skysight-inc/HackerNews huggingface dataset:
China never kicked Western journalists out. It revoked journalist liscence from a number of journalists from Washington Post, nyt, and wall street journal as a retailation when the US designated five Chinese media as Beijing operatives. Media from other countries, UK, Germany etc are all in China. You can see reporting and interviews in China by bbc, Reuters and many others right now.

As from the virus in China, as person who have many relatives and friends near wuhan and in Beijing, from all information sources I can gather, there is no massive spread in China right now. They staying highly alert but there isn't a large number of infections right now. And my anecdotal observation on the severity of the issue during February matches with the official count. So I don't believe there is massive under-reporting. All my friends and family don't buy there is massive deliberate under reporting as well.
Java Coding Problems Review
Here is the one I advertise the most

https://greasyfork.org/en/scripts/811-resize-yt-to-window-si...

https://github.com/Zren/ResizeYoutubePlayerToWindowSize/

The only thing that would irk would some, I think, is that any stats/details are out of sight, a scroll/pgdn away
True. It's as easy as sending any other email there. I love when that little icon on ProtonMail lights up for end-to-encrypted but it only does that when I send mails to other PM users which are very few in total.
Agility CMS vs. Contentful: Which Headless CMS Is Right for You?
Here's a secret: sometimes generic products are just repackaged name brand products. For example, my friend's business produces a generic Trader Joe brand product, the only difference between his brand and the Trader Joe brand is the packaging and the price (Trader Joes brand sells for much cheaper)
I've heard Gilead was a fake news hoax planted by Adam Feuerstein...
Unfortunately, it's still unclear if these new numbers reflect those cases. If that changes (or has changed without my noticing), I'd love for a reply to this comment with a link, as I am also very much wanting to know.
Billionaires are very preoccupied in saving the rest 99% dreamers but before the vaccine come out show me the money.

It seems a negotiation between drug dealers in dirt dark alley.
After 5 days in a row of not being able to get a delivery slot for another grocer, I used a similar tool. Even with the help of the tool polling the website every minute, the slot filled before I was able to complete the order the first few times. So at this point, it's clear that only coders are able to get online grocery delivery from the store I use.

If there was a way to reserve delivery slots for the elderly and at-risk, that would be great, but otherwise I see no problem with technically savvy people having an advantage here, if the alternative is requiring people to do manual polling and waste time. Those slots are going to go to somebody. Perhaps some limit to one delivery per week per account to encourage people to order more efficiently. Eventually, delivery capacity will ramp up to satisfy demand regardless.
Usage stats from Mozilla AMO:

ViolentMonkey: 50K
TamperMonkey: 418K
GreaseMonkey: 478K
here is the motivation for doing that: https://sans-io.readthedocs.io/how-to-sans-io.html#why-write...
This is a good one, endless number of function generator circuits have been built around MAX038, I have a MAX038-based function generator on my desk right now. It's an analog generator and its stability is nowhere near a PLL/DDS-based generator, but it was a robust solution for a low-cost generator.
Hungrymark 1.2 released, best bookmark tool
Show me some audiophile headphones with a DAC and I'll believe you.
I don't doubt it, but where did you hear that?
I've only ever seen my laptop's battery discharge while plugged in via one of those USB-C hubs which allow PD "pass-through". But have yet to find one that passes all the power through.
That's a wrong number for daily deaths.
It factors in previous deaths counts that weren't counted (mainly in NY). Those numbers should have been backdated. Currently it seems like the daily death toll is rising, although it doesn't (at least not so sharply).
North America + South America + Middle America = the US continent (also known as "our backyard")
Can you name any other CEO who could pull the success Tesla had thus far? It comes in a package--you cannot pick and choose. If the board (or SEC) legitimately thought a better person could run the company, the outcome may have been different.
Why can't secure email be based on simple https-server?

I assume the server would need to store the messages in plain text, or maybe not, but the communications to and from the server should be safe with https, no?

You would not need to trust such a web-server any more than you currently trust you email provider. But it would be much safer. Why not?
It actually not very different in its core(except the transition to Proxy). In fact, you can already do that on vue 2, just you are unlikely to.

Put method in data or prop? It actually works, but why would you do that when there is a field called `methods`?

The setup method seems like a slightly enhanced data() that allow you to place things in a more free way.
They disabled controls in the embedded Youtube video, so you can't rewind or seek in the video.
A word that comes in handy from time to time here in Montana since there is no equivalent English word. But I'd place "wairsh" higher in my favorite list. Another word with no direct English translation.
> Well TWRP can only erase.

No? TWRP can flash images to any partition you like iirc. has an ADB sideload feature too... Or am I misunderstanding?
> What about the much higher numbers of indians (especially in C level executive positions) in tech? Or Arabs?

What about them? (Mostly, what both of those show is what the structure of the immigration system favors for nationalities where there aren't lots of people who are eligible for family-based immigration.)

> Transgenders?

Mostly reflects that people of higher socioeconomic status and in social environments concentrated on particular geographic locations are more likely to primed to accept.(or, viewed another way, less strongly conditioned to deny) transgender identity, and that both of those correlate with onramps to the tech field. Not that that is germane in any way to racism since gender identity isn't a race/ethnicity.

> Neurodivergents?

Also aren't a race/ethnicity and so aren't germane.

> Iranians?

See above notes about Indians and Arabs.

> Muslims?

Aren't a race, but also see above notes about Arabs and Iranians (which apply to lots of other places where Muslim immigrants come from.)

> At what point would tech not be racist?

I never said tech was racist, I said that “some races are overrepresented” isn't counterevidence to racism but, absent evidence for some other explanation for the overrepresentation, supporting evidence.

But, that aside, obviously, at the point where no one was systematically disadvantaged in the field on the basis of their race.

> There is a lot of evidence pointing to a really diverse, generally progressive industry

No, there's not. There's a lot of evidence of an industry drawing principally from a narrow domestic racial and class pool, that on non-racial/class grounds overrepresents groups overrepresented in that pool, and which in addition to that domestic pool overepresents immigrants to the US on non-family bases because being in the industry is itself highly advantageous to employment-based entry into the US.
> Firstly, there is the issue of failing over to secondary databases. You can build it into GraphQL to just have it fail over to secondaries. With raw SQL, each application has to handle that sanely, and the chances that they all do is slim. You could put something like pgbouncer in front of it, but at that point you're still adding that layer of complexity.

Not really, you place pgbouncer in front and problem solved, it's also very likely more performant than your glue app would be.

> You'll also have those people that crush the database with poorly optimized queries. GraphQL lets me choose what queries I allow, so no one can lock the database for an hour doing something insane. SQL doesn't give you a lot of tools for that; especially not when some people are supposed to be allowed to lock the database for an hour and others are not.

we are talking about read queries there (in the tweet he mentioned he is not yet convinced about making changes this way), you can have dedicated instance just for handling that traffic, you also can set up timeout for the query. You also have the same chance of getting bad queries when you use ORM.

> GraphQL also knows whether the query is a read or write operation; they're separate in GraphQL. You can sanely route read queries to replicas and pass write queries to the master. This is harder in SQL, and involves parsing the statements that come through. It's still doable, but again, you'll still need another layer before the SQL server to do it (pgbouncer implements this, I think).

this is not an issue pgpool-II does that as well, although author was talking about select queries.
Only moderate quality evidence, e.g. https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3551767
> UIs are built in trees?

Take the Web's DOM as a prime example, but I think all major graphical user interfaces are primarily organized as a tree of nested components.

> How so more than the RESTful JSON responses traditionally used?

For generating a flat JSON object with scalar values there's a natural mapping from the single row tabular result set to a JSON object. Add an array property from a one-to-many join and you start to notice the impedance mismatch. Do you live with duplicating the scalar properties in every row of the result set or make multiple queries? The more deeply nested the JSON result the worse the problem becomes.

> We shouldn't use SQL at all?

SQL is fine for producing tabular results but its ubiquity means we often end up using it in situations where it's an awkward fit. Relational database are very robust and suitable for many data models so it's often a reasonable tradeoff to make.

Hopefully in the future we might see a graph query language in relational databases: https://www.gqlstandards.org/
They are now including many of the suspected (but untested) cases in their reported numbers now. It increased the total from New York by a significant amount, see [1].

The increase is roughly in line with similar estimates from excess mortality [2], so I would guess they are catching most of the deaths with the new reporting scheme.

[1] https://www1.nyc.gov/assets/doh/downloads/pdf/imm/covid-19-d...

[2] https://www.nytimes.com/interactive/2020/04/10/upshot/corona...
Thanks. For those not following the link, this study shows that NaCl aerosols penetrate measured surgical masks at a much higher rate than n95 masks, even after creating a firm seal.
Grand Finale: On “The Poetry of Weldon Kees: Vanishing as Presence” (2017)
I'm not sure whether I was downvoted for being pessimistic or optimistic. Most places seem headed towards extended controls and demanding a very high standard for any reopening.

I'm in the SF Bay Area which has had a fairly steady daily case count in the face of increased testing, but a declining number of COVID cases in ICU over the past 10 days. The latter is a lagging indicator, so whatever trend is there is going to continue for 10+ more days. IMO, we should slightly loosen controls, but I do not think public health will even consider that before a couple weeks have expired.
Dr Birx said the whole country is doing this, and she seems totally fine with it.
Most 8-bit machines are historical and suffered from the technological limitation of its time, they usually have few registers, an accumulator-based architecture, no multiplication/division instructions, limited addressing mode (especially, no efficient base+addr). So in general, they are not suitable for compiled languages, and hand-tuned assembly is required for good performance. But it actually makes sense for mass-produced applications when simplicity and cost are important. On the other hand, I believe the AVR is one of the only major 8-bit architectures designed using a modern approach, specially optimized for modern C-based programming.
This guy is a hero! I have so much respect for his work.

By i’m still wondering if this bug could have been detected by automatic fuzzing testing ?
I know it would never happen, but I'd be ok with the battery pack living outside of the laptop itself, almost like an external hard-drive you plug in via USB-C. Could probably install a mount on the back of the screen it could clip onto.

My main point is that I'd enjoy the ability to cut full power to my device at my discretion. I've never been a fan of all the Mac background activity when I close my screen (auto-downloading updates, wake for wifi, etc).
I've moved it elsewhere, thanks! I didn't mean to upload that page yet, got careless and hadn't refined it.
No lesson learned, they're still doing it wrong.

1. They shouldn't be deploying to one of two redundant systems and then deploying to the other one an hour later. One system should keep running the old code for days, if not weeks. That would have prevented the loss of AGC.

2. They should have rollback procedures in case an update causes problems. Instead they added an emergency patch on top of the new bad code. This worked out OK but could have fucked things up even worse.
I don't agree with that. If you look at how many negative results are returned, that is a good indicator of whether you're sufficiently testing. For example, the average here in Australia is that 1.7% of tests yield positive cases. That suggests that you're probably testing enough, especially considering if people are self-selecting to be tested when they think they have symptoms. In that case, you'd expect there to be minimal additional asymptomatic cases, or you'd be catching them in the negatives.

Compare that to some states in the US, where it's a full 30% positive rate, and it's obvious the testing there isn't sufficient.
I think the argument you are making has some truth to it. It is a common belief that drug companies are more interested in developing treatments than cures as there is far more profit in treatment.
The papers:

- Boyle, Moore (1977) https://www.cs.utexas.edu/users/moore/publications/fstrpos.p...

- Knuth, Morris, Pratt (1977) https://pdfs.semanticscholar.org/4479/9559a1067e06b5a6bf052f...

- Rytter (1980) https://doi.org/10.1137/0209037 (paywalled without subscription, but you know where to find it cough scihub cough).
Does go actually generate machine code that continually checks for err != nil? Because that can be more expensive than generating an unwind table and ignoring it until an exception actually happens.
While you're at it, for a similar resource check out: https://github.com/dylanaraps/pure-bash-bible and https://github.com/dylanaraps/pure-sh-bible

I believe they've been posted here previously.
> Surgical masks do not filter aerosolized particles at the same effiency as an N95. For an airborn virus, that's a pretty big deal,

Last I heard, COVID-19 transmission by aerosols vs. droplets was controversial, and only droplet rather than airborne precautions are generally seen as necessary for it.

Also, a big reason (but, yes, not the only one) that surgical masks are less effective against aerosols is that they don't tightly seal, so the most effective part is routinely bypassed by aerosols.
From the other side, it was a way to convert Amazon gift cards into BTC. Many argued it was primarily for those who acquired those gift cards illicitly or who were money laundering.
The NEJM letter [1] this article is summarizing is only talking about their condition while in the hospital (that is, of the 215 tested, the 33 who tested positive didn’t show symptoms before being discharged (median length of stay is 2 days).

That letter cites an article[2], which found that of the 43 pregnancy patients who tested positive, 14 (32.6%) were asymptomatic when admitted. However, 10 of them developed symptoms during their stay in the hospital or shortly after being discharged. It doesn’t say how long they tracked patients, but at most, 4 of the 33 could have been asymptomatic.

IMHO, the letter is confusing at best, but more likely intentionally misleading. FWIW, I probably would have come to the same conclusion had I not spent ~45 minutes digging through citations...

[1] https://www.nejm.org/doi/full/10.1056/NEJMc2009316?cookieSet...
[2] https://www.sciencedirect.com/science/article/pii/S258993332...
Profound remission in Crohn’s disease requiring no further treatment
Concurrency bugs should fear the big bad data-race detector (part 1)
> Designed by ex-Apple mechanical engineers.

Are we really now in the world where having worked for Apple makes you instantly trustworthy for anything?
Not just basic training, but recruitment standards that eliminate most known comorbidities.
The larger and older the company, the lower the risk for every employee. Every employee adds to (new productivity)/(new risk + existing stability), that small amount turns out to be a lot when you go from one to two employees but not a lot when you go from 100 to 101 employees.

I've been very impressed with the way that Microsoft, Dell, Intel are willing to take the time to onboard new employees. (Although some prefer interning them first)

You can also look into research / government support. Government organizations or government contractors are usually not as competitive financially, although more competitive on most other dimensions. "No one gets rich at JPL" was a phrase often joked about by people that had spent 20+ years in that sort of work. Many of the younger people at GrammaTech & Galois were hired right out of college. They're stability comes from a different business model.
It is, but the common complaint of a blog not linking to the site they are associated with applies.

https://purse.io/shop

They of course aren't accepting new signups, and all "orders" must be completed within a week.
It's not an real doubling of number of people actual dying within a 24 hour period.
This might change your mind https://news.ycombinator.com/item?id=22873578
Submitted title was "A C++17 STL bug that can be attributed to Knuth, and its 40-year-old fix", which is nice additional context, but can now go here rather than there.
A lot of high end laptops have cooling issues because it's the kind of thing you have to buy the device and actually use it for a while to find out, but everyone sees "i9, ultra slim, 'pro'" straight away.
Unfortunately I’ve seen these methodological updates getting twisted to serve various political ends - such as trying to discount the severity of the pandemic because “clearly they are overcounting”
I think when Firefox moved to WebExtensions and GreaseMonkey was too late to adapt their code, TamperMonkey had quickly made the switch supporting the full GM API and more. I had seen after a while and GM had become even more limiting in terms of what you could do, so I just made the switch to TamperMonkey. Didn't notice the privacy policy so far, will have to re-evaluate my options now.
Over 43,000 US millionaires will get ‘stimulus’ averaging $1.6M each
Good riddance. I like irc more when I don't have to measure every word I say because some douchebag is silently logging everything and putting it in a website for everybody to see, index and archive, without my permission or anybody else's.
Josh, I appreciate you being receptive.

But I've been asking Stripe for this since 2015. I don't know what info I can possibly offer you that you surely haven't heard from tons of customers over the years.
Trello got other problems https://news.ycombinator.com/item?id=22873578
How to Fuzz an ADT Implementation (2013)
they would increase available slots by allocating more resources

This isn’t AWS where you click a button to scale. Real world scaling has lead times such as “acquiring a new building”, “buying more vehicles” (which need to be manufactured) and “hiring and training more people”.
https://archive.md/tD5QU
Covid-19 Tech Impact
Doesn't even have to be widespread, a randomized set of say 1,000 New Yorkers tested for antibodies across age and demographics could give us invaluable insights into the infection rate of this virus. It's infuriating seeing politicians pass the buck by pointing to a world of widespread testing, which we know will not happen anytime soon.
Covid-19 patients recovering quickly after getting Remdesivir
For gaming in particular, the GPU is almost always the bottleneck. It's much easier to throw in more polygons and texture pixels than it is to come up with bigger and more complex gameplay simulations. I'm still running a quad-core i5 from 2014 in my gaming desktop and it rarely has an impact.
Apple should really work on the batteries of their product, most people hate their product because of the poor battery.
fn verify_jwt(
// The input from the network/user; the JWT we will be verifying
untrusted_jwt: String,
// *The* way in which we expect JWTs to be issued / we will be verifying against:
verifier: Verifier,
) -> ... {

// Basic sanity checks & decoding.
let untrusted_jwt: Jwt = ...;

if !verifier.acceptable_alg(untrusted_jwt.alg) {
bail;
}
verifier.verify(untrusted_jwt)
}

Where `verifier` is something like `JwtRsa` or `JwtEd25519`, or `JwtHmac`. The verifier should know what few, limited algorithms to look for, and it should reject anything and everything that's not under its domain area. There's no blacklist, no guesswork. (I don't even think I'd have `acceptable_alg`; just let `verify` do that work; it has to look at that field anyways to set up, e.g., the hasher.)

I'm largely omitting¹ JWE, so perhaps there's some hidden dragon in there, or perhaps we just handle those completely separately. But for JWS, am I missing something? Unless you pass `NoneVerifier`, in which case you're explicitly opting in to alg: none and it's goriness.

Sadly, I don't think any of the top three Rust libraries do this.

¹I'm also omitting that RSA has many attached hash algorithms in JWS; one can imagine that JwtRsa might let you configure what hashers it will/will not use. As it is, some libraries take sort of this form, but split the key material off from the algorithm … letting you pass craziness like an RSA key material and HMAC-SHA256, which makes no sense. That is, what hash algorithms (if any) are possible is a function of the type of key material coming in.

¹I'm also omitting verification of the claims, which I think a library should generally handle.
It makes you ever-so-slightly more trustworthy than “three guys in a garage”. And no the irony isn’t lost on me here.
Sorry, I must nitpick. Egypt and Iraq has 5000 years of history. China has 3000. Your first written record came in 1250 BC, latter day Shang dynasty. On the other hand at the same date Eastern Mediterranean has five great historical civilizations already, though nearly all perished in a collapse. Assyria, Babylon, Egypt, Mycenaean Greece, and Anatolian Hittites.
Even an MIT licensed extension can be changed on a whim and pushed through update - and browsers make it deliberately inconvenient to run a local extension checkout long-term.

I have a chip on my shoulder here, because i was the victim of when the de-facto analogous extension for CSS, Stylish, silently changed ownership and violated my privacy without ever prompting me to accept any new ToS.

No userscript or extension has ever seemed sufficiently interesting for me to risk that ever happening again,

(PSA: Make sure you do not have Stylish installed.)
I run into a (to me) more annoying behavior on a 13” MacBoon Pro - the machine will start and let me login with < 3% displayed and then shut off within a few moments after login, presumably because startup actions pegged the battery and drained it back to a shutoff state. Would much prefer the machine not start until I can login and work.