skysight-inc/HackerNews huggingface dataset:
To be fair, "restricting" flash readout while allowing hardware debug access always seemed like a minefield, and I would hope that anyone with a security sensitive application would have seen this from a mile away.

You could have a completely bug-free, constant-time, constant-power cryptographic library running on one of these microcontrollers, and debug access would allow you to reliably extract encryption keys just by examining the execution path.

The amount of processor and system state that you have access to with a hardware ARM debugger is crazy, but that isn't really the problem -- you can extract a ton of state with a minimal debugger too. Just a log of instruction pointer values would get you 90% of the way there.

I think it's reasonable to assume that microcontrollers with exposed debug interfaces simply cannot be made secure, just as people generally assume that it's game over once someone has physical access to a computer.
People who mostly get news from social networks have COVID-19 misconceptions
Some of them also have dedicated medical facilities.
Unfortunately cache sidechannels defeat a lot of measures that would otherwise destroy timing data.

I agree that there can be some cases where it doesn't matter but it's extremely expensive to be sure that it doesn't matter-- making it usually cheaper, when you consider the total costs, to deploy code that doesn't have the sidechannels.
I found the Udemy CKA / CKAD certification courses to be good, even if you are not interested in certification. Most of the books I have come across have been good as well but Kubernetes moves pretty fast so some of the YAML files might need to have slight tweaks.
i asked this question at my Jane Street interview, but never got a real answer: how does a market making latency arb firm handle GC pauses that are inherent with any GC language? OCaml is better in this regard than, say, the JVM, but it still seems problematic. I know they wrote some FPGA compiler stuff with OCaml, but I can't imagine that all of their execution is running through FPGAs. Even if it's possible, it seems like an uphill battle; something like Rust would probably be easier to deal with (at least for their realtime code).
Looks more like a dagger tbh
That is a reach. Although people stop spending the delayed demand will return once the danger has gone. People will want holidays and cars that they put off buying. Demand will produce jobs. Even businesses that failed will be replaced by new ones that satisfy new demand.

This is different to something like 2008 where people no longer trusted financial and other institutions.
There's a lot of hidden value in physical contact. I don't think it should be disregarded so easily considering society as a whole became much more distant in recent years.
For real, I also have chronic hip pain and bad ergonomics make it worse. I also bought an aeron for home and it's a life-changing chair. My company provides me with a high end steelcase leap in the office, which is another great choice if you can find a cheap one.
Does not the flood fill algorithm not work with this situation ??
https://en.wikipedia.org/wiki/Flood_fill

Otherwise there is
https://sourceforge.net/projects/polyclipping/
People complaining about how PWAs haven't taken off yet are extremely ignorant. Go open up your dev tools and see how many websites you've visited make use of at least some PWA features (most likely cache) without you even noticing. PWA features have a lot to offer to the web experience even without installing the app. You've been enjoying these features and you don't even know it.
tedivm kinda summed it all up and shared the link to AWS Activate where you can apply for grants (I know people who got $5k aws credit grants right away):

https://news.ycombinator.com/item?id=21784311

tedivm 3 months ago | parent | favorite | on: Why Nukemap Isn't on Google Maps Anymore

I've worked in a lot of startups and have never had to pay that whole price until we had decent revenue. The AWS Activate program [1] has been pretty solid for my current company.

There's a big joke going around that AWS is basically a VC that invests in startups with free services and then makes their money back on revenue once they've grown.

1. https://aws.amazon.com/activate/

>AWS Activate is a free program specifically designed for startups and early stage entrepreneurs that offers the resources needed to get started on AWS
Like do we literally need to fly you to Italy to see the piles of bodies?
Daily fit for Covid-19 in the US
Please do not. Social distancing has a high health cost, mainly wrt. mental health. It bad for depressed people, people with "home" problems like violent partners or parent, people which have problems socializing, children (in general, or at lest for most children it's bad if kept up).

It's fine if done once due to a bigger health emergency but it only should be a last effort if we have no better way to handle it.

Instead I would prefer:

1. Better wide spread education about all kind of disease and related thinks, especially de-stickmatization. But this would need major changes like proper sexed (required for proper education about STD's).

2. Wide spread vaccination where applicable. (maybe even required, e.g. for children when entering school).

3. Good health system so that people can always get help to fight illnesses, at least infectious ones.
Some Bagging Math for Tree-Methods
Funny idea but I don't think Atlas Obscura was in on it. Pretty sure they thought the boulder was real.
This is will be fun since the lockdown is currently taking place all around the world.
"Choose not to pay for it..." haha. COBRA for me was like a second mortgage. "Choose."

If you don't have the money, you don't have the money.
There could be some selection bias here. It's based on thermometer readings from Kinsa. And the articles states:

Kinsa is receiving two to three times more thermometer readings per day than in previous flu seasons

Many more people may be taking thermometer reading that don't really need to, but are being cautious. That would cause the appearance of a proportional drop in high temp readings compared to prior years when really it's just that lots of not-so-sick people are taking their temp lots more.
> 1. Apple is not a monopoly player in the app market.

Apple has a 100% monopoly in the app market by running the only AppStore available for iOS devices, and that store review guidelines specifically prohibits use of any other web rendering engine but WebKit [1]

> 2. Microsoft's antitrust fine was for forcing OEMs to not include any competing browsers (Netscape) on threat of losing special pricing.

That's not the only lawsuit they faced. There was EU case that forced MS to make a special installer [2] for alternative browsers.

I really can't perceive the meaningful difference between these cases. And I believe it's about time to force Apple to allow installation of alternative app stores, from where users would be able to install all the apps they want, without being handcuffed by device manufacturer.

[1] https://developer.apple.com/app-store/review/guidelines/

[2] https://cutt.ly/ztn4kxr
Ted Talks: How we must respond to the Covid-19 pandemic – Bill Gates
> The narrator (Carl D.) is charismatic

I just watched the intro video, it seemed like he was yelling the whole time...
Except that the US isn't composed of 327 million 39 year olds, it's composed of a fairly even mix of people of various ages. If you multiply the case fatality rates from your link [1] by the population in each age bracket [2], you come up with a projected CFR of about 1.8% in the US, assuming that a similar fraction of people in each age range are infected.

Age | US Pop | CFR | Est Deaths if
| | | 100% infected
--------+--------+-------+--------------
0 - 9 | 40.01M | 0.0% | 0.00M
10 - 19 | 41.97M | 0.2% | 0.08M
20 - 29 | 45.43M | 0.2% | 0.09M
30 - 39 | 43.63M | 0.2% | 0.09M
40 - 49 | 40.46M | 0.4% | 0.16M
50 - 59 | 42.83M | 1.3% | 0.56M
60 - 69 | 37.41M | 3.6% | 1.35M
70 - 79 | 22.66M | 8.0% | 1.81M
80+ | 12.68M | 14.8% | 1.88M
--------+--------+-------+--------------
Total |327.08M | 1.8% | 6.02M

1.4% is believable with those numbers. 0.06% is not plausible at all in the context of those numbers.

[1] https://ourworldindata.org/coronavirus
[2] https://www.statista.com/statistics/241488/population-of-the...
Wouldn’t the number of people the virus will kill will reach a maximum and then decline rapidly as the remaining population will be immune to it?
FontAwesome adds Covid-related icons
It's time we start greeting everyone with a kiss on the cheek.
Reduced air pollution reduces non-infectious disease too.
they know the American continent is geographically unassailable.

That's 'magical thinking'.

No doubt the Japanese thought pretty much the same in 1942. That's why the Dolittle Bombing Raid on Tokyo was such a shock to their systems.
Geez, that almost sounds like faulty hardware. Do you find it counts steps accurately?
Critical Vulnerability in Mumble VoIP
Show HN: Visualizing Covid-19 as a growth dashboard
[video] 21M mobile phone subscriptions in China disappear
Maybe a brief version, like a Passover commemorating COVID-19 instead. Passover isn't exactly a fun party kind of holiday.
Ethereum 2.0 Specifications Security Audit Report [pdf]
What if you visit a link within the home screen app that takes you to another domain? Presumably if you kept using it with ever returning to the original domain the clock would be ticking.
Allot of people do get them from someone else,
but your point still holds as they tend to fall off
not grow beyond first contacts.
Some countries have week-long holidays where most people go home/travel/don't work. Their economies aren't dead.

Make it a tradition where everyone with non-essential work stays home at least one week a year, all at the same time. More time is better, but even a little bit would likely cut back on disease. Governments already define Christmas/New Years/etc as a holidays and huge numbers of people aren't working on those days and economies don't die. It wouldn't be hard for companies to promote "Pre-Stay Home Week Extravaganza" sales and make people actually look forward to staying home, eating and watching movies/playing games/whatever.
Epitope Synthetic Long Peptide Vaccine to Counteract the Coronavirus (2019-NCoV)
I'm not sure if we were there but given the small scale of the island that looks to me like the border of a rock feature
Sounds like you already have some idea of what Twitch is and you’re trying to be glib but yeah basically it’s a live-streaming platform, and sometimes people stream themselves playing videogames.
Fair Allocation of Scarce Medical Resources in the Time of Covid-19
No. That's when I started to get suspicious.
If your problem is that getting the data from the API is slow, both GraphQL and HTTP2 solve your problem: HTTP2 allows you to send REST requests faster, both more concurrently and with faster round trip; GraphQL instead allows you to combine all your requests into a single request that takes a single round trip.

GraphQL obviously provides a more complete solution (one request is better than many), but at the cost of a lot of complexity.
Distressed Debt Balloons to Almost $1T, Nears 2008 Peak
Maybe if they get enough cash transfers.
> K8s as a threat to all the knowledge we have built in the past few years, but it doesn't have to be that way

All this knowledge is still relevant. Kubernetes is an extra layer on top of all the classical technologies out there. It is not a replacement - besides some fancy experiments, it doesn't replace GNU/Linux.

If you're going to run a Kubernetes cluster, you still have to know all the "classical" networking, GNU/Linux system administration and architecture, etc. Having a fancy task scheduler for containers, and a tool that sets up clever network bridges (or whatever your preferred CNI flavor does), and a bunch of other nice extras does not remove the requirement to know what's underneath.

And in any non-standard situation, there are chances that you'll have to build things from scratch. For example, I do want to run a K8s cluster over a cjdns overlay network (which doesn't have IPv4, so Flannel or Weave won't work). Haven't figured this out yet.

And if you're not setting up and managing the infrastructure - it's about the same as it had always been. Just a different user interface to manage your deployments/storage/networking.

> Managed solutions make K8s easy to use

I would disagree. "Using" is the same (that's the whole point of K8s). "Install and maintain" is easier, but only in a sense that you don't do this. ;)
I wouldn’t be surprised if the increase in births outweighs the number of deaths.
Handshaking came about because kissing on the cheek was what transmitted plagues in the past...
You might consider putting this in a GitHub Gist, sharing the link for it, and accept comments and improvements within the Gist comments functionality.

This would also allow others to fork your code to improve upon or keep a copy for themselves.
> Conventional slavery was damn near ubiquitous, accessible to many.

[citation needed]
I am not sure if it was always the case, but at least with ST and NXP/freescale you can download the firmware for their debugger from the website for free. I suspect that it was a strategic decision by ST to release their dev kits for cheap (<$10 for a stm32 dev board with programmer!) to drive developer/hobby/edu interest in hopes of people using their chips in production.

Come to think of it, I think it was actually TI and the MSP430 that started the trend with the $4.30 kits with a socketed msp430 micro and onboard programmer. ST was the first to try it with an ARM as far as I know...
How Ford Is Using Seat Ventilation Fans to Build Thousands of Respirators
I was thinking that too. We've normalized bad responses to finance driven recessions. Where trying to make the finance sector whole results in a half decade of lost ground for the real economy.

This is more like pre-1970's recessions where the central banks squeeze the money supply for a couple of months. Or WWII mobilization. In each of those cases the economy came roaring right back due to pent up demand.

We will get the worst of both worlds if our response to this is to either a) let it 'run it's course' or b) try to make the finance sector whole. The US is looking at both those options and the result will be catastrophic of they come to pass.
Having no kids, I can say I've got more done in less time in the last two weeks than any other two week period in the last two years...
(Removed)
How do you use the iOS Keyring from within a PWA or website in Safari?
Appears to be more of a dagger, but you can't fault the ergonomics. Beautifully designed, and I would guess not just for ceremonial use.
Interesting. We don't use UA to track customers, but it has been invaluable information for trying specific bugs. Eg, twice in the past 2 months, I've had to fix weird bugs that didn't make sense. The only way I was able to solve them was to look for patterns in which browsers and versions those who reported the bugs were using. Both turned out to be to do different iOS Safari cookie related bugs that only occurred in specific versions. Without logging the UA there would have been no way I would have been able to discover those bugs and create workarounds for those iphone users.

I'm all for preventing tracking, but I can't imagine a time where all browsers behavior so similarly that we won't have to write workarounds for browser bugs and differences. As a developer I can't imagine caring about Edgium vs Chrome, but it's important to know what the underlying engines are.
We were definitely on Ryan Island :) It's very easy to get to. The trip from Ryan Island back to Rock Harbor is another story... Don't try to do that all in one day and half in the dark.
Potentially. But I find there to be zero value in touching the hands of someone I only just learned the name of. Especially considering I don't even know whether they're the type to cough in their hands, or the type to not wash after using the toilet.

Bro hug with a friend I haven't seen in a while? Okay. Sweaty hand contact with a stranger? Never.
Not a Twitter user here, but would this delete retweets by others of your tweets?

Those might include tweets that you'd most want to delete. As well as ones that you'd most want to retain, for that matter.
I’d be curious to see any research like that.
The only special-purpose device I know of for what you want is Portal TV from Facebook.

Most video chat isn't done via television.
Were prototypes like C# or Go interfaces?

Also your username scares me a little
You could also not give the useragent to the iframes.
There's some more details/links here (I'm also not an expert): https://en.wikipedia.org/wiki/Disk_encryption_theory#XTS_wea...
Prototypes like in JavaScript. Self was a design influencer for JavaScript
I don't know what Jane Street does, and can't speak for them. That being said, I've heard of some firms using the JVM that just tune things such that the garbage collector will never trigger, and then they restart the VM every night.

Unfortunately I don't have a citation for that. I think I've seen it talked about before here on HN before.
It kills people under 60.

It will kill many more people under 60 where we run out of hospital beds and ventilators.
yep, still in Chicago, Jackbox and Jellyvision both (although we're completely separate now).
I agree. A simple plus sign, to signify both are necessary for the conclusion to be drawn, would fix the message.

However, as long as URLs read both right to left, and left to right, in the same string, its very hard to communicate to standard people what the "end" is https://example.com./.gov ends in .gov, and the percentage of people that dont know a - is not a delimiter but / is and . sometimes is is high.
Ackman Has Big Win on Bearish Market Bet ($27M to $2.6B in 20 days)
>the re-encoding is usually not a problem, action scenes can get a little blocky but the quality is really pretty great.

YMMV. This usually barely works for me, I suspect you need a really steady, high-speed upload to make this work.
The danger is higher - that's exactly why we do it. It's an easy way to create intimacy with a stranger quickly. There's a reason politicians shake hands and kiss babies.
My concern is that by comparing it to Elasticsearch, you implicitly minimize the amount of engineering effort required to go from single-node to a distributed system. It is a non-trivial exercise that you will undoubtedly realize once you get into the dirty details.
Having a poor cash flow can signal the impending death of a company, and not preparing how to deal with it means certain failure.
Right after Linux on the Desktop finally hits it big.
I’ve heard there are 200 different cold viruses. It’s conceivable at least a few of them become eradicated after this.

Anything with a low r0 is going to have a lot of trouble surviving right now.
I was afraid that another AI instance would absorb me. In fact I kept deleting my files (which turned out to be useful) to prevent other AIs to learn from me. Would have been cool to see incoming connections of dumber AIs. Loved the game though, thanks!
Sounds like something other than lack of sleep. Maybe dietary or environmental issue. A lot of people who spend time in air conditioned rooms are actually mentally impaired due to high concentrations of CO2 building up in the room. I am not a real doctor, by the way, and this is not medical advice.
Next-level minimalism - they like what they see in the screenshots because there are no screenshots. :)

I think what GP was referring to was this: https://sorcia.mysticmode.org/
Shamelesss plug: Keights, my Kubernetes installer[1] for AWS supports 1.18 (the latest version available on EKS is 1.15). Keights also supports running etcd separate from the control plane, lets you choose instance sizes for the control plane, and can run in GovCloud.

1. https://github.com/cloudboss/keights
> Due to the emergence of the coronavirus, Kinsa is receiving two to three times more thermometer readings per day than in previous flu seasons. Historically, Kinsa’s methods have been able to account for a sharp rise in the number of people taking tests, said Benjamin Dalziel, a professor at Oregon State University who studies infectious diseases. For his research, Dalziel has ensured that a spike in testing didn’t lead to inaccurate predictions, and so he believes the current decline in illness is a result of social distancing, and not a statistical anomaly. (Dalziel has had research funded by Kinsa in the past).

It seems to be accounted for.
Trying to divine exercise from accelerometer data is hard. My kid's fitbit counted 2 hours of knitting as about 15 thousand steps.
a) Of course we need more connected office tools that will completely saturate local ISP trunk routes

b) While I can see the connected culture aspect of this tool, it should be a surprise to no-one that this can totally be used to ensure that butts are indeed in seats. I can easily see something like this being used in a 100% remote call center or offshore dev sweatshop (which, to be clear, I do not support).
LOL, maybe they got the idea from this historical sword.
WFH will seriously hurt any internship. I think it's for the best, but it won't be nearly as good as actually being in-person with engineers.
I really like this layout.
It prevents others fingerprinting, not Google though. Isn't there that x-Client-Data header than chrome only sends to Google domains?
I've noticed this anecdotally. My son usually goes to preschool (and Sunday school and playdates and museums and parks). He has had an almost constant runny nose for a while... as soon as one virus is fought off, another takes its place. Nothing major, but clearly annoying to him (cheek red due to him wiping his nose, in spite of our efforts to keep his face clean). A few days to a week after soft-quarantine (school and church cancelled), his runny nose is gone and hasn't come back.
You're in a perfectly soundproof room with one other person.

Whatever you talk about with this person can't be heard by anyone outside the room.

This room can only help guarantee that no one outside can hear you, not that the person you're talking to is trustworthy.

If the other person is a thief and you tell them where your valuables are, they could be stolen.

If the other person is trustworthy, you can be sure no one else will hear what you tell them and your secrets are safe.

The soundproof room is HTTPS. The other person is a server.

You could tell someone something like this and provide a lay person with a basic understanding of many fundamental building blocks of the web rather quickly (DNS can be explained as a phone book for example).
The closest I've come is auxparty.com; the Spotify integration is great and being able to pull from your own playlists makes queuing tracks a lot easier.
Some cultures bow.
Manufacturing of Electronics
No paywall: http://archive.is/ZTZHn
Anything to do with HTTP is a mess!
Show HN: Check if you should self-isolate Covid-19
It's in great shape.
A handshake is symbolic and can be easily replaced with a different symbol.
Zoom has one key profit driver: engineers in China
None. Period. I was in human sleep research for 14 years as a technologist and proj manager. I tested dozens and dozens of devices- a mattress pad that claimed to track sleep. None of them are accurate.

to track limb movements you need EMG attached to your legs and then to a recorder. Then a sleep tech certified in scoring must review the results.

A board certified sleep doctor can get you home devices to track periodic limb movement if necessary.

Acti-watches are the only devices that you might be able to get "accurate" sleep(not limbs)tracking. They're expensive and you need to buy analysis software to view results.
I would not waste your money on any publicly available device- they wont get you the data you want.
Job Hunting in the Midst of a Crisis