skysight-inc/HackerNews huggingface dataset:
I'm surprised nobody noticed this bug at Apple before the release. Is there nobody there that connects by hostname to a ssh server with a port > 8192?
So, I got around a issue like this in the past by using url fragments. I imagine the same thing could work for zoom?

Basically you would join a meeting by going to zoom.us/meeting-id-number#secrethashtag

The "secrethashtag" is never sent to the server, but can be accessed by javascript on the client end. Im not sure if this would be acceptable for security nuts though, as I am sure they would make the argument zoom could insert some nefarious js to intercept the url fragment.
Interana wasn't acquired. the just sold/transfered the employment contracts.
Mental note for future blog post: the secret to getting onto the front page of HN is to publicly state that I do not want this blog post getting onto the front page of HN.
Well, it will be still here in the same way Fortran is still here. I.e. while now it does not seem to bad, there will come a time where people will wonder why anyone put up with coding in C, when it was so prone to making bugs with things that could be automated away. In exactly the same way we now frown on goto statements. But, underneath it all, there will be this layer of C-code on top of this fortran code on top of this assembler code.
It seems like this field is at about the same stage of progress as image recognition was in the 90s when researchers were trying to getting a handle on MNIST-type tasks.

I wonder how much the language embeddings learned by the transformer are reflected in the actual physical structure of the brain? Could it be that the transformer is making the same sort of representations as those in the brain, or is it learning entirely new representations? My guess is that it's doing something quite different from what the brain is doing, although I wouldn't rule out some sort of convergence. Either way, this is a fascinating branch of research both for AI and the cognitive sciences.
15 days ago was a different universe of testing capacity. Oregon had done less than 500 tests then and was still using the initial (semi-flawed) CDC tests. We've done almost 13,000 tests since then (I live in Oregon). Not to say we're doing enough yet, but it is a totally different situation today in Oregon and elsewhere:

https://www.deptofnumbers.com/covid19/oregon/

edit: that link is to a site I built to track testing capacity and new case growth.
> how are you doing this exactly? a 50 way diffie-hellman that renegotiates every time a user leaves or joins?

By doing whatever Signal and Whatsapp do to support 50-person encrypted group chats.

> you have managed to double your egress

Not at all.

Firstly, the whole point of having two streams is to accommodate viewers with different bandwidth requirements, so the second stream will be a fraction the size of the first. If I'm already uploading HD video at 5 Mbps, and I start also sending an SD stream at 1 Mbps, my egress has risen by only 20%.

Secondly, the h264 spec provides for 'Scalable Video Coding' [1] where a high quality stream can have a lower quality 'subset bitstream' allowing a high-quality video to be converted to low quality by selectively dropping packets. So your egress might not rise by even 20%! Although this h264 feature is less widely used, potentially raising engineering costs.

[1] https://en.wikipedia.org/wiki/Scalable_Video_Coding
Hence the massively upvoted SO thread ;p : https://stackoverflow.com/questions/11227809/why-is-processi...
I'm on mac OS 10.15.4. SSH has worked on all betas and the official release from Apple.
TensorFlow MLIR: An Introduction
You can get a second home outside of the NYC area for under $70k. It can come to as little as $15k down and $500/month all-in including utilities/taxes/*. Not chump-change but certainly not "rich" levels of money.
That article is incredibly misleading in what it leaves out: by using same logic, our existing CA system is equally a “backdoor”.

We have certificate transparency to help address that, and were DANE to be in actual use similar systems would quickly appear, for example using the RIPE Atlas.

DANE is not a backdoor. To exercise it as one would require replacing operator-controlled keys with government (or other) keys. This would be no less visible than doing the same with an existing certificate authority.
And I can tell you just as certainly, out of my own experience, that you're wrong about that. If you appreciate the place where you live for its own sake, the worst thing that can happen to it is an influx of people who appreciate it only for what they can turn it into, and who also have the financial power to do so.

Whether or not they're nice people is maybe not entirely orthogonal to whether their behavior has a noxious effect, but it's certainly close.
I’d make things even simpler. If you don’t have a long haul truck, you’re not moving between states.

For essential work, I have no answer.
It doesn't rule it out in any particular case.

It just makes it rarer in the population, so to speak. Sure, people can make whatever choices they want and wants vary. However, people make the economic choices on average. If these are individual people making choices, then we get a distribution of choices.

Mostly these are companies though, collections of people making a common choice. Shareholders are not going to divide up their $1.5m dividend and chill when there's a $150m offer on the table. We barely even have the financial institutions to do that.

"Lifestyle Businesses" are also not always peaches and cream.

Say meetup is resold cheap because no-one can meet up irl anymore. You buy it and you are now the "Lifestyle CEO" of meetup. You have the inglorious & immediate task of downsizing all the VC/WeWork fat the company is carrying. Or, you could raise money and "grow into" your expenses. So, either you are raising money again and not a lifestyle company anymore or you are making deep cuts.

Walking back to a "lifestyle Businesses" from this position is not a choice that gets made often, unless there's no choice.

Finally, startups exist within startup business culture... meetup certainly. Giving up an growth is equivalent to failure. Successful companies grow fast, everyone gets promoted. Options convert. That's the culture.
Instathings: Automation Protocols via API
You'd have to go to the courts to get a transportation ban overthrown, and they'd be reluctant to intervene. By the time you were successful, the crisis would (please, hopefully) be over.
> For some reason

unfamiliarity with the term "leverage", probably
https://opensource.apple.com/source/OpenSSH/OpenSSH-235/
>>I don’t want to end up on Hacker News again bitching about Catalina.

Hahaha
Thank you for taking the time to write such an eloquent, in-depth exposition of your POV. Highly enlightening.

This is, in part, why I feel it's flimsy criticism when people attack macro-economists, without clearly articulating where they disagree or preferably offer a better theory.

It's just such an incredibly complex field. And unlike mathematics where you can control all the variables and construct a proof that lasts till the end of time, in economics you're dealing with many hidden, dynamic variables (which are susceptible to butterfly effects). It's hard to run the experiment again sort-a-speak.

Thanks again. Thoroughly enjoyed reading your take.
The Unlock Cloudflare Worker
Shit, I'd be like fire me...

It's way too easy in this environment for people to act selfishly. I don't giving people excuse is the way to go.
Why does 0% interest rate mean that it's hard to prosper?
What do you mean? The post doesn't contain anything about rust.
totalitarian dictatorship intensifies
One of the blog posts I keep meaning to write is in the vein of "Why C is not portable assembly." Ironically, most of my points about C failures aren't related to UB at all, but rather the fact that C's internal model doesn't comport well to important details about machines:

* There's no distinction between registers and memory in C. A function parameter that is "register volatile _Atomic int" is completely legal and also makes absolutely no sense if you want C to be a "thin" abstraction over assembly.

* There's no "bitcast" operator that changes the type of a value without affecting the value. The most common workaround involves going through memory and praying the compiler will optimize that away (while violating strict aliasing semantics to boot).

* No support for multiple return values (in registers). There's structs, but that means returning via memory because, well, see point 1.

* Missing machine state in the form of vector support (which is where the lack of the bitcast becomes particularly annoying). The floating-point environment is also commonly poorly supported.

* Missing operations such as popcount, cttz, simultaneous div/rem, or rotates.

* Traps are UB instead of having more predictable semantics.

* No support for various kinds of coroutines. setjmp/longjmp is the limit. You can't write zero-cost exception handling in C code, for example. Even computed-goto (a source-level equivalent of jump to a location held in a register) has no C representation, though it is present in some compiler extensions.
> at the direction of a...COVID-19 expert

There aren't any of those.
yep - I'm one of the meshtastic devs and that was our thought as well.

* use off the shelf hardware, so user can just buy a finished device from China
* make it cheap
* Make something useful for people in general (without disaster) - then they will have it when the disaster happens.
Using a port above 8192 and connecting by hostname?
A good way to think of it is that C is how computers worked 40 years ago.

A lot has changed since then, but computers put up a lot of effort to pretend that they still work similarly, and most other programming languages have put up a lot of effort to figure out how to make things work for a "C computer".
Wilderness areas, at least in the United States, are best thought of as vast gardens where natural processes of predator-prey relationships, flooding, fire, etc are left to play out without much human intervention. If anything, we're re-creating a landscape from before Paleo-Indian settlement.
First postwar passenger plane of Japan was transported to a theme park in Tokyo
Some mobile phone apps may contain hidden behaviors that users never see
How to Hack Facebook Password
In clojureland we fallback to java for doing anything processor intensive.
We are not oblivious. First of all, we are not really trying "to replace C." Second, a tremendous amount of work has been put into specifying Rust. It's just also a tremendous amount of work. Like, "the EU has given grants of millions of Euro towards working on it but we're still not done" amounts of effort.

C did not have a standard for 18 years, it was first created in 1972, and ANSI C didn't appear until the spring of 1990. I'm not suggesting that it took them 18 years to write a spec, it's that it wasn't really needed for a long time. Expecting Rust to have one after five years is aggressive. Some languages have done this! I think we'll end up somewhere between what C did and what C# did, in this regard.
I think the point is if testing is tightly constrained you can't know much about how many cases you really have.

We'd actually want some kind of randomized survey testing in an area to understand the prevalence there, and do it over time to understand the arc, but we aren't doing that -- we still can't test all the people who have a need for am immediate test.
You're right, it's more of a design issue. More explicit permissions on altering the Applications folder could help. Then again, most people want an easier install so this is really for those who want that extra control.
Thank you very much for writing this. I needed this.

I recently joined a new workplace and realized that everyone around me were talking too much for asking simple questions, questions which would normally require a sentence or two.

My previous workplace was small "startup" company around 20 employees, where questions in conversations were simple and straight to the point.

This is inconstrast to my new workplace which is a big corporate company with a few thousand employees. I honestly felt a little stupid the first few weeks.

Unfortunately, my take away from reading this, is to turn my child like questions into more adult like, to fit into the corporate culture.
An online game based on the novel 'Providence'
Could you elaborate a little bit on the 'induce a simple binary signal from the unconscious'? That sounds fascinating.
Or, you know, decrease the failure rate of people legitimately attempting to install Zoom. It's quite reasonable to ask why on earth apple requires more than one click for a user to say "I want this program to run on my computer; make it happen."
Pseudo-code:

a = 10;
b = 20;
c = b + 30;
bar = a + b;

x = 1;
y = 2;
z = y + 3;
foo = x + y;

... in order to remove dependency stalls might be executed as:

b = 20;
y = 2;
a = 10;
x = 1;
c = b + 30;
z = y + 3;
bar = a + b;
foo = x + y;

This would still be true, even if 'x' and 'a', 'y' and 'b' etc. variables (well, registers) had same name. In that case CPU would just make up new "variables" as required and do the same transformation!
My guess was the same as the parent poster's -- the pictures of the monkey grabbing the phone, from the phone's point of view, belonged to the tourist, right? Because the phone belonged to the tourist? The photographer must have acquired those rights afterwards. (Although I don't recall the outcome of the copyright case of the monkey that took its own photograph back in 2014...)
Warren Buffett talks about how cash is a bad thing to have over time as it can’t keep up inflation (1). He does advocating having enough on hand to “sleep at night”. But you really can’t build wealth by stocking money away in a savings account.

Trump and his administration could have really done something awesome. He essentially got given the golden ticket for presidents: create a legacy. T. Roosevelt had parka, FDR had the new deal. Eisenhower built highways (which he copied from Hitler’s autobahn). JFK said we would put a man on the moon (and ultimately did).

Trump could have said hey, let’s build high speed rail across our country! Let’s reinforce our highways. Let’s dump a bunch of money into building new schools or paying teachers more. When the virus is gone the economy will be humming! The markets would have soared. The U.S. would have had something qualitative to show for the $2T line of debt we just took out on ourselves.

(1) https://www.cheatsheet.com/uncategorized/history-and-warren-...
When was the last time that the United States had a deflationary period during good market conditions?

This might be a pretty new condition for some people.
Explanation: https://maxbarry.com/2020/03/29/news.html
"If you can, offer something of interest to a wider circle. Like, if you can drop everything and work 16-hour days for two weeks to build an online game based on your novel, then your followers might enjoy that and pass it along to others. The game, that is."
"It just works" -- Is Apple too large now? Is this a QA problem, product team problem? Management? Catalina is still stumbling and Im surprised to be honest after the past 4 years.
How to Promote a Book During a Global Pandemic
Microcode is not used for the majority of operations. Are you confusing it with micro-ops?
Another post to my collection of how macOS works flawlessly and Linux breaks stuff when it comes around again.
I think the biggest point where C is more "how the computer works" vs. a lot of languages is when you write an allocator.

I've noticed in, say, an interview context, that people without a lot of C experience have a lot of trouble reasoning about how an allocator might work, or where memory comes from, or even that some constructs in their preferred language result in memory allocation. With C you can't hide these details.

Yes there are abstractions beneath you, both in software (your OS has set up the MMU) and hardware (cache, out of order execution) and also in the C standard itself (assumptions about pointer types, the precise meaning of the stack). This doesn't take away from the point that reasoning about allocations is more of a thing.
It's a bit more nuanced. Hipaa (two a's) does not require the type end-to-end encryption that most devs come to think of.

Generally, Hipaa does require transport encryption from the client to the server processing the request. The importance here is SSL/TLS should be terminated at the app server.
The right decision.

And why would it be? Why should private actors be able to invent new criminal liabilities simply by publishing various terms of service?

Spotify: "If you listen to The Jackson 5 on our streaming service from a location in Ohio on a Tuesday, that is a violation of our Terms of Service."

Federal judge: "You heard the man. Off to jail!"
I'm not sure a company can make their own definition of "end-to-end encryption" and say they're E2E because they meet their own definition of the term.

Sure, they're legally in the green perhaps. But this is not E2E, it is not the decades-long definition of E2E, and this is ultimately deceptive marketing.
> Despite that instruction to stay home with pay, he came on site today, March 30, further putting the teams at risk

The employee was exposed to another employee who tested positive for covid-19. They asked him to stay home with pay for 14 days and he came back to the building to protest, putting other employees at risk.
>The heart problems are from short term use in combination with azithromycin.

Is this true? I keep hearing this but it is not supported by your source. It seems that it is the azithromycin that is of concern, and with a death rate of 47 per million. Is there any data suggesting this is worse when co-administered?

>Chloroquine, and its more contemporary derivative hydroxychloroquine, have remained in clinical use for more than a half-century as an effective therapy for treatment of some malarias, lupus, and rheumatoid arthritis. Data show inhibition of iKr and resultant mild QT prolongation associated with both agents. Despite these suggestive findings, several hundred million courses of chloroquine have been used worldwide making it one of the most widely used drugs in history, without reports of arrhythmic death under World Health Organization surveillance.4 Nonetheless, the absence of an active drug safety surveillance system in most countries limits reassurance from these observations.

Azithromycin, a frequently used macrolide antibiotics lacks strong pharmacodynamic evidence of iKr inhibition. Epidemiologic studies have estimated an excess of 47 cardiovascular deaths which are presumed arrhythmic per 1 million completed courses, although recent studies suggest this may be overestimated.6-7 There is limited data evaluating the safety of combination therapy, however in vivo studies have shown no synergistic arrhythmic effects of azithromycin with or without chloroquine.
Well, I'm coming from the Javascript side, where people use promises a lot for async, but it's almost impossible to trace execution in the debugger. It's usually immediately obvious to me that many exceptions and failure modes have been missed, but I find it difficult to reason about large promise chains and I usually have no idea where I would add more error handling. It tends towards a big ball of spaghetti.

Then if something does fail (wifi blips out without a retry, who knows) the page just hangs with no indication of what went wrong.

Contrast this with Unix-style synchronous blocking code piping data between threads with no shared state. Since every step of execution happens in a single thread, blocking until a pipe returns data, it's trivial to step through the code.

Async/await really becomes a problem in Javascript though because they made it a language keyword in Node.js. So you never know if you are dealing with a sync function or async function. Eventually the entire program has async in front of everything and ends up being written just exactly like sync blocking (but with superfluous syntactic sugar everywhere). So I question what was really gained there. IMHO it just doubles the workload in the mind since now we have to juggle both types of functions and explore those permutations. That's the last thing we need when we're trying to brainstorm a solution from a large possible search space.

I'm also looking at this from a one-shot functional programming perspective. I realize that sync blocking code blocks the main thread, which is usually the GUI rendering loop. There are ways around that though. The best solution I've seen so far is Apple's Grand Central Dispatch:

https://en.wikipedia.org/wiki/Grand_Central_Dispatch

https://www.raywenderlich.com/5370-grand-central-dispatch-tu...

https://www.swiftbysundell.com/articles/a-deep-dive-into-gra...

Basically it works by being sync blocking and providing simple ways to run closures on other threads. I find it much easier to debug than async/await though. Rust probably already has all of that functionality, so I don't understand the advantage of copying Javascript model with all of its caveats. I think what's happening is that people just want to run with the context they're already familiar with.
Probably not. I doubt I’ve used a port that high.
The worker was exposed to covid-19, was told to quarantine, and came back on site anyway.

This strikes me as an egregious safety violation and a truly excellent reason to fire the worker.
My point was that many people who just now come into C fall into the trap of thinking that it [almost] exactly mimics hardware. Which is an easy mistake to make if you are new to the thing because it's taught as if it's a panacea and sadly many people believe those university courses.

As for former colleagues, oh well, we all learn and grow. I chose to bail out because something as non-deterministic as a C's code stability when cross-compiled for anything more than two systems turned me off. Different strokes, different people.
The micro-architectures are reasonably documented enough (e.g. we know what each the execution ports do, that register renaming is a thing) and if you look at e.g. Agner Fog's instruction tables [0] that map macro-instructions onto latencies and port counts, that gives a pretty reasonable picture of what's going on.

[0] https://www.agner.org/optimize/instruction_tables.pdf
The differences between some neighboring states is really interesting. Ohio and Michigan have similar population sizes and demographics, but Ohio is projected to be in good shape at peak, while Michigan is trending towards disaster already.

I'd like to see this data alongside a timeline of when governors and mayors made the decisions to close schools and businesses. Would be interesting if even a delay of a few days made a difference in flattening the curve.
You can send faxes to someone without the telco running a local webserver on your fax machine, and you don't run thousands of other applications on your fax machine, and your fax machine doesn't usually come with a nifty record feature, nor a camera and a microphone.
This is gambling. If house prices or stock markets go down you suddenly sit on a big pile of debt. The debt is low interest rate but it’s still debt.
Yes, the project used to associate itself as a git for data, but I guess not in the sense of a db.
Completely depends on the organ. Kidneys can survive outside the body for 1-2 days, while heart and lungs only survive 4-6 hours and are typically transported via ground or air ambulance, depending on distance.

Source: https://www.organdonor.gov/about/process/matching.html#expan...
Sadly, I mean it. Don't want to go through this again. Taking down the post for now.
I think this is a super interesting idea. It feels like the natural progression of this would be a set of UI tools to rest on top of JIRA / Trello, or a new task management platform of its own. Basically, a way to create the "gameplay" automatically in the UI