skysight-inc/HackerNews huggingface dataset:
We're a small team of doctors that redesign everyday household products to be more hygienic.

Our first product (launched in December 2019) is an antibacterial/antifungal 2-sided bath towel designed to separate natural bacteria from exposure to your face.

Several medical research studies show we spread pathogenic bacteria and fecal matter to our face when we reuse a bath towel.

Our first product helps reduce natural pathogenic bacteria exposure: https://halfff.com
December 2019: 10M daily participants. March 2020: 200M daily participants. A sustained 20x spike in usage. And it’s still working! I think that’s amazing.

Think through this situation — 90,000 schools suddenly using Zoom, children doing their classes. What is most important:
option 1) it just works
option 2) it’s 100% secure

Imagine you were a member of Zoom's team, would you not be justified in feeling proud right now?
SEEKING WORK | REMOTE only (Canada based)

More than 11 years of full stack Java experience, mostly with Spring and Angular 2+ on microservices architecture. Hands-on experience with architecture design and development of highly available and scalable systems over AWS (or Openshift), Netty, Kafka, Redis, Spring Cloud Netflix stack. Team leadership and mentoring skills, with strong sense of ownership.

Full tech list: Java (11+), Spring boot/cloud (netflix stack), Netty, Angular 2+, Microservices, AWS, Openshift, Docker, Kubernetes, Kafka, Atlassian stack (Jira, Fisheye, Bamboo, ...), TDD, test frameworks (jUnit/Mockito/PowerMock), message brokers (Kafka/ActiveMQ/SQS), SQL, NoSQL and in-memory databases (Oracle, MySQL, PostgreSQL, Mongo, Aurora, Redis), CI/CD pipeline (Jenkins), Avro, Apache Thrift.

I can easily learn new techs if you need something specific in mix with my expertise. If you don't know how to start your project and need any help to decide technologies I can support you too (it's free).

Linkedin: https://www.linkedin.com/in/diogofacin/

E-mail: diogoreis.ca . gmail . com

Feel free to add me on LinkedIn or send me an email :)
Quite a few public health professionals have stated that asymptomatic individuals, while infectious, are a very low risk vector. They don't cough or sneeze and the primary transmission rate is through droplets. I can try finding a few sources.
>I've yet to come across someone who is critical of NVC but can provide something better.

This makes sense from the perspective of seeking single, coherent, generalized system. If you embrace the chaos, complexity, and diversity of human goals, emotional experiences and communication styles, there is no need for some individual better "thing". My suggestion of "better" is to learn from a variety of sources, including NVC, but reject the premise of universality. Embrace the idea that a diversity of circumstance-dependent, participant-dependent communication styles is healthy.
The court system is the team that applies patches or updates the configuration for the Society OS.
Hi,

thanks for your reply and great work:). The site looks just amazing and very clean (especially typography). I noticed it uses utility classes like tailwindcss so thought maybe there is a similar library.
This was a really informative article, thank you.

For anybody that is interested in an Open Source example of the "mesh" that is E2EE that the article mentions (tho not scalable, without switching to SFU & doing what they say), you can check out this repo ( https://github.com/meething/webrtc-gun ) that our community built in a couple of days.

https://mozilla.org/builders is an 8 week paid hackathon Mozilla is sponsoring, and teams are forming there, thinking about building a better Open Source E2EE multi-party Zoom alternative.
American accents
>I am working on a project where I initialize some DOM elements with data- attributes and control their visibility in response to a form input change event. It would be nice to somehow run the visibility check in more of a declarative/reactive manner without having to commit to writing my templates with a front end framework and build tooling.

Here is an approach you can use:

const name = 'check-if';
const aState = name + '-state';

run();

function run() {
document.querySelectorAll('[' + name + ']')
.forEach(update);
setTimeout(run, 50);
}

function update(target) {
let selector = target.getAttribute(name);
let matchedSomething = document.querySelector(selector) !== null;

if (target.getAttribute(aState) !== matchedSomething.toString()) { //only update when change is necessary
target.setAttribute(aState, matchedSomething);
}
}

Usage:

<style>
[check-if-state="false"].conditionally-visible{ display: none; }
</style>
<div check-if="#input:valid" class="conditionally-visible"></div>

This exact code can be used for any styling based on any CSS query. It only allows one rule per tag, but in practice it's usually sufficient. In case you need multiple rules, you can wrap the original tag in another one. You can use data- attributes instead of customs, which will simplify the library somewhat at the expense of HTML readability.

You can use the same approach for enabling/disabling inputs.

If you need more fine-grained information to act upon, you simply write another library that adds it to DOM.
ELI5? Not really.

1. The metal pitch targeted (36nm) requires Self-Aligned Quad Patterning (SAQP) apparently is very very hard to do without EUV. TSMC is doing 40nm metal pitch and Samsung does 36nm BUT both of them are using EUV.

2. Cobalt https://fuse.wikichip.org/news/525/iedm-2017-isscc-2018-inte...

3. COAG https://www.reddit.com/r/AMD_Stock/comments/dk2pw7/why_it_is...
I'm not sure what to do with systems like iMessage/FaceTime under this definition, where the server doesn't hold the private keys but also the client provides no means to check fingerprints out-of-band. In these systems, the server could MITM the clients to each other and thereby snoop on client communications with the same effective result as Zoom/Jitsi. (These systems also generally support changing the peer's fingerprint without notification.) But we still call those "end-to-end encrypted," right?

Is there a meaningful end-user difference between a design where you have to ask the server for your peer's public key and the server promises to be honest, and a design where the server generates a shared secret and then promises not to use it?

(Note that this question is completely orthogonal to whether the client or server are source-available - unless you can modify the client to display peer fingerprints, merely knowing that you're going to have to trust the server doesn't really change anything.)
I think something people are forgetting when comparing Python's packaging system to other languages and runtimes is how old Python and its ecosystem is. For instance, Python's public release predates Linux's public release(Feb 1991 versus Aug 1991). The first release of setuptools was 2004 and it isn't like people weren't sharing Python code even before then (https://github.com/pypa/setuptools/commit/8423e1ed14ac1691c2...). That's over 5 years before npm was released (https://en.wikipedia.org/wiki/Npm_(software)). That means npm got to learn from Python and any other project that predated it. It also means they didn't have Python's momentum to contend with (I certainly never expected Python to become _this_ popular, and that makes it very hard to change as you literally have tens of millions of people to re-educate when you change something).

So while it's fine to say you wished Python's packaging approach was as good as another languages, please do so know that it is not fair to say that if one community got something to work for their needs it means Python should have been able to as well; it's not an apples-to-apples comparison considering the trees were quite possibly planted at different times and are different varietals.
> until a tech company like Zoom does something they don't like.

Consistently does something they don't like. Most people forgive single instances, but they don't forgive patterns as much. Especially when the patterns look like they are on purpose.
That can work for some slacks and some channels. But with others, not so much. When you're being paid to pay attention to client needs, there's only so much you can get away with.
The best thing you can do to fight Covid-19 is nothing. Stop writing that paper
I think it's probably more than just that. I think when applied ideally, NVC is just a method of character development. I think the point of the format is to create internal clarity about what is happening inside you (your beliefs and values) and in your interactions with other people. I think that sentence is about NVC, but is also just a general description of character building (at least a substantial part of it).

So yeah, people who now have a new format to say sentences in, but who make no changes internally are doing NVC wrong :)
Health care professionals are being punished for protecting themselves, and us
> - The system must maintain an incentive to return to work. Paying people 100% of their replacement income to not work will reduce the incentive to return to work.

Is there any evidence that shows this? I would think 4 months of 100% replacement income followed by no longer receiving unemployment benefits provides plenty of incentive to return to work.

>This is a difficult topic to discuss because people reach for strawman arguments about families becoming homeless, but realistically a $60K/year equivalent income is not far from the annual median household income. People can and do find ways to live on that amount all over the country.

I mean, the median household income in 2018 was 62k, and an estimated 78% of the country lives paycheck-to-paycheck. Yeah plenty of people can survive fine on it, plenty of other middle class people would be unable to afford their mortgage on it. Forcing people to sell their houses due to job loss from a pandemic seems like a pretty morally unfair system, as well as a poor economic outlook for the country.
This is why places like 4chan needs to exist. A place where someone can post anything like this without instantly being demonetized, cancelled, shadowbanned, etc.

Because of 4chan's reputation, people can assume the majority of things from there are bullshit. This also means a whistleblower can release some damning stuff and people will think nothing of it except that it's probably a joke/troll/shizophrenic rambling. And I think that's the perfect cover.
Maybe those who were violently 'other'-ed or marginalized in our dysfunctional technological society? Those who developed a subsequent unconscious (euro-centric) savior-complex? The harmful ubiquity of the lone genius myth doesn't help.

Alexander Karp talks about 'terrorists', and seems to be very patriotically committed to the American empire:

https://www.youtube.com/watch?v=gUX0hxlrVXc

https://www.youtube.com/watch?v=MeL4BWVk5-k
Well so again I think these are misattributions here. You're using language like "trust," "unashamedly," "malicious," in circumstances where "behavior," "incentives," and "value" are more fitting. This framing is why the pitchforks get yielded with such ferocity, demonization/victimization in situations that require more careful scrutiny and nuance.

> It's a local minimum that our society in it's current form cannot seem to avoid.

It can't avoid it because it is the result of incentives, not specific players. This is why it's so ineffective to brandish hostility towards individuals or even companies: others, up to and including yourself, would do the same things if put in the same positions, because that is what would be best for you (and there are plenty of rationalizations you can come up with to show why it's net good).

To eradicate this kind of thing we cannot be relegated to impotent rage with mob-issued pitchforks at industries or companies or the individuals who operate them, or play the victim card and blame the industry for "betraying our trust." The "why" of this is not an "industry consumed with greed," it is a fundamental result of technological breakthroughs in an economic environment such as ours. When you have bad incentives you will continually get bad actors, and playing whack-a-mole with them will be a fruitless exercise. We have to recognize the systems as a society, not the players, if we are to have any hope of true reformation.
Alcohol will destroy the charges that make the fabric effective for small particle sizes, according to the article.
We all saw the same news. The hammer has come down quite hysterically against chloroquine. Trump is usually a reliable liar: I presumed that journalists were banking on that fact and on disputing him as a safe way to get attention. And not doing their research.

Difficult to watch, as someone familiar with chloroquine, knowing they were spreading mistaken information about the side effects and blowing the risks well out of proportion.
This is the best response I've seen to this kind of thing.
So don't claim you do end-to-end encryption? And don't put a green lock signifying end-to-end encryption in the client when you aren't actually doing end-to-end encryption?

You act as if they're the innocent victim here. They literally made indicators and showcase them in the client to signify encryption when they aren't doing it. If you send your kids to school and the teacher says they're being fed everyday, but then you find out a year later that kids with allergies just don't get lunch, you're OK with that? Or would you expect them to tell you UP FRONT about the caveats?
A lovely WebRTC base truly e2e encryption meeting tool
If that's not true, we should be able to see an alternative to Zoom on the marketplace right now with as wide adoption as Zoom.

The fact we don't indicates there may be some reason security and privacy take a back-seat to usability and market adoption (and, in fact, it appears we've seen that pattern over and over again). "Engineering for security and privacy slows down product-to-market" is, admittedly, but one hypothesis.
Understand Django: Templates for User Interfaces · Matt Layman
Boeing 787s must be turned off and on every 51 days to prevent 'misleading data'
I hope you don't use that since it randomly returns either an element or a list of elements, so you'd have to also add an if/else every time you use it.

This is my go-to:

const $ = document.querySelector.bind(document);
const $$ = document.querySelectorAll.bind(document);

Tip: browser consoles already have these shortcuts, except $$ returns an actual array there instead of a NodeList.
Yeah, really weird statement for the author to make, particularly given that at the top of the very same section they list a bunch of cloud-based MS products.
OK, that would be serious flaw, and also the current blog post states clearly that they do, so if that's a lie, then we have a much bigger problem on our hands than whether they should be using the term "end-to-end encryption."

> To be clear, in a meeting where all of the participants are using Zoom clients, and the meeting is not being recorded, we encrypt all video, audio, screen sharing, and chat content at the sending client, and do not decrypt it at any point before it reaches the receiving clients.
there's an element of "what will people actually do". 6 feet gets the idea across while not coming across as "don't be in the same room as other people", which people will ignore.
People have this bias that Ruby only used with Rails. Yes, Rails made it popular in the first place, but it has overgrown it.
Other than data science/machine learning (because of the lack of libraries/frameworks) Ruby used in all over the place, just like Python. Ruby basically ruled the DevOps space before Go and still very relevant.

Yes, Python is winning the popularity battle no doubt on that, but that nothing to do to the language or the surrounding tooling itself. It's like saying VHS is an incredible format compare to Betamax(Yes I'm old :D).

I used Ruby (not Rails) and Python for many years by now. I think Ruby and its tooling are far better than Python's. But if anybody asked me which language should they learn as their first, it would be Python, just because there will be more jobs available.
Java Full-stack or Backend engineer

CONTRACTOR only!

More than 11 years of full stack Java experience, mostly with Spring and Angular 2+ on microservices architecture. Hands-on experience with architecture design and development of highly available and scalable systems over AWS (or Openshift), Netty, Kafka, Redis, Spring Cloud Netflix stack. Team leadership and mentoring skills, with strong sense of ownership.

Location: Vancouver, Canada

Remote: Yes, only

Willing to relocate: No

Technologies: Java (11+), Spring boot/cloud (netflix stack), Netty, Angular 2+, Microservices, AWS, Openshift, Docker, Kubernetes, Kafka, Atlassian stack (Jira, Fisheye, Bamboo, ...), TDD, test frameworks (jUnit/Mockito/PowerMock), message brokers (Kafka/ActiveMQ/SQS), SQL, NoSQL and in-memory databases (Oracle, MySQL, PostgreSQL, Mongo, Aurora, Redis), CI/CD pipeline (Jenkins), Avro, Apache Thrift.

Resume/CV: https://www.linkedin.com/in/diogofacin/

Email: diogoreis.ca . gmail . com

I can easily learn new techs if you need something specific in mix with my expertise.

Feel free to add me on LinkedIn or send me an email :)
There's such a thing. You can get asymptotically close to "perfect security", but it really is a risk evaluation game. Is it worth it to spend $20,000 to run a pen test and make sure we're not grossly vulnerable to attack? Sure! Is it worth spending $50B to develop our own hardened OS, hosted inside our data bunker with airgapped servers running on custom CPUs? Probably not. The challenge becomes how to identify when you're as good as you reasonably can be given the threats you realistically face on a budget that doesn't resemble a small country's GDP.
Single-purpose accounts aren't allowed on HN.
Those animated buttons are horrible.
How does the Approved column work? I'm assuming it means approved by you and left it to "Waiting" for now.
Camus and the Great Conundrum
The internet is now rife with places where you can organize Zoom-bombing raids
Not sure how popular redshift is in the pandas community. Certainly, we'd consider open-sourcing it but not sure if it's better to add to pandas or as something separate.
Cloudflare's margins are not easy to replicate. They have deployed a physical, global network that you cannot spin up with limited resources.

If you're not already in a position to challenge Cloudflare today, it'd take years for you to build a similarly sized network. And even if you were able to get a similar physical distribution, can you get the same low peering prices?

Then, once you have that, it's a very complex stack inherently. So getting feature parity with CF is no easy task by itself.

I'd say Fastly or Amazon could put more effort into challenging Cloudflare and see some success. But Fastly already goes head to head with Cloudflare today. So, idk who would be able to disrupt them within a couple years unless they are already on that trajectory.
CURA is an open-source design for emergency Covid-19 hospitals
>The Facts Around Zoom and Encryption for Meetings/Webinars

Is everyone doing alternative facts now ? This was a relatively simple thing to clear up, if they wanted to clear it up. They can decrypt whatever they want. So it's not end to end. Claiming otherwise was disingenuous, but putting out some PR spin on top of that is doubly so.
"Yes, but no", as analogies are.

It varies according to the case. Whether courts create law or whether they merely discover law is a matter of serious scholarly debate. Patching or reconfiguring is closer to creation and legislatures jealously guard that privilege. Courts must apply the implications of existing laws applied to novel circumstances. Code can crash, but a court must always provide an answer, even if that answer is "you have wasted the court's time".
> Do you have any sources that compare government and private savings at the two time points? I am surprised by your claim that savings were higher at the height of the great depression

Not immediately, but the U.S. was on a gold standard at the time and funded the war through war bonds (and establishment of income taxes) which were largely purchased domestically.

The gold standard bit is important because the government was not able to simply print money to fund the war.
You do know that Square Enix is not Nintendo right?
> We've found threading to work really well with teams as small as 3. (2, probably not.) I

For what it's worth, my company is (unfortunately) very chat-heavy, and I use threads in two person conversations fairly often. Sometimes conversations branch off of other conversations.
In the same vein, it would be kind of cool if there was a wristband / necklace kit that vibrated aggressively if they were placed within close proximity. For example, most people touch their face between 2-3,000 times a day. The current CDC recommendation is to not touch your face, but people do this unconsciously.

So make two wrist bands, wear one on each wrist. Then also make a necklace of some kind, and if a wristband is brought within 1-2 inches of the necklace, vibrate the wristband somehow. This will alert the person that they are touching their face and after enough use, they will hopefully do it less.
I am sorry, but it is too late. Zoom should have valued more their user's privacy. They clearly didn't and now they are trying to fix it. Too late. Trust is really hard to gain, and once you lose it you are done.

As Marc Benioff often says: Trust is the one most important value.
By reading your post it seems like you like to read and that’s all. It doesn’t seem like you want to create any sort of output.

I am sure that’s not you, but that’s how you paint yourself which is in alignment with your own assessment of your communication skills.

It is going to be very hard to get any sort of job if you portray yourself as not wanting to do any job, because in theory, all jobs need to product some output which you don’t seem to like.

I would encourage you to think about how you can add value to any company and look for positions related to your interest because even if you don’t have to deliver a working solution you will still have to produce something if you want to be employed.
It does make exception for cookies used to make the site function.
Automated Zoom conference meeting finder
Not sure why someone disagreed without a supporting comment.

Every line is fact.
>If you are trying to convince someone of your opinion, you are failing

Are you speaking for yourself or for other people? If for other people, how do you know?
Governments are once again splurging to keep big companies afloat
>> One commenter here is asking for more, for punishment, another demands their security team be fired.

Internet jerk trolls who feel they aren’t jerk trolls because they feel they occupy some moral high ground.

“I’m not a jerk troll cause they’re bad bad!”
> By framing itself as the "non-violent" option, it makes any other form of communication "violent" by default

I like and use NVC, but the naming is terrible. Violence is violence. Communication is not. Not only does the silly name throw aspersions onto other forms of communication, it trivialises actual violence and mars the actual NVC methodology, what I personally have found to be an effective way of resolving disputes.

And yes I like NVC: someone else on the thread mentioned they want to talk about their feelings with their SO, not their PM. It doesn't have to be that kind of wishy washy conversation or feel like bullshit. Here's an example:

"When we push updates without facing technical debt, it slows down our velocity for future updates as we're having to deal with things like flaky tests and infrastructure outside our configuration. I'm worried we're actually losing long term speed with our current focus"

It's a good methodology, but agreed completely on the terrible name.
I'm pretty new to Zoom. It always seems to take me a while to get to the option of using the web browser instead of the executable. Is there an easy way (e.g. URL structure) to force the web-browser-meeting and skip the download dialog?