skysight-inc/HackerNews huggingface dataset:
>The bottom line is, there's no reason to request the non-HTTPS connection in the first place.

The example I gave wasn't to excuse the issue, it was to maybe explain why the fix is taking so long.

> And there's apparently no checks in the app to make sure it's connected to their real server.

I don't think you can make that statement. The description of the issue only attempts to hi-jack the session, he didn't actually try to do anything with it. There may very well be checks in place.
There's actually been some litigation around this topic recently. The general consensus seems to be that authorship gets assigned to closest version of the person who initiated the creation process of the resulting artwork. So, in this case, I believe it would be the person that selected and uploaded the photo to the service would have authorship--the actual process is considered to be more of a blackbox tool being used by that person. A (way more) sophisticated digital paintbrush, if you will.
Apparently that payout was in question as recently.

https://www.barrons.com/amp/articles/softbank-may-get-out-of...
Because the more generic it gets, the more tedious it gets, and because this is not a site for flamewar.

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

Would you please stop posting this sort of grandiose, generic rhetoric? There are plenty of comments in this thread representing the same view you adhere to. The requirement is simply that people post thoughtfully and reflectively, rather than from a knee-jerk reflex or flamewar place.

No, that's not because we're secret communist sympathizers. It's because on HN, we want threads not to be predictable. Readers come to HN to have their curiosity gratified. There is zero curiosity being gratified in angry, repetitive comments.

This is an area where the interests of readers are not aligned with certain kinds of commenters—the kind that want to do ideological or political or nationalistic or religious battle on the internet. The site guidelines explicitly ask you not to do that, so please stop doing it.
Welcome to the post-corona era of (even more blatant) corporate empowerment.

With the oncoming onslaught of unemployment, they will only get more brazen in the reduction of workers rights and baseline dignity.
Can you publish more details? Consider pastebin, github, personal blog, anywhere you can really.

Enterprises, as in publicly traded companies, should definitely not be leaking products and roadmaps because this affects their stock values. I bet you regulators won't like that and it will be fixed in a heartbeat.

edit: there is the CEO owner of github commenting on another front page article, might want to drop a word. https://news.ycombinator.com/item?id=22867627
the velomobile. literally what the topic of what this person is replying to.
I meant that this is what I think might happen if/as lockdown is slowly released. There will be some trick in figuring out how slow is slow enough, and perhaps we'll go back and forth a bit, but this looks like what will happen.

If we keep things locked down too long, immense numbers of people will die from that. We need to minimize all deaths, not just deaths from the virus.
What's wrong with:

*p += sprintf(*p, "hello");
*p += sprintf(*p, "world");
I checked the origin of the project and it seems to be an European grant to a few universities working on Semantic Web. Given the track record of this technology I’ll pass my turn. Neither the home page nor the doc provide any compelling arguments or killer feature for it’s use over existing solutions.

I’m not convinced either that a strong schema is really important for a graph database. In fact, even in OOP long chain of inheritance have proven bad practice. I also found myself that working with flat-type (no inheritance) nodes and edges simplify the code a lot.

Is this database used on any deployed project?
> MITM is an attack where the attacker secretly relays and possibly alters the communications between two parties who believe that they are directly communicating with each other. - Wikipedia on MITM

1. The steam client ("The App") thinks that it's communicating with Valve Inc. via store.steampowered.com ("The Store")

2. The App fails to validate that it is actually communicating with The Store by not using https

3. Thus, an attacker with control of an external network (e.g. a coffee shop wifi) can "secretly relay and possibly alter the communication between The App and The Store who believe they are communicating with each other"

I don't know how this could be any less than the definition of a MITM by wikipedia's own standard. That this kind of attack is also related to cryptography is immaterial to the fact that a reverse proxy is a MITM. It doesn't somehow make it not MITM because they weren't using any cryptography, it means that they failed to implement a protocol that sufficiently protects against MITM.
Why would Bloomberg need to continue selling terminals to China for the journalists to research and publish?
If anything, more tubing would might condense humid lung air in the walls so whatever leaves the tubes is drier.
So basically they removed restriction of 3 collaborators from free tier and that's it. Well, pretty useful for a lot of teams, I guess.
That style of enter key is common on European and Japanese keyboard layouts.

Similarly, the small spacebar is common on some Japanese keyboards to accomodate for extra language input keys: https://en.wikipedia.org/wiki/Language_input_keys
libicu is a 40MB mess where you need only 5Kb of it. Only case folding and one normalization is needed, with tiny tables.

Additionally the used UNICODE_MAJOR and _MINOR are needed. They are always years behind, and you never know which tables versions are implemented.
I was in Mountain View and my manager was in NYC, so we started working at the same time, given the 3 hour time difference.

Also, the manager of everyone in the ocean of people around me was my peer, we had the same manager, and he came in almost as early as I did.

So, no problem, or at least no problem that I worried about.
Try proxyman, the UI is so much better
Aside from the legalities regarding your employer/employment.

I expect more companies are going to be using freelancers for projects and tasks to minimize using employees since everything is currently uncertain.

I wouldn't recommend using online services to find projects. Reach out to your network (outside of your employer/co-workers) to find projects.

Research what to charge and how to manage your freelance projects.

Now could also be a good time to use your 20% time to build up an audience for future info products or start stair stepping from products to a SaaS (Rob Walling, see below).

You might enjoy StartupsForTheRestOfUs.com podcast, start in the archives with episode 1.

Build Your SaaS is a great podcast as well.

Good luck.
Sounds pretty neat. I wonder if the same is achievable with Guix, which is based on Nix. Now I am gonna have to spend some of my precious free time noodling around the Guix docs!
I think uber investment was also working out for them before the coronavirus hit (they paid $10B for 15% stake) . Apart from that I can think of Alibaba, ARM, Supercell, Flipkart that have been successful.
Like I said, it's not always that simple. When it's not, something less than 100% transparency allows one to look at the given particulars of a case and determine whether or not someone is simply trying to evade the spirit of a rule or not. It gives enforcement actors a little lee-way that they wouldn't otherwise have.
Just my random musings...

Any test can be accurate if you use it multiple times. If the coronavirus is 80% accurate, testing everyone twice makes it 96% accurate and three times is 99.2%. Maybe that's the answer.

Even then though, testing individuals is pretty much pointless. It makes no difference to you're treatment.

Not sure if anyone is doing wide testing. The US and UK are not. Germany may be, they seem efficient. Chinas numbers have proven to be total nonsense. Italy seems to have been overwhelmed too quickly to do much.
Here are two useful videos about proning to explain why it works:

https://twitter.com/libbyg9/status/1243813444689821696?s=20

https://www.youtube.com/watch?v=FS4t5w1eCYw

Proning can be done to intubated patients too.
Further irony in this article generated another comment thread discussing how criticism of CCP is silenced, which itself was detached by the HN mods.

https://news.ycombinator.com/item?id=22867474
This is a test. Sorry for the inconvenience.
This is where I typically resorted to printf statements in pure C.
Why not unplug from the devices -after- we have made it possible to go out in public without spreading a pandemic virus?

Tracking information like this could allow us to manage the spread well enough to get back to a somewhat normal day of life.

I realize the arguments about this stuff never going away once the genie is out of the bottle. Public pressure will cause it to go away after the danger is over.

But if it doesn't, then you can stop using your phone.
Wait, was this a burn? Ouch.
If you post with your anonymous account, you're tweeting to ten followers, maybe. Few people in life have a platform that is completely detached from their professional lives. You build a reputation from your cumulative life's work, and that's what gives you the ability to signal boost your concerns to a wider audience (including, most importantly, the media) in the first place.
> You can replace clojure with 10 other languages

I yet have to see a successful, big Java/C# project that withstands the test of time and built with a team of just a few engineers.

Yes. Clojure is just a tool. A programming language. Just like Emacs Lisp. And Emacs Lisp from a technical point of view is one of the worst programming languages you can think of:

- It has no static types

- Has no namespaces

- Until recently it didn't even have lexical scoping

- Its execution time is painfully slow

- It's a Lisp. The syntax of which many engineers describe as "harder to read"

- Majority of Emacs-lisp packages (like over 95%) don't even have any kind of automated tests

You pick just any kind of programming language with these traits and sooner or later any significant project would be buried under its own weight and would have to be re-written in a different, more modern language. Like I said before: "Emacs ecosystem defies any logic - it shouldn't work at all, yet it does."

Modern programming languages emphasize the need for IDEs with extensive re-factoring/re-structuring tools. Lisps somehow for decades didn't really require them. The only thing they need is structural editing tools and even that is an optional gimmick.

You ever thought about why no-one successfully was able to replicate and re-build a fully-featured clone of Org-mode outside of Emacs? There were several attempts, all of them are pretty lame (compared to one written in emacs-lisp).

You ever thought why every single attempt to re-write Emacs or create "a killer of Emacs" was unsuccessful?

I understand your skepticism. And I'm not selling this as some sort of "universal truth", I'm just telling you from my own experience. I am not one of those Lisper zealots who learned it years ago, I discovered it fairly recently. I avoided Lisp for a very long time. I've seen big projects in many PLs - ranging from Turbo Pascal/Delphi to Java, Python, etc. And I've seen big and really badly structured, extremely messy Clojure codebases.

There's something about Lisp that makes it extremely suitable to create big, malleable systems that can grow indefinitely. Something that I somehow never experienced with other languages.
By firing them, they are reinforcing the idea they they don't care about working conditions. A reprimand likely wouldn't have made the news.

I assume they want less buzz about work conditions.
HackerOne is a business operating in a field with a maximal cross-product of drama and customer service overhead. Of course you're going to see story after story about them. What else would you expect?

Here's a story about someone with a decent but low-severity finding, apparently a duplicate of someone else's (unsurprisingly, since it's pretty obvious once you actually look at this app) who had a hard time getting Valve to take that finding seriously. It looks like H1's triage did not-the-greatest job in vetting the submission; also: not unheard-of.

And? I'm not sure there's a punch line here? "Tech worker has unsatisfying customer support experience with first-level security tech support" doesn't make for a zippy headline, but I think it sums up the story.
Do you have any thoughts about Groovy?
That doesn't preclude AWS (or anyone else) from trying to buy them. :)

I don't know how much control their external board members have, but if an offer came in, the board may be able to force acceptance instead of going public.
And this is why it takes government a long time to make large procurements. If you try to buy it quick, you're subject to these sorts of risks or accusations of misspending the money.
I've shot down both Facebook and Walmart citing ethics - I'm surprised it didn't get me on a blackout list because FB keeps hitting me up bi-weekly even with COVID.

I think this is going to get more popular as time goes on... I'd rather work for a company that's not abusing it's workers/the government.
And you're naïve if you think ASCII suffices for English. I wouldn't give you ½¢ for an OS incapable of handling Unicode and UTF-8 even if you told me every language other than English were mysteriously destroyed. Going back to ASCII is 180° from what would enrich English-language text.
I understand core banking is (was) going towards APIs for JSON output due to regulatory reasons (PSD2 - to clarify, PSD2 doesn't specify JSON, just, it seemed the easiest option where I was) and just letting the rest of the code base sit there / be maintained. Layer upon layer, not great but who wants to re-write a general ledger. Consistent with your comment. OP might be in a sweet spot with this given JS experience and a switch to finance.
Curious. Left-right scrolling works as expected, however up down turns into left-right but with vertical overscroll. seems like they need an extra "overscroll-behavior-y: none;"
Yeah, there's actually an old sports betting scam that works similarly. You send out letters to tons of potential gamblers saying something to the effect of 'The <team>'s games are fixed and I've got the inside info. To prove it, I'll predict the winner of the first n games' Then each week, you send half the group one prediction and the other half the other. Whichever half was wrong, you ignore, and the the 'correct half' you repeat with the next week. After n weeks, you have 1/(2^n) of your original group who've seen you be right each week, and at your desired n, you ask for money to keep going.
I loved the NYTimes "Times Reader", circa 2008, when it was released.

https://archive.nytimes.com/www.nytimes.com/packages/html/fi...

You might want to look into it for design inspiration since the NYTimes solved for a lot of design problems I'm sure you've had to tackle/consider.

Great work btw.
> Most of my recent proposals [...] have been rejected by the committee.

Does anyone have insight on why?
So why are we doing DNS over HTTP?
Like I say, testing individuals is pretty pointless.
Take it further - eventually we will have conceptual physicists whose output is judged on purely aesthetic grounds, and rich people will collect them.
You're 100% right.

Let me further clarify my statement: While shit talking your employer, you must be very careful not to step outside the bounds of what is legally protected. And with attention comes scrutiny.
It's relatively common practice in academia to make announcements about results while they're still in pre-print form (particularly given how slow the peer review process is for some journals).
THIS is a great little number!
The idea is manufacturers don't want to loose money and do this stuff themselves, so somebody donates their time to bring this hack to the FDA, and then the hospitals can use it.
With a good CEO, your career might actually get a bump if you give them honest and helpful feedback.
I mean it doesn't have to assume an encoding for printing, it just has to have a sane way of turning the path into something human readable.

Look you're right that this ship has sailed but ideally we would have decided on a way to display and encode binary for file paths.
The single greatest (and most-overlooked) reading tech combo for me is a Kobo eReader + Pocket extension.

The browser plugin let's me add any articles I come across. The plugin UX on desktop is painless (one click) and on mobile it shows up through the "share" menu on Android os.

The Kobo can then sync those articles (ad free! Resizable text!). It's a great distraction-free way to read the articles and a great tool if you have certain vision issues. The Kobo can stay offline after it syncs and the battery will last for weeks.
> Would a DoorDash engineer be safe speaking out against the working conditions of DoorDash drivers?

They should be, but you might be right that the National Labor Relations Act (or other applicable law) isn't doing its job.
Really good video right there!
Honestly, I find Marketplace's obsession with politics annoying. IDK if they just have an easier time sourcing interviews from government officials because public radio or something, but it feels like even in times of non-distress they lean heavy on policy and lean on actual markets.

Look at the non-COVID Make Me Smart topics as an example:

- Housing policy
- Corporate social responsibility
- food policy to fight global poverty
- the equal rights act
- facebook and US elections
- regulating the internet with section 230
- an interview with a senior politico editor about the school-skills-jobs pipeline
- why private equity needs to be regulated

That said, I do appreciate the Marketplace interviews with 'regular small business owners' Marketplace has been doing lately. Ranchers, Mississippi freighters, factory operators, etc.

In terms of other podcasts, Bloomberg's Odd Lots podcast[1] is a nice long form podcast with subject matter experts. Their guests also likely have a political agenda, but you at least get exposed to the inner workings of a market. A recent pair of podcasts provides a good example: a few months ago they talked with a guest about an unusual feature of Korean retail banking, the structured note. They provide investors--primarily retirees--a fixed 7.8 percent return if the market doesn't drop by a huge margin. Otherwise, investors are stuck with the return of the underlying benchmark (which is down a huge margin). Well, last month exactly that exact tail risk scenario triggered, and they brought the guest back on to further discuss how this compares with previous bank crisis episodes.

[1]: https://www.bloomberg.com/podcasts/odd_lots
Weinstein rented a room in an Oxbridge college to lecture on his theory of everything.

His recent campaign was for his brother who he feels was badly mistreated by a Nobel laureate who he alleges failed to credit him for important related work.

You can hear the latter case on a recent edition of his podcast, The Portal.
While this is a great misfortune, consider how SoftBank advanced WeWork towards IPO. They were selling a pile of overvalued garbage, hoping that that the rest of the world was as brain dead as its own investors and not notice.
The problem is that high pressures can cause barotrauma. So you might end up increasing PEEP beyond what a patient's lungs can survive, and because you're using a CPAP machine instead of a ventilator there's not really any facilities to measure pressures that high. Or there are but they were never characterized because the machine doesn't measure pressures that high. And because they were never characterized you may not actually be delivering the pressure that the machine says you're delivering. So this is pretty crazy.

The other thing ventilators typically include is pressure alarms and high pressure limits. Under routine use the high pressure limits keep you from popping patient lungs in volume-controlled modes. A pressure-controlled mode like BiPAP may be okay in this case since it provides those limits. The downside of pressure-control is that the patient's lung compliance and alveolar recruitment may change, so you can start off delivering a certain tidal volume at a certain pressure and then because of compliance changes the patient's alveoli lose the ability to contain the same volume of air, so the patient is losing oxygenation unless you change the settings.

My point is that there are a lot of considerations beyond simply delivering a fixed pressure of gas into a patient's lungs and hacking a CPAP may not meet those requirements.
Cool, but what does it do that the HoverflyOpen doesn't already?
Original standard feature specifications were not meant to obtain a 1-to-1 map from C onto hardware, but we used practical experience to judge what overhead was acceptable for the kinds of processors we had seen or thought were reasonable choices that the architects might make in the not too distant future. If a frequently-executed action had to (for example) check for a special condition every time, the overhead might increase by several percent, depending on the instruction set architecture. So quite often we argued that "if the programmer wants to test for that condition, he can do so, but typically it is a waste of cycles". There are a lot of such trade-offs; maybe we should write a paper or book on this topic.
Why do you still have a contract with ICE?
If you just want moisture and not pressure you might want to look at a nebulizer rather than a cpap.
I think C is an exceptional good language for a long time, but the world is changing and maybe C must evolve with new trends, new researches in programming languages.

In my view C and C++ now almost different languages with a different philosophy of programming, different future, and different language design.

It will be sad if "modern" C++ almost replace C. Many C++ developers use "Orthodoxy C++" https://gist.github.com/bkaradzic/2e39896bc7d8c34e042b, and this shows that people will be more comfortable with C plus some really useful features(namespaces, generics, etc), but not modern C++. I very often hear from my job colleagues and from many other people who work with C++ is how terrible modern C++ (https://aras-p.info/blog/2018/12/28/Modern-C-Lamentations/, https://www.youtube.com/watch?v=9-_TLTdLGtc) and haw will be good to see and use new C but with some extra features.
Maybe time to start thinking about evolution C, for example:

- Generics. Something like generics in Zig, Odin, Rust. etc.
- AST Macros. For example Rust or Lisp macroses, etc.
- Lambda
- Defer statement
- Namespaces

What do you think?

https://ziglang.org/documentation/master/#Generic-Data-Struc...

https://odin-lang.org/docs/overview/#parametric-polymorphism

https://doc.rust-lang.org/rust-by-example/generics.html
Google wants to dump Qualcomm, launch smartphone SoC as early as next year
3 million isn't that close.
Its in court, but softbank hasn't paid the corporate structures that controlled wework the money noted in their deal. Its pretty crazy that no one really talks about how weird the weWork corporate structure is: https://twitter.com/tomgara/status/1161762187590995974

All of the "deals with wework" are really deals with different parts of this weird structure.
Let's not be pedantic here. If something reliably happens, without any explicit ruleset like a law triggering it to happen that way, I feel it is fair to call it a "law of nature", as it occurs "naturally".

If you talk smack about someone, expect them to talk smack back about you.

If you talk smack about your employer, the employer will talk smack back about you (a lot of times, in the form of ending their involvement with you).