skysight-inc/HackerNews huggingface dataset:
Monkeys escape with Covid-19 samples after attacking lab assistant
I agree that immediately diagnosing people's mental state if they are having questions about what they are being told seems way more dangerous than letting people explore new ideas. Maybe there are some truths that needs to be uncovered before the world can become better.
Except Java and .NET also offer similar capabilities, yet many of those students seem happier to reinvent the wheel and being cooler.

For every time I have to deal with k8s I deeply miss application servers.
Excellent writeup! About 4 months ago, I wrote a comment[0] on HN telling folks how Apple simply omitted the server-side validations from their WWDC videos. And given the lack of good documentation at the time, WWDC videos were what most developers were following.

Even then, the only "security" that developers had was that the attacker wouldn't know the victim's Apple userId easily. With this zero-day attack, it would have been trivial for many apps to get taken over.

[0] https://news.ycombinator.com/item?id=22172952
Bots can be used for many purposes. Many (maybe most?) are constructive. There have been a number of DIY tutorial for beginners about how to use Arduino or Raspberry Pi to let plants tweet when they need water. Here’s one (old) example: https://www.wired.com/2008/02/houseplants-wil/.
That could work indeed. Annoying but necessary. Tho what does one do about real bots - people in spam farms that would manually
login, post and logout.
If human language can be manipulated for commercial gain, it will be. Taken to its logical conclusion, the economically contested term ceases to have any meaning. Think of SEO search keywords or fashionable technology buzzwords (cloud, big data, AI).

The adversarial weaponization of language by economically motivated actors should not be confused with the use of language for communication. Real humans have an amazing ability to communicate even on noisy channels.
The quantum magnetic dot is not exactly a microchip, but it does provide a weak signal that can be read electronically, and could be administered during a vaccination injection

UPDATE: here's the MIT article on their research.
http://news.mit.edu/2019/storing-vaccine-history-skin-1218

"MIT engineers have developed a way to store medical information under the skin, using a quantum dot dye that is delivered, along with a vaccine, by a microneedle patch. The dye, which is invisible to the naked eye, can be read later using a specially adapted smartphone."
You seem to be looking at private schools which are going to pay higher, I’m talking about public.

Also that dataset is not at all representative. In fact, it seems to skew high. Of the 9 big schools in my state, only 2 are listed and they are the 2 biggest. The biggest, wealthiest schools have higher paid executives. Of all the public schools in the country mine is probably a little below the median.
Wow, I'm so glad that apple forced me to implement this broken garbage into my apps!

For those not aware, some time ago apple decided it would be a good idea to develop their own sing in system, and then force all apps on their store (that already support e.g. Google Account login) to implement it.

So they brought a huge amount of additional complexity in a large amount of apps, and then they fucked up security. Thank you apple!
And then there was Epstein, even if the details were fuzzy...something nefarious was happening.
Apple is an email authority in this case, and as third party you have to rely on their security. Same as with ssl certificate authority.
> Why do people still believe that preventing civilians from using encryption is going to stop criminals? Is there a name for this fallacy?

After a quick search i found the base rate fallacy which maybe could be applicable (no idea if it is really).

> If presented with related base rate information (i.e. generic, general information) and specific information (information pertaining only to a certain case), the mind tends to ignore the former and focus on the latter.

https://en.m.wikipedia.org/wiki/Base_rate_fallacy

There's also the general fallacy around security (a non technical term I've made up on the spot):

> The only truly secure computer is one that is disconnected from any and all networks, turned off, buried in the ground, and encased in concrete. But that computer isn't terribly useful.

Kinda applies to both parties of the argument because there's often an idea behind both that there is such a thing as "perfect security".

https://particular.net/blog/the-network-is-secure

Theres also possibly some agenda bias going on.

--------

> What does Zoom’s premium subscription offer? Jitsi supports unlimited participants and runtime for free, and soon E2E encryption.

The biggest thing around this is to remember that >90% of users are not tech nerds:

* The Jitsi webclient isn't the nicest UI and a nice UI is really important for non-nerds.

* Jitsi Dial in options are a bit limited (from what I remember, could be wrong). Zoom offers a package for toll-free dial in in US + Canada, for example.

* No dedicated support for Jitsi (unless you know how to create a GitHub ticket and scoure through forums).

* There's no dedicated physical meeting room connector service for Jitsi.

* Also don't think there's any sign up for Jitsi. So while zoom has the problem that anyone with an email address can join a meeting, Jitsi has the problem that anyone with the meeting ID can join a meeting. This then becomes a problem when you want to report a user.

* Jitsi meeting IDs can be lower entropy compared to Zoom. Often they're just names for the meeting.

* Join the Jitsi meeting called "test" and you can see the problem with the last two points

Ive set up local public (ish) nightly meetings on Zoom and help to maintain it. Several people have talked about Jitsi and Google services. In a ideal world I would set up a private and dedicated Jitsi server at home for it. But it's not an ideal world and that's too much maintenance for me to do.

Zoom basically provides a decent feature set, with a nice and intuitive UI, and all the set up is handled by Zoom for you. For people who "just want the thing to work so I can do stuff" it makes sense.
This article reads like string theory from big bang theory. A search for one explanation that explains all.

With humans things rarely fit neatly.
You can find plenty of people who talk about how great "The Economy" is doing, but that doesn't matter much for an individual who is struggling. When a bunch of those struggling individuals get together in that world you will get conspiracy theories as they try to work out why things are so bad and how they can improve their lives.
Where does the phrase 'When the looting starts, the shooting starts' come from?
Whales do considerably more, like recyling iron to the surface where it's needed https://en.wikipedia.org/wiki/Whale's_faeces

I'd expect the narrow population bottleneck they've been pushed through (down to 150 individuals) would leave them with much less genetic diversity. That could be a serious and very long term problem (or not).

Irrelevant fact: whales can get flu (coronaviruses). Just FYI
For anyone else wondering, the correct parse seems to be (Sign in with Apple) (Zero Day)
This is happening to me on Catalina with Safari. Having on dual monitor another app and Safari, clicking in another app and Safari takes focus back.
From quick googling, it seems to me like it is still disputed, even as of articles from 3 days ago.
Another ad hoc explanation is sold as science. Just because a group of people share some features, those set of features won't explain any thing.
The wires.
By raising their prices, they also price those with less money to spend out of being able to afford essential items.

The counter argument that "increased prices will entice manufacturers to increase production, driving down prices due to higher supply" is deeply flawed. People cannot wait several weeks for production to ramp up, if what they need is water, medical supplies and so on.

The better way to do it is to apply anti-gouging regulations and purchase limits per customer.
Scientific American has changed its coverage drastically in the last few yeard. If you look at the headlines, there's an incredible amount of articles that discuss society, racism, government,etc. It's not science. This article is yet another example.
> Every time I see someone using Basecamp as inspiration for bootstrappers I perceive it as very dishonest

How far are you willing to take this?

What if he had borrowed money from his grandma? What if they couldn't afford servers AND rent so they stayed with his parents? Or they couldn't get a lease on their own, so a friend co-signed?

The reality is that we all accept some form of help with our businesses at one point or another that takes some of our stress away. You'd be searching long and hard to find people who became successful with no form of investment at all. And even if you did, what would that prove?
And the original comment blamed upper class white people. Talk about painting with a broad brush. Painting people this way because of their race is wrong, and misleading. We actually know who legislated Jim Crow, who created the KKK, and who defended slavery.

The Democrat part thankfully is not the party it was through the 1930s, but the legacy of that lives on.
Before the native notification system, there was this Growl thing that literally every single third-party app used. Apple apps, on the other hand...
can the opposite also be true, that people who refuse to accept true conspiracies may also be anxious to preserve their worldview, ignore contradiction, and eschew rational analysis for emotion ladden thinking?

e.g. this is the popular portrayal of religious people who refuse to accept the claim their religions are massive lies made up to control and console

in which case these psycological factors may just be generally indicative of people who have trouble accepting the truth when it contradicts their cherished worldview, conspiracy or otherwise

on the other hand, if someone possesses this psychological makeup, and refuses to accept a certain proposition, i am not sure there is much we can conclude from this study. maybe they are being irrational, or maybe not. we would have to examine the actual reasons they reject the belief, and not rely on psychoanalysis, since if we did so it would ironically be irrational on our part
Because of anger with the medical system or “being told what to do”

Because I want an easy scapegoat for my Covid fears and greedy telecom companies are already disliked...
TL;DR

The Hard Part of Learning a Language

...is all the learning. Screw [all] this [learning], I’m going back to Python.
The point is if you were a "cyber criminal" doing it regularly, the FBI would eventually trace it back to organized crime and you'd get in trouble.

People make one-time withdrawls of large amounts of cash all the time.
Reputable sources please?
And to take your argument just one step further: physics operates on causal closure, and I don't know how proponents of emergentism reconcile it with causal closure.
While you're likely correct that this wouldn't work in Germany as in a situation like this Oracle would've to pay their layers, the defendants lawyer as well as the courts costs if they repeal too often... There are other avenues for them to ruin his live, which I can imagine them taking.

I.e not extending his employers licence or making them pay even more.

Oracle loves to make examples and ain't pulling their punches
Don't assume that malware will make itself visible. This isn't 2003. iOS vulnerabilities have been used to facilitate genocide: https://blog.trendmicro.com/trendlabs-security-intelligence/...

e: Hello CCP downvote brigade :)
My clients — oncological institutions — license Oracle and so they prefer my solutions to use it as well. Really simple, and sad.

As for why they use it... as far as I know it‘s the old tale: historical reasons. Classical lock-in.
Thanks for recommending this book. Mostly I write TypeScript day-to-day, so naturally I typically reach for nodejs when I want to "upgrade" a script from bash to a more expressive language in a cross-platform way. I've been frustrated with that tooling, however, for a whole bunch of reasons, at lot of it to do with how clunky nodejs actually is in shell pipelines. I've thought about reaching for python, but it has some similar issues to nodejs: you need a particular environment, and some things which ought to be natural in a shell environment just...aren't...in python. I think someone here suggested Lua, and I just...don't care for Lua (although I haven't tried it in a scripting-like context).

Anyhow, I've been reading this for a half-hour or so and I'm struck by how incredibly similar common Perl idioms feel to JavaScript as it is commonly used today. I think part of this familiarity has to do partly with type coercion, partly with destructing assignments, partly with function "context"(as in Perl) as it is commonly deployed in the nodejs ecosystem, partly because of the way default arguments and function passing relates to the default scalar variable in Perl.

I've been playing around with OCaml and Rust a bunch recently, but haven't had any good reason to reach for them "in real life." The fact that Perl is "everywhere" (much the way JavaScript is "everywhere" as a side effect of browsers being ubiquitous), means that I'm likely to start reaching for Perl instead of nodejs when I need to move beyond Bash. It really does seem to be the right tool for the job.

So, a hearty "thank you" for the recommendation.
Maybe you're right. Your tone, and granted this it the Internet where tone is implied by the reader, seemed very presumptuous. I think ultimately the first part of my post was an, admittedly, biased opinion. So yeah, I am probably wrong about that. Though, I would really like to see some data on this.

However, I am concerned about a disinformation campaign which could, theoretically, be sponsored by a foreign state to get people to ignore the very real threat of coronations.
I never knew about this github feature. Nice!
Came here to say the same thing. When I see these submissions – pro or anti-CCP – and I see the discussion that results, I'm inclined to flag them. Such stories are not good material for HN, and the submission guidelines make that clear. I thought this was precisely what flagging of submissions was for.

It's also worth noting that some of the worst stories that have resulted in the most division have been ideologically driven. I recall a libertarian think tank that had a number of accounts that apparently existed purely to make submissions for those sites. I'm sure there are other groups that are at it too, I just found that one to be particularly blatant.

Regardless of your political views, the submission of such stories seems to inevitably result in a flame-war that seems only to serve to degrade this community's technologically-orientated mutual respect.
Publish benchmarks as an LLC, then just go ahead and declare bankruptcy.
Things are a bit different when they use Javascripts to scan your own machine.

Apparently, the language "deliberate circumvention" makes a big difference in the context of US CFAA because of some precedent.
My response to your partner is "agile doesn't mean changing things without the team being on-board".
It absolutely is propaganda. If a single verification of consent is "double opt in", then zero verification must logically be "single opt in". The evil option is reframed as good, and the neutral option is reframed as extra good. Anybody who uses it is either ignorant or a spam sympathizer.
I do not believe in all conspiracy theories and I do not ignore all conspiracy theories.

When you understand that there are certain unprovable things and layers of gatekeepers for what is called "news". You have to connect the dots - and some would call it conspiracy theory.
This is exactly what free users get when using zoom.

Up to 3 people in a meeting is unlimited. Over 3 is limited to 40ish minutes.

The Facebook pixel SDK etc etc stuff you're probably thinking of got removed from recently updated clients. Check out their privacy policy to have a look at the actual data they retain from actual meetings. it's fairly limited and only to do with account management / meeting management from what I recall.
Apologies for not being clear

> few people protesting state sanctioned violence abroad

I was referring to their local state committing acts of violence abroad. As you correctly note, the example mentioned is not the only one of its kind. This happens far too frequently. It falls into the "every bad thing happening elsewhere" bucket.
well neither does the author; they're writing python
You're totally confusing performance/throughput with reliability. No, "a single box" is NOT reliable.
Sounds like their modus operandi. What would they do in most situations? Find a reason to justify their actions. Who knows about all the bullshit they came up with on so many prior charges.

This is very much systemic.
I still trust Apple over a rando site or SaaS app. No system is flawless.
I mean, I'm on the client side, so I don't need a ledger to manage wallets, for now.
But as the system evolves, I'll definitely need to 'allocate' budgets in the form of ledgers, where an algorithm decides to move funds from one account to another.
I'm thinking that arbitrary domains should not have access to any resource on '127.0.0.1', for the same reason that browsers restrict access to resources at 'file://' without user permission.
The only difference is a terms of service nobody reads which "allows" them to do what they want, no matter how abusive.
That doesn't really make sense in the context of docker.

It's still Linux inside the container. Even if it's some abstract non-Linux service thing running the container, what happens in the container is still the concern of the developer.
This opinion is worthy of an artist. But I would only even hire engineers.
So now people who search out the truth have psychological differences than normal people who believe and act on anything CNN tells them.
Cool story. We’d still believe the Earth is flat (some idiots still do) if we went by this logic and didn’t question the status-quo.
A more empathetic mindset can help everyone here. Try "People who are barely managing to keep living fear systemic changes that might make life as they know it impossible."
> The Sign in with Apple works similarly to OAuth 2.0.

> similarly

I understand why they wanted to modify OAuth 2.0, but departing from a spec is a very risky move.

> $100,000

That was a good bounty. Appropriate given scope and impact. But it would have been a lot cheaper to offer a pre-release bounty program. We (Remind) occasionally add unreleased features to our bounty program with some extra incentive to explore (e.g. "Any submissions related to new feature X will automatically be considered High severity for the next two weeks"). Getting some eyeballs on it while we're wrapping up QA means we're better prepared for public launch.

This particular bug is fairly run-of-the-mill for an experienced researcher to find. The vast majority of bug bounty submissions I see are simple "replay requests but change IDs/emails/etc". This absolutely would have been caught in a pre-release bounty program.
Sorry, are you claiming that Japan might have experienced NY-level mortality but not noticed? Did you see pictures from NYC's hospitals? You can't not notice that. I'm not confident of much, but I'm very, very confident that coronavirus mortality in Japan has been dramatically lower than NY. If you disagree, then we're not in the same consensus reality, and there's no point in discussing further.

So I'm asking why they're different. You make a lot of statements, most of which are true but which don't specifically explain that difference. For example, you state that Japan's doctors have experience with SARS, and they do; but how is that helping stop the spread? What are they doing that Americans should copy? It's not the contact tracing, except for that ~20% reduction in R at best--and if deaths are undercounted, then they're missing an even greater share of the infections.

And then you seem to say that Japan and NY can't be compared anyways because they're so different? I agree they're different in many ways; so why not think about all those factors, and what we can learn from them? Would a heavy public campaign training people to correctly use masks (and enforcing their use) have brought us to Japan-level mortality with a Japan-level lockdown? Imagine the lives (and jobs, and hours of children's education) that could have been saved if yes. I agree that Japan has very different cultural norms, and those might explain much of the difference. So what are those norms, and how can we adopt them?

Or maybe the dominant factor is neither masks nor lockdowns but weather, and there's nothing in our response that could have helped? Maybe it's something about our speaking habits, and language really does directly make a big difference? That last one is deliberately outlandish, but I'm not even totally sure it's false.

The point I'm trying to make is that we know very little about this disease, and what we do know is confusing and contradictory. Unfortunately, most people seem to have latched onto preferred simple explanations, disregarding the evidence that doesn't support them. Given the earliness of our knowledge here, I believe that's likely to cause important opportunities to control the disease to be missed, and therefore harmful.
Setting all of that from scratch is not really that easy, and I wouldn't consider "monitoring" to have been a "solved problem". syslog over TCP/UDP had many issues which is why log file shippers happened, and you still need to aggregate and analyze it. Getting application to reliably log remotely is IMO easier with k8s than remote-writing syslog, as I can just whack the developer again and again till it logs to stdout/stderr then easily wrap it however I want.

Deploying as distribution package tends to not work well when you want to deploy it more than once on a specific server (which quickly leads us to classic end-result of that approach, which is VM per deployment minimum - been there, done that, still have scars).

Management of cron jobs was a shitshow, is a shitshow, and probably will be a shitshow except for those that run their crons using non-cron tools (which includes k8s).
This might be a dumb question, but 100 yubikeys? Do you use this many yourself, or do you give them to other people?
In particular, if a charged black hole creates Hawking pairs, the oppositely-charged particle is more likely to be captured than the same-charge particle.
> But I'm not sure one can find something of "the right power" that has the same support from cloud providers, the open source community, the critical mass, etc.

I totally agree. I would dearly like something simpler than Kubernetes. But there isnt a managed Nomad service, and apparently nothing in between Dokku and managed Kubernetes either.