skysight-inc/HackerNews huggingface dataset:
Hm, I think I prefer branca from a quick look (simpler is better). I'm a little worried that both seem to hide away datestamp/validity though.

Branca notes checking the timestamp as optional - I couldn't tell what paseto does by default - other than a reference to a timestamp in the implentor's readme (and then only as an example parameter to the php code).

Paseto does helpfully state that there's no replay protection - so don't use it for stateless (serveless) session tokens.

But to both/either default to some kind of timeout?

I don't really see any use cases where I'd want infinite validity - so in addition to sane algorithms, sane/required exipery seems like it should be part of such things?

I think I might want a serial and a black-list too.. But maybe there are cases where invalidation aren't ever needed? I can't think of one right now.
Another alternative to Internet archive is perma.cc. A webmaster can write to IA and request that they pull archives off their site at any moment: https://perma.cc/
In the Netherlands (for March) mortality for all age cohorts is up, average of about 10%. Lower cohorts mortality is down but not enough to offset the others. Causality is by definition impossible to ascertain at this aggregate level, but no reasonable person would come with another explanation.
Some people have a lot to gain from changes like these and want the changes to be socially accepted through conditioning. In general it's worse for the general population. This can include things like swapping the USD for another money, extreme inflation, travel bans, additional tracking of your actions and movement, new taxes, etc.

See past wars, 9-11, etc.
Good. It's about time the US did the same.
That "issue" was way overblown.

Apple's change did the right thing. It fixed a ton of older phones which before were rendered unusable since they would experience random shutdowns due to naturally degraded Li-Ion batteries.

Every manufacturer should implement the kind of fix Apple did (and I'm sure at this point, they have).

They even mentioned the change in the original release notes for the iOS update.
Keep in mind the lockdown is meant to slow spread so the healthcare system doesn't get overloaded, not to stop it.

It is successful in this respect, and IMO a healthy balance of economic slowdown and death toll. We'll probably start reopening (hopefully in stages, so we can monitor impact) in the next ~3 weeks.
The numbers may be similar, if not slightly higher than normal, because the deaths we'd normally have are being offset by reduced activity and increase COVID-19 deaths. So looking at totals without that context doesn't help much.

It's the same in the US. Article here:

https://www.washingtonpost.com/outlook/2020/04/16/coronaviru...
More discussion here:

Security lapse exposed Clearview AI source code - https://news.ycombinator.com/item?id=22892494

Also links to the full article on Tech Crunch.
If you're going to go down such a rabbit hole, you'll be well served by checking out the ostensible bible on the subject as well, "Foundations of Mechanical Accuracy" by Moore.
What's your scenario for people starving? Congress refuses to give out more money? Workers in "essential" businesses (which includes everything food related) stop working?

I would be more worried about rent and mortgages.
I love this kind of thinking.

Earlier in the year it was this was a bad flu, no cause for alarm, no lockdown necessary.

This has switched to the virus being too contagious to contain so you might as well do nothing major to address it and let it run its course.

Truth is countries that took this seriously and acted swiftly controlled it. They’ll be reopening soon (Singapore already has, right?). I’m guessing the US will probably start lifting in May. Trump can huff and puff all he wants but so much of the US economy is tied up in about 10 states so they ultimately call the shots... and they’re keeping the quarantine through the month.
Yes, when you look at Italy or Spain the overall mortality is way higher than normal.

https://www.lavocedinewyork.com/en/news/2020/03/26/coronavir...

It's important to look at the numbers by region and not the total numbers. And if you consider the overall mortality you have to take in mind that other incidents where people usually die went down (e.g. traffic accidents.
But all these countries have now strict lockdown measures in place.

I'm sure that the death toll im Brazil will skyrocket.
This isn't dependent on Store at all. App virtualization has been decoupled from the store for some time now.
Hey HN. I'm Mike co-founder/CEO of Grain.

I decided to start Grain b/c I was tired of requesting access to recordings of convos and repeating myself when I could just share the part of a recording instead. Our team built something pretty cool that I honestly didn't see coming when we started.

Happy to answer any questions and thanks for the support.
What setup are you using to “easily move between machines”? Are we talking CLI here?
>email as a platform is pretty much dead outside small niches.

Perhaps from the POV of The Valley, but I can assure you that email is alive and well elsewhere.
Maybe they shooting for an acquihire play? This thing is more of a Feature than a Product.
It's not just cost. I'm starting to think that if I get sick (covid or otherwise) until the hospital overload subsides, I might have better chances to recover in my own bed even in a relatively severe case.
A term-sheet is a non-binding agreement. So I think it's pretty easy for investors to test the waters by throwing out a term-sheet, and then finding out if YC is investing or not. If not, they come up with a reason to pull the term sheet.

Anybody else think this is a possibility?

Of course, these investors may get a bad score in YCs internal systems, but are other YC companies not going to meet with the VC based on those feedback systems?

TBH, I didn't know YC had a guaranteed follow-on amount. Either way, you just gotta be too good to ignore.
With their Powerpack products, Tesla oversizes the inverters and capacity a bit to deal with reduced capacity over time, so if you have a 1 MWh battery, they might install 1.15 MWh and limit to 1 MWh so that in 20 years it still has a 1 MWh capability.
Did the question and context come off as though I felt owed something from someone?

Yeah, it did little. (Although perhaps less so now rereading the original post...)

"Transparency" is - at least in my mind - a word often used by entitled people demanding information about things they have no need to right to know about. Sorry if I misread your intentions there...
The answer to that is we should not be using _any_ case-insensitive strings in protocols.

They are fine for human-visible names, but field names and internal enum values should use byte-by-byte comparison. It just makes entire class of vulnerabilities go away.
All of the above/below. It's a complex problem (which I share) caused by a lifetime of habit, and it takes a long-term, multi-pronged/phased approach. A) Physical fitness: proper conditioning will allow you to hold posture for long periods of time without fatigue/strain (this is something you work towards over time). B) Physical environment: everything must allow you to maintain posture without excessive leaning/reaching/craning; don't hold a fixed position continuously, but your base state should be strain-free. C) Habits: take frequent stand/stretch breaks (sometimes I stand up if I am reading something that will take a minute or more; also remember to rest your eyes periodically; look out the window; engage in brief social interation; standing desks are great (alternate with sitting), especially if you get restless). D) Triggers: develop reminders about posture (if I see my reflection from the side or when I'm sitting in front of a TV...; I try to be (not self-)conscious of what an observer would see); when you stretch, use that to "reset" your postural expectation (through repetition, it will become your "natural state", and you will be aware of when you're out of sync with it); if I don't feel like I'm standing up really straight, then I'm not. E) Mental state: if you feel tired, depressed, preoccupied, etc. then you will lose track of all of this; it won't seem important, and you will regress; pick it back up again and move forward (it's about improvement/maintenance, not "fixing"). HTH.
Pretty sure you’ll get far better results with actual cloud gaming providers
Swede here. Like you say our isolation is pretty much volountary, with only larger groups gathering being banned - though I very much doubt that would happen anyway should it be allowed. Our neighboring countries who opted for total lockdown are slowly starting to open up too. I think the death toll in pretty much any country will be primarily depending on how well you’ve protected your elderly. We’ve done OK but could certainly have done better. Though still very far from the “devastatingly wrong” claim above.
Found it:

http://kqueue.org/blog/2013/09/17/cltq/
I don't find GraphQL to be easier to learn than SQL. But SQL is a much more helpful and generalizable skill.

That's the second-system syndrome. Once you tack all the stuff on needed for something "simple" to be useful, it gets as complex as the original. Only all the "SQL replacements" do less, and do it less well.

If you want simple, RESTful APIs are a way to go.

(And no, your average analyst doesn't know GraphQL either -- and if you want to go down that learning curve, might as well learn how to do SQL properly in these contexts instead)
More thoughtful lockdown rules could spare us loss and suffering – Star Tribune
Polymorph Streetwear Brand
Sweden isn't performing a lot of tests for one:

https://www.thelocal.se/20200414/understanding-swedens-figur...
Jerry (YC S17) Is Hiring Full Stack Engineers (Toronto, SF Bay Area)
You might want to see what actual public health authorities have to say about this issue instead of Dunning-Krugering it.
#2 and #3 are probably true for enterprise but definitely not true for SME B2B. Source: we’ve been targeting that niche (15-500 employee companies) for 8 years. Have made two experienced sales hires both in the last year, and dont have any standards certifications. Most businesses are very reasonable and just want you to solve their problems.
How many of these would have died anyway, I am asking about the difference in numbers, not a feeling.
Sure, but markets since 2009 mostly look at how much the Fed is buying (printing, whatever). Yes printing money bad, yes inflation some time in 20 years, yes unwinding their balance sheet will kill us all. None of it matters in the now, which is what markets are, now - with some looking ahead.

So the volatility in the fundamentals is accompanied by a forceful response with QE. Nothing like we’ve ever seen. The QE the Fed is doing today trounces 2008’s QE.

So that’s where we are now. Unemployment numbers come out, market goes up. Why? Same reason it has for the last 10 years - bad data good because Fed will just juice the market at any sign of trouble.

In the end though the stock market doesn’t matter for 90% of people but what it is doing is amplifying inequality. I see this crisis amping up inequality to levels we’ve never seen before. We’ll see the same story eventually with unemployment creeping down from the 20 or 30% high it’ll reach but behind it there’ll be even more people dropping out of the workforce and wages will stay stagnant.

There has been some commentary studying past pandemics where a silver lining could come from worker rights making a comeback so who knows, perhaps the lucky ones keeping/returning to their jobs get a raise in benefits (healthcare, leave) or pay.
Weight lifting is the only reliable medicine. Everything else is a band-aid.
And with the FLIR stuff, I think there are actual strong laws governing what happens between firmware that outputs 9fps and 30fps. It (probably) wouldn't make sense to make two different sensors with two different readout rates, you just lock it in firmware or with a laser at the die level.
Why do they need to perform a lot of tests if their strategy isn't dependent on testing?
'The safest place': how one isolated US town is keeping coronavirus at bay
Can’t they make whatever voting rules they want?
Like anything in start-ups it's a calculated risk. Zoom's app marketplace is designed to facilitate start-ups like ours as they move to become a platform. See https://marketplace.zoom.us/competition. One of the partners behind it told me they had 600 applications so at the very least there are dozens of us! Dozens!
I don't have a lot of GraphQL experience but I think there are some core issues with using SQL.

Single resultset responses might not be ideal. Multi result sets might be fine but I don't think its standard to SQL. (I could be wrong there though)

Transaction semantics can't be guaranteed when you're just a proxy to many services. We'd have to change SQL enough that a web SQL api for any service would be an entirely different beast anyway.
Unfortunate, since the actual document seems quite reasonable.
Some things just won’t die. Even if they should perhaps
Counterpoint: I work for a company that sells software to mostly big companies. Sometimes they want to host it themselves. Creating valid certificates usable for HTTPS is a never-ending support issue.
Russia is honestly handling the crisis better than most of the western world. They've done >1.6M tests with a positivity rate of 1.7%.
> Freetown Christiania

Stole the land they use and supported themselves selling illegal drugs. Maybe they're also living off of government benefit checks, which is not self-sufficiency.

No mention that I could find on the turnover. 1 to 2 years is a typical stay in a commune, as people get tired of it and move on.

> sometimes better ways to do things than your particular way

If Freetown is your ideal, feel free to move there. No thanks from me. It's neighbors don't appear to care for it, either.

> cooperatives

Cooperative housing isn't the same thing as giving people free housing any more than a corporation means giving people free shares.
We need to compare year to year, mortality is higher in January - March any year.
> No. You miss the point. SQL has proven robust over a broad set of types of data. People have tried to come up with new systems for objects (OODB), JSON documents (Mongo), and so on. All were disasters. It turned out SQL was the answer all along.

Document DBs have failed in the general case because most data is relational. OODB is still alive and well; Postgres implements some OODB features, and I would argue graph databases are an implementation of an OODB.

I also think you're lumping SQL and RDBMS together into one term. It's entirely possible to have an RDBMS that does not use SQL; likewise it's possible to have a system that is not an RDBMS that does use SQL. There are addons for MongoDB that let you speak SQL to it.

> I'll believe GraphQL is better when I see a case when it works better. So far, the only cases I've seen were from people who didn't fully grok SQL.

Most of the advantages come from introducing an intermediary data broker (the GraphQL server). As a query language, I do find GraphQL drastically simpler than SQL. We can compare queries for a person, their parents, and their children. I can guarantee the GraphQL query is shorter and more legible. That comes at the cost of flexibility, which I wholly acknowledge.

> I'll mention GraphQL has a completely separate use-case as a replacement for RESTful APIs, where it's not really acting so much as a query language as an API layer. I think it might have some uses there, but as nedbat points out in the thread, it'd be possible to use SQL as a replacement for RESTful APIs too, and it'd probably do better than GraphQL (before you start screaming about security, read netbat's posts; he is definitely NOT talking about a thin layer over a database).

This is the only use case that I'm aware of. There is dgraph, which is a graph database that speaks in GraphQL natively, but they've basically just integrated the API server into the database itself (which I'm not arguing for or against, I just think it's still basically the same stack).
For Anki, I think we should intentionally neglect it
What if the "views" your API queries didn't have to be tables? You could just keep "tables" as a backend implementation detail, and 'fake' a different model on top of them that's closer to what the client needs.
I have a commercial pilot rating, and travelled on business for years.

The trust needed to travel in the pre-SARS-2 days will never fully return.

We got a glimpse of that a decade ago when an American had a virulent form of TB in Italy and had his passport revoked by the US govt.

But corona is a 10/10 on the disruption scale.

All I can suggest is that Boeing and Airbus put their heads together and figure out what it means to protect pax from a pandemic

It might mean hepafilters, more bleed air and pax wearing masks.

FYI: the recent fuel-efficient airliners appear to re-circulate cabin air far more than previous designs, for fuel efficiency reasons. Engine bleed air used to be injected into the cabin, but recirculating is several percentage points more efficiet. And lethal if even one pax is sick.
Will Asia Rewrite Human History?
Let's address these one by one:

"[A correspondent's security code which is the only way to be sure you aren't MITM'd] can change repeatedly": It will tell you this happened, allowing you to take whatever action you think is appropriate. Also like modern TLS the behaviour is that you are always protected by the protocol from passive eavesdroppers regardless. Pervasive Monitoring Is An Attack and so protection against this is far more than "just Marketing".

"Most people install it through the Play Store": Play Store APKs are signed by their creator, not (only) by Google. If Open Whisper Systems says you're getting Signal, Google don't get to substitute something else except if you buy a Google phone and only then by replacing your OS.

"Phone number based apps are vulnerable to SIM hijacking". Signal users can choose to "lock" their account with a PIN so that an apparently new phone with that number doesn't get access unless its owner presents the PIN.

Assuming that you think the phrase "non-repressive state" includes countries like the US that spend billions of dollars to spy on their own citizens, just the first item is already a huge benefit.

Harvesting every single SMS message is trivial and so undoubtedly the NSA does it, they can run simple keyword matching an statistical analysis, and keep everything in case it's interesting. Each SMS message carries the sender, recipient and full text. In contrast harvesting even the encrypted Signal messages is difficult, and even with a successful (and relatively unlikely) breach of Open Whisper Systems itself neither the contents or in most cases senders are revealed by doing this. (Messages to friends or to those happy to receive messages from strangers don't need to reveal who sent them to Signal's own systems, only to the recipient). So instantly such government bulk collection isn't possible.

GPG's security is definitely not "superior" because it's based on the PGP hybrid crypto which is from last century. For example there's no Forward Secrecy, so it makes sense to steal encrypted PGP data on the expectation that you'll some day be able to decrypt it. In contrast old Signal encrypted messages are probably completely useless because the keys needed to decrypt them likely no longer exist anywhere. PGP offers only a signature mechanism, so a recipient can prove you sent a message, whereas in Signal the recipient only has their own certainty that it's not a forgery - nobody else could have forged it, but they easily could and so they can't use that as proof of anything.
I didn’t think of that. Thanks for suggesting an alternative. I’ll check it out.
The keys don’t come from the servers but from the end users, so the remote server won’t have the remote user’s key.

> Or they could let their provider hold onto a copy of the private key

Then the key is no longer private. The idea of a private key is not to share or distribute it.
The actual public health authorities agree that the coronavirus will spread no matter what we do, and that lockdowns will end in the near future.
Who cares? it's a tiny fraction of the gas tax that will happen when there's even close to mainstream adoption, which everyone wants.
Finally - let people go back to their lives. How's Sweden doing these days?
Operating at a loss doesn’t mean they’re running at negative margins. It means they’re burning money to do sales or marketing or hire a bunch of devs to build faster than other companies.
Isn't this the distinction between the Strong Anthropic Principle and the Weak Anthropic Principle?

WAP: we're going to see selection bias in our universe because the preconditions for life must have been satisfied for us to exist within it.

SAP: all universes must satisfy the preconditions for life because cogito ergo sum -- the definition of existence requires life to perceive it.

I've probably sold SAP short because my own model of existence doesn't require perception, but clearly by this point we're well within the realm of philosophy.
There’s absolutely no guarantee that the economy will make a quick recovery if the lockdowns are lifted.

If the death toll starts to spike, people are going to stay home anyway, and businesses will be bleeding cash hoping for a recovery that isn’t coming quickly enough.
Only 25% of the positive-cases on the Diamond princess turned out to be asymptomatic after 4 weeks.

The much-higher, 50% numbers that were being thrown around were obviously overestimated - precisely because it takes a week or two or three for some people to start showing symptoms.

As such, it's incredibly unlikely that the # of real cases is some large multiplier of the number of confirmed cases in any areas that are regularly testing people with flu-like symptoms.
Non-severe covers bronchitis, pneumonia, etc. My friend (who tested positive but was not hospitalized) described it as "chest pain, difficulty breathing, if I do something silly like walk 10 feet to the kitchen I get lightheaded and hold on to the wall" - for about ten days.
"10 cores", "silent": you can only choose one.

No. It's "10 cores", "silent", "5mm thick": choose two.
Personally I don't see the point in having a laptop thinner than 20mm. I would pay very good money for a 25mm thick, reasonably powerful laptop with super quiet cooling.

The Thinkpad T440s was dead quiet. It was the first generation of thinkpads with a 15W CPU instead of 35W. A current mobile CPU configured to 15W TDP would be powerful enough for basically any task that you would throw at a single computer. Instead of keeping things quiet, manufacturers focus on making laptops thin enough to replace a knife.

On current laptops, the noise level tends to follow the system load very closely. Just putting a bit more thermal mass into the cooling system would allow for a much more steady noise level, which is much less annoying (and the fan would not have to spin up at all on short load bursts like starting a VM).
2020 Bridges Conference for Mathematical Art
> You have a brand new premium product that's slightly better than last year's

If it's better then it will sell just fine alongside the previous generation. If it's not actually better they shouldn't have made the next generation to begin with.
I Spent Seven Weeks in a Wuhan ICU. Here’s What I Learned
Yes, but what about comorbidity, when people die from cancer but had Covid-19, how do you define what killed them?
By testing 100% of a city and realising that neither the current infectio rate is high nor a large number of people with antibodies is found?
> SSH

Still requires a passphrase or initializing a keypair on the client & server.

> HTTPS

HTTPS requires user interaction when a site forgets to renew a certificate.

Also SSH and HTTPS don't compare well. One does client authentication, the other doesn't.