skysight-inc/HackerNews huggingface dataset:
China's numbers were fixed in an incredibly suspicious way - their Wuhan death toll increased by exactly 50%. I don't think it's reasonable to believe the new numbers any more than the old ones.
It's interesting to look at this from the perspective of HMAC codes: the host uses (several bits of) the sequence number as an authentication code over other aspects of the connection. The client IP and ports are elsewhere in the packet, so the sequence number also needs to carry data for the timestamp and maximum segment size.

From that security-based perspective, this bug seems to belong in a common category of data escaping the hash -- here where the (sequence number + MSS category) sum has hash collisions.
I bet you know this, quite old, quotation on memory:

"They will cease to exercise memory because they rely on that which is written, calling things to remembrance no longer from within themselves, but by means of external marks."

> The notion that memorization is useless or somehow not integral to the learning process is wrong. When you intuitively know an idea, you can build upon it and combine it with other ideas in a subconscious and long-term way.

There is a profound difference between memorizing sequences of characters (passwords, ids, phone numbers, surnames, dates, particular APIs) and memorizing concepts (which may, but not need to, use these characters as a component).
Factorio is a polished experience, with devs committed to bringing it not just to completion, but to perfection (with performance, aesthetics, and balanced gameplay). In contrast, most AAA games are bland experiences built under sweatshops, and most Early Access games wind up half-assed or as abandonware. If there's any game worth your money, it's Factorio.
Or maybe software is just more widespread than before and it's no longer an exercise practiced by a few selected (by hard-work, luck, you name it) "experts". It is completely understandable if these new wave of developers care their time budget more than efficient hardware utilization.

This is the tendency for any craft that gains popularity over time. We can only advocate best practices by making them accessible, approachable and applicable. We can then hope the crowd listens and if they don't, that's ok, it's their loss (or not if their audience doesn't care).

A good analogy is, you don't have to build an earthquake resistant building if you are gonna use it to store some metal junk (carpenter tools, gardening tools etc). It's not a house and there is no danger even if you live on top of an active fault line.
Yeah, I'm withholding judgement till "the end of April", but given Japan's doubling time is roughly 10 days, you'd expect there to be ~2.5k severe cases right now. Given that Japan's official count is ~11k, is there reason to believe 1/4 of all official cases are "severe"?

Does anyone have up-to-date data on "excess deaths" in Japan for the past few months?
>I, for one, fled the US to come to Japan for a few weeks because I mostly believed these numbers.

SARS-CoV-2 thanks you for your efforts to help it find new populations to replicate in.
Before assigning failure to other people’s beliefs, you should examine your own assumptions. Not everyone views life success through the lens of career.
Have anyone used both https://redwoodjs.com and Nextjs and share their experience?
I find these restrictions relatively frustrating because they push governments into an adversarial relationship with shareholders in a way that is unnecessary.

We may not like it much, but government equity purchases are a much more aligned way to pursue a bailout. World governments (and by proxy taxpayers) should be gaining ownership or preferred rights in these deals. Then shareholders could be free to do whatever ridiculous dividend / buyback policy they want. Putting time limited bans on corporate payouts doesn't fix the incentives that lead to high payout rates in the first place. Shareholders losing 80% of their equity in a bailout would.
I think it is worth adding that the author is not making a simple "machines can never understand Shakespeare" claim, but that the techniques used here are being interpreted beyond what they can achieve. At one point he writes "it may well be that computerized textual analysis will ultimately go beyond treating word frequencies in isolation and will be able to cope with the full range of language. But that time has not come..." The article also quotes Pervez Rizvi, a software engineer who has collaborated with the author in using computers where appropriate, who makes several trenchant criticisms of Taylor's interpretation of computer-generated evidence.

Any editor of the New Oxford Shakespeare may make changes without needing the consensus of the others. It now seems to be experiencing some of the problems arising in Wikipedia from that policy.
JavaFX?
Many smartwatches have the hardware to measure oxygen saturation, though not all have it enabled. For example, all Apple Watches have hardware for it, and rumors (from before Covid was declared a pandemic) suggested that the next OS version would enable it. Depending on your worry level, you might want to wait to see what happens.

Also, this article mentions that people are subconsciously altering their breathing/heart rate when affected. If you already have a smart watch that is tracking your heart rate, you may be able to infer this condition by monitoring heart rate deviations from normal.
Don't. Just use a real backend. btw, Hasura can work with Google cloud run and heroku. Check it out. It's similar to strapi.
As a user, I'm all for browser choice in the abstract: it sounds like a good thing, but it doesn't often deliver me tangible benefits in usability, performance, etc. (And, to wit, the only real exceptions are when large organizations bankroll extensive browser development teams.)

As a developer: even with several browsers converging on the same renderer and JS runtime, it is _still untrue_ that all things work in all browsers [1] [2]. HTML, CSS, and JS continue to evolve as standards, and mobile browsers complicate the compatibility picture.

This may be hard to hear, but: right now, polyculture delivers largely abstract ideological benefits to a small subset of users who care about these things. Monoculture delivers real, tangible benefits in usability, performance, and accessibility to users, plus massive gains in productivity to developers and tech companies.

On top of that: few of the privacy / security features in modern browsers are at the rendering or JS runtime level - they often have more to do with defeating cross-domain cookie trackers, execution sandboxes around JS, a whole slew of security headers at the HTTP level, and value-added features like password managers and private browsing sandboxes. IMHO, centralization of the HTML / CSS / JS part is a net win for privacy / security, as it makes it possible to focus efforts on these sorts of features instead of on the fine details of basic rendering and execution.

[1] https://kangax.github.io/compat-table/es6/
[2] https://caniuse.com/
AMD Makes It Official: Ryzen 3 3300X and 3100 Launched, B550 Chipset Announced
I've noticed some issues a while ago with TCP syn cookies breaking DLM cluster setup of 64 hosts. (63 hosts all trying to join the same cluster generate enough TCP traffic that the kernel thinks it is a flood and starts sending syn cookies, but then the DLM join of some hosts doesn't actually complete).
This can be worked around by increasing the backlog (one of the mitigations listed in this article):

--- a/fs/dlm/lowcomms.c
+++ b/fs/dlm/lowcomms.c
@@ -1209,7 +1209,7 @@ static struct socket *tcp_create_listen_sock(struct connection *con,
log_print("Set keepalive failed: %d", result);
}

- result = sock->ops->listen(sock, 5);
+ result = sock->ops->listen(sock, 128);

This is mostly a theoretical issue, because upstream RHEL used to support only up to 16 hosts in a cluster.
I think NYT articles are free during covid if you register and sign in. I don't have a sub and I am able to read NYT articles.
why do they take up slots in your inventory? It's weird. And the blueprint book seems useless -- and I can't google because there are too many "spoilers" associated with blueprints .... I wish there was more help in game
To me, it sounds like a medication.
> i have no idea why a module system was not included in the beginning.

Because Google internally has a monorepo. $GOPATH works great when it contains just one repo.
Can someone explain why this thread is full of people not caring about security? This article even goes over how TLS 1.3 is a perf improvement

Have the anti privacy crowd come out in droves now that we have a public desire for contact tracing & there's a desire to scapegoat why netflix et al have reduced stream quality due to increased load?

& HTTP is not an option. I for one enjoy my ISP not being able to inject ads into my streams
Siri has a huge latency problem. I say "Hey Siri" and its' precious seconds before she's listening (articles online tell us that it's possible to just ask the entire question without waiting for the beep -- but doesn't work, sometimes Siri's just not ready.). Someone at Apple clearly needs to reengineer Siri -- I say this as someone who's bought into the Apple ecosystem.

Siri is the like the Apple Maps of voice assistants.

Alexa (at least Echo gen 3) doesn't have this delay. I can talk with Alexa without getting frustrated at the latency. (unfortunately Alexa doesn't handle pauses or stumbles in sentences well)
Well, then, clearly it should be called Frederal Expresss.
Yes, any well must be able to be shut in. I phrased that poorly. What I meant was that not all wells respond to a shut in in the same way. It's not uncommon for things to take months to recover to the same production levels after a shut in. (At least for conventional wells -- unconventionals are significantly different.)

(Major caveat here: I'm an exploration geologist who later went into remote sensing, so my knowledge of actual operations is pretty spotty. Feel free to ignore me on this, but I'm going to keep rambling anyway.)

I was referring to a lot of onshore wells in declining or very small conventional fields. In many cases, a shut in that lasts for more than a few weeks basically leads to a P&A, as production won't recover without a workover, and a workover isn't worth it. That's what I meant by "not designed for it" -- production is expected to be sub-par after a shut in and a workover was never in the plans. A shut in means a death sentence for some wells, so operators prefer to keep them trickling along when possible, as it leads to a higher EUR. (Also most of these are hooked up to stock tanks, not production gathering pipelines, so it's a bit of a different world.)

However, I'm extrapolating from the very little experience I've had with that. Literally one tiny onshore field in TN (yes, Tennessee) that I worked in/with 15 years ago a summer after undergrad (I was actually mostly collecting seismic with a tiny source and a short string of geophones from the back of a pickup truck, so not terribly closely related). I may very well be way off base.
Telecoms Claim: The Internet Works During Pandemic As We Killed Net Neutrality
To give you an answer focused on the crypto itself, because the way they explained the TLS properties doesn't make this clear:

1. Integrity is redundant with authentication, so really you could say they're ensuring confidentiality + authentication. You can't authenticate a thing without implicitly obtaining assurance of integrity. It's a strictly stronger property.

2. Confidentiality is (usually) insecure and unreliable without authentication. Without authentication you have no PKI for a key exchange to symmetric encryption, so you can't even do TLS in the first place. And if you don't have a carefully applied MAC or a native AEAD mode, your symmetric mode isn't that secure either.

So really what you're asking reduces to the question of why they need the most sophisticated TLS scheme for encrypting their streams. If they want the most secure TLS scheme for confidentiality, TLS 1.3 is the way to do it. They explained one particular facet of why this is the case, re: perfect forward secrecy.
How the coronavirus disrupts food supply chains
I usually like patio11's writing style, but this is super verbose even by his standards and oddly evasive/defensive to boot. There's a number of important messages here, but they make up perhaps 10% of the content, and I still don't really fully understand the rationale behind the cloak and dagger "hash of report" business.
America’s food supply chain moves backward
If I find a good deal on an account with more followers and higher engagement, I'll just buy that and then rebrand that to my main account, and turn the old account into a "fanpage" of the same brand, or consider using it for a similar venture in the same sector (or a hard rebrand I won't use, because if you never post you won't lose followers, but you can still get in the door with people - or just slide into DMs with Tinder girls because they actually talk to you if you have alot of followers, you don't even need to swipe right on Tinder. It really functions very similarly to currency. I have 100% brought beautiful women to my apartment, in programmer filled San Francisco, who have never seen me before, by sliding into DMs with a popular account that I purchased and broke even on, after I saw their profile on Tinder and didn't even bother swiping right.

Instagram accounts pay for themselves you'd be surprised.

Oh well the secret's out, my actual opinion is that purchasing accounts is riddled with fraud and Facebook should broker them and take a cut because it is a whole economy)
A Guide to Using Adwords for Estimating Market Demand
I don't know if you're being pedantic, or what exactly.

The definition of infection on wikipedia is "An infection is the invasion of an organism's body tissues by disease-causing agents, their multiplication, and the reaction of host tissues to the infectious agents and the toxins they produce."

The infection killing patients is not "the coronavirus". The coronavirus is a particular kind of virus, specifically known as SARS-CoV-2. COVID-19 is, by definition "an infectious disease caused by severe acute respiratory syndrome coronavirus 2 (SARS-CoV-2)". So to be pendantic, COVID-19 is the infection that is killing patients. The question of, by what mechanism the particular disease causing agents are producing the deadly reaction, is in fact is perfectly described by the headline.
Daimler, Volvo in 1.2-bn-euro deal to make hydrogen batteries: statement
Coping with substance abuse disorders during Covid-19
To me, physical meetings are as draining as the ones using zoom. If it's a meeting,where you just sip coffee, listen to others who do all the taking,then it's easy, however beimg actively involved in a convo,while trying to come up with some useful stuff,can be draining.
I think it’s ok if people don’t prefer this sort of game, people enjoy different things. And I’m not sure it implies anything about “losing childhood”, if that is even a thing, which I’m not sure it is.
Thank you for sharing this. I've been feeling out of sorts and overwhelmed[0], and this really resonated.

I generally tend to avoid things like (3) unless sharing them with someone else, and this feels like the reason why, moreso than being a waste of time or generally "not helpful for my mental state". There are plenty other things that I still do, which click as "energy traps" now that I read this - gonna reframe into sources/sinks internally, but still. Thank you.

I will likely lose the location of this comment by the time I've really tested cycling between sink and sources (which should take a few weeks or so at least), but I'm going to spend some time exploring my energy landscape today and see where it takes my well-being.

[0] Work has been nuts, so some of the overwhelm is just normal, but I suspect another portion of overwhelm is well explained by the energy metaphor.
I spent most of my life as a techie in complete agreement with you. My best friend and I are "optimizers" - we type fast, we have macros and tools and utilities that make us more productive.

As a tech lead and then as a technical manager though... my team members who spend (sometimes endless;) time optimizing their tools and typing fast, are not necessarily more productive than the senior experienced experts who type slowly, with two fingers, and OMG I can't even stand to watch them resize a window, if they bother... but tend to sit back, ponder, and then slowly, excruciatingly type effective, efficient, working code that safely satisfies clients' requirements.

It took me years if not a decade to see beyond their slowness with tools, and notice the overall effectiveness of their output.

(This is not to say there aren't tons of people who are slow with both, of course :P )
Life, in Purgatory
Fix node-gyp issue on Mac OS
This is just strawman after strawman. No one's saying we shouldn't do essential work like maintaining water treatment plants. No one's saying the economy is just spring breakers. In fact, they're demanding financial support from Congress to help people while the economy is shut down.

Please do more research and be more responsible. The stakes are very high.
Google Scholar parses cafeteria lunch menu as an author list
>useful for the primary function of their job

the number of things that affect your job performance are endless and it is arbitrary where you choose to stop improving. not only is it arbitrary where you draw the line, its arbitrary that you chose to optimize your job in the first place. these things are non-self-evident choices based on personal and societal feelings rooted in first-principle thinking about the meaning of existence.

"invest in your exponential job growth" glosses over some pretty significant life choices that are more important to recognize than saving 30 minutes a day at the office.
How to preserve a struct memberwise initializer when you have custom initializer
Tooling and deployment are two big ones. Go doesn’t have a Turing complete DSL for it’s project files (that you have to run in daemon mode if you want a fast feedback loop); just a simple list of dependencies and a lock file. Testing is dead simple and built into the standard library and toolchain. Documentation generation is just comments; no javadoc syntax to learn, nor documentation packages to build and publish—godoc.org and friends can read any package available to them (including private repos if you host your own instance) and they automatically link to other packages’ docs without additional work. Also, static linkage by default that just works—yeah, fat jars and AOT are things in the Java world, but they take extra setup and often they aren’t feasible in practice. Meanwhile, I can send a Go binary to any Linux server and it will run. A lot of Java people love Java tooling because everything is super configurable and you can do just about everything you could ever theoretically want to do, but I rarely find this helpful—Go’s tooling generally does what I want it to do; I rarely have problems but I benefit immensely from being able to quickly figure out how to solve my problem. Different values, I guess.

Another big one is the data model. Go doesn’t have object types nor inheritance; it has value types, interfaces, pointers, and closures. While in Java I don’t have to use inheritance and one day there may be value types, inheritance and objects are and will continue to be pervasively used in the Java ecosystem, which means I’ll have to interact with lots of such code. Not the end of the world, but I really don’t enjoy it—I wouldn’t spend time fighting it if I have the option of using something else. More importantly, the data model and Go’s AOT allow me to reason about code performance more predictably, although JVM’s JIT compiler would be really nice for the very few highly dynamic programs that I write.

Notably, I don’t think Go does everything well or that it’s AOT model is good for everything and Java’s VM model is bad for everything. I actually would like to see a simpler, high performance JITing VM with better semantics for languages with value types (and a lower latency default GC although I hear that is improving in recent JVMs). I specifically don’t want all the bells and whistles for tuning my GC or my VM. I also want a dramatically simpler language running on it. Maybe a super simple lisp or something like Julia but geared toward general app dev.
One thing notable about Factorio's game mechanics is that crafting is idempotent: the tech tree is a directed acyclic graph. If one is looking for a different experience in which one thinks about closing manufacturing loops, I would recommend Oxygen Not Included, where you have to sustain life amidst an asteroid colony.
Maybe I read that wrong, but wasn't the point that Japan wasn't acting appropriately, and that white paper, along with other research, forced (for lack of a better word) them to own up to the scale of what they were seeing?

Isn't the point that, while the particulars were proved false, the overall thrust of the article that Japan was stalling action which MAY lead to those numbers was true?

Did I miss the point of this entirely?
I think that if they are really going to turn what we currently have into a company on facebook scale, then this value will have to be created after I leave. Right now, the startup is certainly worth almost nothing.
Maybe you've never been extrinsically rewarded, but surely you've derived some kind of intrinsic reward for improving your productivity? A sense of pride or joy? :)
I found the post to be lengthy, lacking focus and specificity. More compelling case could be made in a fraction of its length. Hardly worth reading.

The tedious timeline, tweeting hashes as if that meant anything other than: "do you see how I was right all along".

The whole concept of tweeting a hash of a whitepaper as form of endorsing it is kind of absurd.
Exactly. They even mentioned it in the article. Two leads disagreeing on how to get work done is never a good thing no matter where you work if they can't get to consensus.
> "Expect 70% of list though. It’s hard to find lower."

I'd advise the original poster to wait for a few months. The recession hasn't really hit yet and there are plenty of business closures yet to come. At that point, liquidated office equipment will be a whole lot cheaper because of the glut.
Well what's the mitigation for Linux? Did they end up disabling the MSS negotiation?
Hacking is more mental than technical
If you write in C# decimal a = 0.1m; decimal b = 0.2m; var result = a + b; then you will get exactly 0.3, because decimal is a special high-precision numeric type that doesn't have such issues.
There's more to it than that. Looking at its early history [1], it is clear that Perl6 was conceived/intended to be the next version of Perl after Perl5 e.g.

First, Perl will support multiple syntaxes that map onto a single semantic model. Second, that single semantic model will in turn map to multiple platforms.

Multiple syntaxes sound like an evil thing, but they're really necessary for the evolution of the language. To some extent we already have a multi-syntax model in Perl 5; every time you use a pragma or module, you are warping the language you're using. As long as it's clear from the declarations at the top of the module which version of the language you're using, this causes little problem.

There were even plans for a translator [2] similar to Python's 2to3 tool

Larry Wall and others are already working on a Perl 5 to Perl 6 translator, which will be able to translate (most) Perl 5 source code to the equivalent Perl 6 syntax.

In addition, Perl 6 will provide a "Perl 5 compatibility mode", allowing the compiler to directly execute any code that it recognizes as being written in Perl 5.

[1] https://raku.org/archive/doc/design/apo/A01.html

[2] https://raku.org/archive/faq.html
Open-source iOS app with no storyboards and UI in Swift