skysight-inc/HackerNews huggingface dataset:
No info in your profile to DM, but I'm interested in this as well. I'm a third year CS undergrad in the Bay Area, I'd really appreciate the opportunity. My email is "jobs (at) ameyathakur.com"
Well Bezos said this publicly as well. I’m not interested in giving a whole sale defense of everything amazon does. It’s a huge company. But there is a world shortage of PPE as you’ve probably noticed, so if we diverted supply to ourselves over delivering it to hospitals, that seems like the wrong call. Don’t you think?
I swear procreate was much more expensive than $10 when I bought it. I can’t find evidence of it being reduced, maybe my memory is faulty.
> What in the world happened?

Business incentives changed.

The early iPhone/iPad app ecosystem focused on showcasing creativity. The UI was new and unique, and apps were created to take advantage of the gyroscope for games, or the audio input for apps like the guitar tuner thing in this article.

But that doesn't put food on the table, especially if the land baron is taking a 30% cut for every sale.

Why bother creating complex apps that push device capabilities to their limits, when what the majority of the market wants to do with their phones is tap away at a Candy Crush/Clash of Clans clone, or scroll mindlessly through one of 3 social media apps?

It simply became more lucrative to create clones of products where market demand had been validated, and stuff it full of ads and in-app purchases.
The flipside of this is that you can open an Excel file and expect a full VBA application to begin running immediately.

Or well, luckily someone eventually realised that that wasn't a good idea so now they just open with a big warning saying that the file in read only mode. Hopefully you also get some more intelligible warnings when it actually tries to run VB code.
It would also result in headlines constantly talking about “Trump Lied About $X”, instead of “falsehood” or “baseless allegation” or whatever weasel word they pick that day to avoid saying what everybody already knows to be true.

Or to put it another way: remember the Obama-era scandal of the Tan Suit? Take that level of spite, and apply it to the most incompetent toddler to ever grace the office of President. That’s what an opposition press would look like. If you have a problem with this, I really don’t think you could handle that.
Lossy compression reduces entropy, I'd expect fewer repeats and more of what looks like random data in any compression worth its salt. Thomas also mentioned AAC, not PCM. I agree on the silence, but it would come up as smaller packets, not repeated packets, IMO. And then we're back to timing analysis of speech.
> Meanwhile, for any target an independent researcher can lawfully assess, the researcher retains the ability to ignore the bounty program and publish straight to Twitter.

I've had vuln disclosures go bad before and after the rise in popularity of bug bounty programs, so I'm probably qualified to chime in here.

Before HackerOne, the default for a company that didn't receive vuln reports well was to threaten you and/or your employer with lawsuits.

This happened to me with Bullhorn and Intuit, despite my investigation and reports being unrelated to my employment. They ultimately went no where, but I imagine the conversation I wasn't present for was, at best, awkward.

Last year, under one of my aliases, I found a vuln in Credit Karma, and the H1 triage staff declared it out of scope. So I posted it on Github/Twitter.

Instead of threatening to sue, CreditKarma asked me to pull the tweets/gists and walked back the H1 triage decision and ultimately awarded a bounty for my finding.

Thus, I don't buy the chilling effects narrative the article tries to sell. It actually made security research more normalized than it used to be.

Just my unsolicited $0.02
Bookshop fulfillment is handled by Ingram Content Group, a massive book distribution and logistics company, and itself the biggest distributor to independent bookstores.

Disclosure: I work for a child company of Ingram
I am fairly confident that the article is not trying to imply that Chrome/Safari are NOT standards compliant. The author seems to be trying to heavily emphasize that this is not a Firefox bug, and that Firefox can legitimately do this while being standards compliant.

I feel like the author was anticipating a lot of people blaming Firefox for this incident, and is attempting to shut those responses before they get made.

I think that trying to write to the responses you expect from your audience unfortunately ends up with these kinds of miscommunications of intention more often than not.
You realize this fails because you can spoof Caller ID. The Caller ID was from the bank, so if you had the bank in your contact list, you'd have no protection.
> To what extent should Google pay AM General, Ford, GM, Honda, Toyota, and so forth for the use of their vehicles' appearances in Streetview?

None. Google captured photos in public, they didn't put those vehicles there, they don't want them there and they don't add any value to streetview.

It's hard to compare that to Call of Duty where activision is intentionally modeling, texture mapping, animating and rendering someone else's design for the express purpose of adding value to their product.
Kurt Gödel – The Brilliant, Paranoid Mathematician Who Refused to Eat (2018)
Yeah, I think that most LBO's should be taxed out of existence. The industry is a destructive and parasitic.

https://www.youtube.com/watch?v=qs1DhA91fm0
>One protects others (surgical mask), and one protects others AND the wearer (N95).

Maybe you didn't mean it that way, but that sure sounds pretty absolute to me.
What are some of the most interesting or unusual ways someone can get US citizenship in theory or in practice? Can an executive order do it?
Gamepads have been available for the iPad since at least 2013.
How The Elements Came to Be
Silphium, a drug that induced abortion https://en.wikipedia.org/wiki/Silphium
Might be a bit... Forcibly put, but I gotta say that PostgreSQL is one of my favorite pieces of software ever created. And I don't even like C all that much.
How to Turn DNA into Music
If someone claiming to be from your bank calls you, it isn't safe to hang up and call on the official number, unless you call the bank on a different line. The original call doesn't end until the calling party hangs up, and they might spoof a dialling tone and then a ringtone.
Did u-boats typically even have the capacity to transport the number of people on the ships they sank?
If you have an office where random people can walk in off the street and out again unfettered, that's probably an even greater vulnerability to your company than anything Zoom is doing.

It's like having a car company and saying, "I don't know why anybody would want seatbelts in their car, our cars explode when hit at over 5mph."
Mark Suster: Hard Decisions Require Empathy
Ask HN: What about a hybrid between a single and multi page app?
Is there a best practice between these two approaches: a single page app vs a server generated multi page app? I’m mainly looking to optimize developer productivity.
The EU and the US comprise several nations, so why does that not make sanctions "international"? Conversely, are international sanctions ever applied by literally every nation on earth?
Not sure if this makes sense, however, I've always preferred MariaDB to Postgres because it feels lighter. And I haven't really come up against any significant limitations in MariaDB that would make me want to switch to Postgres.
https://www.bbc.com/news/world-europe-52092395

https://www.scmp.com/news/china/diplomacy/article/3077428/ne...

Some claim the masks are deliberately faulty
How do you spoof "dialing tone" on a smartphone?
I largely agree, but a couple points I'd like to challenge:

Is hardware corruption really happening and making it into the WAL stream with checksums on?

The next point, on planner hints: it's really just something that hasn't been done. If a few engineers made plans to tackle the problem, a lot could be done in a couple releases' worth of work. In the mean time, people are getting by with various half-measures anyway, such as extensions[1], planner tunables[2], and statistics tweaks[3].

The only dogma is that a half-baked solution isn't wanted. It's got a lot of architectural impact and long-term supportability implications. And a lot of different use cases that need to be considered that may drive different technological solutions. "Make plans stable/managable" is a different use case than "I know something the planner doesn't" which is different from "Make the planner do this thing because I said so".

[1] https://github.com/ossc-db/pg_hint_plan/blob/master/doc/pg_h...

[2] https://www.postgresql.org/docs/current/runtime-config-query...

[3] https://www.postgresql.org/docs/12/sql-createstatistics.html
How could you be sure you didn’t just help heist someone’s bitcoin that this Russian snatched with some malware?
I was quoting a news article about the "organizational root cause assessment". Sorry you were confused.
Create Learning Plans
I'm with you on this analysis. CAFO or factory farms have made meat much cheaper; likewise with globalized supply chain. Abundant Florida waterfront real estate – and low cost of air travel – has contributed to a comparably increase in supply of seaside villa substitutes.
I mean, if there is proper 2 factor authentication set up, it would be much more difficult for this scam to work. Most banks in Asia issue you a physical security token, which if you lost you'd need to get it replaced in person.
"A few decades ago you would have never heard about two ships colliding with zero casualties unless you worked in the shipping industry or maybe the Venezuelan government."

"You" being someone who didn't read printed material like newspapers and magazines before the internet became mainstream.
Trial drug can significantly block early stages of Covid-19
Twitter explicitly blamed Firefox for the behavior, so the anticipation is warranted.
This is yet more propaganda. If you want to know how to wear a medical mask, you can find out on YouTube. It's not rocket science. Yes, without a professional fit test, you may not get an absolutely perfect seal, but you can do a quick pressure check by exhaling and feeling whether the mask is holding pressure. If you do this pressure check you will be getting very substantial protection from the mask.

You wearing a mask is not taking anything away from anyone. It is rational protection. Many people have (non medical, but N95 or similar) masks sitting in their garage.

Those masks are not doing anyone any good sitting around. If you have masks and are going out not wearing them, you are putting healthcare workers lives at risk, because you could be spreading or contracting the virus. You or someone else will then go to the hospital and potentially infect a healthcare worker. The best way to protect that healthcare worker is not to give them a mask, it's not to expose them in the first place. If you want to donate them, that's a great thing, but the main thing is that masks should be worn, not gathering dust.

If everyone had been wearing masks for the past month, we wouldn't be in this situation. Let's not perpetuate the nonsense.
When you put it like that, yeah, mobile app pricing is messed up.

Compare that to desktop programs like Adobe Creative Cloud, which costs more than $500 a year. Or console games, where the console costs about $300 (Switch Lite) and a single game costs almost $100.

(All priced CAD, rounded.)
It's also possible he had access to rare supplements that enhanced performance; a modern equivalent would be a banned PED or Performance Enhancing Drug.
I'd run it.
I'm going to correct myself. My family member didn't get scammed!

There is a government agency cold emailing people, telling them to fill out a form that that asks for Bank Name, Account Number, and Routing Number.

https://imgur.com/a/5loIfnW

Way to teach people to be safe.

At the same time the IRS is telling people to avoid scams by not clicking links in emails: https://www.irs.gov/newsroom/irs-issues-warning-about-corona...
I chuckle because rsync.net purchased a few "Witch"[1] licenses and my accountant's auditor who was going through last years expenses came across a charge from "manytricks.com" and sort of sheepishly said " ... I think this might not be a business expense ...".

I had to explain that it was, in fact, and showed her the software that we had licensed ...

[1] https://manytricks.com/witch/
I'll post our project here, we have some good open issues they are pretty easy and help to know the code base.

It's a code generation framework written in Go and uses https://cuelang.org which we believe is an up and comer.

https://github.com/hofstadter-io/hof
The US is always the source of all evil, so it's odd that Venezuela apparently has separate issues with Portugal.
that’s still a boatload of duckets (ducats, for the intelligentsia). it would have bought basically anything you wanted. $400MM is roughly what lebron james has made from basketball (aside from side hustles), so the comparison of best athlete of his time is likely apt at least.
Sorry can you explain? Do you mean installing a VoIP app on your phone?
Nice one. The key is the `-c copy -map 0` option which preserves the same codecs and stream metadata. This makes the edit operations nearly instant too.

While on the topic of ffmpeg uses, here is a script I posted that speedup videos by a factor of 1.5: https://news.ycombinator.com/item?id=22584131 (use case record an unscripted screencast or demo with lots of pauses and uhms, then speed it up to make it look like you are super well prepared and caffeinated --- hidden bonus: if demoing a software product it will appear to be 33% faster!)
Fucking lol. Do you think that medical workers use some ultra special procedure to get a seal, when they use N95s? This is bog-standard PPE that construction workers and hobbyists have been using effectively for years and years.
Yes, apparently math can be challenging. Healthy young people with no underlying health issues are at very low risk. South of .1% mortality.

The arguments given apply exactly to the presently executed plan, just over a year’s duration. During which time, 75% of businesses will be extinguished.

Good luck with that plan, hinging on keeping the elderly and those with health issues isolated for a year. I’m sort of sickened to imagine the horrific outcomes of the current plan to isolate millions of unprepared city-dwellers....

But, I guess that’s not our problem?
So what would happen if instead of loan forgiveness the US government decided that for all existing contracts it is currently March 31st and will continue to be March 31st for the next 60 days. At that point a lot of things stop Getting but I would assume a lot of things break as well. The closest thing out there to just stopping time.
Global Online Music Streaming Grew 32% in 2019
There's already a massive shortage of masks so I don't what lying about it and then changing stances during a crisis is supposed to accomplish.

But given their failure with Covid testing early on, it doesn't surprise me to see them bungle.
The banking system (checking in particular) is hopelessly dumb, but that information is printed on every check. It isn't top secret.
Regulating browser standards so that a commercial org can't publish browsers that don't comply. Much like how cars are regulated to be "road legal".
I don't seem to any benefit here. In fact it takes away from the experience of going to a bookstore and everything related to it; at a higher cost and with a delayed delivery. Besides is this site a non profit? For all I know they might get acquired and then we all will get to see that last email.
"Factories are skipping QC and sacrificing quality in favor of volume, and also scammers are trying to cash in on the skyrocketing demand" is way more likely than "China is making deliberately faulty masks". Come on now.
Never got SSMS working on my work laptop. Showed the splash screen and that was it. Weird
CDC says all Americans should wear masks
> ULA didn't lose very expensive government satellites with no explanation.

Are you talking about Zuma?

There's "no explanation" because it was a classified launch, and the indications we do have are that it was an issue with a Northrop Grumman payload adapter.

ULA's perfect score is a bit of a cheat, as the rockets they launch were inherited. The first flight of the Delta IV Heavy, for example, was a partial failure... but happened before ULA's formation.
English is not my native language. I think you understand what I meant.

Publishing houses are not a middleman in the same way walmart is a middle man. Before you get your book, it has been edited, formed and designed. Plus, and again, we’re talking indie here, it’s most likely part of a concept. Don’t you have a collection, a compilation or had ever bought a book by its cover?
Is it possible to eliminate the phone number? It was needed in old days, and many people today use over-the-top services like WhatsApp and FaceTime. Companies use phone number to track us and scammers use it to swindle us.
Sure nothing wrong with the format of the backups, that makes total sense. What doesn't make sense is executing things in those directories.
Forgive me but I don't feel like the article in any way actually states they refuse to honour the government's demand. What part of the article mentions that?
True. The form also asks for SSN, DOB, address, phone number, etc.
That sounds to be completely dependent on the type of team you have: have you asked them what they think?

In an ideal world with a decent project and team setup, there should not be much difference. If, however, there are a lot holes to plug with every change (eg missing tests, process overhead, manual integration or deployment), productivity will suffer.
When to Use the Clean Architecture?
Hi Peter, I got my H-1B. How long do I have to wait to apply for a green card? thanks you so much.
You haven't seen the videos maybe? People spitting in masks (in China, purportedly) and doorknobs and elevator (in Europe, purportedly). Not a proof and not directly related but I wouldn't put it past China. It shocks me when they claim they have 0 new corona virus cases. If they're lying about something as basic as this, what else are they lying about.
Does MariaDB have documentation?
It’s hard to do when you get home with 0 brain power left after working for 8-10 hours straight doing mind-numbing work
It's a meaningless thing to debate. To the extent coercion comes in to play, trust breaks down, so you can never know what's really going on. That's why bullies lose in the long run, but probably so does everyone.
No where in the linked statement does 3M say they will not comply. They point out potential issues that the order may cause but do not say they won't comply.
So as long as the victim has time machine enabled and had an attack tool on their computer within the TM timeframe… the attacker could at any time re-initiate that tool from the grave? That's a huge security logic hole…
Yeah, authors have tried mixing the strategy you described(self-supervised learning) for semi-supervised tasks.

Basic idea is to learn generic image representations without manual labeling and then finetune that on your small dataset. These are relevant articles I have wrote on it:
https://amitness.com/2020/02/illustrated-self-supervised-lea...

https://amitness.com/2020/03/illustrated-simclr/
Agreed. Public sector has more coasters and people milking the system at low levels. But the people who actually get shit done are way more competent than the Fortune 50.
> If I took your attitude where should people live: not in California where earthquakes are more likely than the average, nor the Midwest where tornadoes are, nor near an ocean where storms could happen, nor mountains where landslides can happen.

There are actuarial models that deal with these types of risks. The bigger risk for a bank is if your business model isn't sound.
Or China rubbing their feet on masks before packing them.
Covid-19 vaccine candidate shows promise, research shows
In addition, remember that we’re effectively testing nobody. The only young people seen in hospital with Covid-19 are probably the “tip of the iceberg” — this is the tiny portion that has serious issues. What is says is: there are 10x? 100x as many with Covid-19, exhibiting minor symptoms. Which may be a blessing in disguise.

I think, when we finally see any statistcally significant sampling including antibody tests, we may be pleasantly surprised at our progress toward herd immunity.

We have no good information presently.
> It's not at all clear that coughing directly into a thin t-shirt stretched over your face is "better" than coughing into your elbow or hand

Yes it is. Are you more likely to subsequently touch other things with your exterior appendages or your face?
Government has signed an Act prohibiting 3M from exporting N95 masks from the US, what you read isn’t an article it is a 3M press release stating 3M will not comply with the Act and continue to export N95 masks
That masks would have to be considered contaminated anyway under the current(far from apocalyptic) circumstances
Ask HN: What does your production database look like?
Interested to see what others use for “core” business logic databases at $DAYJOB. Mostly asking about SQL, but anything goes.

Industry: Industry-specific Enterprise SASS (startup)

Database: Postgres

Table count: About 150

Application type: Web server, monolith.

Use vs other data stores: We run almost all our data through postgres, dumping large objects to s3.

Description: We have a core set of tables/columns for domain modeling that don’t change much, and lots of accessory tables for application features that we add to at a pretty fast clip. I suspect this is similar to other enterprise sass companies of our size.
Apparently, the US has the nice problem of a competing market whereby states and hospitals bid up the prices to that legally ambiguous area called "price gouging".

I presume it's much simpler to avoid being accused of gouging and selling to countries which pay prices according to supply and demand.
Because they're right, but in a way you don't want to hear, so you want to make it so they can't say the truth that you don't like?

And what would "nationalizing" them look like, anyway? You realize that they're a multinational corporation, right? You could nationalize the US part, but you'd lose the rest of them. Even solely for purposes of the respirators, the result might not be better than what they're giving you now.
https://mariadb.com/kb/en/documentation/
What happens when the start time doesn't match up with a keyframe? Presumably some re-encoding has to happen there?
No, it’s Great Depression levels. You can tell from suppliers.

I just got some equipment quoted with a 2 week delivery guarantee. A month ago there was a 10 week backorder due to Chinese supply chain issues.

The overall market is imploding. Once you see prices drop, that’s it.
Thank you for clearly articulating why using AES-ECB here is not as bad as the penguin image everyone seems to know. It's still a bad choice - you really need to prove to yourself that your data stream isn't susceptible and it's honestly easier just to use an appropriate stream cipher mode.

I absolutely agree that the real deserved flak is for saying "end-to-end encryption" when that's clearly not what's happening. Honestly, I don't know how they could make their product work as well as it does with actual end-to-end (consumer to consumer) encryption. Self-hosted solutions can do this but their servers are doing a lot more than ferrying raw data streams around. That's why their meetings work so well with 200+ participants.

They also deserve criticism for saying AES-256 when they're using 128-bit keys, but like you said it's not a security issue. I suppose they could be referring to TLS that they use to set up connections and meetings rather than the stream itself but that's a stretch.
Some WeWork Staff Planned Their Lives Around a Stock Deal That Just Collapsed