skysight-inc/HackerNews huggingface dataset:
Hi all - Shiv from Auth0. I am the CPO and wanted to share some additional context here. On July 31st 2019, at 5:11 am, we received an email from Insomnia reporting a service vulnerability. By 11:00 pm the same day, we had fixed the issue in production. We analyzed the logs and validated that no one exploited the vulnerability. More details from our CSO here: https://auth0.com/blog/insomnia-security-disclosure/?utm_sou.... Thanks to Insomnia for reporting the vulnerability and their partnership in coordinated disclosure. We appreciate the continued feedback from the security community-at-large to ensure we are providing the most secure platform for our global customers.
People marry someone they met at a bar everyday, how is this any different?
Automatic Pro-rata was a relatively recent addition to YC.

(i.e. when we went through in 2009 it did not exist)
It also clearly isn't scaleable without infinite capital.

Plus, if you had complete information, why would you ever want to automatically invest any time a company in your portfolio raised money?

My guess is the only reason they made it automatic, was to minimize the impact of a negative signal. It sounds like they hope the new changes will still minimize that signal.
Often the mentality you will find is "any hole is a hole that will be exploited", so they make these incredibly difficult systems with perfect security that nobody ever uses because they're so hard to use.

SSH is flawed in that you have to trust the host the first time you connect to it. For most people this is a reasonable tradeoff, but for security nerds it can be an impossible barrier to adoption. This is why some SSH servers spit out big long hexcodes or weird picture things, you are supposed to securely message the owner of the server to verify it before you accept it. Details are of course left up to the user because any default system you set up will of course be exploited. It's head of line security exploits all the way down.
People are actively having bad experiences working from home
Intel Ghost Canyon NUC9i9QNX Review: NUC 9 Extreme Realizes the SFF Dream
It's a _little_ unfair to say that I'm strongly reminded of this very funny tweet, but only a little: https://twitter.com/NicholasDanfort/status/12464658526329569...
But you don't marry the first person you meet on Tinder. You go on dates with the person. I would imagine you can go on "dates" with potential cofounders as well.
> BEAM is by default tuned for throughput over latency

I thought it's exactly the other way around.

I Always assumed BEAM is built for concurrent, consistent low latency IO. The benchmarks seem to vaguely reflect that.
This is incredibly in alignment with the first speech of the new minister.
Haha maybe even a baker's dozen
IIRC, F-Droid has a battery charge limiting app but the support is quite hit-and-miss depending on your hardware and it generally requires root access. There are some Android phones that offer this as a stock feature, e.g. in the ASUS "Zenphone" M series.
That’s 3% of population. Meaning it would 25x times as many deaths to get to “herd immunity”. That’s 750,000 deaths. Good news?
Recall that the US President wanted to keep a cruise ship from docking because "I don't need to have the numbers double because of one ship that wasn't our fault". If your career is built on the principle that perception trumps reality, it's hard to adjust when reality doesn't cooperate.
Counter-example: https://orville.fandom.com/wiki/Yaphit
Besides wasting space, it also means the battery has to be a single monolithic entity, can't be too flat (or the case would use up the entire space the battery occupies), and can't have any components over it.

Take a look at this image: https://d3nevzfk7ii3be.cloudfront.net/igi/cBFfrfQPrPBFgV1s.h.... It comes from the iFixit MacBook Pro 15" Touch Bar Teardown (https://www.ifixit.com/Teardown/MacBook+Pro+15-Inch+Touch+Ba...)

It's 6 different cells, that span the entire width of the laptop. They're glued in, and they use pretty much every bit of space they can. There's also a ribbon cable going over them, which I believe is the trackpad cable.
That will be a good one but if it is case , they must know and find and prove this easily. Then one possible result from this apporach, some group of people might hide this, another group of people like WHO got misinformed. It is still bad result and damaging the trust & reputation of some Chinese government officals and WHO.
I've been building apps on Zoom for 5 years (3 years building private apps for Zoom based schools) and I'm grateful for the recent news helping Zoom to prioritize critical things that Eric said himself that they should have prioritized a long time ago.

The concerns are 100% valid, I'm glad to see them finally surfaced and addressed. I still like our odds w/ Zoom relative to WebRTC, their team is a proven mammoth. My son was on a Zoom call for school this morning... likely some PR relativity of the past week.

It's a two horse race at this point Zoom or WebRTC. Most start ups choose to build on WebRTC and focus on new workflows, we chose to build on Zoom to add the most meaningful leverage we could think of (data utility) to existing workflows.
The LA Times is furloughing workers:

https://variety.com/2020/biz/news/los-angeles-times-furlough...

A local big-city paper has run several weeks with virtually no ads. Sport and Entertainment sections still carry none, though a few are appearing in the news and business pages. And of course, obituaries – or as they’re called in the biz, “former subscriber appreciations”.

Even the Sunday edition inserts were reduced to a single druggist’s circular.

Youtube creators’ views are up, but revenues are down:

https://onezero.medium.com/as-youtube-traffic-soars-youtuber...

Even everyone’s favourite “be evil” and “they trust me, dumb fucks” ad monopolies are facing a slump:

https://www.nytimes.com/2020/04/14/technology/coronavirus-go...

Ad spend is extraordinarily pro-cyclical – up in good times, down in bad. The Economist, with a diversified income mix, reportedly about a third each subscriptions, ads, and bespoke reseearch through the Economist Intelligence Unit (EIU), at least back in the 1990s, might be better set to weather the storm.

Advertising has been media’s backbone for a century and a half. Is there an alternative to the old formula of commercialism and journalism?

https://archive.org/details/commercialismjou00holtuoft/page/...

I particularly recommend reading that last.
They aren't testing. I have 3 friends bedridden right now with COVID19 symptoms in Stockholm, all of which were denied a test after they asked for one. They were told to stay home and get over it.

Their numbers aren't reflective of reality.
My home server is a Dell Latitude with an i5-2520M

$80 on craigslist 3 years ago.
Precisely - as an early outbreak centre that town is referred to as "Germany's Wuhan", and is expected to have among the highest proportion of infected inhabitants. So actually the 15% figure came as a disappointment and something of a surprise.
He's a total madman.
Trump is a shithead but he'll read the situation or be advised by someone, jump ships and blame it on the chinese or something.
This guy went 100% on this and is not turning back, to the level of taking people to the streets to force business owners to open, walking on the streets to chat with followers (while he's suspected positive covid) and calling for fasting and prayers as a solution. BTW Religious services were defined as "essential" so they can still be carried on. Much of his base is from a fanatic/fringe christian faith so maybe that's were that comes from.

What worries me is that now Brazil is in a stand off, the military that surround him, vice-president included, have cutted him off power and congress is starting to look into an impeachment. But even if they do, and do away with Bolsonaro, then the military that ran with him will have the power, will finally declare the lockdown and anything can happen next, they'll be lucky if they have elections after that. Police abuse during lockdown grew a lot in other latin countries, i expect at least the same to happen there, who knows to which level.
Thanks for the thoughtful response. It’s clearer you’ve thought about these issues. The nudge towards an associated charity seems like a really good idea.
We never nudes need to stick together! ;)

But seriously... if anyone else here is building on Zoom's platform hit me up. I'm looking to build more community in the Zoom App ecosystem.
Right, but in planning for a hospital overrun you can't see it coming if you have no idea how many sick you have, if you don't test.

Are you suggesting that as long as your hospitals aren't overrun, inflection rates aren't worth knowing ?
The assumptions probably dictate the probability more than anything else.

We don't even know how life originated on Earth
Travis answers your question at the timestamp [31:55]. Check the video recording:
https://twitter.com/openteamsinc/status/1250924987969449986?...
Thanks for your great questions! Please find the live video recording by clicking here.

Travis ended up answering the following questions (I've timestamped the answers for y'all so you can find them):

[8:00] OpenTeams' mission: to help companies build and grow their open source businesses

[8:56] Where do you see the next big opportunities to extend python related to its use in data science and Fintech?

[13:00] How do you see boutique businesses working? What kind of products or services lend to that model?

[17:00] How do you find customers for that kind of consulting you talked about with the boutique businesses?

[19:18] What is OpenTeams trying to do?

[20:26] What is Dask and does it fit in with the future development plans for Python and PyData?

[22:38] How do you feel when you think your software is used all over the world in everything from beginner projects to helping in scientific labs?

[31:55] What python library for machine learning/data science is under-appreciated or you want to put out there?

[33:51] How’s the EPython library going?

[38:50] Do you have any advice for grad students trying to start a software-based company?

[41:30] How close is conda to becoming a purely SAT-based dependency resolver?

[41:50] Is there any hope of seeing a unification of all of the tensor libraries?

[43:28] What do you see as the future for opensource technology in the post-covid era? How can we use the long experience of numpy and other projects to help inform the debate over opensource medical hardware. Do you personally have any involvement on the hardware side of opensource and if so, can you comment on what that community could be doing better?

[44:00] Why open source is going to grow in an economic downturn

[45:50] How can we use the long experience of numpy and other projects to help inform the debate over open source medical hardware?

[47:15] What tips do you have regarding continuous integration setups with large codebases?

[49:04] What color is your toothbrush?

[49:10] Have general-purpose open source projects received much government funding?
That positive rate is far too low. If you get < 15% anywhere with a proven widespread outbreak you aren't doing enough testing.
This Week in Virology: https://www.microbe.tv/twiv/
We used Kanboard at my current job until recently. It works, but has a very MVP feel. We basically used it as an improved TODO list. The UI is barely usable, and it is missing a lot of bells and whistles around notification, text editing, cross-referencing, organizing issues, and such. JIRA (to which we recently migrated) feels like space-age technology compared to kanboard.
Heat is providing a lot of natural defense. Things are already going way better than predicted.
Open Source Headless CMS vs. ButterCMS: A Comparison
I've wondered for some time now why most API endpoints even need to exist. The very concept of "glue code" seems to me like a code smell; if you aren't doing any interesting logic, why do you need an extra layer of code there at all? The only answers I've ever been given are authentication and sanitization, both of which seem solvable.
This Week in Virology
What the Coronavirus Will Do to Kids
yeah he's legit crazy
Reminded me of this quote often misattributed to Plato[0]:

"Be kind; everyone you meet is fighting a hard battle."

and Patrick Farley's version from his series "The Spiders"[1]:

"Show kindness to every person you meet. No matter how ill-tempered a man may seem, you have no idea what private agony he may secretly be struggling with."

[0] https://quoteinvestigator.com/2010/06/29/be-kind/

[1] http://www.electricsheepcomix.com/spiders/3.5/01_hospital.ht...
Will have to watch that one later.
Isn't that recover of viral diseases which we don't have vaccines for are a function of immune system's response?
>They even mentioned the change in the original release notes for the iOS update

No, they didn't. The amended the release notes after the fact.

https://www.idownloadblog.com/2018/02/06/apple-on-ios-10-2-1...
No, I'd just prefer we're equally critical of wealthy and corporate interests controlling our politics, regardless of where they live.
An Army of Virus Tracers Takes Shape in Massachusetts
Bill and Melinda Gates stored food in their basement for years
Moscow's metro has been a mess the last few days as big crowd waiting for permission checking:

https://varlamov.ru/3860702.html
Why are you glossing over the fact that the numbers were DESPITE having done a global lockdown? If we didn’t do a lockdown, it’d be way higher.
Slight OT: PTT is an oldschool BBS. It's terminal-based (although there are ways to browse it via HTTP, [1] not just Telnet). I find it baffling someone could describe it as "Reddit-like."

1. https://www.ptt.cc/bbs/index.html
i dont want to open a US business just to process US payments. the cost and time would be to high. and taxes.
did you open a australian stripe account without an australian business?
I really miss working with Phoenix/Elixir. While switching to the latest hottest tech rarely make sense, I really feel that the Phoenix core team has its head in the right place and when I see the features they put out it really makes me want to switch every project to it.
These graphs are in the document prepared daily (on the last page):

https://www.rivm.nl/documenten/epidemiologische-situatie-cov...

You can see that there are approximately 1500 more deaths per week and there is no peak visible.
> the state pays 80% of your salary.

Eventually...
> Instead of keeping things quiet, manufacturers focus on making laptops thin enough to replace a knife

They focus on what customers want. If they want 10 cores 5mm thick notebooks, they'll get it. It'll be noisy but who cares. It'll be used to like facebook posts anyways. Professions will buy stationary computers for the heavy lifting anyways.

T440 is an awesome machine although X1 is more popular, which is kind of slender version of t440.
Perhaps very few make that year after year, but that's a totally achievable total compensation anywhere in the top half of the individual-contributor range if they get two good evals in one year. I work at one of those companies, and I'm sure I talk every day with people who have hit that level at least once.
Somewhat infuriatingly, Thinkpads with two batteries (e.g. T480) will discharge whichever battery appears "healthier" first, rather than taking the sensible route of discharging the external battery first so that your internal battery isn't completely dead when you're trying to hot swap.

When new, the internal lithium polymer battery reports its nominal capacity conservatively, so that the measured capacity is a few hundred mAh higher than nominal, making it appear healthier. The external lithium ion batteries tend to report nominal battery capacity accurately. This means that for something like the first year of use, these Thinkpads will consistently discharge the internal battery to 5% before touching the external battery. By the time your external battery is low enough to warrant a hot swap, the internal battery is gone, and you have to power down or plug in. And of course 5% isn't a configurable threshold, so you can't change it to, say, 20% instead.

Apparently this is baked into firmware on a charge controller IC somewhere, so it's not hackable with some i2c commands like the charge thresholds.
I meant mean.
The coronavirus crisis seems to be an excuse for pundits to peddle all sorts of wild clickbaity speculation. I hope that after all this is over we go back and tell people look at all the silliness you wrote, look at all the opportunistic political angling you did here on no evidence, look at how contradictory you were under pressure, etc, etc.
You're right that that is a theoretical possibility, but I think it's very unlikely in practice. In the VC world, term sheets are only technically non-binding; breaking a signed term sheet is considered a Big Deal.
Every strategy is dependent on testing, because every strategy requires an accurate assessment of sickness rates. If you don't know the extent of the problem, how can you even formulate a plan to fight it?

If by "strategy" you mean herd immunity, Sweden isn't doing that. No one is publicly claiming to be trying that anymore.
I don't understand why this article is flagged, or why it's getting the derision from the HN crowd.

The article rings true to me, it describes a distilled version of the world we lived in a mere two months ago. The desperation that will exist to get back to the lifestyles we were familiar with and the gross reality of consumerism that will be there to hold our hands through the re-transition. And it's nothing new, it will just be a more condensed, hyper, desperate version of the hyper, desperate consumerism we had before.

"This is our chance to define a new version of normal"

If the new normal is just progress towards the old normal, then we've learnt nothing.
There’s also the problem that healthy young adults are generally very stupid when it comes to assessing risk. Sure, they’re probably only at mild risk of days of debilitating hospitalization, but they’re also going to be fairly careless about people at greater risk around them.

Locking everyone up gives us a chance to gather data, prepare treatments, and find a way to protect those at risk. Letting spreaders run around carelessly will not make anything but the economy better.
One of worst Brazilian states is one of the hottest (Ceará).
That's mostly unintended FUD (but still FUD) or problems that can be worked around:

<<
- Is unstable because if a dependency/host goes offline, all users are broken instead of an internal build being broken (think leftpad but much worse as your users are instantly impacted, likely before you even know about it)
>>

So you don't recall Leftpad?

<<
- Is insecure because if a host is malicious, they can choose to supply different packages for a small subset of the requests, such as those coming from govt. requests against political targets, hosted build machines, etc. and nobody will have any way of knowing because there's no lock file/integrity hashes.
>>

Are you kidding me?

https://www.zdnet.com/article/microsoft-spots-malicious-npm-...
"Something else" being not necessarily external, much less staying passive. Example: post-WWII Germany. People rebuild everything from scratch by goverment just not being an obstacle to them.
Agree on the asymptomatic/presymptomatic thing. Also, I'd imagine the doubling time on an aircraft carrier is a lot shorter than in normal society. There are a lot of people packed into very small spaces.

Suppose the doubling time on an aircraft carrier is 5 days. That means half your infections are in the 5 day presymptomatic window.
Is China Winning?
You make a box straight edge.

First, you make a surface gauge. A heavy weighted base with a pointer you can vary in height and distance from the base. You scrape/grind the base flat using a surface plate as reference.

You take something you think is roughly square (a long rectangular prism is good), scrape/grind one face flat with one of your surface plates. We'll call this face 1. Then scrape/grind the opposite face flat, and using the surface gauge to check height (position the box with face 1 down on a surface plate. Position the gauge next to it, with the point touching face 2 somewhere. Slide the gauge back and forth: if it gets pushed up face 2 is tilted up in that direction with respect to face 1. If a gap forms under the tip, it's tilted down.) and thereby get it parallel with face 1.

Then scrape/grind two faces which are adjacent to each the first and opposite each other flat. You now have a shape like \_/ or |_/ or such, though with a top parallel to the bottom.

You stick your surface gauge along one side, touching at the base and at some point near the top of that side with the indicating point. You then turn the WIP straight edge box 180 degrees, and see if the other side touches the indicating tip or the base first. The distance from touching both at once tells you how far out of parallel that side is from the first. You then proceed to scrape them both to be a bit more flat and parallel. Then you turn the box onto its top (face 2) and repeat that. Using 180 degree rotations in two dimensions will get you a good square.

Another thing that can be used as a check (if you can draw) is to build a compass and a straightedge. Side 1 of your box is a good straightedge! You can then use basic geometric construction to make a right angle, and can compare any finished box to that angle.
Not consensus, but here's a counterpoint to all the folks implying "spend a year learning emacs". I made a failed run on "Practical Common Lisp" twice because I also tried to learn emacs at the same time, partially because of commment threads like this. I eventually went with Atom (my normal text editor) and atom-slime, and had a happy experience.

Maybe you would be shunned if you showed up at a professional CL shop for using such a setup, but if you are just wanting to try out CL for personal learning don't let emacs stop you.
These two ars technica articles are a really good breakdown on both sides of the issue, but I agree with the first.

Use keybase. It's easier!

[1] https://arstechnica.com/information-technology/2016/12/op-ed...
[2] https://arstechnica.com/information-technology/2016/12/signa...
The built artifact is the evidence of the act of making.
>a systemic black swan comes along

Nassim would like people to stop saying this. I view him as an authority on the subject.

https://mobile.twitter.com/nntaleb/status/124494673873917952...
greycat is an op on that channel and IIRC is the owner of wooledge.org too. Great stuff all around. Make sure and search the FAQ first before asking noob questions so people don't get grouchy.
I've seen at least one person in my social network, whose employment hasn't been impacted, offer to give their check to someone who is furloughed or laid-off.

It's tough to say, since there's always the risk of more layoffs; and there's an argument that the payments are stimulus as well as relief, and so it's perfectly legitimate to accept, so long as one spends it. But as a matter of conscience/citizenship, if one is economically stable, it's at least worth considering giving it to someone in greater need. Everyone's circumstance is different, and a lot of people were economically struggling before the virus, so I think we each answer that question for ourselves.

That said, I think the corporate bailouts are in a different category than individual payments. The $1200 relief check system is hardly perfect, but it's at least transparent and fair: every citizen of the same income bracket gets the same flat payment. But we all know there's a lot of wheeling and dealing and favors and promises taking place with the bailout money, and there's no objective algorithm for deciding who gets paid, or how much. If a travel agency gets $50m when they really could've stayed afloat for $25m, how exactly would anyone arrive at that definitive number, including the travel agency themselves? But if a company takes a bailout when they don't truly need it at all, I think it's fair for taxpayers to cry foul.