skysight-inc/HackerNews huggingface dataset:
I broke into a meeting by accident once.

Someone sent me a meeting URL and I clicked it, to see if everything was right.

Little did I know that people just get one Zoom URL for ALL of their meetings.
>Why is some random anecdote (assuming it's not made up) good enough to define xxx million people?

It's not. Who told you it was?

Experience reports are still useful and interesting.
Nothing I suggested implies a runtime penalty. Quite the opposite actually.
Doesn't have to be the candidate's home address. Some use the local constituency office address, for personal security and/or to avoid stalking by nutters.
The meeting host can enable the browser client link without the hassle in their settings. Unfortunately it's disabled by default.
New AI tools help writers be more clear, concise and inclusive
Generally when it comes to hazardous materials, there's not a binary 'banned/OK'. There can be restrictions on use for given applications, restrictions on purchasing, etc. Rarely are materials completely banned outright.
That sounds logical until you actually tried it. Jobs that you don't care about are getting an order of magnitude more consuming that all these extra hours or attention you put in in jobs you care.

My approach is to demand being properly compensated and appreciated for all the extra attention I put on. Unfortunately, that's also not easy.
PrimeNow stopped for me a week ago. A considerable portion of amazon (maybe as much as 2/3) now sets delivery dates to 30 days out. I have multiple packages that are a week late with no reason reported or explainable by amazon support. I live in Austin, tx.
Which thread was this, if you don't mind?
This reminds me a lot of presentation slides that I read a few nights ago. I was reading presentation slides from Carnegie Mellon professor Heather Miller about the funding challenges that open source software projects have (https://2019.programming-conference.org/details/programming-...). So many people and companies rely on open source infrastructure and productivity tools, and while there are plenty of people contributing to open source software in the terms of donations and development, there are key open source projects that aren't getting the support they need despite the wide usage and importance of those projects.

I think one of the key challenges of this decade in the software industry is figuring out how the development and maintenance of high-quality software can be funded in sustainable ways. There is clearly a need for high-quality software that is not ad-supported, is not subscription-based, and does not monetize user data. However, the days of shrink-wrapped software and the shareware business model are over. If we want high-quality software, then we will need to come up with an answer to this problem.
Please explain how you are justifying that statement. Zoom is a publicly traded company in the USA, their HQ is in San Jose. The founder lives in the USA etc etc. Currently on LinkedIn out of the 1973 employes 1475 are in the USA on LinkedIn. Another site said they have 2532 employees, but even then that means 58% of the team is American.
I wouldn't be surprised if some other MacOS apps pull similar tricks.

Interesting that we didn't know Zoom did this until everyone started using it, and someone finally audited it.
Much of this appears to be written by a contracted vulnerability assessor.
I have performed both vulnerability assessments and penetration tests. For customers that have a specific adversary they have identified and asked us to emulate, for businesses that require a periodic attestation for compliance to standard like PCI, sometimes it is just an enthusiastic manager that wants a hacker to test them thinking they have made all the security tool deals that will protect them, and for customers that just want the findings as a report to help define future product enhancements.

I've used some very important and distinctive terms that your post failed to address;
1) Findings
2) Vulnerability Assessment
3) Penetration test
4) attestation of compliance (AoC)

A vuln scan is not a pentest, the difference is very simple. A pentest not only finds things that can be exploited, for it to be a pentest it actually needs to craft the exploit to validate them. The vuln scan is just reporting unvalidated findings, if you didnt craft an exploit you are not reporting a vulnerability yet. And always remember the rule, one in none. One instance of a finding through one test is not enough, one validation for a solid finding is not yet validation until you've crafted at least 2 tests.
And a report is not an AoC, an attestation of compliance must have been provided with evidence for all findings, not just screenshot but real evidence that the customer can replay to corroborate your finding. Furthermore, an AoC is ueless if you simply provided a CVSS, it must be risk-based and relevant to the customer. A CVSS rating that is INFO is often a HIGH RISK because the vendor CVSS didn't have the customer context to rate it but often these INFO rating offer the vectors to gain private keys and such that can be used in a multi-staged attack but CVSS is only concerned with the current context, stage-1 of the attack, it cares not if stage-2 is a disclosure of a private key and stage-n is exfil.

I really wish the so-called hackers and these so-called ethical hackers from offensive security certifications (that unfortunately make up the majority) actually spoke to their customers and learned what customers really need. Instead of being in a solo, using severely limited tools like kali, in their hoodies, and ignoring the reality of what it means to be a professional..

Take in the advice above, at least try to act like a useful part of this industry, I can't tell you how many times customers ask to get a real report after getting so many terrible failed reports wasting their money and time. Maybe more than just once this year i'd like a customer to tell me they've never had a bad experience with a so-called pentester..
I can understand you working 100% and no more. And I can live with it if I was your manage.r But no loyalty, no team spirit? No way. For me it is a two way road. I give you flexibility to work remote some days, to arrive at 10 some days, to leave earlier others, but in exchange I expect that you some days will work more hours, arrive earlier or leave latter, and maybe work some weekends. It should be a balance.
Again, it's clear that a volunteer is far worse than a trained professional. At what amount of training does a volunteer become better than nothing?

If I had to choose between an uncontrolled emergency landing, and an emergency landing done by a volunteer who did two days of training, I'd choose the volunteer every time. I understand that the volunteer does not have the training to fly or land safely and that becoming an airline pilot takes a lot of training, but that doesn't matter if there's no pilot available.

If 20% of patients die with trained ICU staff, 90% die with no ICU staff, and 70% die with a trained volunteer, and you have no more ICU staff, then the volunteer is a net positive and the volunteer has left a lot of dead people. The question is not whether the volunteer is even anywhere close to a trained professional in effectiveness, it's whether the volunteer is better than sticking a red or black tag on someone's bed and leaving them to die.
Germany to issue antibody certificates to allow quarantined to re-enter society
I think this would depend on the application. Its possibly a problem in a parser of large data, but in a network protocol or business rule its not going make any difference at all.
Assuming Command: A Guide for Incoming Company Commanders
FOSSA focuses on security audits, not development per se.

There's also EU Public License (EUPL). One notable example of software that uses it is Pi-hole.

One more interesting thing I can think of is Joinup, whose idea is to share solutions between administrations in the EU: https://joinup.ec.europa.eu/
Each meeting gets its own ID. Of course, nothing prevents someone from reusing a meeting ID though.
COVID19 – Supermarket and Pharmacy – Waiting Times Map
I think Dell U2515H doesn't have Thunderbolt, only Display Port. So I wouldn't call that a Thunderbolt display, if it doesn't have ability to chain further Thunderbolt devices.
I am hopeful this all pans out, but there is nothing conclusive about this data yet from what the WHO/CDC have been saying. I just wanted to mention that because don't think summer weather is a miracle cure :)
Just sell it as the collective consciousness of the tech zeitgeist and you can probably get a check for a billion dollars
Honestly relieved to see this being discussed. In South Africa we are currently under lockdown with the military deployed to enforce the new restrictions. I'm not necessarily against this as we have a particularly vulnerable population and can't afford to be late to implementing distancing measures.
However, the conversation towards these steps seems to be dismissive of people who raise concerns about potential abuse of power during this time or people who are more interested in learning how they plan to dismantle these emergency powers rather than how they implement them.
I heard the opposite about Japan. Are they really doing exhaustive testing?
pkg is there explicitly to let companies install sketchy shit. Any application that relies on pkg to be installed is fundamentally risky.
Ask HN: Is it possible to make patient health records open source?
Hi there!

With Google and Amazon pushing into the healthcare space and collecting lots of available patient health records, I was wondering if it's possible to make that data open source so scientists and technical people all over the world can work on solutions, instead of only for-profit companies.

I've been wondering if it's necessary to build a company to do it - and your answers would greatly inform my decision and path to start one.

The following are the questions I've been pondering about - and would love your feedback:

- Nomenclature and data formats: how hard is it to develop a common language for many different, complex data formats with different naming conventions across countries? What exists already, what has been tried before?

- Are academic institutions (think Johns Hopkins University) allowed to share datasets publicly? I know the answer is 'Yes' since lots are already doing it, but what are specific (technical and legal) barriers to consider when doing this at scale and developing one platform?

- What are generally big challenges and problems for researchers in the medical sciences, or anyone else that professionally works with patient health data?

- I know data privacy is a big challenge - no secret. But does anyone have experience with specific technical and legal issues when it come to anonymisation, publishing data from secondary sources and their legal compliance? Please share!
China passed a law, the National Intelligence Law from 2017, that residents must comply with the govt.

But even before that, same deal, since China does not actually follow the rule of law in any meaningful manner.

So any resident, or somebody who has family in China, can be coerced.

Oh, and stop being a useful idiot of the CCP.

"Huawei says it would never hand data to China’s government. Experts say it wouldn’t have a choice"

https://www.cnbc.com/2019/03/05/huawei-would-have-to-give-da...
This is what everyone’s approach should be. The product itself should be standing on the shoulders of FOSS giants. Everything else is just quality-of-life improvements and tools which should be paid for if they speed up your productivity or decrease your mental load.

Proprietary software lock-in in your product can generally be very damaging when things go wrong. I know of one company which was so throughly fucked over that they had to halt all feature development for 6 months while they were busy building a replacement. Cost them enough time and customers to a competitor. For non-product stuff, replacing proprietary software is a bitch but far less disrupting.
No-one here could possibly fall for that April fools (aka Fake News Day) headline right?, unless it is widely shared on Twitter since everyone gets their news from there?
Rikers Island Prisoners Being Offered PPE and $6 an Hour to Dig Mass Graves
Ask HN: What’s the best guide/framework for vision/setting goals
With all this spare time, I want to take advantage by creating a clear vision and setting goals.

There are a lot of random videos and guides out there, has anyone had success with a particular method?
Æternity Weekly Virtual Conference – Leadership in Time of Crisis, Apr 3, 4PMCET
Just like Maps, weather is a must have app so Apple is trying to do it in house. IMO, that's all there is with this move.
Concerns Grow over Wuhan Doctor Amid Call for Return to Work
I take prescribed amphetamine [0] twice every day. The taste of the name is not in the name, it's from whatever else you had in your mouth at the same time.

[0]: https://en.m.wikipedia.org/wiki/Lisdexamfetamine
While I'm sad to hear they're suffering, I agree about OmniGraffle.

I am a paying customer and I use it for my job... but if I'm doing anything at all I expect other people might need to edit, I can't use it. Because the other people won't have licenses, or won't have Macs.

So I use it for a lot of quick and dirty diagramming but don't really ever invest the time to take advantage of its power features, because anything that complex needs to be available for editing, even if it's less nice.
I appreciate you sharing your experience, but if I was in the room I’d be upset that you didn’t handle it better for the sake of the remaining team AND the departing employees.

The approach detailed in the above blog post is more appropriate for any situation with more than 10 employees.
> > Also fairly sure GCHQ probably bashing their heads on the table.

Core parts of GCHQ might love the potential honey pot. But their offshoot NCSC [1] will be table-flipping big time.

* [1] https://www.ncsc.gov.uk/
All of Statistics: A Concise Course in Statistical Inference by Larry Wasserman

You can find in PDF by typing it into your favorite search engine.
SO, can we establish something: There is no such thing as "fascism science" - trying to characterise a government or authority via fascism experts and such. It's all just political Phrenology.

That doesn't mean we can't be wary of erosion of freedoms, but lets not assume it has to look like historical fascism to be bad, or tied to some top-ten list of fascism indicators.
Then good luck identifying that in your interview. :) OP probably won't brag about it and instead try to come off as a normal employee.
Air pollution goes down as Europe takes hard measures to combat coronavirus
If there was an outbreak there would be bodies piling up somewhere.
Meanwhile, apple doesn't accept my app because they claim the UI sucks
They would put massive stress on airframes that are not designed for them. And (at a guess) they are probably far more accident prone than unassisted take-off, a trade-off that is not acceptable for passenger operations.
Exporting BigQuery usage logs to BigQuery
After working with TypeORM in a quite few projects I can tell that there're a lot of things that are wrong with it. And TypeORM absolutely doesn't provide "full feature support" for all 8 databases. Even some basic things are missing, like joins on delete sql queries in query builder. Simple 'set' mysql datatype support was missing and I had to add it myself. When it comes to mapping and data modeling, things are OK most of the time but it breaks when it comes to somewhat non-basic stuff like STI. Don't get me started on bugs. Any reasonable alternatives and orm developments are welcome and Prisma2 doesn't take away anything, it's a free software.
Bret's work is an example of the principle. Sublime its feature, for example, is scalable.
Since when does the US give a crap about what some international organization has to say? Couldn't have started at a worse time to do that.
Ask HN: What do security people think of Session messaging app?
I found out about Session (Loki Foundation) messaging app there:
https://news.ycombinator.com/item?id=22739683

I would like to know if someone with a security background can share their thoughts.

How does Session stack up against Signal?
It's compromised by US. One more, one less.
Use Zoom to planify when you are going to walk your dogs or what brand of flour you are going to buy. Nothing more sensitive.
Just run it in a VM, after the security fiasco where anyone could literally snoop in your webcam.
Good. I recently told my local honda dealer I wouldn't be buying another of any car because of touchscreens exactly because of the need to look and lack of tactile interaction.

Clearly this change is because of me, specifically, only me. ;)
Slightly OT, but:

> In Germany traffic lights go green -> yellow -> red -> yellow -> green, but let's pretend they're only green -> yellow -> red -> green.

is not correct if I'm not missing something major. Is there any situation where they turn yellow before turning green?
No remote before pandemic offered, 8:30-15:00 must sit in the office. Constant micromanagement. How to save €200k with cheaper hardware proposition rejected, integration test design forbidden, IDE migration middle in the project despite my protest started. My current place does not offer any balance. Edit: if I can solve my own errors on weekend I’ll do it for sure! But I am not liable for management fails.
It very plausibly won't be a miracle cure, sadly. The virus appears to be resilient, stubborn, even against higher temperatures. The infections drop considerably and do not fully subside. My primary question is what percentage of those infections (in higher temperature zones) are foreign seeding versus local transmission (eg in Singapore or Hawaii, or locations in Texas and so on).

My opinion is that combined with faster & widespread testing, better small outbreak tracking combined with more rapid quarantining (trained behavior), taking advantage of the inbound Spring/Summer temps (in the northern hemisphere that is), and getting an eventual vaccine, that is how we'll deal with the virus. It may also moderate over time, as viruses usually do (with few exceptions).
It would be really really hard to get omnifocus to be as performant in web app form as a native app
I don't think this is a good idea. It's an incentive for people desperate to get back to work (or back to partying) to deliberately try to get infected to get it over with. Especially young people who tend to think they're invulnerably anyway, and especially given the public perception of the risk profile.
shit. It seems that this recession will last for quite some time - so a good number of people will have to take up work as contractors. That sucks.
That has also passed something similar?
There is alot of people that do not have a proper understanding of what free market is, and misdirect the failing of the current markets from their proper blame point (government) to what they have associated with "free markets", failing to understand the influence that existing regulations have had on those markets including elimination of competition in the market.

Telco has not been a free market, ever.
There’s a theory that the TB jab is protective. It’s being tested:

https://www.bloomberg.com/news/articles/2020-03-30/century-o...
That's is good, constructive advice.

Just to drive the point home, recycling bins are largely land-filled in the USA. They're only recycled if the municipality can strike a deal with private recycling contractors. Often they just say no, or ask to be paid to handle it. So off to the landfill.

The bins sure make people feel good, though.
Sounds like a good use case for Scalable Video Coding https://en.wikipedia.org/wiki/Scalable_Video_Coding
> If a government anointed any given handful of OS organizations as preferred benefactors of donations, I'd expect grifters to infiltrate those organizations and parasitically siphon off the funds one way or another.

I’d expect companies like Raytheon, Cerner, Lockheed Martin, Boeing, and HPE/CSC/DXC to win a supermajority of those contracts.
So could any future AI researcher, regardless of the substrate.

I suspect this idea is so widespread at this point that these researchers and others are aware of this possibility and see the potential moral issues. I just think they believe such a thing is still decades (or longer) away, and I think they're probably right.

Right now, just about everyone wildly sensationalizes things that appear to suggest conscious man-made entities, like the AIs that supposedly "invented their own language". I think we're so eager to see it even when there's nothing close to it that once it actually does happen, we'll realize it quickly and understand the implications.

There is the possibility that it could somehow develop despite no external signs of it, but all we can do is try to be as cognizant of the possibility as we can.
Agreed its not insightful but doesn’t need to be. It's not an area where insight helps. Just good, professional process. Many people are emotional at such a juncture and having some guiderails is helpful so they can check their plan.
“Total amateurs hacking things together” somehow managed to ship something functionally better than products from mature shops like MSFT that mean serious business. The irony there.
NYC is investigating Amazon for firing a worker who protested working conditions
I'm inclined to agree. To put it another way, then: what matters isn't the substrate (neurons vs transistors), but what you do with them.

Going this route, we'd have to say that if you wrote a program that perfectly simulated the human brain, you've built a conscious system running on transistors.

It also means that if you built a RISC-V processor based on a large number of neurons (say, as many as are in a human brain), you haven't built a conscious system, despite that it's neuron-based.

I'm ignoring the obvious problems with building a RISC-V using neurons; they strike me as incidental detail, for our purposes here.
Business idea: infection as a service ...
If you can recreate (part of) a human brain through stem cells or any other way , then why would this not be a human?
People with half a brain (after an accident, say) are still people. Cloned people (twins) are still people. Babies born from artificial insemination are still people.
It's not up to these researcher to determine what is allowed to do with human brain tissue. Very troubling and unethical
Negative Keyword Tool
Unfortunately, online ordering is backed up on most sites. My amazon orders are delayed until at least April 19th.
They probably mean "red-yellow", which is an intermediate "wait for it" state in many European countries, including Germany https://de.wikipedia.org/wiki/Ampel#/media/Datei:Traffic_lig...
We’ll see whether or not climate is significant in the end. I would be delighted if the arrival of Spring on the European continent slowed or halted the spread over here.

I am a little wary that there’s a climate connection being made which could also be explained by other things - for example while Singapore and Hawaii are both warm regions, Singapore were also quick to impose restrictions, and Hawaii is a pretty isolated archipelago that has not seen widespread testing yet (the same has been said of India re testing).

We won’t and can’t know yet, but I would suggest not to buy too much into the idea of temperature being able to regulate the virus’ spread and to instead just maintain the usual, sensible distancing precautions.
I do sometimes entertain the idea of panpsychism (like perhaps a rock is conscious), and consciousness may not be substrate dependent, but I can be certain, by at least my own anecdata, that neurons give rise to qualia.

The jury is still out on this, but a big-world network with some quantum computation could be enough. The 'hard problem of consciousness' is that we can't really know by observing a system whether it is conscious or not, or rather a sort of 'zombie' that has all the features resembling a conscious being without qualia.