skysight-inc/HackerNews huggingface dataset:
Why is it so weird that people will turn to non-mainstream sources to explain a world that has been screwing them over for decades while mainstream sources say everything is better than ever?

https://www.pewresearch.org/fact-tank/2018/08/07/for-most-us...
All the offer's I've gotten have been pretty solidly in the bell curve of what levels.fyi indicated.
It can really take that long. Initial bootstrapping of the Oracle database docker containers can take upwards of an hour.
Really?

> ...affected third-party applications which were using it and didn’t implement their own additional security measures.
> that Windows users are prone to do.

Or how iOS users tend to do.
You can do like what Videolan is doing for VLC: the president reply to the lawyers that they have no power there.
It's not about making it reasonable, it's an open threat to punish anyone who does decide to benchmark Oracle. Nobody's going to win the case, but whoever violates the term will surely wind up bankrupt defending themselves.
I've also found a timer-based approach to drudgery very helpful. Your technique is reminiscent of the "Pomodoro Method"; you should check it out if you're not familiar with it already.

> For me, the really difficult part of the language is understanding the core concepts

Well, it might be difficult in an absolute sense, but it's exactly the difficulty that you're motivated to overcome. You started learning the language in order to understand new concepts/techniques. And so it's the "easy" difficulty, because in some sense it's fun.

It's the difference between climbing a mountain (difficult, but rewarding) and climbing a mountain with holes in your boots, no food, and a broken strap on your pack (difficult and annoying).
I second this. For me it seems to happen at very specific times, like 12AM so it leads me to believe it had to do with calendar events. And it always does it a few times in succession.
An advanced and unconventional hack is targeting industrial firms
Generating bot accounts on Twitter and Reddit for you know why.
That was A great READ, if you’re into astrology and 90s web design, https://freewillastrology.com/ , it’s totally whatever but the readings each Tuesday almost always come with a history lesson so it’s fun educational nonsense.
Money or Fun?
money or fun ?
Oh I was hoping DuckDuckGo would fake your browser personality somehow. Mac -> PC, etc
> But there's definitely a difference between re-building to a spec versus building something new from same components or, as you say, designing something the designers never intended

I think this is where I like the distinctions below on extension vs invention. Sometimes you're just taking what's there and re-arranging it; sometimes, you're adding new things to replace the existing ones, sometimes you need to clean slate using what you learned from the previous steps.

> Would love to hear your ideas for what you want to re-purpose on your car!

Here are a few examples:

- https://f87.bimmerpost.com/forums/showthread.php?t=1675296
- https://f87.bimmerpost.com/forums/showthread.php?p=26245043

It's a surprisingly good intellectual exercise during quarantine :D

I think that the other critical piece you mention is "having a goal". Most people are only interested in getting from point A to point B, so they stay at level 1 of cars (or computers, or investing). Once you set a goal for yourself, the incentives shift and you're willing to dive deeper into the levels mentioned here.

I often get asked for recommendations on "what programming language to learn" from people interested in learning to code, at which point I ask them "what do you want to do?" Having a goal for which programming is a solution is far more important than learning a language, and the intrinsic motivation will push people to discover the solutions vs the people just doing it because they've been told they should.
No, see, you are the Client. They are the Server. You are Consuming their Content and this is a flow they only think about in one direction.
Any lawyer contact to sue an Incubator/Accelerator?
I worked with a Billionaire in his Incubator/Accelerator, and delivered on all milestones. He delayed the process with different excuses and then did not invest and wasted my time for more than a year. What is best way to approach this?
I would never take on any debt, in any climate. I don't have credit cards. I don't have a car loan. I don't have a mortgage. I don't care what my credit score is.

Peace of mind is priceless to me.
I can understand banks using client fingerprinting for fraud detection, but Chick-fil-A? Are they worried that people might steal $5 of restaurant vouchers?
It also at the same time is one less successful example of someone finding a way to make millions of dollars without raising any funding.

Every time I see someone using Basecamp as inspiration for bootstrappers I perceive it as very dishonest.

That said, I think it is a very good thing that there are more options for funding high growth tech startups that do not require a ”go unicorn or go bust” mindset of the VCs.

It certainly a great innovation (even if it’s not exactly a new idea) in the startup ecosystem
GPT-3: A Brief Summary
That suggests an entirely different conclusion: that bots are better at becoming influential on Twitter than people are.
A Bigger City Is a Better City
Literally every system in the world has flaws, no matter how secure. We just don't know about these bugs yet.
It would be cool if there was a platform to crowd source compute resources to train stuff like this so that regular people (without 7 figure budgets) can have access to these models which are becoming increasingly out of reach to the general public.
And this is why I only give Linux like one decade more to still be relevant on the server.

With hypervisors and managed environments taking over distributed computing, if there is a kernel derived from Linux or something completely different, it is a detailed that only the cloud provider cares about.
Never, because unilateral contracts and a negotiation imbalance bless it as being authorized. It's similar to how artists can end up not owning the rights to their own songs. Any legal protection that is transferable ends up as a liability to the individual, as the market will strongly incentivize trading it away. The Coase theorem applies to your personal life.
Free users should get time-budgets or group size limits or video resolution limits, not be spied on.
When you have a sore back from lugging around your wallet, and it needs lightening for your own good.

Not that MSSQL isn't heading that way, and getting more weird and buggy all the time.
I'm slightly worried that I'm just a little bit behind the curve, and I'll be in the same position in a few years; so all I really have to say is that I think spending time on non-programming^ hobbies helps.

^(and better: non-computer, so there's no 'I could write a script to do this faster' or 'I have so many better ideas for a site/program that would do this better' temptation)
>> storing that excess water isn't free. Water is already commoditized, which means it's low-margin. If you as a private business, stockpile water for an emergency but can't charge more, you're probably selling at a loss.

> During a disaster they can keep selling at $X/bottle and keep making a profit

You ignored the point of the person you're replying to.

This applies to the entire supply chain, too. If there's any disruption (including increased demand), it's the stockpiles -- anyone that stores inventory beyond what they sell regularly -- that compensate. No one is obligated to do this, and there are significant carrying costs to store inventory (space, spoilage, capital tied up).
What's wrong with letting the person that feels threatened by the "graciás" sign go on feeling threatened?

As long as they don't take any aggressive or dangerous actions based on the feeling of course.
Rackspace hosted email is down
That there were ways of mitigating it (I'd assume verifying email addresses out of band?) doesn't mean it's not Apple's problem when their authentication system can be tricked to confirm false identities, when its entire purpose is confirming identities.
Even then there's the question of "where are the logs?" "how is the application deployed?" etc.
That is a totally different species of whale.
The correct interpretation there is that for any given R-S code, the tolerance for correctable errors is half as many bits as the tolerance for uncorrectable but still detectable errors. If you have an R-S code constructed to correct 6 bits or detect 12-bit errors, then for a given message:

if the number of corrupted bits is no more than six, you can reconstruct the original message

if the number of corrupted bits is between 6 and 12, you will detect the corruption

if the number of corrupted bits is larger than 12, you may or may not detect the corruption.
RobotGo, Go Native cross-platform GUI automation
Malware doesn’t harm your computer just by sitting around on the disk.
> I found I could request JWTs for any Email ID from Apple and when the signature of these tokens was verified using Apple’s public key, they showed as valid. This means an attacker could forge a JWT by linking any Email ID to it and gaining access to the victim’s account.

Great writeup there. Looks like a Apple JWT bug and the verification went through despite it being 'signed' and 'tamperproof'. Clearly its footguns allowed this to happen, thus JWTs is the gift that keeps on giving to researchers.

What did I just outline days before? [0]. Just don't use JWTs, there are already secure alternatives available.

[0] https://news.ycombinator.com/item?id=23315026
I don’t think anyone has a clue what “emotional truth” looks like for antivaxxers or people who believe coronavirus is caused by 5G towers.
When i was little (14 or so) i used to read a lot about alien and Egyptian mummies conspiracy theories, about various phenomena and was fascinated by them. As i grew older i realised they were just stories. Wondering if some people never left that intellectual development stage. A certain degree of suspicion and caution around what governments do is healthy. But strongly believing there are microchips in vaccines, and 5G networks are meant to cause viruses that’s just adults with the analytical power of a child.
Is everyone in this thread only going to read the first two paragraphs of the article and skip the rest of it?

> I found I could request JWTs for any Email ID from Apple and when the signature of these tokens was verified using Apple’s public key, they showed as valid. This means an attacker could forge a JWT by linking any Email ID to it and gaining access to the victim’s account.
Well maybe that’s exactly my point. Feeling threatened maybe feels taboo, so we don’t talk about it. Suppressing it creates the breeding ground for conspiracy theories. Talking about it helps us approach it rationally.
The EMH Ain't Dead
Wait, why are people threatened by gracias signs?
Who is claiming things are universally better?
MSSQL can roll back DDL. But the DDL changes are not fully transactional, as other trans sacri one can see new columns and tables before the DDL transacrion commits.

Postgres gets it right. DDL is contained in the transacrion until commit.
It isn’t less ”funding” because of that. I am pretty sure that having the reassurance of this investment helped with the long term mindset that led Basecamp to be such a big company.
I wonder if investigative journalists also share 'a cluster of psychological features' too? Inquiring minds would like to know...

You can spot 'hallmarks of flaws' in official narratives, such as internal contradictions in the “evidence” and contentions based on shaky assumptions, and this makes thinking people question the mainstream media...
Or .NET and Java.

All this docker and k8s stuff just feels like reinventing application servers, just 10x more complex as means to sell consulting services.
I suppose I should have written "vaginal sex". ...but the majority of hetero sex is still penis-in-vagina so I think my comment is still mostly correct.

The fact that it was downvoted sort of underscores my point, that people prefer reinforcing their feelings, rather than know the truth.
No one should be using JWT but it's unfair to blame JWT here. Apple wasn't verifying the supplied email address belonged to the signed in user - that's completely outside of the token format they chose.
"""In our tests, uBlock is unable to block the port scans in the new Microsoft Edge or Google Chrome as the extension does not have adequate permissions to uncloak the DNS CNAME records."""

Seems highly relevant...
SQL Server has the same thing if I’m not mistaken. There’s a big reddit benchmark post that goes out of its way not to say SQL Server in the benchmark just for that reason.
I seriously doubt that the author has 20 years of Oracle DBA experience yet not know why Oracle takes up more disk space that Postgres.
There are so many features in Oracle for which there is no equivalent in Postgres.

-Sharding

-Java Pool

-Oracle Apex

-DB containers and pluggable databases

Many more that I am too lazy to list .

All of these come pre packaged with Oracle.
If you are in an Organization that has 1000s of Oracle db’s per org, you quickly understand that license cost are a minute number but dba and developers are much more expensive .
without peer review or even an arxiv link these numbers might as well be pulled out of thin air
You can find a copy of the PDF here

https://discuss.as3lang.org/t/javascript-the-first-20-years/...
I don't think there's any clear standard. There's many confusions about push vs pull that make the discussions hard to follow, as they often make apples to oranges comparisons. For example the push you're talking about in your comment is events, whereas a fair comparison for Prometheus would be with pushing metrics to Graphite. https://www.robustperception.io/which-kind-of-push-events-or... covers this in more detail.

Taking your example you could push without sending a packet on every event by instead accumulating a counter in memory, and pushing out the current total every N seconds to your preferred push-based monitoring system. You could even do this on top of a Prometheus client library, some of the official ones even as a demo allow pushing to Graphite with just two lines of code: https://github.com/prometheus/client_python#graphite

In my personal opinion, pull is overall better than push but only very slightly. Each have their own problems you'll hit as you scale, but those problems can be engineered around in both cases.

Disclaimer: Prometheus developer
MyPaint – Tablet Friendly Drawing Program Releases v2.0.1
The article title on HN has been editorialized to be more reasonable, on Medium the article's title is "Coronavirus May Be a Blood Vessel Disease, Which Explains Everything".
India and Pakistan face the worst locust attack in decades
Did you and the billionaire both sign a written agreement stipulating mandatory investment upon completion of agreed-upon milestones? Do you also have clear documentation showing that you delivered the milestones to the satisfaction of the billionaire? If yes to both, find a local contracts lawyer and give them a call. If no to either, you are unlikely to do more than waste your money/time and should treat it as a shitty learning experience not to trust people in these situations.
I think you're right, which saddens me. Is it not possible for a while elite male to write about the universal?

"I will show you fear in a handful of dust."

Who could remain unmoved by words like these, regardless of sex or color?
Live #5: Migrating Eddieoz.crypto to Mordor (etc. – Ethereum Classic) Testnet
> I thought that was a static thumbnail?

Nah, it updates (...as far as I can recall.) Try opening a chat client, minimizing the chat window, and then sending a message from another device to yourself.

I believe it’s just using the same call into the compositor that Mission Control uses to display your windows and spaces. Those are all live. (They might have a lower update rate, though.)

> It does for me, which is why I keep it hidden when I’m not actively using it.

Interesting. This might be down to Activity Monitor being written to respond to a message letting it know that its view is entirely obscured, and the Activity Monitor main-window view-controller deciding in response that there’s no point in it polling the system if all it’s going to do when re-visible is discard all the stuff it learned in the mean time and re-poll again to get the newest data for the view.

I can’t recall whether Activity Monitor has any historical/time-series views built in? If it does, then if you hide Activity Monitor with those active, it should keep using CPU, to gather the data for that view, whether it’s rendering it or not.
In fact conspiracy by the ruling class has been the main mechanism of leveraging power since the dawn of civilization. One of their best conspiracies in modern times has been to convince the populace that those pointing them out are nuts.
oh wow, thanks for the heads up!!
I generated a fake name and I am using it as a fake identity where I don't want to use my real name, like in a comment on youtube video. It's like my alter ego ;)
Debt is only good if you will benefit from it long term. If after you repay the debt you have more than what you started with then go for it. If on the other hand you have less, most loans, then don't do it now.
Because dem Mexicans are stealin our jerbs!

Yes, its literally just tribalism gone wild again, your typical lazy fast thinking pooping out nuggets of racism.
Yes, closures are present in many languages, but they are pervasive and unavoidable in Swift. You’re avoiding addressing the idea that closures actually cause layers of (often unnecessary) indirection, make code more difficult to reason about, and make code harder to read - especially for jr. devs.
This allowed you to forge an attestation of user identity from Apple for any App that was setup to consume it. Apple is acting as an IdP for its consumer ecosystem. It's definitely their problem.

Third-party applications really have no recourse but to trust the signed JWT. That is just how OAuth2/OIDC works.

User impersonation against an IdP is a serious security issue. 100k is cheap.

The bug was basically on the IdP's "consent screen". Instead of using the email from the active logged in account, it allowed the attack to POST in any email they wanted.

Obviously not having the bug would be great. Apple could do "more", and layer on more things on top of OAuth, like a proof of key extension (DPoP) on the flow:
https://tools.ietf.org/html/draft-fett-oauth-dpop-04

But if you have a bug like this, where you can edit your claims arbitrarily inside the IdP, extra security layers kinda don't matter.
The “Details” JSON seems jumbled. See:

{"status":"success","message":"OK","data":{"Name":"Robert Ignatieff","Address":"1990 Lake Floyd Circle, Gaithersburg, MD 20877","Details":{"1":"Birthday","176":"Company","39273275":"Favorite color","7acad451-3bcd-422a-8573-b320ea2a5f91":"QR Code","1999ToyotaBandeirante":"GUID","Brown":"Vehicle", <sic>}}}

https://fakeid.now.sh/api/Gender/male/NameSet/ru/Country/us
I'd wager it changes the prices -- PepsiCo stamps the price of the product on the package when they stock grocery shelves.

Grocery stores probably won't take kindly to their supplier undercutting them with cheaper direct-to-consumer pricing.
Of course you're not dropping comments from +3 to -4 (or whatever) on your own, but it only takes six other people who share your opinion to do that. As for people with only 4 or 5 comments, they're not going to have enough karma to downvote anyone.
Trump's stupidity aside, I think it's hard to argue that the WHO didn't make serious errors and delayed various recommendations and warnings at the suggestion of China.

I think the questions we should ask is... "What are we paying 118 million per year for if they're going to lie to us during the biggest outbreak in modern history?".
Lol is this LinkedIn?

On a more serious note, at least consider adding a "shameless plug" notice while promoting your own stuff on HN.

I am not really interested in this kind of stuff but looked at it.

> Our 12-week live online training course ....

No, thanks.. that's not the scope of a CS degree. You are promoting something irrelevant here - no offence.
Philosophical theses need empirical support. The biggest issue wrt emergence is "downward causation". If there is strong emergence, it is going to be ontologically different: that's why it is ontological mergence.

As a consequence, this new entity has to function as a causal agent. Otherwise, why populate the world with entities that don't work as causal agents. Upward causation is consistent with both ontological and epistemic emergence. Downward causation is consistent with epistemic emergence. Are there examples of ontological emergence that can play a role in downward causation?

Until then, it is all unbounded philosophical speculation. These speculations get bounded (constrained) by empirical sciences.
my brain mis-parsed as:

(sign in) with (apple zero day)

which is kind of appealing
Because people worry people different then them are coming to the US and taking their jobs. Because people find immigration threatening...
It’s a straw man against critical thinking. I don’t mind their example, global warming caused by people. What I do mind is them trying to dismiss conspiracy theorists because of it.

I remember pre-Snowden everyone called you a headcase if you said NSA is monitoring everything and everyone.

After Snowden, everyone mysteriously shut up about it.
You can't sue someone for violating ToS... right?

At worst, you can refuse to do business with them and revoke any current contracts.

You'd have to sue under actual law, which would presumably be libel, which is (in)famously hard to prove in the US [1]. If he had a good faith belief that what he reported was true, that case goes nowhere. Indeed, in lieu of a signed and dated note declaring his knowledge that his benchmarks are (a) false and (b) shared in an attempt to harm Oracle, that case goes nowhere.

[1] https://en.m.wikipedia.org/wiki/United_States_defamation_law
Section 230 Is Now at Risk, but Experts Say the Internet Would Never Be the Same
Depends: Do they not delete the data if you explicitly contact them and tell them to do it, or do they just not give you a convenient button in the UI?
Market Wrap: Bitcoin Slides, Stocks Tread Water on Trump China Comments
Yes, corrected. Thanks. Hadn't had enough coffee yet.
I love how easily people see through bullshit articles like this. So tired of coincidence theorists!

I ought to do a post some day: "I'm one of HN's resident conspiracy theorists, ama."
If you have Microsoft Exchange accounts then you get a different bug. If you have no network connection or change network connections Apple Mail will thrash accountsd for long periods of time consuming as much of the CPU as it can. Neither Apple Mail nor accountsd appear to have any throttling of network connection attempts. Quitting Apple Mail until you have a network connection is the only option.
Can't you still get the real sugar Dr Pepper in Texas?
PostgreSQL provides a variety of options for tuning both the query planner's strategy and the per-table statistical analyses that are used as input to the query planner itself. These tuning methods are actually far more robust than the query hints that are commonly used in other databases, including Oracle.
Sure - but that wouldn't apply to police drones either since no one is getting shot by droned directed fire in the US.
I left a volunteer service organization because, among other things, I grew tired of the political slant that included members posting things like “if you don’t like that we speak English in America, feel free to leave”.

Demographics are a huge sore spot for a lot of people.
"FREE SHIPPING ON ALL ORDERS. Minimum of $15 required"
That person also made the desk and terminal.

Previous discussion 21 days ago:

https://news.ycombinator.com/item?id=23107805 "Miniature 1959 IBM 1401 Console handmade polystyrene scratch build"