skysight-inc/HackerNews huggingface dataset:
The salary of the engineer who built it.

If you hire those security engineers, you can give them access to the source code. If you didn't hire them, there is no way to tell benign attackers from other attackers, and they can deal. It probably won't give them much trouble anyway. :)
Pretty sure people have discovered that is not reliable on some drives too, that it may only destroy the logical to physical map, and not change the actual data cells.

It is surprisingly difficult to ensure deliberate data loss
I like the effort started by Objective Development (creators of little snitch) called IPA: Internet Access Policy [0]. An IAP is a document that defines to what endpoints does an application connect too. Apple should get on this bandwagon and enforce it and the OS level, so that any application must ship this IAP document and only be allowed to connect the endpoints listed in that document. Furthermore a user should have the option to see which endpoints/domains those are, and disable some of them.

[0] https://obdev.at/iap/index.html
Italian Second Life user condemns Covid-themed fashion accessory sales in SL
Yes, it's called "REPORT SUPPORTED OPERATION CODES". If you have sg3_utils instead, sg_opcodes can be used to get the list of operations supported.
Ask HN: Why is the us Federal govt so inept
US now is the highest confirmed infections in the world. Testing is still slow at best. Governors are pleading for help to the national leader and there is nothing but reluctance to take stronger measures. What can common people do to help besides staying home so that fed govt “hears the voice” of the populous and perhaps that spurs some action
Points taken. The CCP controls all media, the story, and the narrative. I personally don't see the infected nor the deaths in the US, but this information is disseminated through via media who gets there data from the CDC and other government agencies. The CCP hide the details about the outbreak for some time and only got out via individuals who broke the news at severe fear of being punished by the CCP.

I do work with people in China, who doesn't these days, right? They report the same thing I see which is I don't see the infected or deaths directly, unless working in health care. My industry is tech so the individuals that I work with will not have first hand accounts. They only know what the CCP informs the public and we all know it is a well formulated narrative.

I believe we will never know the true depths until the CCP is finally overthrown and details are released after that time.
I prefer using 'patience' most of the time, but it is slow on very large files.
Why disagree with this, it actually will cause innovation. How, if someone is able to figure out the way to navigate the laws easily, they will then sale their solution as a service.
So when a FB, Goog or MS can figure it out, they will add it to their stuff. Also a group like EFF would make a tool to verify since it would mean that their existing tools would just be checking the server instead of each thing like Privacy Badger and their other apps do.
It was really easy to innovate the car (look, I made this out of hard pointy steel, who cares if anyone else dies). Until you had to actually made them safe, do you think society would be better off going to the old methods? Innovation is for a purpose, a lot of the stuff we see now seems to be to innovate for the purpose of innovations sake and then sell it to someone who cares.
Also do you really think people won't invest if their current methods don't work, so startup culture wouldn't die. Just system of having people who don't care about privacy not actually think things through ethically first.
No, of course not. The CCP is very well versed on tactically releasing information to benefit themselves.
It imposes costs on all attackers. The value of that cost is skill dependent, but no one has unlimited time on their hands. In other contexts, like hiding an admin login page, shutting out low skill attackers means your log files have better signal to noise, and you can focus more resources on the more significant threats.

The reason I say to think of it as a preemptive strike rather than a defense is that you still do need strong defensive layers.

This is basically just setting a compiler flag. It's free for you and costs something for the attacker.
9/11 but with Rockets this time.
> There's absolutely zero evidence to support that China did well.

There's supply chain evidence that things are going back to normal on China side. They wouldn't be able to hide all these deaths that would happen if they just told the sick people to go back to work.

Meanwhile, there's very little evidence that would suggest their numbers are lies. Sure, they weren't exactly forthcoming at the beginning - but then again, until few days ago, US government was lying even more than they did, and yet we don't assume this means today's numbers are bullshit (as opposed to being limited by still-lacking testing capability).
Depends. How big is the rest of the project? I assume the 10 lines of code you are speaking of are a delta. But depending on the rest of the project, the consequences of that small fix could reach further than anticipated.

The new system may be full of bugs, but why would the old system be any better? I've seen old systems. Some of them get their bugs fixed. Many get their bugs worked around, either by the devs, but often by the users themselves: "don't click here, it makes the program crash!"

As for Land Value Tax, do not confuse land with other kinds of wealth. Land doesn't move. Its surface doesn't change. It's market value can change, but it's not wildly fluctuating, like, say, Oil. That makes it much, much easier to tax than whatever property you build on top of it, or goodness forbid whatever precious trinket you might store in that property.

The other proposition, taxing salaries, works today. Taxing more or less salary is just a knob to turn. And at the time such taxes were put in place in France after WW2, the change was swift, and the "new system, full of bugs" worked. Communism (or something close to it) worked, in a Western, democratic country. Okay, it was only applied to school, roads, hospitals, retirement, unemployment insurance, energy… but that's already a pretty big deal, don't you think?

---

We could "just fix the tax bracket", but then my first reflex would be have a top marginal rate at 100%. I want a limit on maximum individual income. Something like $10M per year to begin with. That may seem ludicrous, to inflict such a brutal end on the American Dream itself. That's it, game over, no one will get rich ever again. But really, that dream is a lie to begin with.

Better yet, we could tether the limit to the median income. Want to get rich? Make your country rich first. That at least should appeal to patriotism, which I believe is still fairly strong in the US.
Onetime Relic, Then Hipster Fad, Milkmen Embrace Flood of Clients
Dashmap: Fast concurrent HashMap for Rust
If you don't store any data you won't need any lawyers. You don't need to store a single byte of data on your users or customers to provide a service or software using that data.
GDPR Article 79 [1]:

> 1. Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority pursuant to Article 77, each data subject shall have the right to an effective judicial remedy where he or she considers that his or her rights under this Regulation have been infringed as a result of the processing of his or her personal data in non-compliance with this Regulation.

> 2. Proceedings against a controller or a processor shall be brought before the courts of the Member State where the controller or processor has an establishment. 2Alternatively, such proceedings may be brought before the courts of the Member State where the data subject has his or her habitual residence, unless the controller or processor is a public authority of a Member State acting in the exercise of its public powers.

That sounds like a lawsuit to me.

[1] https://gdpr-info.eu/art-79-gdpr/
Yeah big players get an exception - not a good example.
The advantage is reduced server costs + more efficient use of computing resources in general. I personally am always happy to offload processing to the client side wherever possible.
^^ Yep. shared_ptr is almost perfectly useless. As a function parameter the smell intensifies.
If you're ever looking for a cherry cola replacement, Cheerwine in glass bottles is delicious. I have no idea how widely distributed it is outside of NC.
Yep that makes sense. Just tested it locally with "promoted" and it makes a difference. Probably will ditch the first ad on mobile as well. Thanks for the feedback again!
In what universe is $20k not a big impediment? Did you mean $20?
Interesting. I've almost had the opposite problem - sometimes, if I wake up in the middle of night my watch will stop recording sleep and record a new sleeping session when I fall back asleep. So every once in a while I end up with two sleep recordings for a single night.
LogDNA (YC W15) Is Hiring a Senior Software Engineer – Front End – SF Bay
Thanks for your thoughtful replies. I see one clear disagreement, and speculate about a more-root divergence.

> configurable in one place in the software just isn't reasonable [...] auto-sync doesn't have anything to do with translator update checks

Microsoft has in one place (something very vaguely like) toggles to control the uploading of web history, hand writing, voice commands, and more. Different features of different apps. With explanations of the functionality lost if the user doesn't opt-in to each. One place, for privacy preferences.

The Zotero privacy documentation page similarly gathers in one place, recipes for opting-out of network-based features, with descriptions of use.

Software preferences having a privacy section is a thing. Firefox, chromium, etc.

I'm unclear on why it isn't reasonable for Zotero software to have similar.

> we consider privacy in all our decisions and believe we've made the right calls [...] If you disagree with a specific decision, that's fine — come to the forums and we can discuss

I suggest there's currently a shift in privacy best practices, from one-size-fits-all "make the right calls", to having user preferences for privacy.

So that's the sort-of clear disagreement.

But part of it may be a deeper difference in perspectives...
perhaps call it network minimalism.

When using Zotero, I'd spend more time grovelling over previously collected papers, than collecting new ones. A task that could be done, without loss of functionality, with the net disconnected. My expectation then is, that this local tool, working with local data, will not then start using the net merely because it becomes available. Or rather, that I can easily dissuade such behavior.

Now perhaps that expectation is becoming "old fashioned", as we switch from desktop, to phone apps with only lightly bridled communication lives of their own.

Which might be an underlying issue. Zotero might be thought of as a phone app which just happens to run on desktop-local data. Or it might be thought of as a traditionally desktop application. Design decisions appropriate to the former, might feel a bit odd in the latter. "Local tool" might mean different things.

> I can't recall a single complaint about our approach

In this thread, there was someone suggesting my short paraphrasing of the linked docs was getting it totally wrong. I'm not sure how widely your users are even aware of the approach. It seems users generally aren't. Which, tying things back around, is one of the motivations for having clearly explained privacy preference options.

Thanks for an interesting conversation. Just in case you haven't seen it, the subthread with jmiserez might also be of interest.
Indeed. We don't need regulation. Nobody is forcing anybody to pay Zoom for the privilege of sending their data to Facebook.

I've been using Jitsi a lot recently and it's great! It's high-quality free (libre) open source software.
Thanks! I'll go take a look at them :)
German Kamikazes – The Leonidas Squadron
Holopix50k: A Large-Scale In-the-Wild Stereo Image Dataset
Emergency preparedness is a tiny subset of contingency planning since real emergencies are so rare compared to mundane day to day problems like a truck breaking down or too many people in operations calling in sick during flu season. The less glamorous parts of the job mostly include calling alternative vendors in a rush trying to get something or someone replaced without making it appear like they're desperate.
https://www.apple.com/ipad/why-ipad/

Giant letters: "It's designed to be secure. And to protect your privacy."
I love Aphyr's writing already!
Thanks a lot for the feedback, I hope you'll find it useful! A few more hundred files still to be uploaded!
That's fair. We don't claim that this is a new problem; we are merely adding evidence and our perspective to a known problem. We do link to others who have reported similar problems when trying to disclose vulnerabilities. The sentence saying we "discovered two wider issues" was worded poorly; in the paper [1] we used the word "encountered", and I've now edited the post to use the same wording. Thanks!

Just as important, the post is a PSA that there are 9 websites whose users remain vulnerable, and people with accounts on these sites should check their 2FA and password recovery settings. The websites are: Amazon, AOL, Finnair, Gaijin, Mailchimp, PayPal, Venmo, Wordpress.com, and Yahoo.

[1] Link to paper: https://www.issms2fasecure.com/assets/sim_swaps-03-25-2020.p...
For most people, money is a tool and not a goal.

Can you share some examples of how you've furthered humanity while living for free?
He definitely didn't name it 1976 Virus though. Oh, and would you look at that -- the precursor to the Ebolavirus we know today was called "Sudan Virus," turns out it's not racist, it's just how these things are named!
Trump Suggests Americans Shouldn’t Shake Hands – Ever Again
Have a look at Oberon or SmallTalk. Being sane doesn't really help all that much.
How does the LTV account for the labor involved in mining copper, silver, and gold being virtually identical but their values being quite different?
Be aware that for many cheap routers you can't do the VLAN tagging the "normal" way via the web interface. Like this:
https://blog.mapstrata.com/post/internode_openwrt/

For people with cheap/crappy hardware like me, if you have to set VLAN2 via the sub-interface then your config needs to look like this:

config interface 'wan'
option ifname 'eth1.2'
option proto 'pppoe'
option username 'your_internode_username@internode.on.net'
option password 'SecretPassword'

All of the above can be set via the GUI, except the "eth1.2" part.
The above works if you happen to be with Internode.
fair enough, but that's fairly stupid programming :)

/* XXX the argument might be the same as the global value
we're about to modify. API designers, eh?
*/
I don't know the answer to this, but how/why did you decide on a Delaware-based C-Corp without already having a plan for this? You should hire an accountant.
They may be without a profit motive but individual bureaucrats and legislators certainly have a power motive which is often just as, if not more, insidious.
I read it a different way.

We know deaths lag behind infections by a week or two. [1] and we know the US was a couple of weeks behind Italy and Spain in their infections blowing up.

So we'll have to wait until a couple of weeks after peak infections before we can see the true mortality rate in any given region/country.

[1] https://miro.medium.com/max/9350/1*r-ddYhoUtP_se6x-NOEinA.pn...
It's still slow on -O0, it's slow because it doesn't approach the problem of compiling a complete program the right way, like these old compilers did. The fact that everything is a file, the fact that every single header needs to /searched for/ then /compiled/ millions of times, and optimized later on, without context; that is the problem.

I wrote applications that were shipped on millions of computers in the 90s and I didn't have to make hard choices for building, the debug version were quicker to build sure, but the Release versions weren't a chore to make, and I was often building PPC/68k/debug/release in one go.

Also, this is a ridiculous defence of autoshit stuff. It hasn't been needed for well over 20 years, it's only purpose is self propagation where "oh I need autoconf blah because otherwise I can't build everywhere" where there is so much standardisation these days that there are MOSTLY TWO choices for nix systems.
Not only that but it fails* all the time, on embedded for example; it doesn't 'save' and give you portability, it just gives you a false assurance that you are doing 'the right thing' by using it, while it's broken is many other ways.

More often than not, you can replace all that garbage with a 1/2 page Makefile. Who the hell needs to check wether the compiler /works/ or strdup /exists/ and all that idiocy. Or add dependencies for stuff while 'pkg-config' exists anyway. Who the hell actually /needs/ 'libtool' when there's about (perhaps) 3 ways of making a shared library on a unix system? And who the hell want or have the time to go and debug some stupid arcane 'm4' file to fix the weird problems that comes up?

Disclaimer: I build embedded distros for fun and profit, I deal with that stuff /all the time/ and most of my 'compile time' for distros is not even spent actually 'compiling' stuff, it's spent in the 'configure' stage, and 90% of my time fixing portability problem isn't in the code, it's in the autoshit stuff that somehow breaks in some new, interesting way.
That is true. Eggshells are fairly porous, otherwise the developing embryo would suffocate. The exterior of the shells are coated with a water soluble film which allows gasses to diffuse through it, but not microbes. When the eggs are washed, this coating is remoevd and shelf life is dramatically reduced. I have kept hens for decades and even done a few tests to confirm.
Summary: People are not actually buying, huge, crazy amounts.

Rather that have somewhat increased the buying of what they normally buy, and added a few more things.

But in mass, all that small increase is clearing shelves, amking people thing it's hoarding behavior, when it is not.
Most likely sheer brute force as well considering Canada's population is 10% the population of the states.
Italy has a per capita figure six times higher than the US. Spain is five times higher. Switzerland is four to five times higher. France and Germany have per capita rates about twice as high (the French figure is much higher in reality, they're not testing anywhere near as well as Germany).

Let me know when the US has six times the per capita cases of Italy, then we'll talk.

Italy currently has a death figure roughly 40 times higher per capita than the US. If you scaled it to the US population, it'd be around 50,000 dead.

Let me know when the US has a per capita death figure 40 times higher than Italy.

Of course nobody wants to look at the disaster going on in the EU. The way the EU has entirely let Italy and Spain down. How Spain is having to beg NATO for supplies because their EU friends are leaving them to fend for themselves. The way China has helped Italy more than the EU. Some more things nobody wants to talk about: the extremely high mortality rates in Italy, Spain, France; the lack of testing in Britain; the lack of basic medical supplies across Western Europe, leaving doctors in Spain and Italy to work with bare hands and without masks; the hyper infection rates among healthcare workers in Western Europe due to poor practices and lack of medical gear; the shift to leaving patients over 60 to die because they can't help them any longer, producing the terrifying death rates in Italy and Spain.

"Spanish army finds care home residents 'dead and abandoned'"

https://www.bbc.com/news/world-europe-52014023

Bloomberg: "Spanish Doctors Are Forced to Choose Who to Let Die"

http://archive.is/Caj7r

"‘We are collapsing’: Virus pummels medics in Spain and Italy"

https://apnews.com/7ec91dc45d8d7c2ea86b0a97446a303a

"Israeli doctor in Italy: We no longer help those over 60. Dr. Gai Peleg told Israeli television that in northern Italy, the orders are not to allow those over 60 access to respiratory machines."

https://www.jpost.com/International/Israeli-doctor-in-Italy-...

Bloomberg: "Europe’s Desperate Doctors Are Shielded by Trash Bags"

http://archive.is/IRwpy

Foreign Policy: "The EU Is Abandoning Italy in Its Hour of Need"

http://archive.is/LXzxB

“Old people [in Spain] have been abandoned in an astonishing way,” said Carmen Flores, head of patient rights group Defensor del Paciente.

https://www.reuters.com/article/us-health-coronavirus-spain-...
I didn't contest the overall conclusion, but as engineers and entrepreneurs we normally have a propensity to disregard binary thinking. The numbers in your link are useful to predict expected revenue from an iOS vs an Android exclusive. The 73/17 ratio from the parent post is not, but could be misleading to someone who didn't know the app's release schedule.
Know What to Buy and What to Skip During Self Quarantine from Experts Folks
Well, if your statement is correct, then this actually lowers their death rate, the CFR (Case Fatality Ratio).

They reported 81,285 cases. So, 81,285 + 43,000 = 124,285 cases.

And 3287 deaths. So, that’s a 2.64% death rate.

At these numbers, and with the virus now worldwide, I think China’s numbers are now irrelevant. It’s better to begin focusing our energies on mitigation and containment.
What do you mean by GC semantics? Like when finalizers are run, what's a value type vs a reference type, or? I would imagine any code which relies on the semantics of a GC implemnentation is pretty broken.

In the Ruby community we discourage anyone from doing crazy stuff like using Objectspace.id2ref
Proplets: Devices for Controlling Property
> Rideshare drivers, food deliverers, Airbnb hosts, and any other types of freelance workers left out of work will be compensated thanks to the bill, with the precise amount to be determined in accordance with state unemployment laws.

I'm really curious how this will work. What qualifies you for this? Not receiving any income? Or only partial income? And how long must you go without income? Or is there some other way to qualify?

Does this extend to all freelancers? What about pass through companies?
10+ years ago there seemed to be a rise in interest for precast stone blocks, seemingly part of the larger trend in precast blocks (e.g. foam blocks), which in turn seemed like a precursor to the 3D-printed hotness. One project in particular, using precast faux-limestone blocks, has stuck with me: https://www.scrapbookscrapbook.com/DAC-ART/building-concrete... Not sure that's ideal for a humid Alabama climate, but seems perfect for a drier, mediterranean environment like in California.

Is that stuff--specifically large, precast stone blocks--forever in the future, at least in terms of wide availability and construction know-how? Have the costs even come down?

EDIT: This DAC-ART seaside cottage used aluminum framing for the roof: http://www.concretecottage.com/roof-framework.htm That's what initially popped into my head regarding the question of why use aluminum over steel for construction. michaelbuckbee's post about the Dymaxion house elsethread is probably on point regarding what the article author actually had in mind.
Micropatching Unknown 0days in Windows Type 1 Font Parsing
Chinese company shipped out millions of Australia masks,sanitiser,glove supplies
Personally, I'd want to have the source and run that software myself - how else could I trust that the app developer didn't bribe you or find an easy way to subvert your detection?