skysight-inc/HackerNews huggingface dataset:
"Zoom doesn't fix Windows oversight that makes Windows leak login credentials"

Sorry, but this one isn't on Zoom. This is all on Windows. You should be able to click a static link and expect it not to send your user password (or an easily crackable hash) to some remote server.

This is nothing new and can also be seen in one of tools I often use to check if my VPN is easily detectable [0].

This is Windows being vulnerable to carelessly authenticating to a remote server using an insecure protocol. Attack vectors also include email, messenger applications, QR codes, and anything else that might form an URI you can click on.

You can prevent this in your firewall by setting the right group policy [1] or blocking outbound SMB/NTLM/etc. in your network firewall.

[0] hʇʇp://witch.valdikss.org.ru/
WARNING: will try to trigger the exact same credential leak on Windows. Use with care.
[1] https://www.securitynewspaper.com/2016/08/06/understanding-w...
His comments are ignorant and frankly careless. Gates will have zero problems with a nationwide shutdown: he's the second-richest man in the world. He doesn't seem to realize that tens of millions of people will lose their jobs, businesses will collapse, crime will rise, and all sort of other unpredictable bad things will happen if the country shuts down. This isn't fixable with a paltry $1200 check that comes in a month.

Conveniently, none of this will affect Gates.
Did you read the article? It's my blog post. I wrote it. Instead of just saying it's dangerously false, explain why. Let's have a discussion instead if you jumping the flag button.

There are already cases in Europe where fruit is rotting because no one is available to pick it. If the country shuts down like Gates suggest, there are lots of secondary effects that can injure people. It's just like COVID-19, in someone's immune system, overreacting and killing more cells when it doesn't need to. That should not be acceptable in our society.
>the economy would tank either way.

If we look at the Spanish flu, the economy recovered pretty well after that, although the war also ended which may have had something to do with it. Look at it this way: even if 20% of people are really sick and can't work, that's still 80% of people working, which is way more than the near 0% of people working if there's a complete lockdown. And even in the worse case of 2% of the population dying (and all being working age; in practice we'd expect most to be retirees), that would on average reduce GDP by 2%, which is way less than it's predicted to fall if there's a 2+ month long complete shutdown.

What about if people panic and stop shopping / going to bars, restaurants etc? Well clearly there's still a non-insignificant proportion of people interested in patronising those businesses even with the virus around, otherwise lockdown measures wouldn't be necessary because everyone would be staying at home anyway.
1 week early and you end up with 1% of deaths as other countries and complaints that "too much was done", then when people rebel against the lockdown after a few weeks, deaths shoot up again.

1 week late and you end up with 100 times the deaths as other countries
I disagree with the presented interpretation of pain as a concept. That's not the same as lacking an alternative word. Be careful not to make this discussion a semantic one.

I have no reason to believe that what a Roomba feels when it approaches a descending flight of stairs is any different in practice from what I feel when I approach a precipice. Our pathways are totally different, but ultimately there is a communication from our sensory organs to our processing architecture, where an ingrained drive toward self-preservation momentarily overrides other needs. In my case, I could call it "fear," or "anxiety," or "angst" if I'm feeling philosophical. In the Roomba's case, I have no knowledge of its subjective experience, but that doesn't mean that I should draw up a new word to construct a delineation between the Roomba and myself. We are both machines, and our response to the same situation is largely the same.

How useful is it to describe pain as a "subjective experience of suffering" when neither subjective experience, nor the feeling of suffering, is directly observable? (Also, I don't agree that pain and suffering are interchangeable concepts.)

A truly useful definition of "pain" would hold water without reliance on an anthropocentric tautology. I know what it feels like to slice my hand open while cutting tomatoes. That doesn't give me any power to understand what it feels like for an octopus to lose one of its arms, or for a tree to have its branches trimmed.

What's funny is that my way of considering "pain" is not even the most divergent from yours. Many Andean cultures believed that stones, rivers, and mountains have energy, thoughts, feelings, and souls. These ideas remain in the culture to this day.

What spurs an ABS to pulse the brake line pressure when the wheels begin to slip as the driver mashes on the brakes to avoid a collision? What spurs an ant to run away when it steps onto a hot radiator? What spurs a human to stop walking on a broken ankle? All of this is programmed in one way or another, all of it is self-preservation.
Any domain that hosts user uploaded content is gonna be banned, unless they're big like twitter or facebook. This is the worst. I'm glad I never gave Cloudflare a dime.
What are the benefits of eating healthy?
MIT have designed a peptide that can bind to part of the Covid-19 spike protein
- I think it comprehensively misunderstands and mis-implements a lot of things that are important. Their “microservices” boondoggle is a whatever RPC mechanism that has no real reason to exist, their CQRS library expects the world to be a single node, their OpenAPI library is vestigial and completely separates the generation of documentation from actually validating inputs. Most of the things outside of core are rotated about 45 degrees away from where you’d expect with a holistic understanding of a web application. Stuff built by somebody who heard of a problem, not felt a problem.

- I think that the core team is bad at and refuses to improve at communicating with its community via roadmaps. Huge changes just appear, including literally breaking changes within a given major release, with little to no warning.

- I think they don’t respect what community they do have, building completely new, blessed-by-the-core-team libraries that step on existing open-source solutions in the NestJS ecosystem mostly just so the package can say “@nestjs/“ at the front of it. (Top of mind example is “@nestjs/schedule”, which is a worse take on “nest-schedule.") There isn't much personal incentive to build community tooling if the core team will swoop in and go "mine now!" without so much as a prior-work credit and it's disrespectful besides.

- They continue to build their own tooling that steps on the accepted norms and systems in the Node community. The NestJS CLI now incorporates "monorepos" that aren't Lerna or Yarn ones; they're also pushing developers to use it as their primary way of building applications, rather than invoking tsc, with the dangly carrot of "we'll write plugins for it [rather than using one of the existing ways to better handle extended compilation]". It feels like a lock-in play for future monetization (there's open rumors that Kamil is very focused on monetization, which--you do you, but as Rails and Django and even Spring showed us this stuff seems to really work better if you care about it existing to exist, and you make money off of using it) and the lack of community roadmap makes assuaging those concerns very much not a priority of the core team.

I was a big booster of NestJS a year ago and I’ve written a bunch of modules for it. I was even a personal donor to the project's Open Collective, it's the only project I've ever done that for. But I do not use NestJS for new projects because I have no confidence in the design or the leadership there and I don’t think it’s a wise use of my time anymore.
That's what I meant about gradually moving to normal life. As for hospitals, many are not overwhelmed yet! Based on projections we're not yet at peak hospital resource use at any state. I live in MA where hospitals are still OK. But projections say we will be at peak in 2 weeks and unless the state does something about it (which they do) we will have a serious shortage of beds and equipment. So a serious shutdown for let's say another ~3 weeks should help us passing the peak without major problems.
And the store owner gets the phone numbers of their customers and ca at least roughly map it to a set of sales from that time frame. If they survive this allows nice marketing in future.

But yeah, pragmatic solution.
It's also an absolute gobsmackingly terrible term to use for this application.
'The xenophobia remarks were probably more in relation to classifying it as a "Chinese problem"'

At the time, it was a "Chinese problem". It's hard to "close your borders to China" without being accused of "xenophobia" in the modern era. What's your/their concrete counterproposal for the time? Leave them open? That certainly appears to have been the implicit counterproposal being made by the accusers; what else could they possibly mean? In hindsight, how has that fared?

Or perhaps close the borders with Brazil and other countries, just to avoid singling out China, even though at the time, the disease was only in China?

The accusation of xenophobia can only float in an environment where the accusers aren't actually responsible for making concrete policy proposals. Once you have to manifest the accusation in concrete proposals, then you're playing the "are you going to be ahead or behind?" game just like everybody else, and will lose in one direction or the other, just like everybody else.

(One of the privileges of being the minority party is the ability to take shots at the majority party without having to actually propose anything concrete that would allow counteranalysis. This seems to be a non-trivial component of how the parties tend to oscillate back & forth. I phrase it as the "minority party" precisely because it isn't an accusation I'm slinging at a specific party. I've seen the cycle several times now on both sides.)
The app is built with Flutter [1], which uses Material design by default. So it's cross-platform, but uses an Android design system. I briefly experimented with making it look more native on iOS, but although Flutter is capable of that in theory, it was a giant pain in the butt in practice and not worth it to me for this app.

[1] https://flutter.dev/
It looks like whenever the scene, source, and audio panels on the bottom of the window are on screen but in the background the frame times become choppy.
IPFS doesn't have a blockchain, it's more like BitTorrent. Can you delete a file? Well, by definition all files in the universe are already defined there, as IPFS is content-addresable (the file hash is used as URL),

This means that you can actually delete the file from your local IPFS client, but if someone manages to create the exact same file and put it on the network, people will access to the file using the same link.
Show HN: Daycast – Plan the Day, Keep Track of Time, and Focus
> Shutting down rural areas could shut down food supplies, which we're already seeing with seasonal fruit pickers in Europe.

Do you really thing the government didn't think about that question ... It's not like two weeks down the line all the experts will be like "damn, we forgot about the food".

The only affected crops are hand picked fruits, which aren't a necessity. All grains, potatoes, most veggies are picked by machines, there won't be any food shortage, unless you only feed on raspberries.
> But if you lack the perseverance to keep trying for years, then maybe you're just suited better for another hobby.

I agree if the hobby you're talking about is "beating games that are intentionally hard to learn", or "solving interface puzzles".

However I think only a minority of players are into that hobby; possibly the same people who used to enjoy old adventure games (see http://www.oldmanmurray.com/features/77.html ).

I am convinced that most people are interested in playing games in general, and even if they seek challenge, it's not necessary the challenge in understanding what the game even wants.
Good for you. I doubt anyone is asking for your pity.
Folding at home now has 1M users fighting coronavirus
https://en.wikipedia.org/wiki/Bill_%26_Melinda_Gates_Foundat...

> As of 2018, Bill and Melinda Gates had donated around $36 billion to the foundation.

Yes, he is.
Check out nextdns (pi-hole like service)
Barbara Ehrenreich Looks Towards the Future
CourierPro a Software for Courier Companies
My friends who grew up in the middle east: Remember how our ISPs used to block "adult content". Did that stop anyone? It just lead to repression and a black market. On the bright side, circumventing those blocks as a kid got me interested in computers in the first place.

Regardless, it is an interesting service. I would imagine that corporations, who have the tech support and need, will find this more useful than non-technical families.

Examples:

https://www.vpn-accounts.com/blog/how-to-open-blocked-sites-...

https://www.jakarta100bars.com/2019/10/porn-websites-blocked...
What makes you say that? It operates exactly like a dead man's switch.
look you were able to find $2.4trillion for the Iraq and Afghanistan wars and your economy didn't collapse. that is 10% of your total national debt. this is not going to cost that much (and even if it does it's money better spent than on those wars).

now you are asking how do you pay it back? well you could start by taxing some of the ~600 billionaires that live there. the top eight richest billionaires own as much combined wealth as "half the human race".

so it's not like there isn't a pot of money there, and taking some of it certainly is not going to cause those people hardship. now you look at some of the major corporations and they're very low tax compared to revenue and profit and you have another pot of money that you can access again without causing too much hardship on the company.

the money is out there it's just very unfairly distributed.
Here's a question. I've read the article twice and I can't figure out what the product is. What is it? Is it a VPN service?
There are well circulated lists of dns names that are known to host various types of malware, and I am assuming this implements one or more of those lists. They have stuff like: botnet C&C domains, domains that have been hijacked to run exploits, domains that port scan the entire web just to run exploits at random, domains that mail out malware in spam, etc.
You can't compress the ciphertext encrypted with typical encryption algorithms, because the output is indistinguishable from uniformly random bytes.

But you can losslessly compress data encrypted with Caesar encryption, because it's unbelievably weak.
I'm in pretty much exactly the same boat as you. Not a fan of the PM or Premier of my province, but am not unhappy with how things are being handled.

While I have a lot of issues with the messaging (in that it could be blunter and clearer [1]), it appears to be an issue in all Western countries, so I guess I give them a pass for that.

I also have some issues with the CERB (I would have personally preferred a simple universal benefit over something you need explainers for [2][3])

[1] https://www.reddit.com/r/coolguides/comments/fmlg1y/communic...

[2] https://www.reddit.com/r/toronto/comments/fpz6g6/update_2_ce...

[3] https://drive.google.com/file/d/1lOJn7XS6ETIkbLRodYk681M_2dx...
GitHub Changed It's Favicon
Well this was one rabbit hole I would've preferred not to have visited...!
And in cases where it doesn't have any communication mechanisms with the outside world, telling it its 1990 again in 20 years isn't going to be a problem.

Yah the time on the thermostat will be wrong, but if no one has upgraded it in that long, its probably ok, put a piece of tape over it.
Studies have suggested that something like 80% of Covid-19 infections in China were not reported. In addition, recently there was credible reporting concerning the numbers of cremation urns released post-lockdown. I don't think it's reasonable to talk "tin foil hat". I do think it's reasonable to continue to seek factual answers to important questions.
While anyone technical can easily get around DNS filter it is a nice option for helping prevent accidental exposure to pornography.

I'm looking forward to when the customization options are available as an alternative/addition to OpenDNS. The morality police argument doesn't seem to hold much water if they are going to let you whitelist or blacklist anything you want or turn categories on or off.
Analysis of Google Chromium C++ compilation times
Can somebody please also elaborate what is the difference between condition system in CL and "new thing" algebraic effect handlers? On the surface I see no difference, other that the latter is being a more formalized version of conditions?
But we have same properties: 1. signal a condition to some handler(s), possibly with value. 2. reify the stack into a (delimited up to level with handler) continuation and let handler decide what to do with it: save, restart, resume with some value. Am I missing something?
Just bought it with Google Play credit to give it a spin. I don't have to record my time for work. I'm interested in it for personal accountability. I see it as making yourself step on the scale if you're trying to lose weight.
Corona and Hasty Generalisations
Perhaps we should move from "buy the software" to "sponsor the developer" idea, such as what GitHub is doing with the "Sponsor" button.
Closing the border (metaphorically) to Europe was xenophobic. Or at least an attempt to appeal to the xenophobia the administration believes to be widespread among its potential voters.

It's entirely possible for a policy to be both helpful and xenophobic. Excluding Ireland & Britain when they have higher case numbers than many European countries not receiving such favours tends to support the theory that the motivation may not have been based on scientific fact alone. So does the almost complete lack of any other measures. American citizens returning from Europe in the days after the ban were rarely tested, asked about symptoms, or to self-quarantine, for example.

And was it even useful? At the time, there were already dozens of known and hundreds of suspected cases in every US state that dared to look for them. Shutting down travel between two populations with broadly similar case numbers per capita changes nothing.

The earlier shutdown of flights from China was probably beneficial, and a policy specific to Italy might have also made sense. But if your whole political toolbox consists of closing borders, banning foreigners, and appealing to base instincts by calling even a virus "foreign" or "Chinese", it's a bit much to ask for such actions to be interpreted in the best possible light.
I dunno, California and Washington seem to be doing a better job than most, and they were the first hit in the US. First community transmission case was in CA, first death was in WA. And yet, it's places like NY, NJ, LA, and MI on the other side of the country who are having an issue with hospitals being overrun. The Bay Area took the lead on shelter in place orders and they don't have the situation NYC has. What if they took it as seriously as CA and WA?. US and South Korea reported their first cases on the same day with very different outcomes. What if the US responded like South Korea instead of the way it did?
New X-ray technique images soft-tissue tumors clearer than MRI
This is awesome! I've always thought someone should make Magic Links as easy as Facebook or Google Auth flows!
at first anything like this has to be done with the cooperation of everybody involved, there are not enough police to enforce something like this. in general most people will operate sensibly, but of course you might get some companies that are still going to try and make that money and will risk their employees and customers for it. some people are selfish assholes
Mass/rapid testing is not a thing here due to gross incompetence at a federal level. Some regions are outliers and have been able to ramp up on their own.
Without seeing the buttons and knobs in question it's really hard to see whether this is a good or bad move. I've been in plenty of cars with conventional controls that were horrible to use.

Edit: fixed typo.
The ads on this page are ridiculous. Here’s a link to the actual op-ed: https://www.washingtonpost.com/opinions/bill-gates-heres-how...
Virus is going to kill 1m in the US no matter what, even if every single person had a dedicated ICU [1]. People who can't emotionally accept that shouldn't partake in the discussion, because that's table-stakes.

[1]. https://spiral.imperial.ac.uk/bitstream/10044/1/77482/5/Impe...
IANAL, but my reading of the situation is that state governors can declare martial law. Once they do so, they have pretty broad powers that extend beyond what would usually be considered constitutional. Until that happens, I think the right to freedom of movement makes it impossible to effectively shut down interstate travel.
There is a readily available cure (hydroxichloriquine + antibiotic) that is extremely effective in every country it has been tried in, and has already been fast tracked approved by the FDA for this specific use.

This solves the fatality issue for the small subsection of the population that is vulnerable.

Yet the msm has ignored this cure. The social media networks are now engaging in censorship in private messages of this cure (personally experience). Now the only solution Bill Gates is advocating is mass vaccination of the public and a total shut down of the economy.

This is REAL terrorism.
"Some people are ahead and some people are behind" doesn't exactly contradict what I said.
Patrick, if you’re reading this, I enjoyed this article. It reminds me that if you spend a little bit more time researching your prospect, you are more likely to get positive results. Another lesson is that it helps to focus on a few prospects you really want to work with, rather than spray and pray. Thank you for sharing.
The Open Podcast Community Newsletter, the Soundwave #13