skysight-inc/HackerNews huggingface dataset:
Magic Leap allows any app to track user's eyes without asking permission
I've recently discovered that the Magic Leap app allows any app to track user's eyes without asking permission. This can be used for a wide variety of malicious purposes such as determining the user's sexual orientation for blackmail purposes (see https://www.vice.com/en_us/article/bj9ygv/the-eyes-are-the-prize-eye-tracking-technology-is-advertisings-holy-grail ).

I submitted a responsible disclosure to Magic Leap through BugCloud but was told that this does not qualify as a vulnerability, so I would like to warn people directly to NOT trust any Magic Leap app, and to please try to petition Magic Leap to make eye tracking require asking permission, rather than being automatically granted.
I am indeed using that. The bug reports claim it is a Zotero problem and not a better bibtex problem.
Ahh darn I was hoping this would be an AI thing that collects and highlights research for you.
In fact Boeing seems to be balking at govt requiring equity in exchange for loans: https://www.fool.com/investing/2020/03/24/boeing-ceo-rejects...

Which, to me, sounds like Boeing doesn't need a bailout all that much.
Quick summary — top vpn companies use the same trackers as most other when you visit the provider’s website to sign up or download. Says nothing about the actual operation of the VPN itself.

I block the website trackers anyway, so clearly I don’t approve of them. But TBF this has nothing to do with your experience as a customer.
I don't think there is an analogy in computer science; that deals with data, and this deals with emotion.

This is driven, as far as I understand it, by evolutionary psychology. It was an advantage to be "right enough, and unified" as opposed to "completely right, but divided", and an advantage to take care of "us" before taking care of "them." As a result, we are hard-wired toward tribalism.

Smart people are able to set this aside and deal with the facts as they are, but we still have to overcome the initial, emotional surge that takes offense whenever something we hold true is challenged.

One of the big issues is that people don't see immediate fallout from this sort of behavior on the national level. They vote for people who cut taxes for the rich and gut worker protections, but never connect that to their own financial ruin. The effect follows too far after, and too far from, the cause.

Politics, as a result, is treated like football: root for your team, because the other team sucks.

We might see some of that change as the bodies start piling up from COVID-19, but I doubt that there will be a larger societal change.
Same, i would have given them money years ago but always had issues with Paypal
"This was created in a lab" has been the whisper of conspiracy-theorists. How likely is it? And a vial broke and it got released like in a Marvel comic?
Federal Reserve offers regulatory relief to small financial institutions
"The GNAT project started in 1992 when the United States Air Force awarded New York University (NYU) a contract to build a free compiler for Ada to help with the Ada 9X standardization process. The 3-million-dollar contract required the use of the GNU GPL for all development, and assigned the copyright to the Free Software Foundation. The first official validation of GNAT occurred in 1995."

https://en.wikipedia.org/wiki/GNAT
Anecdotal but the social music app I built, JQBX(https://www.jqbx.fm), has had an average 8X increase in daily active users over the last two weeks. So I think a lot of it has to do with the social/feeling connected component.
So far, they seem like a good way of reconnecting odd pieces of university program scattered around in my head. Maybe from scratch, they do not have enough math and overexplain some stuff. What are the usual arguments against this though?
It was an SSL connection with a custom cert chain. So I could easily wrap the HTTP side of things with a SOCKS forwarder which then SOCKS proxied into the VPN and then back out to the other site.

There might have been another way to do it, but given that wrapping HTTP in a SOCKS proxy is easy and ssh has a built in SOCKS proxy, this was quick win.

ps. It's SOCKS and not Socks - for the subject line of this story.
the thing is, port forwarding works for a specific port, whereas socksproxy is a general tunnel.

if you point firefox to use a remote ssh host as socks proxy then you can browse internet as if you were in the ssh host subnet.

it's basically a poor man's vpn, but if all you do is www browsing it works perfectly.
And what if POTUS was listening to the WHO experts who were parroting the lies of the CCP that human transmission wasn't happening, and then that even if it was an epidemic it wasn't a pandemic?

Furthermore in what way was the US public health system dismantled? The US was best suited to take on Coronavirus because of its significant number of ICU beds and the number of ventilators compared to the rest of the West. The unfortunate fact is that CDC's tests failed and that left the US flat-footed when it was otherwise better positioned to tackle the crisis than most.
> this is much worse than the flu.

The CDC estimates that up to 710,000 Americans have been hospitalised by the flu in the past six months out of 54 million infected.

Up to 59,000 of them died. IN SIX MONTHS. In the USA alone.

https://www.cdc.gov/flu/about/burden/preliminary-in-season-e...

Stop trivialising influenza.
Yeah, even in the SF/SJ locality which has the highest Locality Pay Adjustment (at 41.44%)[1], the position would likely have to be GS-12/GS/13 to start being competitive.

There is the option of going to some area with a much lower cost of living and trying to hire there, but the problem might be getting enough people together to form a team. If you can easily get enough people with skill and experience, the area probably has jobs for them that pay better, and if those jobs don't exist, it might be hard to find the people.

1: https://www.federalpay.org/gs/locality/san-francisco
Spain says Covid-19 tests bought from China are failing to detect positive cases
Would it work with SMR drives?
(For the lazy: it is in C, but to reliably make a system call that will uninterruptibly block there's a Python FUSE driver that hangs to cause the call from C to block.)
Great, why not stick to Usenet now? Why did it become less popular?
Fortunately youtube and netflix has a good CDN at our major ISP interchange node as we are about 12,000 km from New York so all our traffic goes via undersea cables.
Badblocks writes easily compressible patterns and I assume harddrive manufacturers try to compress and deduplicate data, masking any defects. Especially on SSDs and SMR. So I prefer to fill the drive with AES-encrypted data like:

yes | openssl enc -aes-256-cbc -out /dev/test-drive

and then decrypt and grep. It's almost as fast as badblocks.
Thank you. This was a very informative comment and I am especially grateful for The Hot Zone PDF.

It was difficult to follow your chain of comments to find the information on air clearance techniques separate from ventilators. This is the relevant thread for anyone interested - https://news.ycombinator.com/item?id=22624959
Hit escape as it's loading to shut down the script that blocks the screen.
If the VPN company insists on tracking me to this extent when I'm on their website, why should I trust them to not track me when I'm using their VPN?

You would think a company whose core product is supposed to be about privacy would be extra careful to respect its customers' privacy on their own website.
'78 reporting in. We had a BBC Micro in our school library in Derbyshire. That coupled with the Speccys and c64's floating around at the time are probably a large part of why I'm sitting here in SF working at a senior level in big tech. Thanks BBC.
We absolutely could have... two months ago. There were a number of missteps that cost us very important time:

* WHO developed its protocol based on a German solution and open-sourced it mid-Jan

* The CDC decided to develop its own protocol and finalized it by end of Jan. They told local and private labs that they'd handle all of the testing and thus the FDA did not grant authorization for local and private labs to begin standing up their own testing protocol.

* By early Feb, it was becoming obvious that the CDC tests had manufacturing troubles.

* In mid-Feb the FDA re-iterated its guidance to labs to not stand up their own tests

* On Feb 29, the FDA finally allowed local labs to develop their own tests

* Two weeks later, those other tests finally started rolling in

https://www.nytimes.com/aponline/2020/03/23/us/politics/ap-u...

https://www.nytimes.com/2020/03/10/us/coronavirus-testing-de...
> There’s only a limited number of wealthy people even in China

You're thinking China from 50 years ago. There are at least 4.4 million millionaires in China! More than in the US

https://www.theguardian.com/business/2019/oct/21/china-overt...

EDIT: sorry, I've misread the title, looking at the actual report
https://www.credit-suisse.com/media/assets/corporate/docs/ab...
it seems that US still has (well, had in 2019) way more millionaires - 18 million. It's only in top 10% wealthiest people that China overtook US

Still, 4 million people eating pangolins would provide enough opportunities for interesting zoonotic jumps
Covid-19: Mission for Masks
Your phrasing suggests that it's very obvious, yet you are blaming salads as the real public crisis in an earlier comment. Fact is, breeding animals and raising them for food is going to keep resulting in pandemics. Like the one that we are currently going through.

Don't raise livestock or breed/catch wild animals, and the contact between humans and animals drastically lowers. Then pandemics don't happen. If that market in Wuhan didn't exist, we wouldn't be having this conversation today.
What we’ve learned about the coronavirus – and what we still need to know
That'd be misleading though. Much of that $2T is comprised of loans.
I started using Zotero a few months ago when a major Firefox update rendered the Scrapbook extension non-functional. It's nice to be able to take quick snapshots from Chrome or Firefox and save them to the local document repository. I found this guide helpful in getting things set up:

https://daily.jstor.org/how-to-use-zotero-and-scrivener-for-...
Either way, AFAICT we know for certain that it didn’t come from a lab somewhere and that narrative needs to stop spreading.
VC Firm claimed it could get its investors expedited tests, “just boasting”
The other thing is that half of the cost is in the form of low interest loans and loan guarantees, and presumably most of those will not default if this doesn’t go on too long and thus won’t actually be real costs
>This reeks of Dunning-Kruger: you don't even know enough about what you're talking about to realise how badly little sense you're making. I strongly suggest you familiarise yourself with a topic before opining about it. I'll be hard-pressed to believe you ever opened a physics textbook in your life after high school. Why then do you feel the need to talk blindly about it?

You can just address their ideas, this extra stuff isn't helpful.
it's a no-conf-required vpn:

ssh -D 8000 -q -C -N user@sshhost

point firefox to use localhost:8000 as socksproxy, and all your internet traffic appears to have originate from sshhost.
>Russia is too and I don't really understand why unless they're lying

There is no coronavirus in Russia, just a bad spell of mass Pneumonia. In other news Putin just announced nationwide full pay week of 'holidays' https://www.telegraph.co.uk/news/2020/03/25/putin-refuses-im... nothing to see here folks, definitely no emergency
I didn't know they were doing a graphics update, this looks great!

It will be interesting to see what they do with the interface. I've thought before that a complete mapping and redesign of all Dwarf Fortress screens and actions would be material enough for an entire thesis on UX.
Penrose's is a terrible book for a beginner to try to learn from. It's a weird mix of relatively simple stuff and one you can't possibly appreciate if you do not have a degree in math or physics. It has a tendency to dwell on simple and familiar things and then rush through rather involved topics that are no doubt something a beginner would not have a chance to be prepared for.
> Being a sole proprietor / contractor right now feels hopeless. Nobody is spending money with me right now, projects on hold, no possible way of filing for unemployment. It's worrisome.

Please don't take this as me being captain hindsight here, but I think that this pandemic has reallllly shown the need for an emergency fund. IMO if you're sole prop or contractor, you owe it to yourself to have a bigger emergency fund for this exact scenario.
I think it's weird to point at Nancy Pelosi given the current state of politics. McConnell and the republicans denounce any Democratic bill that is passed as partisan, so why would this be any different? And you feel that Steve Mnuchin and his $500B corporate bailout slush fund meet the criteria laid out for crisis spending? Give me a break.

The Democrats are trying to include things like vote-by-mail, since this crisis is already affecting elections and will likely have an impact on the ability to conduct a fair election in November. They want better unemployment and healthcare to make us resilient against this exact situation. These are all good things, and the Democrats would be fools to waste an opportunity to do the right thing for the country.
> Python 2 is nicer to write from some perspectives, and, for example, the idea of somebody who didn't like Perl 6's changes being told to write Perl 6 instead of Perl 5 or else they were being harmful doesn't really make sense either.

Except Perl 6 (Raku) is now marketed as an entirely separate language, whereas Python 3 is the version of Python that has superseded Python 2.
I personally really like the old (1960's) editions of Halliday and Resnick. I feel they are superior to the editions published today, and are available for very cheap.
If you make another account, it goes down as soon as you create it. I'll ask him to stop using Facebook but it's gonna be hard to tell all his fans to switch to another social media service.
I do this exact same thing! If I write a new Zettel that references something I read in a book (for example), all I do is get the ISBN of the book (usually off of Amazon), use Zotero's auto-import feature, copy the reference and paste it into my note. The whole thing takes all of ~20 seconds, it's very efficient.

I know Zotero has a lot of other features, but 99% of my workflow with it is what I described above.
I shop HEB and I noticed they were ahead of this thing weeks ago. Their delivery service is terrific and, though quantities are limited and deliveries have to be scheduled several days in advance, you can still buy everything.

The article doesn't mention the huge food bank donations the company has made during the crisis. HEB is a good corporate citizen and a great place to shop. As the story says, thank an HEB employee for everything they're doing right now.
The way I see it, there are two factors for the origin myths:

The misidentification of various people. Practically every barbarian horde descending from euro-asian steppe into europe was called scythian as if it was one and the same. That was the case for huns, avars, magyars and others.

The desire to be associated with martial might/success. The desire to claim primacy (and therefore rights) over some territory.
History is rife with such myths of origin.
+1 for Resnick Halliday or Fowler. Don't start with Freyman. I made that mistake, wasted a lot of time.
Hard to argue with the economics of that mitigation though. The abuse:legitimate use ratio is probably pretty high. Getting rid of user agent strings will bring back the scaling problems, as they should probably be addressed directly.
I’d seen Asciidoc but not Antora before. I like it, thanks for pointing me that way. I had also missed the Markdown compatibility shims, which are useful.

One thing that turned me off of Asciidoc was the dated smart quotes syntax. I actually wrote my own Markdown preprocessor for LATeX that takes care of smart quotes, links, bold, and italic and have been using that for now.
This borders on spam. This is the third time you’ve submitted this post in the past two months and the feedback is no more positive this time.

Yes, you can do just about anything in Python. But single dispatch is usually a bad idea, and implementing it yourself instead of using the Python stdlib is always a bad idea.

There’s nothing wrong with showing off programming curiosities, but this isn’t presented in that context. The more often you post it, especially without heeding or engaging with feedback, the more annoying it becomes.
> This coronavirus hasn't even approached those levels globally in five months.

Three months, and yes, that's how exponential growth works. It's pretty small at the beginning. You'd think a community of (largely) computer scientists would appreciate the power of exponential growth.

Edit: ah, looks like you're editing your post.
Probably first you should get a rough idea what you want to learn. When I studied Physics the standard track was Mathematics, Experimental Physics (Mechanics, Electrodynamics), Theoretical Physics (Mechanics), and then other topics, Wave Physics, Thermodynamics, Solid state Physics and Particle Physics. Normally first the experimental course comes and then usually with some delay the theoretical.

Still, you can decide if you want more Mathematics, more Theory or less. (Probably the CS Maths should get you covered pretty well for the start) I'd do a research on popular recommendations of books and then see which ones you like and interest - the styles and contents are often so different. While going through the books you can try to find nice YouTube videos and other stuff.

Of course you get a deeper understanding when doing some exercises, although this can be tough. I'd highly recommend finding a book that has a solution section/solution book or maybe some online course that offers that. The exercises for Experimental Physics are usually not long but can be surprising. ;) Also it might be surprising that depending on your interest a strong foundation in Mathematics is not critical, although you'll still need to wrap your head around the common math problems.

One motivating thing is that while you go through the topics (Mechanics, Electrodynamics, Wave theory, QM, ...) the frameworks and approaches are somewhat repetitive and just get more sophisticated over time.

TL;DR: pick a curriculum and combine it with your favorite material
He's a completely arrogant dickhead and while Slack has picked up users due to Corona, Microsoft and Zoom have both won much much bigger shares of the WFH shift.
Oh, there are plenty of cases where people ask me to write documents. They don’t read them though. They’re just props I’m expected to have when explaining verbally in the meeting.
Decent movie adaptation too.
Here are some (IMO) silly/potentially interesting tech projects in the Toki Pona world:

---

ilo nanpa - a calculator using the Toki Pona number system
https://www.youtube.com/watch?v=NgWCLg4H_4U

---

linja pona - a font for the Sitelen Pona hieroglyphic system with fancy character combination logic (goes way beyond the limits of my rudimentary font knowledge) - the text is all entered in latin but the font automatically converts toe Sitelen Pona (if you try copy/paste some text from the second site linked somewhere else you'll see it).

https://github.com/davidar/linja-pona

https://davidar.github.io/tp/ a website made with it.

---

I worked on a R-Pi based word processor computer thing with a custom keyboard/case/input system for the same writing system:

https://www.youtube.com/watch?v=P2nYoi2dAk4

(I ad enough time with quarantine to get it finished this week, but it's not properly documented anywhere yet ).

---

There's also been a long-standing effort to get the language an ISO code ( https://en.wikipedia.org/wiki/Toki_Pona#History ).

"In 2008 an application for an ISO 639-3 code was rejected, with a statement that the language was too young.[22] Another request was rejected in 2018 as the language "does not appear to be used in a variety of domains nor for communication within a community which includes all ages".[23]"

---

For anyone interested in learning but too cheap/broke to get the official book (http://tokipona.org), the next best thing (in my educated opinion) is the course of jan Pije: http://tokipona.net/tp/janpije/okamasona.php .
https://www.cnn.com/2020/03/22/us/georgia-coronavirus-girl-h...

Here's a case of a 12 year old getting it.
Well said, and good quote.
The claim has not been made in error. If he has never experienced the flu, but has experienced symptoms from the flu shot, then the statement "the flu shot has been worse than the flu" is 100% true.
duplicate, please don't repost so quickly: https://news.ycombinator.com/item?id=22340720
I've had good success with Anchore in the past, and yeah, missing Gatekeeper is bizarre.
Hey y’all - I am a cognitive psychologist and entrepreneurs who had scientifically validated all the best wearables with $3.5 mm in grant funding from the national institute of aging and the National Science Foundation. We are about to publish a paper that compares these wearables in the premier journal Sleep.

Essentially the sensor capacity for all of them are similar, with the Apple Watch slightly better than many of the competitors, the form factor for the oura is best. We make an algorithm that runs on many of the devices using Sonic Sleep and we found that our algorithm on Apple Watch performs the best. The oura is good too for sleep wake. Biostrap is good for SpO2. You can also buy a pulse ox that is less consumer friendly but accurate.

But DO NOT put too much value in the sleep staging. Current state of the are is bad at this.

Sincerely,

Daniel Gartenberg, PhD
You're lucky your ISP's router offers you that option. My ISP's VDSL2 router would require "unlocking" in order to get bridge mode and it can't be easily replaced.
I'm against the generalization of anecdotal evidence as much as, if not more, than the next guy, but their point about distractions like message alerts is doesn't seem like a controversial stance to me.

That statement is in line with essentially every piece I've ever read over the years on deep work, and I'm not sure why you seem to feel they are only extrapolating from introspection.
It kind off depends on what exactly you don't understand, but a book about Operating Systems and Linux Programming are probably what you want to read. They'll teach you about threads, segfault, the meaning of uninterruptible sleep, signals, the /proc/ directory, etc.
It is indeed stupid. Color and space exist on a continuum whereas musical notes and rhythms are discrete (at least within a given musical tradition), so if anything there are more creative choices in painting a tomato than in creating a song.
PCP that allows ingress connections without an established egress connection is rarely enabled. The same applies to UPnP because of the baddies.

https://en.wikipedia.org/wiki/Port_Control_Protocol#Security
Depends. Do you want pandemics to keep happening?

If you don't, then yes, animal farms in general need to be shut down. But they won't, because the world is addicted to eating meat, and pandemics will keep happening.

Speaking of which, I need to get back to work but I'll see ya in an identical comment section in four years where people will blame, oh I don't know, the eating of chinchillas or something.
That's a fair point. I wasn't aware that any state had placed those kinds of restrictions but I suppose it is reasonable when in a densely populated area. I could however see this kind of restriction getting unreasonable and unenforceable very quickly.
SSDs have enough remapping logic and get enough benefit from reduced data size to make it worth it.

SMR maybe, I don't know if it's really worth it.

For a hard drive dealing with 4KB sectors, that's a lot of trouble for almost no benefit.