skysight-inc/HackerNews huggingface dataset:
It also happens a (400 year-old) tradition that was quite intentionally set up to be overly complex so to prevent unwashed gray masses from learning "proper" written French and to keep it reserved for the elite.

I can't find a link right now, but there was an interview with a French linguist who explained the history of the grammar and how it came about. Was quite an eye opener and helped making some sense of why it is so bizarre.
That looks really good even on paid plans. Anyone using? Reliable, accurate.. .?
Ha! sso.tax, what a great site. As an IT person I always thought this same thing with SSO - even if you have an identity provider, it's often under utilized because nearly everything else needs to go to enterprise pricing for SAML auth. I wouldn't mind paying $1-2 more per user/platform, but as sso.tax tallies, the price jump is often much more.
Install an old version of Linux, limit it to 256MB with a kernel code hack or kernel command line option, and you'd be running entirely in L3.

I also think there might be a niche for unikernels here to compile number crunching and other CPU-heavy tasks down to sizes that would run almost 100% from L3 cache. Wow.
Check out https://en.wikipedia.org/wiki/Jim_Keller_(engineer) to answer your question about loyalty. He's had his hand in all kinds of chips you use.
I've used a mishmash of Liquid/Jekyll and Pandoc to achieve this in the past - but this approach looks nice, thanks for sharing.
Looks like the correct url is https://prospect.org/coronavirus/banks-can-grab-stimulus-che...
> it can stop after 3months

life?
Ask HN: Is this Solidity code vulnerable?
Deployed a smart contract recently and a hacker stole money from it ($13 worth). The amount of money is trivial and honestly they did me a huge service by demonstrating that it was vulnerable. My question however is how.

The code that was executed was very simple:

function functionName(address walletAddress, uint256 i, bytes32 hash, uint8 v, bytes32 r, bytes32 s) public returns (address) {

address signer = ecrecover(hash, v, r, s);

if (signer==recipient) { // recipient global

<withdraw assets to walletAddress>

}

return signer // for off chain reading

}

Are there any issues here, like passing in an empty message hash? I'm trying to think whether someone can game the ecrecover line to get any recipient they want.

Hacker looks to have some sort of automated setup that is scanning the blockchain looking for vulnerabilities and then exploiting them.
Goodstuff, thanks for sharing! Humor and laughter are very important elements to life. I do Love the choice of stock photography and the premise here, but unsure about the pricing I see there ($10?). probably some room for pricing model experimentation and innovation. Godspeed!
> If these devices malfunction, they could hurt people.

I think that the circumstances under which these are being developed are a special emergency; the alternative to using such a less-safe, makeshift device here would be no ventilator at all, i.e. near-certain death.

In this specific circumstance, I think this sort of criticism should be withheld. I don't think anyone's talking about reflashing CPAPs to be life support outside of a temporary C19 emergency shortage.
Show HN: pd-replicator – Copy a DataFrame to the clipboard with one click
I've been meaning to play with this for a while. I'm planning on evaluating how well it works as an authentication layer for Hasura. Hasura looks really nice but would be no good to me without an authentication layer. I found this connector as a stat point https://github.com/httpsOmkar/keycloak-hasura-connector
Anecdote: My wife and I were tested at Stanford today. There was no line, the process took 5-10 minutes and we never left the car. We were told to expect results in 24 hours.

Widespread testing might not be that far off and feedback might not be that delayed.

Edit: Since HN won't let me comment fast enough I figured I'd share the information here.

We were referred to Stanford by our PCP yesterday. We were not members of Stanford Health prior. The process looked like this:

- Video chatted with our PCP yesterday evening, who referred us to Stanford Health.

- Video chatted a few hours later with a physician from Stanford Health who approved the test.

- Scheduled the test for noon the next day

We are not overtly symptomatic for most of the symptoms (at the moment, it has been worse) and have not travelled abroad in a relevant timespan.
Amazon slashes commission rates for program that gives publishers a cut of sales
This is exactly how I feel about Android; it's a little frustrating to me, looking at my family's Android phone usage, that most peoples' experiences of Android are solely on Samsung devices with extremely heavy modifications to the interface. It's great that companies are allowed to customize the interface to fit their devices, but at the same time, it can create a skewed perspective of Android devices as a whole.

My parents both liked Android all right, but had issues with Samsung-specific interface choices, and eventually switched back over to Apple as a result. Same with my sisters (who only experience very early Android phones), etc. Same issue with my wife, except she finally got a Pixel, which fixed her skewed perception of Android devices.
That's OK, no worries!
I really need to get around to fixing my arch, its still left mid-reinstall after at least a month (and I'm lost on the networking for the 2nd time, you'd think I'd have learned by this point)
Turn off the tank heater?
Principles of Self-Made Billionaires
I must be remembering incorrectly then, thank you!
I want my compiler to remove redundant checks (without any noise), and that is why I pass it an optimization flag. If you don't want such optimizations, then maybe you should not ask the compiler to make them.
> Assuming you even pull it off on OS X.

Doubtful. Apple has generally been ratcheting up restrictions on kernel extensions [1] -- currently, kernel extensions must be signed with a developer certificate that has explicit entitlements for kernel extensions, and must be explicitly approved by the user in security settings. [2] A normal Apple developer certificate is not sufficient to sign a kernel extension, and Apple has signalled that they intend to end all support for loadable kernel extensions in the future.

[1]: https://developer.apple.com/support/kernel-extensions/

[2]: https://developer.apple.com/library/archive/technotes/tn2459...
Thanks Dan, I missed this question in the heat of the moment.
> I define coercion as initiating physical violence against another man.

That seems oddly narrow. As a contrived example (I like stress-testing ethical intuitions) would you consider barricading the doors and windows of someone's home and waiting for them to starve to death to qualify as physical violence? (Assume for the sake of argument that noone else interferes with this, perhaps because you're in a isolated rural area.)

(I'll also perfunctorially object to terms like "man" or "human", but I doubt that's a contextually relevant distinction, given linguistic history and the lack of any other sapient species respectively.)
> They got support from Google surprisingly early on in the Android world.

You can thank the Oracle lawsuit for this.

Google has been preparing Kotlin as their escape hatch.
I mean, I'm open to discussing whether we should or shouldn't, but I think it's not an off-topic discussion!
remember that with ryzen that is split up between chunks of cores, so its not entirely flexible.

that gets better with the upcoming generation though, its more unified.
I'm not sure that theory makes sense. If you want SEC filings, you can get them at sec.gov, which is also kind of retro.
Of course ASCII is simpler than Unicode, it handles only 127 characters. If you restrict yourself to those characters ASCII is binary equivalent to UTF-8.

So yeah, maybe you shouldn't use characters 128+ for data archival, I doubt that's a good idea, but that's irrelevant to whether UTF-8 is plain text or not.
Do you adjust returns for dividends?

That’s always been a bugaboo of mine as it makes a big difference over decade+ time frames.
We've been using Keylocak in production as a multi-tenant SSO solution for our service delivery. We've been incredibly impressed with the stability and performance and found it extremely effective.

Keycloak is the upstream project of Red Hat SSO (edit: correct name, thanks snuxoll.)

Running in Kubernetes with RDS Postgres in AWS.
Yeah. I'd question the motivation of any explanation that obscures the "yes, it does enable all of those BadThings but we promise to do our best not to exploit them and here's why we can be trusted" truth of the matter.

That said, they're writing for multiple gun-jumpy audiences so I don't think they lose all of the benefit of the doubt here. Just that this isn't good enough at the moment/yet.
Anything high performance: game engine, scientific computation, deep packet inspection, image analysis, machine learning, rendering engines, high frequency trading.... The list is long!
https://justtesting.org/post/70871612766/lets-program

Small children learn two languages because they're surrounded by people speaking two languages. Children's brains are highly plastic; if they were immersed in people speaking code language as they speak natural language constantly, then they would learn that, too.
Somewhat? It’s pure clickbait trash, and I thank you for your saved-you-a-click service.
You're welcome to criticize substantively. I took a quick look at your comments and didn't see any WDS. Maybe just a little.
Vardhan Agrawal joins the raywenderlich.com team
Prejudice is an interesting thing. I read your post without blinking. It took a second to sink in.

You seem to object to two separate things: 1) the majority owner is scummy; 2) the majority owner is Chinese.

For many people these equate to the same thing. But you have broken them out. So perhaps you don't think all Chinese are scummy. What then is your objection to non-scummy Chinese? Also, would you be ok if it was majority-owned scummy Swedish company?

I think your statement as it stands builds prejudice (unintentionally, I hope) against Chinese simply for being Chinese. I can think of a number of characteristics that bother me about some "Chinese" companies. But they aren't really about the geography. They would apply equally to non-Chinese and could be remedied by any company that exhibited those characteristcs. Thus, I think it would be helpful to list specific objections rather than blanket with "Chinese".

For instance, I'm generally reluctant to online order from a "Chinese" webfront because it takes so long to ship. But for some time now, that critism applies equally to Amazon because they have tried to compete with AliExpress, Banggood, etc. by flooding me with direct-from-China merchandise. It takes just as long to reach me whether I order through Amazon or from Banggood. And Banggood is cheaper. For the exact same product from the exact same source.

By listing my exact complaint, I can warn any Chinese or non-Chinese companies exactly which behaviors I find objectionable. They may not be willing to change being Canadian or French or Texan, but they might be willing to work on my true objection.

You might argue that Chinese companies often don't have a choice on some objectionable matter. But it is a lot easier to push back on their government with, "Such-and-such is a specific business-killer. Don't force this" instead of "Being Chinese is a specific business-killer. Don't force this." And it also sends the message you want to USA, Iran, Venezuela, Poland, etc. companies at the same time.
I personally think we need a county-by-county approach. There is a high variation of the infection at local levels. All the news is currently about how bad New York is and it's true but we're not all New York. http://www.countycovid19.com/
Can't the cheaters just get their own server, and the people who want to play fairly just get their own server?
Why is a prescription required anyway?
I think that's largely true, because no one has good answers here. All reasonable plans cannot be feasibly financed at the state level in the USA.

Still, it seems like a properly framed argument like yours would need to start with "They have no plan" and then move on to... a plan.

There are no good plans. At the end of the day we stay home, wait for infection rates to go down, and then spend a ton of money on testing and tracing. The other alternatives are to re-spawn the outbreak or to wait for a vaccine, both of which are even more expensive.

But that plan needs to happen at the federal level, California doesn't have the money.
What does 10% off the top of the informal dog walking economy look like?
> I mentioned bugs and lack of testing in a polite way, also offered how test system could be designed to automate testing.

Did the same a while ago, with my CEO. Instantly removed from overseeing the biggest project we have in the works. Also removed from all communications about the project and privileges to view project-related documents revoked.
AMD/Intel make incredible products, but there's mostly bitching about workplace environment at those places on Blind.
How many orders of magnitude, would you say? 10x? 100x? 1000x? Because billionaires have 10,000x more wealth than the average person. Are you saying they're all 10,000x smarter than us?

Obviously not. It's pure luck. Well, luck and exploitation.
>The amount of $ 24,000,000,000 would have in 100 Dollar Notes a weight of 240.00 t (217.72 short tons). A single stack of money with 240,000,000 new banknotes would be 24.00 km (14.91 miles) high und would have a volume of at least 248,373.60 litres (262,453.46 quarts).

>For transportation, you should already have a fleet of trucks.

https://1000000-euro.de/how-much-does-a-million-dollars-weig...
I am working with several medical tech companies. It is "true" venture funding. The main company has bone implants technology and is a "Billion dollar company" in seven years if everything goes well. Even after four years of R&D revenue is still 18 months away. And that is in the thousands not millions. Full commercial production is about four years away.

Here are some the joys:

1. Long lead times

2. Highly regulated

3. Conservative buyers
He doesn't need to be talked about for the thousandth time in the way he always gets talked about—not on HN, at least, and it's easy to see why: this is a site for intellectual curiosity. Curiosity withers under repetition and fries under indignation. What happens to it under the combo? exercise for the reader.

This is one of those cases where it's super helpful to have a single thing you're optimizing and for and to know what it is: https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que.... It helps with quickly answering questions that might otherwise be conundrums. A previous example: https://news.ycombinator.com/item?id=20186280
Super cool!

Back in 2014 as a senior project in college we built a quadcopter for the BeagleBone: https://github.com/Rose-Hulman-ROBO4xx/1314-BeagleBone-Quadc...

We considered building the entire thing as a PCB, but it was pretty expensive to build one that size, plus we had concerns about its ability to take abuse (we broke a lot of quadcopters, even with our hastily jury rigged test stand.

Our main constraint was price: I think we set a total of $100 (including the BeagbeBone) for all the components, which included the IMU, a cheap VGA camera, motors, battery, etc. Super proud of the laser cut frame as well, though I bet if we had better access to 3D printers back then we could have printed a frame fairly easily.
I don't think him jumping back and forth is a bad thing. I'd prefer if Intel and AMD (and others) were at each others throats constantly. We're the winners in that scenario, with more and faster and cheaper chips to choose from.
Yeah, I'm tracking adjusted closing points.
One will find a library to do the SAML. That library will almost certainly do the XML (most likely with xmlsec1). The library will have a call for the ACS endpoint, for the SSO login endpoint, and maybe for the SLO endpoint; it won't implement the endpoints itself, but it'll implement all the logic of the endpoint.

The company will end up writing a ton of authentication and authorization code --- it'll do that no matter what, because the application will have its own security logic, like all applications do.

(OIDC doesn't use XML. But the story is the same, with different endpoints.)
The ArduPilot software platform is used very commonly across the drone industry and this is definitely not the only programmable drone available! The ArduPilot site has a list of some ready-to-use drones that have ArduPilot installed: https://ardupilot.org/copter/docs/common-rtf.html.

A lot of the time ArduPilot is installed with a flight computer (separate from the flight controller) which sends control signals inline with the RC receiver and can be retrofit onto an existing drone.

You can also pick up pretty inexpensive kits to retrofit any DIY quadcopter or RC aircraft with autopilot capability. Two examples are the older APM2.8 hardware (no longer supported, dirt cheap) and the Pixhawk PX4 (actively supported, more expensive but still <$200.)
I would love to use http4k, but last time I checked it lacked support for coroutines, which Ktor makes heavy use of.
Print a known prefix every time you log. Or slap together a simple logging module that adds said prefix. Then to browse, use `tail -f log_file.txt | grep "PREFIX - "`. Console tabs makes it easy enough so that doing this with a bash script and opening tabs for each log prefix has fulfilled my need for such a tool.
Works for me on fennec_aurora, Android 8
That's odd, it's the opposite for me. I did like GitHub, but then setup a Gitea and made sure to figure out how to move things over (even if I haven't done it since they haven't really given me a reason) after Microsoft acquired it. Now I watch every move with a weary eye, though truth be told so far it's going fine (mostly by being hands-off, of course).

I do assume a lot of this is their own money, but with the financial security that Microsoft offers you just can't do much wrong. Even without actual money actually moving, it might still be MS funding that makes the difference.
Similar to @quietgolfer, we also have strict requirement on serving latency, and we benefited from Pinot's star-tree index. We had a table with more than 1 billion events, and we had to do DISTINCTCOUNT and SUM with GROUPBY. Initially without optimization, queries timed out (after 15s). After star-tree index was added, the query returned in 500ms.

Based on our earlier benchmark, Pinot query latency without star-tree is already slightly better than Druid: https://image.slidesharecdn.com/lnkdmeetupslides0426-1705021.... Though that benchmark was done years ago, the result seems consistent with the recent test run by @quietgolfer.
Who are the suppliers? The management of the supermarket figured out that the appropriate thing to do was to ration the product. Are you implying they are not suppliers? There's a whole chain of people that work to bring products to people, hence the phrase "supply chain".

If some other store did not ration the product, then they would have empty shelves, so I'd go to the one that did.
> The reality is that programming languages are languages, but only for a very restricted vocabulary that is not even close to what can be done on human languages.

Vocabulary is not the real difference. A word is an abstract concept given a definition in terms of other words. The equivalent of set of related words is an API in a programming language.

The real difference is that natural languages are intended and optimized for speaking, and they inherently encourage ambiguity because conversation is an interactive process where one can request clarification. Programming languages are typically non-interactive and don't tolerate ambiguity at all.
Does anyone have cites on litigation specific to generative works?

The nearest neighbor precedent I'm aware of is the dismissal of Authors Guild v Google
The Post COVID19 World Will Be Different?
The 7F52 has 16MB of cache per core.

I'd love to see what is possible with a tiny runtime/OS in the kilobyte size and running a microservice written in a native language off of each core, everything out of the L3 cache.

I imagine the throughput would be amazing. Single thread per core, e.g. cooperative multitasking. Do this for stream orientated workflows, or even for processing data that is in reasonable sized chunks, it might be screaming fast!
Any pitfalls you’ve encountered when implementing?
> If you replaced it with anything but a https://*.steampowered.com, the app would refuse to load the URL, so I don't see the vulnerability.

I’m going to take this as what the intention was when designing this solution.

> 3. App verifies that the domain ends with "steampowered.com" and starts with "https://"

I’m going to take this to be what would have actually been coded in this solution.

I’m now going to register notsteampowered.com, and bypass the bug in the code to deliver an exploit over https.

This solution is fragile. Why not just do the whole thing over TLS to begin with and avoid this vulnerability in the first place?
You're right, not pure luck -- it's 99% luck and 1% talent. If Buffet was born the child of a goat herder in Azerbaijan, he would not be anywhere near the position he is today.

Basically, if Buffet's father was anything other than a US Rep and businessman, he never would've stood a chance. He would be working 40 hour weeks making someone else rich like the rest of us.
May I draw you a upward line on a chart?
Most Important Part in Coding
From everything I've read and watched on Theranos they were committing major fraud. It's hard to blame investors where the company itself is creating false test results during meetings. As far as I can tell it's way worse than WeWork.
Well, your ByteBuf is still a pointer. You also now need to dereference it to get the length. It also can't be passed by value, since it's very big. You can also not have multiple ByteBufs pointing at subsections of the same region of memory.

Thing is, you rarely want to share just a buffer anyway. You probably have additional state, locks, etc. So what I do is embed my ByteBuf directly into another structure, which then owns it completely:

typedef struct {
...
ByteBuf mybuffer;
...
} SomeThing;

So we end up with the same amount of pointers (1), but with some unique advantages.
When SR-IOV becomes mainstream do you think it would be a good idea to start virtualising every game in its in sandbox? So each game runs in its own VM and doesn’t have access to the host?
No and not even close. Look up Betaflight (racing oriented) and iNav (navigation oriented). Ardupilot is more integration/mission oriented, but it's far from the only game in town.

A small <250g drone is in the $70-$100 price range, although you will also need a $70+ radio transmitter or some heavy hacking to control it. Most of the (hundreds) of supported control boards are not open hardware in the schematics sense, but some are.

The all-in-one PCB integration strategy is cute, but I really don't think it's a great approach from a crash-recovery point of view.