skysight-inc/HackerNews huggingface dataset:
Something that just occurred to me - that encryption routine looked like a lot of work.

Do you think the creator would have been net up in revenue terms to add features, or using this feature to reduce piracy?
What about the situation in northern Italy? In the absence of a lockdown, the healthcare system did collapse, or came very close to doing so and this was only averted when the government implemented draconian quarantine policies.

The article claims that the survival of the healthcare system in places that implemented a lockdown has nothing to do with the lockdown, but then gives no evidence at all to back up that assertion.
Currently Checked C seems to be only attempt left, and a mentality shift to at very least use the static analysis tools that come with the compilers.

Contrary to common HN wisdom, most C and C++ related surveys show that only up to 50% actually use some kind of analysis tooling.
I feel threatened by it in a very specific way. There are pointy haired bosses who will order that: "now we will do low code". When they bump into obstacle that is not doable in low-code they will be angry at the developers that cannot deliver what customer wants. Where with just normal development you would not run into such issues.

As a developer I have some power to say no to such thing but marketing people at low-code can promise everything without ever providing what they promised.
I hoped to hear someone finally ported Xara LX [1] to Cairo...

[1] https://en.wikipedia.org/wiki/Xara_Xtreme_LX
The parent explicitly talks about science in general. There is a tendency of some (often of those outside of science) that feel like science is getting worse over time and nothing of value is found anymore. The parent seems to echo this sentiment and gives very shallow anecdotes to make his point. Still it is the top comment as of writing. It’s just plain wrong in my opinion.
I think you meant to write “capitol”
Tin foil hat on. We had these iOS zero days and now conveniently we get something about Android security.
> I've had coronavirus symptoms for about 6 weeks now without much change

I've been having a mildly sore throat for five weeks, with a couple of days of feeling unwell, and slightly elevated temperature (not fever) on occasion. No cough, but a "you're about to get a cold" feeling in the airways. I've had also had one "relapse" last week. Since I didn't have any "hallmark symptoms", I didn't qualify for a test.

If I really did contract COVID-19, it must be highly contagious, because I've been drastically minimizing going outside even before there were any cases recorded outside Asia. I'm also obsessive about washing my hands and not touching my face. I haven't had a cold in five years and have no allergies.
If you haven't been, it's a beautiful city.
This is also the strategy behind AmazonBasics. It's the only brand that is exclusively sold by Amazon. Amazon is basically destroy the reputation of other brands by letting sketchy and fraudulent sellers on their platform do as they please. There are a lot of people who exclusively buy on Amazon so over time they will only trust AmazonBasics products.
Please do ! This would make an interesting case to study and you would certainly become famous. I would not be as confident as you that you'd be likely to win though ...
How exactly would you get the traditional identity info like the address FROM A PHONE NUMBER?
> "finicky to get to connect because everyone has to remember their password"

Speaking of that, my last experience with Google Meet in business setting was this: every other meeting someone from our team would disappear in the middle of a call and reappear a minute later. Reason? Google's bullshit random "you need to re-verify yourself and type in your password NOW NOW NOW!" prompt that logs you out until you comply. Since us developers only used our company GSuite accounts for Meet calls (all communication unfortunately went through Slack), the only time we'd get this prompt would be a few minutes into the call.
My company uses Zoom and we do our monthly whole company meeting using Zoom without issues. Whole company is roughly around 700 and I've seen us get up to 600 without issues.
If you want a HD stream for someone who is talking, and an SD stream for each person in grid view and users on slow connections, you either need access to the unencrypted HD so you can downsample them, or all platforms to support Scalable Video Coding [1] so you can downsample by dropping otherwise-opaque encrypted packets.

And the former is easier than the latter.

[1] https://en.wikipedia.org/wiki/Scalable_Video_Coding
You should read about the famine projections: https://www.telegraph.co.uk/global-health/climate-and-people...
Seems like a good wake up call to Google and Google Users.

There's an editorial reason for Wikipedia summaries. There's an editorial reason why some results are promoted and others are pushed down.

Even Google rules to promote HTTPS sites can be considered an editorial decision. If that is good or bad is interpretation.

Google search results are not just links popularity ranking so it make sense to remove some non-publisher protections.
Please spare us this trite cliche being rolled out again
Tricking a higher-privileged bit of code into doing the bidding of a lower-privileged app is really common in the history of nasty security exploits. Windows Kernel developers and Web Browser developers have both spent over a decade systematically eliminating scenarios where this can happen, whether it's forging WM_TIMER messages or attempting to get around javascript API origin/trust restrictions.

"I convinced this other program to dump an executable shell script onto disk for me so I could run it without a prompt" is a textbook escalation of privilege vulnerability, and being able to do it with a common app like TextEdit or BBEdit is pretty serious.

One solution is for the outermost caller's credentials to apply all the way down the chain. This is common in Windows and in web browsers - web browsers basically track whether the current chain of actions originated from user input or not so that they can prevent websites from silently doing nasty stuff without user consent. At this point browsers actually track that consent data across asynchronous computation so everything will work.

I personally don't think an app with 'create shell script' permissions should be able to be controlled by Joe's Random Unprivileged App, but that's just me. Windows certainly doesn't allow low integrity apps to communicate with arbitrary high integrity apps. Introducing that restriction is an essential security improvement.
Overshoot is also a function of rates of infection. If each infection results in 0.5 new infections and 16 people are infected, that falls off to ~8, 4, 2, 1 so about doubling. On the other hand if 16,000 people are infected per day it’s still falling off at the same rate, but you get 1000x more infections before it ends.
I would actually say the opposite - its much easier to get hold of a financial dataset than for other fields. There are packages for easily downloading Yahoo finance data e.g https://github.com/ranaroussi/yfinance
Remdesivir: Drug has 'clear-cut' power to fight coronavirus
One year of Atmospheric Carbon Dioxide: https://svs.gsfc.nasa.gov/vis/a010000/a011700/a011719/11719-...
Interesting that they permit TCP port 53, rather than just UDP port 53.
https://github.com/node-webrtc/node-webrtc
I also just have to point out that Sweden, the country that didn't implement lockdown, has 6 times higher amount of COVID-19 cases than other Scandinavian countries when adjusted.

https://www.nationalreview.com/corner/coronavirus-fatality-r...
The article refers to

capital, 3. (countable) A city designated as a legislative seat by the government or some other authority, often the city in which the government is located; otherwise the most important city within a country or a subdivision of it.

not

capitol, 2. (US) Any building or complex of buildings in which a legislature meets.

[Definitions from English Wiktionary]

Being a UK newspaper, the Guardian would probably use "Lithuanian parliament buildings" or similar if that's what they meant.
This is a great collection. Lots of useful approaches, some of which I haven't seen before. Sure, some stuff wouldn't work for us, but that doesn't mean it's not useful to know about. Further reading section is also A++.
In the case of Cube World, he finally decided to come out of the wood and release the game on steam. Almost none of the feature he teased during those years were included in the release or were heavily changed, and even the core gameplay was very different than the beta, which made a lot of people angry.

He wrote an article explaining that the DDOS they suffered when first releasing Cube World had a lot of impact on his mental health and that is why he rarely communicated and then he disappeared again.
Original Content podcast: Netflix’s ‘Extraction’ inflicts brutal action on
I also worked in HFT and have no idea what you mean when you say other HFT shops can front-run your orders?

To front run someone’s order you need to have advance information of their order s? Normally this means the front runner is operating as a broker. I can’t imagine any HFTs using other HFTs as brokers to forward their orders to the exchange?
Ultimately decisions about diet are made by yourself and affect nobody else (unless maybe you're feeding dependents). Smoking is prohibited in public areas for the same reason that businesses are shuttered now; it subjects others who do not have a choice to a situation that is quite frankly dangerous.
> which happened because the people found them to be better than the alternative

Walled garden only exists because mobile devices make self-install alternatives very difficult or impossible to get on purpose, otherwise they would not be able to compete in any ways.

Case in point, the Mac App Store and the Windows Store are both moderate failures despite a lot of technical & marketing push.
They apparently have 300M daily meeting participants which is actually more impressive than this headline.
Yup, old nook ereaders can run full fledged android. A couple of years ago I used one as a hacky version of freewrite[1]

[0] https://lifehacker.com/turn-a-99-nook-into-a-fully-fledged-a...
[1] https://getfreewrite.com/
Still they are winning with their branding and their free 45 min tier ... people don't talk about telecon anymore but rather they are having a Zoom meeting.

But their UI really could use some rework ... it is really crappy.
There does seem to be quite the media campaign against zoom. Interestingly its highlighting that strange divide between those of us that follow 'tech news' and those that don't. I've seen a few of the tech types try and get people to switch away from zoom with very little success over the last few weeks, no-one outside of this sphere seems to give even the slightest damn about what's being briefed to the tech media.
Wow, that must have been embarrassing.

Also, from the article:

> In some cases, though, many are just wondering how this service hardly anyone had heard of became so popular.

Yeah, the first time I've heard of Zoom was when it landed on HN frontpage for doing some shady stuff on MacOS. Fast forward few months, my wife is asking me if I heard of it, because she'll have to start using it... I was similarly blindsided by the sudden rise of TikTok. These new platforms feel like coming completely out of the blue these days... or maybe I'm just older and don't pay attention anymore.
Some of the Few Misconceptions About Home Hepa Air Purifiers and Filters
It's not for all links. It's for external links, meaning a different domain than what's currently in your address bar.
Laser cooling of a nanomechanical oscillator to the zero-point energy
> Overall, face-to-face time decreased by around 70 per cent across the participating employees, on average, with email use increasing by between 22 per cent and 50 per cent (depending on the estimation method used).

From Harvard study in 2018 comparing pre/post open-office.

https://digest.bps.org.uk/2018/07/05/open-plan-offices-drive...
AMD Reports Q1 2020 Earnings: CPU Sales Fuel Big Gains
> My monitor can roate 90 degrees, but I prefer it landscape, it's more ergonomic not to have to tilt your head vertically, your eyes are horizontal.

It's more like looking at an ordinary A4 page.
Xbox Game Pass has 10M Subscribers
> Do you actually do that?

Yes, of course.
On iPad it’s even more frustrating as the buttons only show up on tap and they go away really quickly so if people are joining it pushes the buttons up and you end up missing it. They really need to fix that.

At least they no longer block you from using the website if you’ve disabled camera access.
1. Basically, in a peer to peer topology you’d have 100x99 streams going. Everyone sending to everyone.

2. With a star topology and a central SFU you have 99x2 connections only. Much less bandwidth being used. The economics is that everyone pays the central server.

3. Now, I would wager there is a way to do some sort of sparser version of option 1 with beefy peers playing the part of “supernodes”. I think that’s how skype used to work before M$ bought them and made it less P2P

But regarding the encryption, yes you can have an SFU or whatever but you won’t have adaptive resolution of the SFU or supernodes can’t decrypt your stream in transit.
Regular folks don't care. Zoom is currently, waaay better than anything else, although may be not for long. But venture capitalists and investors have their egos. It's funny to have the same fight (DAU and how engaged users really are) between Slack and MS Teams.
That's likely to be a firing offence, no? If I were running things I wouldn't want employees deliberately subverting my network's security measures in the name of their own convenience.

If you have to spend time wrestling the VPN while you're on the clock, that's their own time being wasted.
Why is this downvoted? I'm about a quarter through and have found this totally intriguing. Their concerns in late January seem spot on. I'm glad it got shared.
That is actually the scariest thing about CO2. It's going to stay in our atmosphere for 100 of years. So even just stopping emitting is just about maintaining the status quo.

Once the crisis becomes really bad, we don't have any more means to reduce it.

(I set a very low belief in sequestration methods because they're thermodynamically crazy..)
I concur ... the spate of story plants about their encryption implementation issues and the one incident of them misrouting calls through a datacenter in China.

Some three letter agency is involved.
Alongside WFH to make do with less travel, especially those that require flights.
I thought that was already how the macOS sandbox worked?

The issue is with apps that aren't sandboxed (basically anything outside the app store - e.g. Adobe apps)

https://developer.apple.com/library/archive/documentation/Se...

> When a user of your app specifies they want to use a file or a folder, the system adds the associated path to your app’s sandbox. Say, for example, a user drags the ~/Documents folder onto your app’s Dock tile (or onto your app’s Finder icon, or into an open window of your app), thereby indicating they want to use that folder. In response, the system makes the ~/Documents folder, its contents, and its subfolders available to your app.

> If a user instead opens a specific file, or saves to a new file, the system makes the specified file, and that file alone, available to your app.

Starting in Catalina, even unsandboxed apps have gotten locked down a bit - you get permissions dialogs if they try to access Documents, Downloads or Desktop.

The exploit in the OP is using an open, world-writable directory (/Users/Shared) since it can't access user files
Show HN: Business risk analysis tool using Covid-19 signals
Its 3x what Google Meet reported in their recent blog post, just for context.
It happened because developers in China were using a hacked version of XCode. The apps never escaped the sandbox.

I have no idea how Apple makes money by collecting location data.
Yes, but "loyal user" is in the same box as "target audience" and all the other terms in the marketing vernacular. This is a language of people taking advantage of others, talking about their victims. It makes little sense to use such language voluntarily on yourself.
I think this fits here perfectly: http://www.commitstrip.com/en/2016/08/25/a-very-comprehensiv...
The project uses a mix of Dutch and English for symbols, docs and comments. Now you need programmers that besides Python, are also good with both Dutch and English. Sadly this greatly limits the audience.
I never here users complain - just developers.
Figma Onboards New Users
I think a really common danger here us people think they have more insight than they actually have. It's easy to take some data and draw conclusions from it without realizing the limitations of the data or the full scope of the complexity we're dealing with.
Google advertises their store has "Google Play Protect" which promises to ensure no malware in the apps you download from them. Of course Google is going to get the blame when they make promises like that.
Why is this getting flagged? Are large tech companies now somehow shielded from criticism?

This experience actually sounds both common and unavoidable.

FAANGs have x10 candidates for every position. So the interviews are indeed both difficult and arbitrary. And after a rejection they can always call you after 6 months and restart the whole shtick. So why not. Sigh.

As someone who interviewed 100s of software engineers - its just the system doing its best, and there is usually no bad-intent on either side.
If you're making claims like this where opinions are polarized, then a source would be handy. I could Google, but too lazy (see above), I'll simply assume what you say is correct.

I didn't know this (anyone who assumes I spend a lot of time on reading about Elon is wrong). If he knew this then it was stupid.

If he ought to know this but he didn't, then I get it. Don't get me wrong, that should be reprimanded by the SEC, but I wouldn't call it stupid. It simply means you're (perhaps too) focused on other priorities.

There were many times where I ought to know things about the Dutch law as well and I didn't and I got burned [1]. You can't know everything, I'd rather pay the fine so I can focus my time on more interesting things.

[1]

a) Too late with VAT without having anything too declare.

b) Going on a public road that I wasn't allowed to go in between certain times, I didn't even know it was a thing and I didn't read the signage fast enough. Now I know that municipalities are allowed to block people from other municipalities.
Ubuntu Budgie 20.04 Themes and Layouts
From the oncall side, it hasn't been bad.

Urs said stop breaking things, so we did.
How is your “knowledge” going to help you? Are you capable of vetting every app you install?
while this writeup is really cool I'm still asking myself as a sysadmin if all the complexity in the wider systemd ecosystem is a requirement to solve modern requirements or if it would be possible to have an reactive event based system that's easier to debug/introspect. Despite working on Linux systems for more than 10 years I wouldn't be able to debug such an issue like the author did in the article and I doubt most other sysadmin have the time and patience and knowledge to deep dive into the system for debugging something that shouldn't be a problem in the first place...

That beeing said is there a good a writeup / deep dive into systemd concepts? Really cool would be something like a book - the official docs are quite spread out and it's either rather simple high-level stuff or basically: read the source.
By definition, ICANN TLDs are considered special, because the whole www PKI infrastructure only works for those. Browsers cater to those TLDs, and CAs have guidelines for those.

I understand the need for hiding your TLD though. I don't see a nice solution here, sadly.
I worked as a genetic engineer in human cell therapy: developmental biology doesn't really work that way. You can't just "decephalize" without causing massive secondary effects in body development and maturation - the nervous system is very much a central part and organizer of animal development, and also centrally important in a lot of the physiology you want to test when doing drug trials! And good luck keeping decephalized animals alive long enough to harvest outside a sterile lab. You don't need to be an edgelord billionaire to make a difference, but you'd benefit by learning more biology.
Dotenv runs on the server. If a part of your application also runs on the server (such as with Next, Nuxt, etc.), and your responses are generated dynamically, then it is trivial to use the dotenv. If, however, the runtime of your application is confined entirely to the browser, and what you are serving to the browser is only static assets, such as with create-react-app, then, if you still want your environment variables to be defined at runtime rather than at build time, you need to design a bridge between your server and your client specifically for injecting the environment variables.

Here, for example, is an article describing such an injection at the nginx level: https://medium.com/@jans.tuomi/how-to-use-environment-variab.... Or you can serve index.html using a full-fledged dynamic server, such as Node, and inject environment variables there (and probably cache the response for good measure as well, not to overstrain Node). This really is not something that is React’s responsibility — although it may very well be the responsibility of the frontend developer to set this all up.
This completely ignores what I just said.
CS107e: Learn computer systems with the Raspberry Pi
Multiply the time you spent on setting up your favorite blog engine by your hourly rate. It's not $10, though likely not $10k, even if you choose self-hosted WordPress.
You know, i'm an expert in developing software. But i'm an expert in this because i spend years mo-fr 40h min. with time on weekends and after work.

There are plenty of people coming to me and say stuff like 'uh why does that take so long' 'i can do that quickly in an hour' etc. and at the end of the day they are wrong.

In those cases, i would just love for people to accept my expertise and let me do what i'm good at because it costs time dealing with this stuff.

And you know, all those speculations of people who are sitting down for a few hours, writing something, gathering a little bit of data left, a little bit of data right THIS IS RIDICULOUS.

You are not an economist, you are not a doctor, you are not a virologist, you are not the statistics guy. Apparently you are a SRE.

What do you think, your statement actually does? I tell you what it does, if it even does anything: It works against all the experts trying to actually do their fucking job on estimating and deciding on a daily bases about human lives.

Do you know what i decided when corona started? I will, this time, just try to be as undisruptive to the society as i can. I don't have to argue against or for it, i will trust the experts and politicians on this one.

Not everyone needs to form an opinion and also state it.

And yes it might be harder for you to believe in your president right now, i do get that. But let me give you a tip: Whenever everyone would love to stop quarantaen today, i will try to avoid public spaces as long as i can, because the risk of having corona, is actually for me, a bigger problem then just staying low for a few month.
I wouldn't expect to see much change. We are still emitting 92% of what we emitted last year. Atmospheric CO2 concentrations will still be rising.
Favourite comment ever. Thank you giving back to the world.
This is cherry picking hopeful data. Tests have false positives, the serological tests detect all coronaviruses including common human CoV which cause common cold.

The state of hospitals in Italy tell a different story. It might not be numbers, but it is more reliable indication of what letting this go rampant means.