skysight-inc/HackerNews huggingface dataset:
Can you provide the sources for these claims?

Please consider this a friendly suggestion to help improve the persuasiveness of your comment.

The above claims are non-obvious, to say the least. Many appear to be exaggerations.

Here on HN, it is my experience that people seek out useful discussion. It may be based on personal experiences and/or credible sources. If you have sources, share them.
I started learning Ruby and Ruby on Rails in February, as a requirement of what would be my first job in industry (then COVID came and everyone got fired). I'm loving both so far, had previous experiences with Java/Spring and Python/Flask/Django, I like Ruby on Rails better. Convention over configuration. Mature and beautiful testing with RSpec. Beautiful Ruby syntax. Sane conventions. You can throw in Slim templating engine, which makes working with markup a delightful experience. Wonderful community, I could go on and on.

I hope that RoR stays strong amidst the current React/SPA framework/Node fad.
How can the uploader claim public domain for that?
The project lead of Singapore's TraceTogether initiative goes into detail about the problems with an automated system, and why a human-in-the-loop is ideally required to evaluate the type of contact and make a determination.

A determination around being a close contact results in 14-day isolation regardless of symptoms, presumably because you may initially test negative before moving into an infectious and asymptomatic or symptomatic phase.

https://blog.gds-gov.tech/automated-contact-tracing-is-not-a...
I use Linux for work and use an iPad for stuff like reading and browsing. The difference is night and day.

The UI/UX is the main reason I'd switch to a Mac, if only they were competitively priced and didn't have some horrible glaring flaw.

As a longtime Linux user though, it makes me sad that an OS with such potential is probably never going to achieve it because people keep reinventing the wheel rather than solving problems that benefit the entire community.
> > But natural infections don't spread like this. High-contact individuals are connected to low contact individuals. An epidemic spreads organically through the population, infecting who it happens to, not who you want it to.

Surely high contact people are infected -more-, though, no?

In many ways, R0 is a "somewhat worst case number", in that it's something you observe in a population where the virus propagates well. There are likely to be other populations that it doesn't spread quite so well in-- either because of innate susceptibility or behavior differences.

> Additionally, if we're talking natural infection to get to herd immunity, you have the issue of overshoot, so unless you're very precise on measures to tamp down on transmission before you get to herd immunity levels, you easily overshoot the herd immunity threshold by quite a bit.

Exponential processes with a lot of delay and noise are a difficult controls problem, but it wouldn't be hard for jurisdictions that are doing well to target Rt=~ 0.95 .. 1.1 with interventions instead of trying to maintain Rt =~ 0.8. Of course, you need to be prepared to react quickly if things look like they are getting out of hand. And, thankfully, as the susceptible population drops the control problem gets a lot easier, because there's a ceiling of how high Rt can get...
I think this still has value. Sure, the networking part of it is over. But you still have tens of thousands of people watching this. For a framework like Rails it's usually a nice yearly milestone to talk about the future of the framework, to shed light on some new ill understood features (e.g webpack) etc etc. Railsconf are always watched by more people at home than they are by people attending anyway, that's nothing new.
No, that's just how flu season works. The numbers in the US are also higher this year, and it normally ranges within a factor of ~4 from year to year depending on the dominant strains in circulation. [0] It's completely implausible that there were a million cases of COVID-19 in December.

0: https://www.cdc.gov/flu/about/burden/past-seasons.html
Many people in the world are without access to banking. Bitcoin is a possible solution for some of their problems. If you're unhappy about the state of the project, I can understand your conclusions.

It's still being built out, it's not snapchat or some other anti-pattern app maze delivered by hungry VCs by a crack team of fresh grads with no moral development.

This is a protocol for financial independence. And yeah, it's new money. Old money that spends like money is the problem.
"hold off on this until it's fixed" is definitely reasonable. However, that's not what OP said. OP said, "Dont install apps outside the app store." That reminds me of the kind of apologetic advice I get from the Microsoft community when dealing with Windows' strange behavior and anti-user choices.

> It's pretty ironic to hear a complaint about the walled garden, when the only apparent way to solve this "0day" is probably going to be to put up another wall.

You're conflating two separate issues. Microsoft has a certification program for Windows programs, Linux has extremely nuanced permissions, SELinux, etc.

This has been solved elsewhere but the walled garden of iOS is deliberately ill-designed and is not a robust solution.
Then live underground?
This week my startup launched a demo version of our virtual networking app
On this new platform, users can gather useful contacts, find a coach, meet for video chatting with the community, and access private, professional groups.
Connect.Club has developed a separate niche with an emphasis on attracting useful contacts. The application will not be a replacement for Zoom, but it can safely compete and complement LinkedIn. The company’s objective is to create a modern platform with users' personal accounts to help them with their goals for networking. For example, in one application, users could see other people who are in search of a new job or in search of a mentor, startups at the stage of raising investments and seeking investors, and interest clubs and professional communities that are more likely to meet offline or communicate more in chat rooms.
This reminds me of how we model things, but there are also variables that change before they actually happen.
Reminds me of this:
https://en.m.wikipedia.org/wiki/Wet-bulb_temperature
How many degrees Celsius hotter would that be for billions of people in 50 years?

> The Paris Agreement's long-term temperature goal is to keep the increase in global average temperature to well below 2 °C above pre-industrial levels; and to pursue efforts to limit the increase to 1.5 °C, recognizing that this would substantially reduce the risks and impacts of climate change. This should be done by reducing emissions as soon as possible, in order to "achieve a balance between anthropogenic emissions by sources and removals by sinks of greenhouse gases" in the second half of the 21st century. It also aims to increase the ability of parties to adapt to the adverse impacts of climate change, and make "finance flows consistent with a pathway towards low greenhouse gas emissions and climate-resilient development."

> Under the Paris Agreement, each country must determine, plan, and regularly report on the contribution that it undertakes to mitigate global warming. [6] No mechanism forces [7] a country to set a specific emissions target by a specific date, [8] but each target should go beyond previously set targets.

And then this is what was decided:

> In June 2017, U.S. President Donald Trump announced his intention to withdraw the United States from the agreement. Under the agreement, the earliest effective date of withdrawal for the U.S. is November 2020, shortly before the end of President Trump's 2016 term. In practice, changes in United States policy that are contrary to the Paris Agreement have already been put in place.[9]

https://en.wikipedia.org/wiki/Paris_Agreement
HTTP/3
It also includes a scraper for various torrent sites, which was the only part of the code specifically targeted by the takedown notice
Yes, that's how flu looks every year.
Good to see. Rails is still a fantastic framework for building web apps in 2020.
Was he referring to '10 years to enact things to prevent X'. Because we've passed a few thresholds that we probably can't take back at this point.

Exponential growth on a long timescale is something people are bad at.
I've tested pihole for months now, it's working really well.

Set up a VPN to an EC2 with pihole on it, no more ads on Spotify. Even family members wanted the VPN config, they really appreciate it.
Is it good for web usage? 400,400i,700,700i fonts' file sizes combined is still less than one variable fonts'size. Isn't that true?
There's arguably a lot more evidence against Google than Apple here. But Apple did lie about their involvement, or even knowledge of, the PRISM program. Snowden leaks. I highly recommend Glenn Grennwald's book No Place to Hide if you're not interested in digging though sources yourself.

Even against their will, companies with capabilities can and have been compelled by government agencies to go against their promises and lie about it.

Additionally, with organizations of this size, it's very plausible that the vast majority of employees and even executives are blissfully unaware of wrongdoings, abuse and involvement in conspiracy by individual employees or decision makers.

All it takes is a single compromised or malicious person to add new capabilities in an update to an already rolled-out and well-intentioned software. Possibly a handful if you add strongly enforced and audited mechanisms for co-signing releases and whatnot.
The last sentence is probably the best advise and i would extend it to any kind of social relationship. If you wish to keep your marriage/relationship/friendship/etc. intact, do not mess it with business.
GitHub permits an “authorized party” to file the counterclaim on behalf of the authors.
Not sure I follow, do you think Basecamp is a bad product or is it a badly engineered product according to you? It's getting pretty good reviews as far as I can see, and it's not like Basecamp are pouring millions into marketing.
Networking doesn’t need to be personal though.

> The first to go have no relationship with upper management

This also means upper management had no clear oversight on how they were doing, what the value they brought in.

If they did the same as you, being let go while you stay is mostly fair.If they were better at their job than you, I’d wish they find a job where they’ll meet better upper management.

I know it feels overly idealistic or unrealistic to a lot of people who, as you describe, climbed the ladder by sticking with the big boys. Especially for those working in bigger companies where a single employee’s value is heavily diluted and political skills become huge assets.

But companies who care more about your code than where you eat are also growingly common. It’s also so much more comfortable when you can feel that your work output actually matters.
Neither of your points is correct. I'll start with your second point since the situation there is more clear.

> As well, DMCA takedown notices are only supposed to act to take down the relevant content, in the case where the recipient of the notice (i.e. the user of the hosting provider) doesn't respond/contest the notice.

Actually, according to the text of the DMCA [1], a provider is supposed to first "inform[] that person that it will replace the removed material or cease disabling access to it in 10 business days", then "replace[] the removed material and ceases disabling access to it not less than 10, nor more than 14, business days following receipt of the counter notice".

They have to keep the content down for two full weeks after receiving the counter-notice. Yes, this is blatantly unfair. But that's how it is.

In practice, providers sometimes restore access sooner, but they're forfeiting the safe harbor by doing so.

> DMCA takedown notices are a sort of pre-trial motion, used only for a very specific "obvious" kind of infringement, to take it down in advance of suit.

I'm not sure whether the question of whether contributory infringement can be the subject of a DMCA notice has ever been tested in court. If you know, feel free to enlighten me. But I doubt it has, since the issue would only come up in a 512(f) lawsuit accusing someone of a fraudulent takedown, and that clause has barely ever been used at all.

From the text of the DMCA, though, a DMCA notice is supposed to contain, among other things (emphasis added):

> (i) A physical or electronic signature of a person authorized to act on behalf of the owner of an exclusive right that is allegedly infringed.
> (iii) Identification of the material that is claimed to be infringing or to be the subject of infringing activity and that is to be removed or access to which is to be disabled, and information reasonably sufficient to permit the service provider to locate the material.

"An exclusive right that is allegedly infringed" is broad wording. And point 3 anticipates that the "material" might not be "infringing" but merely "the subject of infringing activity"; it's not clear to me what exactly the difference is, but this also suggests a broad scope of what kind of "activity" might be covered.

Admittedly, that's fairly weak textual evidence. But I don't see any language supporting the opposite position. At minimum the law is ambiguous. So unless it's been tested in court, I don't see how you can claim that DMCA notices are "used only for a very specific 'obvious' kind of infringement".
The whole script seemed to stick to the one trick of messing with extensions.

Simple often does the trick.
The army’s field manual for writing. It’s quite good and I find myself referring to it even now, after my military career.
@Theorentis said "a few hundred years ago", not "up until WWII".

I mean, @Theorentis is correct, in a way, about what's good about less-industrialized societies. Though it was more true of medieval serfs and classical societies than it was of "a few hundred years ago". But also @jacobulus is correct about the down-sides.

And when you say "pre-WWII", that makes me think of 1850-1950, which I suggest is, overall, literally worst-of-both-worlds. There's virtually no decent medicine until 1928, but industrialization and capitalism are in full jackbooted swing. You get all the psycho-social disadvantages of modernity, with virtually none of the benefits.
> is spying on the major tech companies and would regularly demand data and place gag orders on those companies.

So you agree.

> Neither actions are willful forms of data transfer.

What’s that got to do with it?

> Equating these with the US government having full access to everyone's data is misleading.

If the data exists, the only prudent approach is to assume state-level actors, at least, can get access to it.
There's not much natural evolutionary pressure on COVID to become less lethal because it spreads so well with asymptomatic carriers.

We (humans) are trying to impose evolutionary pressure by isolating potential carriers. Maybe that will help.
Säkkijärven polkka
Airlines have alliances, it does not stop you from taking any airline you want for your route, but costs may vary.

It is just a property of networks. As an end user you still get to use all providers, but two of them may use a dedicated connection to reduce internal prices (the price benefit of which they may or may not give back to the user).

Neutrality from the point of the user is not affected when it comes to service being available.

Now if one airline alliance said you are not allowed to get on their flight if you hoped off from a rival alliance, then we have an issue.
Climate denialists love to cite the various "We have X years left" claims that are more than X years old, but rarely note that the goal posts have shifted from "almost no warming" to "catastrophic but survivable" warming in the meantime.

If we had started in earnest to reduce emissions in the early nineties when the science was crystal clear, we could be mostly done by now. The current climate is measurably different from thirty years ago, but obviously not so bad. Unfortunately we barely did anything in the last thirty years, so we can only hope to finish decarbonization in another thirty years. By then we'll have locked in another two degrees of warming and, if we're unlucky, hit some trigger points that cause runaway warming (e.g. Greenland losing most of its ice, large parts of the permafrost thawing...) which we're powerless to stop.
Predictions Are Overrated
People are bad at exponential growth on a short timescale too. That's been one of the most interesting things about the early days of covid, when the divide seemed to be between quantitative and non-quantitative people, like VC firms discouraging handshakes and Vox mocking them for it.
"increased attack surface ... but I'm not familiar with what this would really look like"

There's a related LWN article on this called "Anatomy of a user namespaces vulnerability" [0].

Basically, the kernel has a bunch of places where it checks for various capabilities. Unprivileged usernamespaces let you gain various capabilities in a limited fashion, but those limitations are based on the kernel itself recognizing that you only have those capabilities in said limited fashion.

For an easy example, a root user in a usernamespace (aka an unprivileged user on the host) is allowed to mount a new tmpfs in their namespace, or mount proc... But it's still not allowed to mount /dev/sdx since that device belongs to the real root user.

Necessarily, that means there are different ways to check if someone has permission than the simple "is the caller uid 0"; there has to be for tmpfs "are they CAP_SYS_ADMIN in their current namespace", while for /dev/sdx it has to be "CAP_SYS_ADMIN in the root namespace".

It simply amounts to there being more total codepaths that an unprivileged user can reach because, for example, they can now pass the tmpfs mount check (intentionally), and perhaps there's a mount option that wasn't fully thought through.

"What could be done to mitigate these security concerns"

Docker's seccomp filters would have actually stopped quite a few exploits here by totally gimping user namespaces to be useless. So yeah. maybe that's not the answer.

There's really not an answer though. You can't prove something is secure and bug-free. It has been a while since a really meaningful userns exploit and there are a lot of people that believe it to be a useful thing to have.. a bunch of distros have enabled it. People are still wary because of its history. I think at this point all that's left to mitigate these concerns is time. The implementation isn't likely to change drastically any time soon.

[0]: https://lwn.net/Articles/543273/
That does not imbibe more trust in me regarding the corporate world, Apple this time. Big corporates have done many things to erode it, just like governments did. As we all know, trust leaves on horseback, comes back on foot. And in current 'distrust-first' society with populism feeding the gut, it may not come back at all for quite some time.
Correction: firefox ./0.html should be firefox ./0.htm
A vaccine seems weirdly plausible.

We had a discussion on sending everyone under 30 to a giant Coachella for a month. I'd be so down.
All the best teachers in my school either where fresh graduates or didn't have a teachers license. My conclusion was simply that teachers burn out after a decade and should switch which is very hard if they have a five-year degree in pedagogy and not much else.
Drug stores aren't going anywhere.

They already have. We've been getting our prescriptions delivered for months now, even before the COVID-19 outbreak.
Location: Seattle
Remote: Ok
Willing to relocate: No
Technologies: Swift, Objective-C, Xcode, mobile, AppKit, UIKit
Résumé/CV: https://www.linkedin.com/in/pkamb/ - https://stackoverflow.com/users/1265393/pkamb
Email: [firstname][lastname] @ gmail (see linkedin)

I recently released an app on the Mac App Store:
https://servicestation.menu/

Now looking for my next gig in the iOS or Mac world. Been working on Apple platforms for the last 10 years.
> A DMCA take down notice describes a particular resource that the claimant claims to be their intellectual property.

According to the text of the relevant statute (17 U.S.C. 512c), the purpose of the notification is to inform GitHub of “facts or circumstances from which infringing activity is apparent” (1.A.ii), and the notice should include, among other things, “A statement that the complaining party has a good faith belief that use of the material in the manner complained of is not authorized by ... the law” (3.A.v). The notice provides the Grokster verdict as evidence for their good-faith belief that distributing the source code isn’t allowed by copyright law.

I won’t get into whether or not Grokster should apply, as I haven’t read it and am not a lawyer. But, on the face of things, this seems like one kind of scenario envisioned by the drafters of the statute. That’s ultimately a good thing, because otherwise GitHub would not be eligible for 512(c)’s immunity in this or similar cases, and would need to keep an army of lawyers on staff to evaluate the copyright status of all the content that goes through thir systems.
Location: Usually Singapore or South East Asia

Remote: Onsite or remote (and willing to time shift)

Willing to relocate: Not at all this time

Technologies:

- Full stack web: "GReaT" stack - Golang on the backend and React/TypeScript on the frontend.

- Backend: Node.js, Express, PostgreSQL, redis, Linux, Kafka, container.

- Machine learning: Python, PyTorch, Computer Vision (ConvNets, ResNets, GANs), NLP (transfer learning, language modeling, Transformers), Pandas (time-series, Random Forest, recsys).

- Cloud: Amazon Web Services, Google Cloud

Résumé/CV: https://www.visualcv.com/cedric-chee/

Portfolio: https://www.visualcv.com/cedricchee/

Email: cedric+hn [at] invictusbyte [dot] com

GitHub: https://github.com/cedrickchee

Website/blog: https://cedricchee.com/

LinkedIn: https://www.linkedin.com/in/cedricchee/

---

Hi. I’m Cedric, a software engineer, mentor, ex-startup founder, and T-shaped person with years of experience working on software systems and product engineering. I sometimes organize study groups, contribute to open source, be part of the larger tech community, and mentor junior devs. I started as a full stack engineer after which I got into mobile dev and then moved to machine learning engineering. I did my fellowship at fast.ai during my mid-career switch in 2017. I have been on 1-year sabbatical learning new skills. I spent 14 months in educational retreat from 2019 to Feb 2020 — 7 months as an Entrepreneur-In-Residence (EIR) at Antler and the rest of the time in code retreat. I've written before about my 16 years career in tech: https://cedricchee.com/2020/04/21/career-and-code-retreat-re....

In my last role, I created a medical diagnostics SaaS business for physicians. I build a deep learning application using PyTorch (CNN), Golang (APIs, services, gRPC), TypeScript/React (frontend), Apache Beam/Airflow (basic data processing), and many more.

I'm interested in doing more backend engineering in Golang. I'm also down for a new adventure with the right team. I just love learning. https://cedricchee.com/2020/04/21/hire-cedric-chee/