skysight-inc/HackerNews huggingface dataset:
That's another lie. Go to HD or Walmart and ask them how long they've been out of stock for. There was never a rush in the US. Healthcare workers should have their own supply from hospitals.
so just tested out armored warfare and at full had maximum quality I get 60fps with 70% cpu utilization on a i5 6500 with the rx570 gpu
You make a useful point about older definitions and/or the world of HIPAA, and nothing else you say dilutes or undermines that.

However, I take issue with your opening ad hominem abuse. People are looking for abuses of trust. That has nothing to do with “being mad at zoom.” That has everything to do with uncovering dishonest behaviour that is detrimental to the industry.

You positioning it as some kind of emotional crusade does a disservice to people who care about important matters like informed consent.

All that being said, the factual information you shared is valuable, and I thank you for it.
Correct, if I recall correctly it has 8 sensors, 4 forehead and 4 ear side. Previous year I wanted to try again but seemed like they drop linux support and asked to reach them via mail to have sdk, so I didnt bother. If i would go now I would go with openbci project I guess
This really is false marketing, but technically what they're doing seems reasonable. Key quote:

> Matthew Green, a cryptographer and computer science professor at Johns Hopkins University, points out that group video conferencing is difficult to encrypt end to end. That’s because the service provider needs to detect who is talking to act like a switchboard, which allows it to only send a high-resolution videostream from the person who is talking at the moment, or who a user selects to the rest of the group, and to send low-resolution videostreams of other participants. This type of optimization is much easier if the service provider can see everything because it’s unencrypted... This isn’t impossible, though, Green said, as demonstrated by Apple’s FaceTime, which allows group video conferencing that’s end-to-end encrypted. “It’s doable. It’s just not easy.”

Group videoconferencing is inherently centralized through a server that needs to analyze video/audio not only for signals as to who's talking, but also mix normalized audio and re-encode streams not just for lower thumbnail resolutions, but for clients with different bitrates.

I don't doubt that FaceTime finds a way to do this, but everyone is using Zoom instead because its performance is way better. I'm not entirely sure that all the necessary signal processing can be done performantly client-side, especially when you're allowing for a wide variety of endpoints (WebRTC, phone calls, etc.). You certainly can't mix encrypted audio (at least to the best of my knowledge?), for instance, which means increased bandwidth to everyone to handle overlapping speakers (someone interjecting "could I just say something?" while two other people are talking).

Also, handling key management for groups of people where you don't have the bandwidth to re-encrypt the stream separately for each receiver is very complex too, and in the end you're basically just going to have to trust that Zoom itself can't access the keys. Because usually Zoom will be able to, so that it can handle phone dial-ins.

But regardless... while Zoom should absolutely advertise full encryption, Zoom should absolutely not advertise end-to-end encryption. That's bad, and harms user trust in security overall when advertised technical terms become meaningless.
it's a bit ambiguous. Of course the radian has that definition for a particular reason, 1 radian being the angle such that the arc length equals the radius.
Yes the CDC has been silent in the sense that whenever the public was looking for urgent leadership, they found foreign agencies and scientists developing consensus before they did.

Then the CDC wants to chip in, but by then they were no longer ahead of the narrative.

The CDC did Not give people sufficient forewarning of what’s to come, and foreign agencies, scientists, business leaders, and news media took control because they were in fact providing more signal. America is normally a beacon of confidence during crisis.
That's messed up, how could the security community have allowed such ambiguity in terminology?
Interpret Machine Learning Blackbox
> I was brought up to work diligently, not take on debt, and save - a simple approach to building wealth - but I'm concerned that will put me at a disadvantage under an economic system with negative rates.

Interesting take. Why would you be at a disadvantage and to whom would this be in relation to? I think it's fair to say that in the very long term inflation, etc will erode the value of your cash, but I imagine that there is still value in saving. I'm not sure these rates will last forever anyway.
Do you think this implication is realistic:

A French infectious disease expert publishes a paper which outlines the results of a small clinical trial and which is in agreement with anecdotal experiences in China, and with evidence gathered in vitro. The French authorities ignore their expert until Donald Trump posts about it on twitter, which they take as medical advice.

That seems insulting to France, and also like complete fantasy. In fact I would go so far as to say it sounds like something somebody with an obvious agenda would say.
Phoenix LiveView in 4 Minutes
Covid-19 Outbreak – How W3care can help to grow your online business?
Making them electric is fairly important for a carbon-neutral/negative future though.

Also even without helicopters being fossil-fuel powered, they have a number of other downsides: not nearly as safe as winged aircraft, louder, harder to fly, etc.
There is no evidence yet that immunity is even possible.

Until we know that, taking away healthcare workers, healthcare resources, and having volunteers willing to kill themselves is foolish, at best.
I love Arch's wiki and the userbase's enthusiasm. But how in the world do you think Arch is the most probable distro base for a wg user? Using your distrowatch reference, 4 of the top 5 are Debian based.
Covid-19 Trends
No, it's a reduction by a factor of 1000 or more. Doctors use them around infected patients and doctors aren't dropping dead like flies.
A simple example could be something like using TLS or DTLS between all nodes in the network. But that doesn't mean data on a Zoom server sitting in the middle of a call is encrypted.
e2e always meant e2e. What you are referring to is transport encryption, which as seen doesn't mean execatly the same thing.
As a side note, I've had a few arguments with the author in the past, so I am not a neutral party here.

There's some stuff in this post that I feel like I should address. I'm not gonna go line by line, though I could, because this will be long enough. Just gonna cover the highlights:

> My company devguard was - by numbers of deployments - the largest user of rust before we stopped using rust entirely.

I don't actually believe this is true. The link at the end has a slide that says "We shipped a quarter million devices with rust." This is certainly a big deployment, but if we just consider Firefox, Mozilla reports ~800,000 YAU, and about 250,000 MAU. I don't think this is a problem; I want people to have a good time with Rust, regardless of how big they are. But when summed up with all the other stuff, well... I only even mention this because it frames this article as "Rust's largest user is leaving."

> If you target anything else, you’ll be fighting upstream

There is no fight here. These architectures require help to support. This is how open source generally works. If the author wanted to pitch in, we would have loved the help.

We'll get back to this later.

> If you have no responsibility, you can prioritize fun over results

We take our responsibilities very seriously. If Rust were about fun, we wouldn't put so much work into stability, or performance, or anything else. This section reads mostly like an insult, so I'm not really going to get into the rest.

> The recent ecosystem break with async has put the nail in the coffin for us, because again they put the burden of actually making their poor design work on the community, again hiding the true runtime cost (TLS) away from the user while ignoring any prior work on the topic.

This has been a persistent issue with the author. He wrote his own coroutine + async io system. In the release announcement, (and on twitter) he made a number of factually incorrect statements about Rust and async/await. The largest of which that you could not use it on embedded, when that was a hard constraint on the design in the first place. TLS is not a true runtime cost, as I mentioned in a thread yesterday, async/await no longer uses TLS. This was always the plan; the initial implementation was shipped using TLS so that folks who didn't mind could get started using it. The author links to a blog post by Ferrous systems (another company using and selling a lot of Rust in the embedded space, incidentally) about how this was accomplished. It seems like this is saying that we forced other people to fix some sort of mistake. This is not the case; like any open source project, there was some work to be done, and someone did it. (I am not sure if this work was sponsored by Ferrous or not, I think it was.) I think this sort of ties back into the earlier bit about architectures; Rust is not a company, nor a foundation. We have no money. We cannot support everything internally. This is how open source works.

But even then... jschievink is on the teams. So this is the Rust team building the feature.

---------

Anyway, I wish him well with ZZ. It sounds like it's a better arrangement for all parties involved.
Except this isn’t how companies are built. If you have to rely on “motivation” to accomplish something, you’re finished. You’ll never do it, your motivation will run out. And then what’s going to carry you? This goes not just for companies, but for anything else in life, such as school or exercise.

The real way you build a company is by honing a hard discipline: getting up everyday and doing things you have to do whether you like it or not (and usually not). Whether you’re motivated or unmotivated, inspired or uninspired, sick or healthy, confident or afraid. You just get out there and fucking do it, and if you can’t, then be a failure.

A company can stay challenging longer than you can stay motivated.
I mean, they have not held a press conference since March 14. In these times, you'd think they'd have something to say since then. But maybe this is not to be expected, I can only compare to the rough equivalents in England, the one for the EU, and the one in Sweden, all of which communicate much more frequently.
Uber is trivially easy to replace with Lyft or $generic-taxi-app.
Hey! Noah here from Glimpse (author). Built this to shed light on products and services with a ton of demand and not enough supply - hoping that businesses can more easily focus on the things that matter most and be better stewards to the world in this time of crisis!
MeinkundenNewsBlog
The famous Euler's identity

e^(i * π) = -1, where i is the imaginary unit

would not in fact hold if we changed the definition of the radian. It's just the mathematically natural way of expressing arguments to trigonometric functions.
The article seems to be ignoring a critical aspect of Variolation. A quick Google on the topic indicates that it's more about being deliberately exposed to a less virulent strain of a virus, rather than being exposed to a lower initial viral load (which would also seem to make sense).

The term Variolation comes from the name of the Variola virus that caused Smallpox, but critically there are at least two strains of this virus: Variola Major and the less deadly Variola Minor. The Variolation practice, as I understand it, was to expose people to the Variola Minor strain, which apparently then resulted in at least some level of immunity to both strains.

Unfortunately, AFAIK, so far we don't yet have a less deadly strain of SARS-CV-2. Apparently there are currently ~8 strains so far, and all appear are about the same in terms of death rate.

https://www.cantonrep.com/news/20200330/8-strains-of-coronav...
It sounds to me like you've nailed precisely what the Jitsi README is talking about. Full context from the README (https://github.com/jitsi/jitsi-meet/blob/master/README.md) is this:

> WebRTC does not (yet) provide a way of conducting multi-party conversations with end-to-end encryption. Unless you consistently compare DTLS fingerprints with your peers vocally, the same goes for one-to-one calls. As a result, your stream is encrypted on the network but decrypted on the machine that hosts the bridge when using Jitsi Meet.

> The Jitsi Meet architecture allows you to deploy your own version, including all server components. In that case, your security guarantees will be roughly equivalent to a direct one-to-one WebRTC call. This is the uniqueness of Jitsi Meet in terms of security.
One thing to note here: people who administer macOS for organizations basically convert everything to .pkgs (or DMGs). Its the only easy way to silently install application, and perform post install actions like performing licensing or activation steps.
"I also firmly believe secluded property that is still accessible will see a value increase"

Maybe. At least more likely today than it was a month ago :)
end-to-end isn't some marketing phrase like "the cloud", it has a technical meaning. They flat out lied
No, most likely not. Our best theories of the brain are both computationally and evolutionarily parsimonious.
The point is that the term "E2E encryption" was never used for "there is TLS involved". Because that's not what end-to-end means.

E2E encryption was always clearly defined as "only the two communicating parties can access the information". Using the term "E2E encryption" in other ways is deliberately confusing. Edit: and pretending that E2E encryption meant something else in some unspecified past is revising history.
AFAIK many company employees can quite easily contribute to projects under an OSI approved license, while contributing to projects requiring CLA is generally much harder & requires clearing the given CLA with the legal department.

And I'm afraid contributing to a "source available" project that is not even open source will be even harder.
There are a number of reasons electric planes are better than helicopters:

1. easier to fly

2. safer in failure scenarios

3. quieter

4. more energy efficient
Because it wasn't what actually did the harm in this case. That was a lack of some kind of "--" delimiter, and not using the Bernstein checkpassword approach.

And because there are genuine uses for it. I use it in service ./run programs, for example, where simple tooling is not enough and I want shell script things like variable expansions and conditional operators.

The first reason is of particular note because it is two good practices to get used to: employing "--" as the norm; and not passing user credentials around in either environment variables or command-line arguments. (Bernstein checkpassword receives the user credentials as NUL-terminated strings over a pipe.)

* https://cr.yp.to/checkpwd/interface.html
As a note, HIPAA does not require end-to-end encryption as long as you have a BAA with the provider. Zoom has an option for a BAA starting at $200/month.

edit: Server-client communication does need to be encrypted which zoom does.
Ya, I did a ride along with the highway patrol once. 1 hour of that shift was driving to the far end of our coverage area and waiting for another car. Then blazing down the freeway in the opposite direction at 3am at top speed on what they call a "blood run" (organ in a cooler in the trunk). There are no commercial flights at this time of day and the organ was moving about 5 hours by car. This would have been much safer and faster if it were done by helicopter or small plane, but I guess if the car works then they don't have to use aircraft.
Accounting advice for startups in response to Covid-19
NYC government and health officials lied to NYCers when they told them that they should not wear masks.
> E2E now requires that only the participants be able to decrypt the content

That is the literal meaning of the phrase "end to end"... There is not much room for ambiguity there
I haven't proposed to ban exec entirely.
I've proposed to ban exec uses that just sends data into a shell.
It’s certainly no less safe than the backdoored-for-decades phone/fax networks used by medical professionals to discuss medical secrets with patients and send prescriptions to pharmacies. It’d be nice if it was more safe, but it’s hard to sink lower than a telco line.
That's the thing, though. Out here, you don't really make choices as an individual. I mean, it's a weird balance.

Lots of us live out here because we didn't want to be told what to do by a government (outside of the don't steal, don't murder sorts of laws). Some of my neighbors moved out here after living under an HOA and getting pissed off.

But when it comes to something like selling the property to someone from outside, or moving and leaving a place empty, that is always discussed in the community. It's like a weird family made of distant cousins. You don't want to leave them with shitty neighbors, but you also don't want them bothering you.

Country living is odd.
Golang Conversions – Ints to Strings and Strong Typing
The Scottish Government was pretty blunt:

“Let me be crystal clear – people should not be travelling to rural and island communities, full stop. They are endangering lives. Do not travel.”

https://www.theguardian.com/world/2020/mar/21/scottish-gover...

I believe subsequently there were restrictions introduced so that only local could travel out on ferries from the mainland - which seems pretty sensible to me.

Edit: I live fairly close to one of the main roads north to the Highlands - the last time I filled my car with petrol a couple of weeks back it was very noticeable that there were a lot of people in campers and with caravans heading north with their families.
I've elaborated here on what I mean here: https://news.ycombinator.com/item?id=22737948

It's not just how much data is trusted (though note: Professor Ferguson at Imperial appears to trust the data coming out of Italy almost completely). It's the whole set of problems.
I don't think "it's going to be around" is the main reason people are using Zoom instead of Hangouts: regardless of how you interpret Google's confusing messaging here, Hangouts is clearly not going to disappear while lots of people are relying on it in the middle of a pandemic.

Instead I think it's that Zoom is better: easier to join, it can show you more faces at once, more controls for the meeting owner, lower CPU usage, etc.

(Disclosure: I work for Google, speaking only for myself)
Show HN: Pond – Minimalistic and High-performance worker pool written in Go
Most of us on HN are well off and have the opportunity to WFH. Things aren't the same for the rest of the general public. All of those essential workers risking their necks for us should have access to masks.
The easiest and least exciting answer is to buy treasuries now as rates have not hit rock bottom and if the crystal ball said interest rates were lower in the future, bonds bought now would raise in value just like in normal times. Someone bought a 50 year government bond in Austria I think and the interest rate moved a smidge and the value of his bond went up a whopping 50%

I was laughing when greek debt was issued with sky high interest rates. Since it was back stopped by the ECB some saw it as a no lose scenario. I wonder what happened to those bonds. They aren't in default afaik.
> The National Aeronautics and Space Administration
Why did you guys use JVM at all ?

If it's for multi-core computation purpose it can be with Worker Threads in JS or CLJS.
> We are quite lucky that hours and then minutes were divided into 60 sections rather than 10, 12, or 100.

So let's say there's 20 hours a day, since presumably we'd still want to have two daily clock rotations. Those hours could then be divided into 100 "minutes" with 100 "seconds" each.

If I'm doing my math right, this would mean:

• 1 alternate-universe hour = 1.2 current-universe hours

• 1 alternate-universe minute = 0.72 current-universe minutes

• 1 alternate-universe second = 0.432 current-universe seconds

I could very much deal with this. Current-universe seconds are a bit too long for the level of precision I want with that unit, and I don't think the < 30% change in the length of a minute or hour would matter much once I adapted. And, as a consequence, unit conversions would become so much easier!

I don't think we're lucky at all. :(
With Covid-19 they are. One in Italy; 9 in the Phillippines; two in America; several in China. This is not normal.
E2E encryption meeting app for micro team, up to 7 participants
This is one take —- 0% or negative interest rates are a signal that future consumption is more expensive than current consumption.

For example, all my furniture is ~10 years old from Ikea. I’ve always wanted nicer things. The fence in the back needs some repairs. Maybe I should finally hire a contractor to fix it.
The author mentions what they did to mitigate this in the previous post in the series, see the part about XScreenSaver: https://blog.martin-graesslin.com/blog/2014/05/screenlocker-...
I haven't had any of these issues with freebsd and xscreensaver on my thinkpad.

It seems like mostly power management issues rather than the screen lock. If you removed the screen lock program entirely (remember that it is possible to run without one) this would still be a set of bug reports, eg. not suspending when you expect, not coming back from suspend..
Was actually thinking about this scenario whereby the US becomes divided between those CV19 pos vs. neg. Or insert whatever the next major pandemic will be.
> If you have Zoom installed and visit that website, you will be auto-joined to a call, and your webcam activated without any interaction on your part—even if you closed Zoom before clicking the link.

> Worse yet, uninstalling Zoom doesn’t remove the web server. The web server can reinstall Zoom on its own as well. So if you visit a malicious link, it can reinstall Zoom, join you to a call, and start your webcam, all without any interaction from you.

What the &@$##!! How long has Zoom been around, how did it become popular (or did it ever), and why are people still using it?
don't post this drivel in here.
I like this idea of "rot" more than "tau", except "rot" is already a stand-in for "∇⨯" in mathematics.
So time is a flat circle then?
I remember using sococo in a Boston based Startup Accelerator with around 30 employees - it head incredibly good performance even running from the browser and with all employees participating.

You could see a virtual layout of rooms and where you could knock and see who was in which room. It was such an innovative approach and a wow moment that is really rare. I miss Sococo until today and have never found anything like it again.

I got to know your CEO over dinner in Boston and am not surprised he threw it all under the bus. My boss at the time who introduced us tuned out to be a major scam artist who got rich peddling grey market pharmaceuticals online but claimed it was from selling a pre-web chat/gaming platform to Murdoch - he was also infamous for being the main investor of StartCom which we all know what happened to them (WoSign). The 2 guys got on like a house on fire.
>if you'd like to dial into the Cabinet tomorrow, the Zoom meeting ID has helpfully been included in this screenshot

https://twitter.com/matthewchampion/status/12449891398896640...
So the Rust community is now pushing anything with "Rust" in the title even if it's content free? There's absolutely nothing here other than an announcement that Mr. Kablink decided not to write this blog post. Yet the Rust community dutifully brigade-votes this to the front page.