skysight-inc/HackerNews huggingface dataset:
Windows has an incredibly complicated set of token based authentication mechanisms that Chrome relies on. They interact with each other in non-trivial ways and were introduced piecemeal over a few decades.

It is so complicated that even the people maintaining it don’t understand it, and they accidentally added a privilege escalation path.

The author uses that to use a Chrome sandbox bug to escape from the sandbox.

The real WTF is the complexity and obscurity of the security primitives being exported from the kernel. Arguably, all major operating systems have the same issue, and are getting worse over time — I doubt anyone understands all of the layers of privilege checking mechanisms that have been bolted on to Linux, Windows or Mac OS over the years.
Is it common for Shepherd users to do dangerous things in Shepherd, or do they mostly just use existing safe functions to define their services?
>>> It's on the same level as associating watermelon with African-Americans.

Or haggis with Scottish? How about sauerkraut with Germans? Maybe apple pie with Americans? Sushi with Japanese? It's kind of racism but not extremely racist. Maybe it was the bat wings that made it racist? The font used on the sleves could be considered racist I suppose. All important information that was not provided by the reporter BTW.

Would I have fired the employee? Possibly, but I think I would have at the very least demanded a public apology from them and had a frank discussion with them. Considering the comments Chip Wilson made that Fat Women shouldn't wear their yoga pants I'm not surprised this happened at lulu.

My comment was more to the point that certain media outlets provide incomplete information in their stories to fit the narrative of their choice. I hate to call it fake news because of the stigma attached to that turn of phrase but I think it approaches the realm of half truths when critical information is ommited.

Personally I think the artist thought that they were being funny, racist or not they didn't follow the rule of:

"Tradgedy+TIME=Comedy"
I don't understand your 4th conclusion at all. He never once said he's excited, you are assuming quite a lot...

People are allowed to analyze world events and their consequences like this without having to individually pander to everyone who was personally affected.

This is like yelling at someone for analyzing the effect of WW2's aftermath on Europe.
From maybe 2015 to 2017 I used an i3 (I forget the clockspeed) dual core processor with 4 gigs of ram daily working as a web developer. It wasn't even on an ssd. It depends on the type of work but for what I was doing it was fast enough.

Granted I was using Mint with the Cinnamon desktop but i'm sure Gnome with Ubuntu would have been fine too.

I installed Windows 10 on it for a few days to try it out and the difference was night and day. The laptop would pause for about a second every maybe 15 seconds or so, which wasn't a thing on Linux.
Or carpool and have the driver not drink
With 30 seconds of thought you are failing to control for:

* Social habits of the company

* Number of infected people within the company

* Compliance with the protocol

* Age demographics

* Infection rates from places other than the company

* Weird selection bias resulting from the company needing to not lock down to begin with

Very, very difficult study
>But when you look closer you discover

What percentage of people who view the ad are going to do this?
This is one reason I much prefer Linux’s seccomp over Microsoft’s sandbox. Microsoft’s depends on everything having just the right access control so you can’t escape. Linux’s blocks the dangerous primitives entirely.

A seccomp-like mechanism on top of restricted tokens could be quite strong. The GPU process could be denied the ability to query or modify processes entirely. Similarly, it could be denied the ability to call CreateProcessAsUser at all.
I think you can accomplish this by using the URL, and it would be significantly cleaner than the input pop-up.

Instead of prompting for input, use URLs like http://collabuml.com/s/sessionName (the /s is just to give you some flexibility in the future, should you want to add other URLs to the site), or alternatively, for pure client-side, you could do http://collabuml.com/#sessionName.

For an example of how to do this using a landing page, check https://meet.jit.si/.

If you don't want a landing page, then when someone visits http://collabuml.com/ (with no session name) just immediately do a 302 redirect to a new randomly-generated "session name" URL. If a user wants to join an existing session, they need to use the URL directly (most likely clicking on a link the other person shares with them).
Thanks for the reply. I initially didn't want x86 due to the footprint you already mentioned. I'm a fan of ARM processors so I prefer those.

I also read somewhere that RK3399 for emulation should also be a good choice, therefore I considered the Rockpi 10N as well.
They're slightly different interactions and I (not the commenter you replied to) use both. I feel like the bottom swipe is a discrete action that takes you straight to the last app, and I use it when I'm very confident, like a one ⌘-tab with no hesitation.

The half circle is more like starting to activate the app switcher, but confirming the next/previous app immediately. The difference is that it gives you slightly more time to see what you're doing and you can bail out into the app switcher if you change your mind in the instant the apps come up. That's actually the only way I ever open the app switcher; I feel like the swipe up and hold is way too slow.
We need, all of us, to stop focusing on deaths as the measure of how bad this can be. You're asking people to not only place their lives on the line, but even if that doesn't happen they face a significant risk of weeks of ICU care, followed potentially by a lifetime of respiratory problems.
these "solutions" may buy some time right now, but at the same time massively slow down our progress studying the disease.

The whole point is to buy time. That's what "flatten the curve" means.

I don't understand why you think any of this would slow down progress of studying the disease at all.
As the site itself points out, they could needlessly increase the load on their ISP's tech support.
This is going into the "America vs Europe ISPs" argument again. Americans almost always have only one ISP available to them for where they live, so they can't reasonably leave their ISP just because they don't do RPKI correctly since it would leave them without any internet, or they would have to go to satellite internet with slow speeds.
Banning advertising doesn’t make this problem go away unless you can also enforce it worldwide. If Google went away, you will have Baidu or Yandex pick up the business. Are we in a position to regulate them too?

Remember that ads existed before internet. They also had the same fundamental problems. Only those days one had to be rich to muck with society
Well, you would still need "superuser" privileges for things like adding new capabilities to the proof verifier. Of course this might open you up to security problems if you're relying on incorrect assumptions while doing that. But then, this project also has trusted components of its own, such as the JIT. A proof verifier can be a lot simpler than a JIT.
Own data center rarely makes sense. Colocation can work out well for companies with a lot of demand where one location is sufficient.

Dedicated servers (where you don't own the hardware) can make sense pretty quickly, the cost of managing that can be lower than cloud offerings even for mid-sized companies. PAAS or IAAS didn't really change that. Once you have a certain size, having your own department to manage hardware isn't that expensive in comparison.
With i3 (no GNOME elements at all, and precious little desktop environment stuff), I think my old 1920×1080 laptop tended to idle at using around 60MB of RAM. With 8GB of RAM and a 128GB SSD, I never set up swap, and over the course of four years or so this only bit me about three times, and I spent a lot of that time running two substantial Firefox sessions, a 2GB RAM VirtualBox VM and a handful of other things like urxvt, Inkscape and Chrome all at once.
You have packed a lot of assumed motivations into that reply. We have but this to go on:
"I wonder what effect it will have on future of the countries."

Though you might find it repulsive, I have no problem thinking out loud about the possible outcomes.

You are excited about all of this

You have no idea what the parent's mental state is on this, and of the possible interpretations, you have chosen the least charitable one. Moral grandstanding might best be left "<kept> to yourself" as well.
That's really not a good way to address blanket statements. Just referring to nebulous "smart people" adds nothing.

It doesn't need a detailed rebuttal.

Here are some examples of reasonable responses:

- How do you know that?

- When in history did that happen?

- Could you be more specific?

None of those require more than one sentence, or implying that the person is too stupid to have an opinion.
THE thing I wished more developers knew about databases: they are badass when it comes to data manipulation.

Stop sucking all data and manipulate it in your language of choice. Tell you DBA what you want done and let her do it for you.

Really, DB's may look like they are the special needs kid in the chain, but they're magnificent powerhouses when it comes to 90% of what you are trying to do to data.
Using traditional antibiotics against a virus is not particularly likely to help. Traditional antivirals are in a number of studies currently.

By my non-expert estimate, remdesivir seems to be the most likely candidate. It's not approved for use in the US yet, but is well on the path: https://www.drugs.com/history/remdesivir.html
It might not be a good idea to temperature cycle your freezer contents, as it speeds up degradation.
It's subconscious, if you don't try to notice you wont, instead you will just stop using things or dislike using things without knowing why specifically - or more subtle still, you will not be as efficient in those programs... The UI is inbetween what you are trying to interact with, so if it doesn't quite work right then the emotions are going to be more subtle and hard to differentiate because it's not your main focus.

You are more likely to intuitively get this once you have some experience attempting to design effective UIs (and actually trying to care about it).
Do you have a solution other than Cloudflare attempting to use their position as a large autonomous system to coerce implementation? If not, you might expect other providers to push back against such efforts.
Apple has to jump on WebRTC train
It's not hard to tell people to do that. It is hard to get people to really comply and avoid changing behavior just by enrolling them in a study. It's hard to select 100 workplaces that are similar enough that they can be compared to eachother and also representative of the myriad complex types of social areas that people congregate in - opening a window might work in one type of office but not at all in another situation. And also, you need a control. You can tell a group of people to not change their behavior in a global pandemic to see what the impact of each intervention was. But getting people to comply? You even have problems in clinical trials where groups of patients find ways to get together and discuss side effects they've been having to try and figure out who has the placebo and who has the real drug killing the trial. Running statistically rigorous trials on that scale to get good information is just really difficult because of the study subjects.
A small number of other countries with well organized governments, good epidemic response teams, manageably small populations and strong IT infrastructure.

Now imagine all of this being done effectively in a country with several hundred million people, many of them extremely (and not entirely unjustifiably) opposed to privacy invasions and mistrustful of their government in many ways. That's the U.S I speak of in case it's not obvious.

Now go a bit further and imagine this same mass testing and contact tracing procedure in the majority percentage of the wider world that actively lacks good government, good administration, has terrible infrastructure (clinical especially but of any kind in general) and is largely poor. It doesn't require an epidemiology degree to see the difficulties.

I can't even easily imagine the mechanics of effective mass testing and contact tracing in places like India, Latin America or large parts of Africa, with hundreds of millions of barely documented residents living lives steeped in informality.(I live in Latin America and have actually seen how poorly government in my country manages even basic testing)

It's good that testing and contact tracing are attempted where possible and continued wherever they work, but let's be realistic about the fact that a majority of the world outside these places will drive the dynamics of the virus with a social weight well beyond that of the minority population of regions where the above work, and in that same majority part of the world, mass testing and contact tracing have very little chance of effectively being applied.

In essence, remember that most people don't live in the well-structured bubbles of small European and Asian states with relatively efficient, modern administrations.
That's odd since coronavirus is a virus, not a bacteria, so I wouldn't expect antibiotics to be relevant except insofar as they would suppress opportunistic infections.
You comment is so extremely apathetic and reeks of eugenic desires. Everyone grows old, no one is born with the same chances as everyone else, we are all people of the earth.
I remember pressing the home button on a powered off iPhone 7 a few times. It feels like attempting to take the last step in a flight of stairs when you miscounted by one.
The contracts will be liquidated first, if possible. If the fund is still left holding some then the exchange and market makers will absorb the losses with their excess capital and insurance policies.

It takes special clearance to even trade contracts that are physically settled. Most of the time these contracts are just cash-settled instead.
Personally I think the cats will love it.
Another Brit here:

I'm not aware of anyone in my circle seeing such agencies as being "nannying". I'm of the opinion that the Food Standards Agency improves life for everyone in the UK. I would rather put up with a little bit of nannying if it means I don't get food poisoning from restaurants.

I used to be all for freedom of speech and anti-censorship, but these days I've seen too many friends and family fall for miss-information. My university-educated brother-in-law believes in all the "5G causes COVID-19" nonsense. He even sent me a video on YouTube from a "Top American Doctor". Sigh.

ps. I think the solution here is to teach more critical thinking in schools.
Those were years after PCs had made a foothold in (well-off) US households because they allowed you to do digital word-processing and spreadsheets at home.
> I'm not paying a premium for marginal items.

Conflict diamonds and non fair trade coffee are also cheaper than what replaced them. Obviously these kinds of ethical externalities exist on a scale, but the point is that it's more complicated than just arbitrarily declaring an item or class of labour as "marginal" and moving on.

> Not everyone is cut out for higher-value work...

The snide value judgment aside, lots of artists/writers/musicians/etc begrudgingly participate in the "low value labour" market as a means of staying afloat while they pursue their real passion on the side. Isn't all of this just a further argument for taking on as a society the obligation to meet people's basic needs? Do we really need to hold people's livelihoods hostage just so that upper middle class software professionals can still get a $4 hamburger whenever they want it?
So, if it was your grandmother and you had a choice to make her suffering worse for her last 48 hours, you would?

Two can play the "appeal to grandmother" game, but I'd rather just discuss this based on the facts.
it's just a campaign announce. there are no plans, no budget, no nothing. it definitely does not deserve HN front page.
> I don't really see his attempts to use the new gestures on the old-design iPhone as proof that the new UI is better.

Maybe it's better, maybe not. Maybe it's just different... but it's inconsistent.

Wife has my old 6S, I had an 8 that got downgraded to a 7 because it disappeared (lost or stolen), and an iPad Pro. There's the double-click/force-press on the side to bring up the app switcher that I can live with, but I always always pull on the right side to bring up Control Center in the iPhones.

It's infuriating, all the more that there is zero reason (technical, UX, UI) that Apple could not move the old devices to the new interaction model and make them consistent across all platforms, except:

- don't alienate people with old habits and TouchID phones (but... still having the double-click work doesn't prevent the slide from the bottom to work too, as long as the slide from top right is implemented)

- make a clear usage distinction between X/FaceID and non-X/TouchID phones (but... not devices! the TouchID iPads have it...)

The net result is that people with TouchID phones just have an inconsistent experience, which is what makes it terrible at the end of the day.
It’s really strange how it is that we cannot afford having kids, but our parents and their parents etc, who almost universally have been poorer than us, managed to do that.
Nothing, not LibreOffice, not Google Sheets, not Excel for Mac can replace Excel for me. It's wonderful, they keep adding features and I know all the quirks like the back of my hand. If I ever swap to Linux on the desktop, I'll keep a VM around just for Excel.

Word is nice too, although that I could probably change that rather quickly (word processing is not hard to get right).
HANG ON! This only considers patients already discharged or died at the end of the study some ~300 patients. But there are still ~1000 patients who were on mechanical ventilation that are still in the hospital (so aren't included in the denominator). We don't know their outcomes yet and so this is a best a sensationalist headline. Patients with this disease are on mechanical ventilation for much longer than most patients, so early reports like this don't reflect true eventual outcomes. Maybe it will be similar, but maybe it will be more like 40%, which is the usual mortality rate in ARDS.
For $30 I can get an used H61 board, i3-2100 and 4GB DDR3 RAM. That is going to be much faster than both Raspberry and Odroid.

The ARM boards make sense only if you have power and size restrictions.
Are you saying Facebook, Netflix and Microsoft Word don't require media processing? Pretty sure you'd see plenty of SIMD instructions being executed in libraries called by those applications.
Running even more code in supervisor mode != turning into a microkernel.
The fact that amazon sucks as a place to get reputable items or find brand-specific stuff, and that they are rolling in money, should show several things:

* They still satisfy consumer demand "enough"

* They don't have enough competition in enough spaces

* They can suck at some things, be good at others, and make money
> Customers have accepted the risk and deemed it acceptable if their provider does not support RPKI.

That's a silly assertion. What percentage of residential ISP customers do you think are aware at all of RPKI?

Cloudflare's "is BGP safe" page is intended to highlight the ISPs that are deferring RPKI. If you claim customers are making an educated decision on whether RPKI is necessary, you shouldn't have an objection to the site's existence.
I think that language designers should release a new version when they actually have something new and not because somebody decided that there has to be a new version every x months. Also I think that the popularity of other JVM languages, eg. Kotlin, derives not from their quick releases, but from the fact that they observed what programmers didn't like about Java and designed the language from the start keeping in mind those problems and addreesing them right from the beginning.
The fact that they're using smart campaign tactics doesn't imply that they're a competitor firing back rather than a concerned person taking advantage of the opportunity to draw attention to the things that concern them.
Short term.
Generating Custom Image Previews for Social Media
To add:

> Cloudflare is shielding cybercriminals

Cloudflare has an abuse form https://cloudflare.com/abuse - CF also doesn't prohibit you from filing police reports with your local law enforcement, which CF will cooperate with upon receiving contact.

> Scaring internet users into thinking their ISPs are insecure in the middle of a global pandemic

https://hn.algolia.com/?q=bgp
Static files don't automatically set any headers either, you still need a webserver to serve those. And you can override those headers in the server or in the CDN so there's no reason to switch out the entire backend for it.

CDNs handle scaling of static assets. That's their entire purpose, with features like request coalescing and origin shielding to help ensure unique URLs are never requested more than once. Optimizing for static files at the origin is just not worth the trouble when Wordpress and other frameworks are far more productive and provide CMS functionality which is usually needed anyway.
For all my cynicism with politics, I was really impressed that the mayor of Austin stepped up and forced the cancelation of SXSW. That’s an enormous amount of money for the community, and it could not have been easy. Not a lot of “lessons in courage” these days, but I really think that was one.
> Fake news can't be solved with bans, only through education. Education is a long term investment though and everyone wants immediate fixes.

Upvoted!

I wish yours was the top rated comment and more thought like you.

Instaed we have views like this: https://news.ycombinator.com/item?id=22956485

Very concerning.

As I wrote here https://news.ycombinator.com/item?id=22956536

To a regular random person, Youtube is synonymous with video content.

Youtube is the news.

Perhaps one solution for Youtube would be to demonetize and label such content as "unsafe" or don't sue me bro mode".

Anyone who's a minor doesnt get to see this "unsafe" content.
Anyone who watches the content with "unsafe" mode on, sees the content.

Give customers the choice to choose and make up their own minds.

Removing content with the authority of being the primary video content platform? They don't get away so easy.

With power comes responsibility.

They have to handle this another way and this, is not it.
>I never understood why Intel gave up on smartphone chips.

Margins. They were far too focused on margin they didn't realise their moat were cracked once they let go of it. 1 Billion+ of Smartphone / Tablet SoC, Modem and many other silicon pieces are now Fabbed on TSMC. None of these exist 10 years ago. Just like the PC revolution, while Sun and IBM were enjoying the Workstation and Server marketing booming, x86 took over the PC market segment, and slowly over the years took over server market.

The same could happen to Intel, this time it is ARM and will likely take 10 -15 years.

And I keep seeing the same thing happening over and over again, companies were too focused on their current market and short term benefits and margins they fail to see the bigger picture. Both Microsoft and Intel are similar here. ( And many other non tech companies. )