skysight-inc/HackerNews huggingface dataset:
This is an insanely flawed design and the responses to it are 100% factually correct in their assessment. loadbalancer.steampowered.com could still respond with a bad entry just as long as it fits the "https://*.steampowered.com" pattern.

If the application does some sort of SSL pinning you may have to MITM the handshake but that's not outside of the realm of possibility for a sophisticated attacker.

I know it's just an example of how something COULD work but I strongly disagree that the following is correct:

> The worst the attacker can do in that scenario is cause the app to see network failures

Also - it's worth noting that all of this DNS talk really makes the whole SSL discussion moot. This is exactly why things like DNSSEC exist. If I'm able to point your traffic wherever you're done.
Why should infections follow a bell curve? Shouldn't it be the derivative of a the logistic curve, which should be approximately exponential on both ends. I don't see how a quadratic should show up in the exponent; either mathematically or epidemiologically.
Why are you going 'all in' in your first or second hand?
For the past few years it was not unusual for a company to ipo within 12 months of raising a seed round in biotech. In my experience, biotech investors are still using 5 year fund horizons etc which make them far far more impatient than tech investors. Tech has had private markets willing to pour billions in to allow companies to stay private for over a decade (airbnb, uber, etc) at huge valuations, while biotechs have been pushed to IPO ASAP
I thought the compiler was free to pretend loops without side effects always terminate, and in that sense it is already a "correct" optimization? Or is it only for C++, I'm not sure?
Could someone comment on how this compares with Ryzen Threadripper (e.g. 3990X)?
For the dotnet world you can use and extend https://identityserver4.readthedocs.io/en/latest/
It's worth looking at Denmark, Austria, Czechia and other European countries that have already started loosening restrictions this week. Like California, they locked down fast and flattened the curve. Now, Denmark is opening school and all three (plus Germany and parts of Italy) are opening smaller non-essential shops.

I haven't found great info on how well these countries have implemented contact tracing, but they do have per capita testing rates much higher than the US (and vastly higher than California).

Here's an interesting article that describes some of the specific precautions Denmark is taking as they open up some schools tomorrow: https://www.thelocal.dk/20200413/schools-and-day-care-centre...
Additionally, notice that the orange data points (actual hospitalizations) are significantly under the "With Intervention" plot. So why even include the slide? Clearly the assumptions behind the "With Intervention" plot do not match reality TODAY, let alone in a few weeks.

Not a good sign if people are making actual decisions based on this.
Not really. Many key technologies are created by startups.

For example, startups are doing a lot in robotics and synthetic biology.
Hey! few quick thoughts on this.

No API is static, so over time expect to add or deprecate query parameters even if can't conceive of needing changes today, tomorrow, or next quarter. Change leads API providers to relax validation rules on inputs as part of avoiding regressions. It's very hard to get all the users of a public API to update their usages, so hard rules like not allowing extra parameters are likely to break folks over time.

If it's an internal API with a dozen or fewer consumers you control, then go ahead, add some rules :)

I'm working on a new feature for the Optic project [1] that can tell you if a proposed API change will break any of your consumers -- sort of like an automated consumer-driven-contract-test.

[1] https://github.com/opticdev/optic
I didn't read the GP's comment the same way you did.

Cheating in a single player game is like looking up a spoiler for the end of a movie. There's nothing wrong with it, but you should be aware the game may not be as much fun afterwards.
When I was younger, I was very pleased when I stumbled across the trick of putting all of a DOS system on a RAM-disk, which made the system fly. Then I got to college and discovered in my CS classes that CPUs now had multi-megabyte on-CPU cache, which immediately led me to wonder how hard it would be to make a DOS system that ran completely out of cache. I'm not convinced that it would be practical for any number of reasons, but it still blows me away every time I look at what modern CPUs have in-package:)
> Another view is that opening the economy should involve testing people who are NOT symptomatic.

Testing people with symptoms is a waste of tests. When tests are in short supply assume everyone with symptoms is positive, isolate them and test their contacts who don't have symptoms. As of last week, Boston Medical Center had a 44% positive rate on the tests they were running on symptomatic people. They could find more positive cases per test by testing people without symptoms.

https://www.medrxiv.org/content/10.1101/2020.03.27.20043968v...
Amazon, Youtube, etc. need to think about how their affiliates and content providers can afford to create content.

I understand their strategy is to milk creators for all they're worth, and only increase payments after there's competition.

But content creation is a very expensive job, and if the money isn't there, then fresh content will dwindle.

I know that Youtube creators are already thinking in 2020, "since I'm going to be demonetized, why should I care about view count? I'll just do what I feel like doing from now on." This hurts both sides: fan engagement for the creator, and decreased impressions and ad revenue for Youtube.

You can watch Rick Beato's annual rant on being demonetized and/or blocked, when usually our age-old fair use law should preclude that. Unfortunately, Youtube's Content ID system is a parallel and private copyright system, so doesn't have to consider fair use.

And ultimately this will will lead to more competition, even though creators are happy with Youtube overall, just not the content id system and demonetization button clickers.

You can see this with artists relying on Patreon rather than Ad Sense at this point. Best quote I've heard, "Ad Sense is unreliable." About as pithy as you can get.

Golden goose and all.

You can read about 1900's sharecropping to understand more about what's happening here. After a sharecropper farmer gave 50% to the landowner and bought seed, he usually ended up with a barrel of supplies for the year's work. And often a bill for that too. After a Youtuber gets $0.00 for several months of work, it must feel just as bitter.
When I was looking for gaming benchmarks the problem I ran into was the games being benchmarked were never actual popular games so they mostly seemed irrelevant.
So it sounds like these trusts get favorable tax treatment too from a property tax perspective? Seems like that will be a sticking point if these gain popularity as it could suppress property tax revenue
Oh, that was your question. In this case, the reason why &a + 1 == &b is unspecified is that:

- it's generally false—there is no reason for b to be just after a in memory, so these two addresses compare different.

- it is sometimes true: when addresses are implemented as integers, and compilers use exactly sizeof(T) bytes to represent an object of type T, and do not waste precious integers by leaving gaps between objects, and == between pointers is implemented as the assembly instruction that compares integers, sometimes that instruction produces true for &a + 1 == &b, because b was placed just after a in memory.

In short, &a + 1 == &b was made unspecified so that compilers could implement pointer == by the integer equality instruction, and could place objects in memory without having to leave gaps between them. Anything more specific (such as “&a + 1 == &b is always false”) would have forced compilers to take additional measures against providing the wrong answer.
Happy Birthday! Great job! Keep developing!
A lot of things use YAML for configuration... what would you prefer for configuration? XML?
We use this at my company (Amplify) as a single "realm" configuration with Google and and a few other identity providers for "login with X". There's also some fun token exchange possible for any openid connect provider.

This means that I can swap Google access tokens for other access tokens and vice versa.

I'm also a contributor to the "frontend" piece of keycloak that's a JavaScript library called keycloak-connect (these are known as adapters).

Also also, I'm a maintainer of https://github.com/cdbattags/lua-resty-jwt that I'm using in tandem with the Keycloak RSA public keys for auth at API gateway/network level.

Ask me anything!
but that would be child abuse
The problems of poverty in this abstract appear to be framed in terms of the authors' perceived solutions.

What if we looked at the link between self perceptions of victimisation, life outcomes, and symptoms of poverty? I'd posit it's the necessary condition. The overlap in solutions, particularly education, financial independence, social equity are all there, but the difference would be chicken vs. egg, where authors like this would say the victimized identity is caused by the lack of these solutions, whereas many working people would say that inculcating and encouraging the beliefs that support that identity cause and reinforce the barriers to those solutions. The argument that individuals experience poverty for lack of a bureaucracy that is concerned with it should seem a bit specious.

Or as W.H. Auden put it, "The friends of the born nurse Are always getting worse."
> Hacker News is more diverse than that. I see plenty of strong opinions on both sides of the argument.

I do not see that. I see the typical back and forth intellectual analysis and warning, but not strong arguments. The majority of stories are how good WFH is in some dimension(s). It's universally been bad for productivity, for any amount of time, in every single company I've worked for (25+ years). The billion dollar company I work for has self-recognized how productivity has crashed and have started to implement metric collection. Ultimately the low level managers and individual employees know and the upper management wants to blame something else than their own employees in aggregate (which won't help things).
I was thinking more that our response to low oxygen levels at altitude is to make more red blood cells and you need iron to do that.

Plus if you are having problems shopping for food then green vegetables may not be your top priority.
OK, looking at the new cases curve on your covid-19.direct page. As presented, you can't really see what the green curve is doing. If you remove the black, total curve, the green new case curve is visible but it seems to be going up and down fairly inconclusively. Until 4/1, it looks like exponential growth. After that, it goes down and then up. Sure, the optimistic view is it's plateaued or going downward and I hope that's true but counting on just twelve days of data seems foolish.
How to remember more by applying creativity to everything you learn
But that's just the thing - for a while, you could spend extra in Intel for a premium system. It wasn't a good $/performance tradeoff, but at the upper end it was there. What's wild about this moment in time is that Intel has lost even the high end; there isn't an Intel premium, because they are not the best product at all.
> Only if you erroneously assume ...

The previous commenter made some qualified questioning speculation. Leaping to conclusions about what his or her unstated assumptions must have been and then calling them “erroneous” seems a bit hostile.

* * *

How does one tease out the difference between inherent biological differences vs. differences caused by a lifetime spent in the differing social/cultural environment facing boys vs. girls?

How robust are working memory differences between sexes across time, across different countries, across different subcultural groups, etc.?
> I would much rather live on land that I could do things with, such as farm, or hunt, or build things

That's nice, but many people would just like to have a roof over their head that will stay over their head.
Without question, get the 3900x. It's a bit behind Intel in single-threaded performance, but only barely, and the embarrassment of cores you get compared to the i9-9900K more than makes up for it. Microcenter currently has it on sale for $379 if you buy it together with a compatible mobo, which is the deal of the century.
Isn't there some joke about being "too poor to pay attention"? Looks like it ended up being true.
Looks like your profile just has an hnchat verification code, but would love to check out the project and help out if I can. It sounds really interesting!
I work with several biotech companies, I've observed project decentralization also become a large barrier to return on investment. Startups often develop a "go virtual" mindset prior to a lot of their products being ready for deployment. This coupled with the relative complexity of novel biotech products can burn through runway and make big investments riskier than an ad-revenue supported web product.
I don't know much about the drone space to be quite honest but I always wondered what it would cost to mess around with swarm algorithms, on actual drones, without breaking the bank.
Any pointers?
Show HN: Covid-19 Dashboard – Playable timeline, Cases explorer, Curve explorer
I've only played with it, but was kind of put off by how much of the 2FA credential management is only available to admins. It's not like Duo where you can update your own enrolled phones, U2F devices, and defaults. End users would have to ask admins to do all that for them.
My former physics professors would have not approved of a graph like this. D+ on the lab at best.
Functionize Introduces Architect: Intelligent Automation Utility (Press Release)
If you're in a larger city, you may be able to use the phone as a hotspot to create an account... just do it in a busier area (down town cafe, etc), which is more difficult right now than typically.

Even then, as long as you aren't working for the social network in question, it's less of a risk... highest risk is using the devices you have signed on with your work accounts, or using your real name.
The biggest thing we encountered was related actually to our initial deployment with active directory. This made logins slow, but actually found we could remove the requirement for Active Directory.

It is super heavily based on Wildfly, and if you're not using a tool like docker, it can be kind-of a burden. It runs decently well in standalone mode, but we ended up using the docker container's clustering with Kubernetes service discovery helping to find the other nodes to achieve a clustered deployment.

Outside of that is has been extremely stable, we use Kubernetes deployment mechanism along with a correctly defined readiness check to allow us to seamlessly upgrade, and we've gone from 4.3.0.Final to 7.0.1 in production without any problems. We haven't upgraded to 8 or 9 yet as we're actually working on some new frontend UI changes we wanted to get out the door with the release.
If you changed UTF-16 to UTF-32 or UCS-4 I'd support it. I think there are already implementations that use the replacement character for all "impossible" codes.
I can't insist that other systems send your program UTF-8, or that the users' OS use UTF-8 for filenames and file contents, or that data in databases uses UTF-8, or that the UTF-8 you might get is always valid. The end result of all these things you're raising is "you can't assume, you have to check always, UTF-8 everywhere buys you nothing". Even if we did somehow get there, you'd still have to validate it.
I mean I’m aware there probably weren’t many black people during the renaissance. But it would be even cooler if this worked for people with different shades?
GitHub sharply slashes plan pricing, offers core features for free to all
Either works. South Korea applied tech pretty effectively.
> I don't remember any company flubbing their unassailable lead quite this badly. I sense there might still be some complacency behind it.

IBM deciding that the home PC market wasn't a big deal?
That is extremely Hieronymous Bosch.
> Why should Bloomberg sacrifice billions of dollars in business

Maybe they shouldn't. But for that reason, maybe they shouldn't be in the Journo business?
Good on MS / Github for doing this.
I don't know much about this subject but it sounds like a really cool idea. We might need some of this in Austin.
The self-synchronizing property is also very clever. If you start at an arbitrary byte, you can find the start of the next character by scanning forward a maximum of 3 bytes.
Yup, "unpredictability" or more precisely computational irreducibility is when things tend to get interesting... and this happens deterministically just fine.
> Negotiating that into a contract is not something a significant number of people can do.

Most people will have to make major concessions to negotiate a clause like this into their contract. I am fine with this.

Do I think a hypothetical works where all employers guaranteed this power to laborers is an improvement over the current one? Maybe, but I am morally imposed to creating this world thru government intervention.

> I'm not claiming that this particular "freedom" to openly criticize your employer deserves government intervention

Noted.

> Absolutely, in an ideal world everyone should. But many people do not and switching jobs can be difficult, particularly for people outside the tech bubble that HN exists in.

It takes hard work to get a better job with more money and benefits, but this is being human. This situation pleases me.

> Not everyone can do that [start a company], and the skills required to start and run a successful company are almost completely orthogonal to those most people develop in their careers.

So prioritize learning these skills over starting a family or whatever else.

> There's a fixed number of people that can be at the top of any market (in proportion to market size), this will only work for a handful of people. It's not a general solution.

I am suspicious of this because there is not a fixed amount of wealth in the world. People at the top of their field create new wealth.

> As an example, a child could be coerced into cleaning their room by their parent shutting down the wifi until the chores were done.

Children make the issue confusing. Let’s say that a man wants to use the WiFi at Starbucks, but he can’t get the password until he purchases something. This isn’t coercion. Starbucks is selling a service, the man can accept or deny the contract. If men with guns force him to buy the coffee, then it’s coercion.

(Edited)

> Are you trying to say that people who don't productively use their minds to participate in society deserve to die?

Yes.

> How exactly would a hypothetical nonpunishable disparagement clause in an employment contract affect your "natural property rights" in any way?

If the government forces me to add this clause to employment contracts, then my right to free association has been violated.

> Do you think that the "government's cure" of ending slavery has left people worse off?

Slavery is evil. I don’t know enough about American abolition to address the specific point. But it is certainly possible to do something evil while intending to resolve some other evil.
While it's nice to be around idyllic nature, it comes at the cost of being further away from other humans. There's a reason economic productivity rises by roughly 10% every time a city doubles in size.

More people, means more innovations. Higher density leads to a more rapid spread of new ideas and best practices. Workers, entrepreneurs and investors can rapidly reconfigure to seize opportunities. Less density means you're more likely to fall into stagnation, as the one local employer in commute distance slowly circles the drains.

City life comes with significantly better living standards. What you lose in yard space you make up with much higher salaries, better healthcare and education, and more varied cultural options. To a large extent country living is only idyllic because of the technological exports made by high productivity city-dwellers.

I agree that there's a deep human need to connect with nature. But the solution isn't to try to give every man is his own personal Nottingham forest on his property. It's to build high-quality parks and nature reserves, and good transit so people can easily access these amenities.
Let's talk about treatment effect (or just plain old Occam's razor): what is the most likely cause statistically significant cognitive function decline in this treatment group.
Sounds like you are describing Zig. https://ziglang.org
The Python Guide for Beginners -Free 114 pages book
I feel the only way these two will play nicely is swapping Django for a DRF approach. Vanilla JS could be, and perhaps should be, used in place of Vue for small use cases. There's no need for the extra abstraction when AJAX could work.
Hmm. I'm not sure what you mean. Users by default can use the console to update their 2FA credentials. The only time I have to intervene is when they lose their 2FA as it doesn't really do backup codes. We do require 2FA as a part of our login flows so this is something we're using heavily.
Show HN: (WIP) Axel = Haskell and Lisp
What? There no individually identifiable data going to Apple, and the data being vended is aggregated so authorities Or whomever can’t track individual devices moving.
Axel is a programming language project I've been working on for a couple years to scratch a personal itch: namely, to help alleviate the pain of Template Haskell by integrating a Lisp-esque macro system into Haskell. Axel's syntax is Lisp-like but the semantics are those of Haskell, so (IMHO) it's a happy medium between the two.

It is still very work-in-progress (as the GitHub issues make obvious), but I can no longer resist the temptation to share :-)

Any feedback/questions are appreciated – this is both my first non-trivial PL project _and_ Haskell project, so I'm sure there are many areas for improvement.