fairly consistent. There may be some cool start-ups that get built on top of this as well.
Trump declares national emergency over coronavirus
I think you mean February break.

Winter break usually refers to the break that includes Christmas and New Years Day.

In Massachusetts they instituted a second break in February, in addition to spring break in April, in order to cut the flu season.
From the press release:

> Apple also announced it will commit $1 million to local San Jose organizations to offset associated revenue loss as a result of WWDC 2020’s new online format.
Microsoft: 'We Do Not Plan to Evolve Visual Basic as a Language'
Making millions off of Sun Microsystems during the Y2K crisis
Obviously these must be fake as SEELE hoarded all the real dead sea scrolls for the human instrumentality project
Revealed: Monsanto’s Funding for Weedkiller Studies
Belgium just announced a 75% public collateral on bank loans made to industry. Pop quiz: In 30 seconds, name 5 ways how this can be abused. Your time starts now.
+10000 his talks are amazing to listen to
One of the problems that the UK government is going to face is that their under-reaction has completely destroyed any faith people had in the government's ability to deal with this.

People already don't view Boris Johnson as a safe pair of hands. Just to give a flavour of that, supermarket shelves are already consistently devoid of rice, pasta and other likely targets for stockpiling. The government has entirely failed to address this. As well as that, businesses are aggressively pursuing their own emergency mitigation plans despite what the government are saying. The company I work for moved all non-essential personnel to working from home as an immediate reaction to Boris Johnson's speech - literally telling people not to come in tomorrow even if they had no actual ability to work from home. Essentially there are large organisations now that are completely disregarding the govenrment response and taking matters in to their own hands.

Finally it's important to note that late last year the government announced enormous spending plans for the health service in a massive reversal of a decade of policy. The problem is that it takes such a long time to actually see any results from that spending that we're going to be coping with this emergency with the least equipped health service that this country has had in decades.

Finally, you have to add the multiplier - because there are so many reasons to be concerned about this, panic will make everything 10x worse.
Thinking about American society, I'd like us move back towards a greater sense of civility and common purpose. This isn't absent, but the divisiveness of public life over the last five or ten years has done a lot of damage to this ethos.

This is a time to remind ourselves about what really matters. And "be excellent to each other", if you like.
...?

Just did a very cursory reading, sounds nothing like Laozi.
The collab_2.png screenshot shows `User-Agent: ... Slack/4.1.2 ... Electron/6.0.10 ...`, so it's their own desktop app doing the https://slackb.com/... HTTP 301 -> https://*.burpcollaborator.com request. Perhaps their client implements its own quirky redirect-following, which keeps the the original `Cookie: ...` headers in the redirected request?

I find it hard to believe that any browser would keep the original `Cookie: ...` headers in a redirected request to a different origin.
>None of which has stopped physicists from being able to make some basic assumptions like universality, move on, and deliver results.

Great! But just because you operate on an assumption, it doesn't mean the assumption is valid. Einstein, for instance, went to his grave believing quantum mechanics was false. This was in no small part due to his metaphysical commitments. The same applies today to the nature of time, dark matter and various QM interpretations.

>This enforces a type of rigor on the field that makes it highly unlikely that the entire field is full of shit—the phonies and second-rate theorists typically have a hard time making it very far.

We're discussing the field of philosophy and its goals in abstract here, though I will note that along with the hoaxes in some social sciences (which mostly aren't hoaxes in philosophy), there have been some in the harder sciences too. You need logic for mathematics. Given a logic system, mathematics is internally consistent. Philosphy works in much the same way with both logic and conceptual frameworks. Although it can be hard to prove, say, moral realism, it is possible to verify claims within moral realism to be logically consistent or not. Much the same goes for logic. I discussed this with my mathematical example a couple of posts to you previously. You don't get a free pass from logic or argumentation if you hold up a card that reads "philosopher".

My only point in this discussion was to pass along the idea that philosophy is (or at least in many cases is) about as consistent as mathematics in the sense that we procede from axioms, and given those axioms, we can verify the truth or falsity of a preposition. Philosophy produces results in a different way, like the Fibonacci sequence or a fractal. The only difference is that philosophy has no fear of challenging, replacing, or adding axioms. That's comparatively rare in mathematics today.

>it’s far more likely that trolls and fools managed to drive the last reasonable people out of philosophy.

That's one reading; another reading would be that a theory we've been working with for a long time has just been found not to hold up. Physics, like religion, can still maintain its usefulness in such a scenario. Popper's criteria for separating science from pseudo-science would have (apparetly unknowingly to him) included both physics and astrology as scientific.
Relics are important for understanding the medieval period's interwoven trade and pilgrimage.

No relics? less travel? Slower "flatten the curve" back plague? Smaller renaissance? Weaker atheism today? :O
that page has a WebRing at the bottom! what a blast from the past.

this is what sites used to do before aggregators and search engines dominated.
authors are Allen Wirfs-Brock, editor of ES2015, and Brendan Eich, creator of JS. Here is Allen's blogpost about it: http://www.wirfs-brock.com/allen/posts/866
Do unions (specifically this union) promote and standardize levels of craftsmanship or is that still an unsolved problem?

I kinda wish proper guilds would become a thing in tech. I feel they could solve both the craftsmanship and workers rights problems but oh well...
I bet we move to a different medium that is easier on seniors bodies. Many seniors complain they can’t see the screen and their dexterity isn’t good enough to use smart phones easily. Judging based on my anecdotal experience with the elderly and those needing accommodations speech to text, text to speech, accessibility features and airplay are commonly used and I think this trend will continue.
At the risk of sounding grounchy, the Olympics is one of the show a lot of people actually want to get cancelled. Population was mostly against it.

And a part of it would have been about “volunteers” (like school/university kids/sponsor company employees requested by their board to participate due to lack of actual volunteers) working in the heat of the summer for a for profit organisation getting super preferential tax and financing treatment.

We have global events every year centered about the athletes, I wont be crying any tears for the IOC and officials not getting their payback.
I've visited, including inside, the US equivalent : https://en.wikipedia.org/wiki/AN/FPQ-16_PARCS

This was before 9/11. Probably these are no longer allowed, but they would have an annual "open house", and my wife is from that area (which is sparsely populated) so we'd pop in. Inside I saw a 16-CPU parallel processing system developed by Western Electric specifically for this project in the late 60's (still operating).
Tell this data it's wrong:

https://imgur.com/gallery/FETiDTV

Anti-hysteria from a _doctor_, argue with him:

https://imgur.com/gallery/XN9pvQM

(no point in actually discussing anything with you)
The OP is discussing it in regard to Apple’s developer conference. If there is ever a situation where the audience can be assumed to be Apple centric, this is probably it.
You can do what you want :) in practice it's really hard to bring down the erlang VM in zig. I'm also going to experiment with OTP managed OS threads, which I think should allow you to safely run code that panics (but maybe not segfaults), and will clean up the memory resources after you.

I think in general though you should be using zig not rust, because zig is aggressively unopinionated about memory allocators, so when you allocate memory in your code, you'll use the allocator that zigler provides, which makes the BEAM alloc conformant to zig's allocator interface. This means your code will be more performant, because there are fewer trips to the kernel on allocate and destroy, and your code will respect the BEAM's memory fragmentation, cache optimization, etc.
Maybe a one time payment from the Government, say $3K for 2 months, without changing anything.
Cached, Rust cache structures and easy function memoization