skysight-inc/HackerNews huggingface dataset:
One thing I have noticed and felt is that there is a very steep energy well that slides you into drug development if your technology is anywhere even near - as drug development has financial returns that are an order of magnitude (or two or three) greater than almost any other problem that bio-technology can be utilized for (right now).

I predict that as the value of those other projects rise, and as the capital required to produce a drug decreases, that those other projects will really start to blossom. And I look forward to it.
> Avoid public or unsecured WiFi. If you must log into an account on a network you don’t 100% trust, use a VPN to encrypt all communications. Even bank websites can be forged to be almost undetectable if an attacker has administrative access to the network you’re using.

I think we should stop fear mongering over shady wifi. In a world with HSTS and CT, these types of attacks ars incredibly difficult to pull off.
Not sure where you got that idea, maybe you're mixing up torrents with Tor or with gray area VPN services that people use while torrenting to anonymize themselves.

The whole reason you can google "____ Torrent" and get results is because there are torrent trackers out there that, well, track which IP addresses have which files. The same thing that allows those to exist allows someone to watch and record who is downloading which torrents. Which is what movie studios and the like are doing as well when they send out copyright warnings based on torrenting.
You client is politely sending items your peers are requesting, to try to find peers for them in your peer network, without having to flood everyone with irrelevant peer lists.

And this site (which i guess is just a couple lines of python collecting the data) is not bothering to distinguish any of the finer details.
Demands like this came from minorities. It's a small, easy thing. Not every project is sufficiently well funded and connected (probably none is) to directly contribute or influence school budgets. Many communities, however, have outreach programs and some measure of support for minorities (funding for conferences used to be one, when we had conferences). To do more groundwork, we'd need more connectedness on the ground.

I'd love to be able to ensure a fair distribution of resources to schools, but that's where we would need to interact more with human rights activists that know how to be the most effective, while making sure we manage organization's funds in a way that's in accordance to its bylaws (which may need to be changed before anything else).
Commander One is decent alternative, and has a free version.
Source repo.[0]

[0] https://github.com/ideasman42/the_joy_of_life_drawing
Indeed. Many Upanishads are, in spirit, opposed to the old Vedas, and some are outright critical of the ritualism that forms the core of the Vedas.
Only if I am going to have like ten different children
Author here; that very much sounds like the utopia I am dreaming about :-) What kind of field are you in?
Does it support aarch64? AFAIK, the Apple SoCs these days don't support 32bit ARM anymore.
I think audit hooks were a great idea and are part of a defence-in-depth strategy.

In fact, I even implemented the variant of audit hooks that informed PEP-551 and deployed those to production for a major platform.

I think that if you were to use audit hooks, you might want to combine them with a code signing mechanism. I worked on two of these for different platforms, and they add another strong layer of defence.

In light of that, the bypass in the article seems somewhat contrived, especially considering that there are at least three alternate techniques you could employ to accomplish the same goal that would be meaningfully more innocuous than using `ctypes.windll`. If you're going to use `ctypes` or `pywin32` or the like, then you might as well write a C-extension module to patch out the audit hooks directly (as Batuhan Taşkaya shows using a simple trampoline toy library I wrote, `libhook`: https://speakerdeck.com/isidentical/hack-the-cpython?slide=3...).

Better techniques:

1. Joe Jevnik and my `tuple_setitem` which uses poisoned bytecode and the lack of bounds checks on `LOAD_FAST`/`GETLOCAL`. (Pure Python.)

https://gist.github.com/llllllllll/b1ac68a6b77535a64c0b13bfd...

2. My `tuple_setitem` using `numpy` raw memory access via `numpy.lib.stride_tricks.as_strided`. (Requires only `numpy`.)

https://twitter.com/dontusethiscode/status/12513186248470855...

3. Using the `/proc` filesystem on Linux, which gives arbitrary intraprocess read/write access (independent of page permissions.) (Requires only `open(..., 'w')`.)

https://twitter.com/dontusethiscode/status/12818444226285854...
https://gist.github.com/dutc/2cc5de0d2f8877b8f463b86e8bd5231...

There are also a couple of techniques you could employ to carry one of these payloads past code signing, some of which are very well known, like the insecurity of `pickle` deserialisation, and some of which are… less well known.

(I have also prototyped using the above exploits to "lift" C code into a Python interpreter, in case there are OS-level defences around `dlopen`.)

However, even taking these into account, I'm a big believer of the value of Python 3.8 audit hooks at PEP-551, but they are technique that requires quite a bit of extra work to effectively employ.

If you're interested in trying to implement audit hooks and these other mechanisms for locking down your execution environment (e.g., you want to mitigate exploits in Python systems, which may run as PID-1 in a containers, where these exploits may try to bring in malware that could exfiltrate data…) please feel free to reach out to me by e-mail or Twitter.

I would be happy to share more with any organisations that are large enough to consider locking things down at this level.
Hey HN,

Excited to share Firewards with you! Firewards overcomes the technical hurdle to implement a referral program for your newsletter. It synchronizes with your newsletter provider (e.g. Mailchimp) so you can send out individual referral links and the current referral count to your subscribers. Each link directs them to a customizable page where they can check their current status and how many referrals they need in order to get rewarded.

My experience running referral systems shows that referrals from your own subscribers is one of the most powerful ways to grow your audience. Especially at Token Daily we saw huge growth after implementing a referral system. I've always wanted to create a product out of the custom systems I built over the past 4 years. Now I am finally making it available for everybody!

If you are familiar with the referral systems from Morning Brew or The Hustle - This is what Firewards does!

Let me know what you think!
> The perspective of framing the social treatment of immutable identities as encouraging orthodoxy comes from a position of privilege.

Are you discounting his statements due to his identity or presumed "privilege"?
Author here; what you describe is unfortunately very much true. And I also have to admit that I am a hypocrite by playing along with this game.
Neither had Contra Costa, yet here we are.
Don't give everyone the secrets! ;)

Joking appart, my question wasn't to learn about drug prices for "practical use". I just think it's an interesting subject: how the web changes underground/illegal markets, what impact it has, etc.

There are lots of counterintuitive things in that field (look at how Portugal handles it), which makes it even more interesting to me. "war on drugs vs war on drug users".
We can still safely use fossil fuels for feedstock without burning them for the energy source. Since plastics aren't usually burned, those hydrocarbons won't make it into the atmosphere and can be neutral with a proper power source (I think the oil used for energy makes up the bulk of the oil used by the plastics industry anyway). We also can't use recycled plastic to produce an output that is higher quality than the input because the polymer chains degrade with every heating cycle during the recycling and manufacturing process, so fossil fuels will be valuable as virgin feedstock for a long time after we stop burning the rest.
>(It was probably a mistake to come out with the Model 3, a sedan, before the Model Y, a crossover)

Maybe. But it seems Tesla has realized very significant production efficiencies on the Model Y contra the Model 3, and given the expected larger volume on the former, it's a big advantage that these design lessons were learned on a model that will carry less of their income.

Changing tooling and production processes for a product that already exists is a very painful strategic gambit. Remember that Tesla's pipeline is bigger than their current offerings; that kind of distraction wouldn't be healthy for their long-term growth.

Greater cash flow from Model Y due to design/manufacturing efficiencies might be a critical strategic advantage.
What's the difference between broadcasting and transmitting? It's not like the "transmission" is some directed line-of-sight thing.
> Such is the power of the Narrative Fallacy — the backward-looking mental tripwire that causes us to attribute a linear and discernable cause-and-effect chain to our knowledge of the past.

https://fs.blog/2016/04/narrative-fallacy/
While they have this robot and spool up there, they should look at deploying double wires for redundancy... That way you can survive multiple breaks on the line as long as each break is on a different segment.
> You don't see how not storing the key is more secure than storing the key? I'm suggesting you memorize the key, and only store the ciphertext.

And when the border police see encrypted files and demand the key so they can examine further?

> This would fail a statistical uniformity test, and your adversary would be able to figure out that something was hiding there, and might even be able to extract parts of your key. In order to do this safely, you'd need to whiten your "correcthorsebatterystaple-esque" key first.

I'm telling you, I could invent an obscure security scheme that NSA couldn't crack in a million years because they wouldn't even know where to start. Heck, I could do it with a 1 character password

1. select 1 character password p

2. Take sha256(sha1(md5(p))) 1 million times

3. xor result with bitcoin wallet private key

Bam, easy to remember, impossible to crack (unless you know the secret formula, which you won't)

However, all this is moot if the border police demand a key upon seeing encrypted files. So actually I think the best approach is to hide the (encrypted) private key as innocuous words in emails.
It seems you're moving the goalposts though. Your initial statement was that there were zero confirmed cases of reinfected individuals. The commentator gave you an example of such a case (and I can give you an another with the thoughts of a doctor [1]), then you moved back and said 'if it was anything more than exceptionally rare'.

At the very least can you maintain your argument? More dangerously could be the situation in which those that are asymptomatic initially end up with shorter duration immunity than those that have symptoms. Which would toss out a lot of our understanding of how severe the virus could end up being out the door.

[1] https://www.vox.com/2020/7/12/21321653/getting-covid-19-twic...
- Was 26

- Moved into company apartment

- Torrented stuff

- Company received a $30k lawsuit for downloading porn on company network

- Hear CEO talking to lawyers (open office)

- 99% sure it was me

- Come clean to CEO

- Was actually another c-suite who forgot they were logged into the VPN
It's incredibly easy to buy gold. I just started dabbling in that area but it's dead simple.
Please, the stock market has been disconnected from the economy for decades.

It's all a big scam. I worked for a an extremely large financial institution, and I worked directly for a Chief Investment Officer.
Ah, this makes sense because the first seen and last seen columns are the same for all the stuff I didn't download, but for the one thing I noticed that I do actually recognize there's a gap between first and last seen.

Of course I imagine if two peers were looking for the same thing a few hours a part this wouldn't work to identify stuff either.

EDIT: Is there any way to stop it from doing this? I don't want law enforcement to mistakenly use this as evidence that I actually downloaded anything.
Why doesn't the state also mandate exercise, diet, and sleep?
Sure, I can agree with that. I probably wouldn't choose image-based steganography though because for all I know the country has a great firewall that scrubs all outgoing image metadata
I think a lot of people will read 'python malware' and assume packages; that's not what this is about.

A lot of exploits are two-stage. Stage one is usually the vulnerability, usually written in C given the low-level and tightly controlled instructions required. The exploit breaks security to run an executable or otherwise gain control. Stage two is usually downloading a python executable to grab the goods.

There's nothing especially sinister about the selection of Python for this case over other interpreted languages. Malware authors are just regular developers - they don't want to spend hours trying to hack together a C binary to dump a database when six lines of Python will do it. Python just runs on a lot of platforms, has a lot of mature drop-in libraries, and decent documentation. They use it for the same reason we use it.

The article just makes it sound like malware developers are using modern packaging tools to turn that two-stage exploit into a single-stage. That doesn't strike me as particularly surprising. Teams tend to gravitate towards specializing in one tool when they can. I'd obviously prefer to write a bunch of python than do the same in C, when performance isn't a huge concern (It's the other guy's CPU, after all).

Just seems like a minor observation, rather than some doom trend.
It is interesting. I was expecting to see blue data leak, but nothing showed up.
not every application sees every part of the beam VM. I wouldn't be surprised if test coverage on some new systems (like the new process group registry system) that depend on NIFs (C ABI FFI) isn't complete.
Man, 30, Dies After Attending a ‘Covid Party,’ Texas Hospital Reports
I think the objection is to the double-standard, where two apps commit the same infraction but one is assumed to be nefarious.
Well you can do TCP/IP yes, but not the public internet- it would violate the third-party traffic rule, non-commercial traffic rule and the no-encryption rule.. I guess you could do it if you monitored all traffic.
That doesn't tell you whether people actually are, the way they may be in some other places. Is actual behavior at all the same in, say, NY vs FL?

I'm fatalistic about avoiding the virus in the long run, and I go out whenever I have something to do, but my food has all come from the grocery store or mail order since March. I'm still asking myself "do I need to do this" every time I consider going somewhere.
Thank you. This looks great.
Thanks for the feedback. Don't understand what file extension has with URL structure? It's relative no matter what, or am I missing something?

Writing it in Go.
Can you really imagine the police confronting and/or arresting someone for not wearing a mask only to take them to jail to contract the virus?
It's amazing how HN is downvoting your comment for a pretty thoughtful point. I posted a comment with studies and got downvoted too. Seems like HN is turning into Reddit.
I wonder why? This seems like a really odd time to do this.
"It doesn't discriminate and none of us are invincible," Appleby said. "I don't want to be an alarmist, and we're just trying to share some real-world examples to help our community realize that this virus is very serious and can spread easily. In fact, the positivity rate has jumped to 22 percent."

[1] https://news4sanantonio.com/news/local/i-thought-this-was-a-...
Laziness Impatience Hubris
How does it work? Do you connect to every open tracker in the planet and store all the IPs they give you?
Yes, I think opt-out is specifically forbidden when consent is used as a legal basis, at least under the GDPR...
WOAH, this solves a huge problem. I'm in the early stages of building my newsletter, and the biggest problem is getting subscribers. Having a way to actively get current subscribers to be invested in getting me new subscribers is awesome :)
well, that's probably where the fortran dependency could creep in, no?
You are talking as if changing the name of a variable in your computer program will actually do something to help those affected by slavery. I hope you don't actually belive that.
Head asleep, body awake
Yes, all Igalians receive equal pay and are involved in all decisions!
Actually this is just Marxist history (which isn't the same thing as political Marxism btw, it just means a history that looks at how material conditions create reality).

I didn't read the article, I am not going to but the abstract suggests it is a pretty severe interpretation (talking about relationships is risky ground imo)...you have to be careful because material conditions tend to be correlated to other stuff but it is a well-developed branch of history (particularly, economic history).
Is that enshrined in law or something?
SharePoint.

The site is trying to do absolutely everything and the performance shows.

I already have Outlook and Teams open. There's no need for SharePoint to be running extra code to notify me of an e-mail or Teams message.
It was a bit of luck and timing. A model and system for real time classification of twitch gaming streams. Easily trainable by someone who doesn't know ml, with small amounts of data. Some very complex data augmentation and ml modelling went in to make the computation and system fast. Could be run on a cpu, as running on gpus is just too expensive. Found an esports company who was hiring for a role to built what I had, and they outright bought it
Northerly latitudes? The sun doesn’t set so how am I supposed to see this?
>Faith means continuing to believe something that is massively contrary to the evidence, to preserve some type of fidelity or loyalty to a previous belief commitment.

You've just defined faith in a way that wins your argument, but that is not any kind of consensus definition of faith.
Does this cause more overall wear on a battery compared to a regular charger? In terms of long term battery deterioration.
Whenever I come across the “hate the rich” sentiment (usually expressed in veiled forms, but sometimes not so much), I can’t help but read “I hate the rich and so-called successful people, because if I accept that system that would make me a loser”.

It’s hard to imagine how things would go differently if people who currently possess a lot of capital (social, monetary—quote-unquote “control the world”) get replaced by people who have accumulated a lot of capital in cryptocurrency.

Both enrich their networks (“buying prestige” among their connections), profit off leasing property, would stoop to price gouging, got rich by arbitrary criteria, try to maintain/expand their area of control and paint those who stand in the way as scammers, etc.

The fundamental socioeconomic patterns remain the same. The mere virtue of being affiliated with either type of capital doesn’t say as much about a person as destructive hate towards.
We should really stop calling copyright infringement 'piracy'. Piracy is a violent penal crime which results in a theft of property by the use of physical force / weapons. Accepting this label helps media conglomerates distort the public perception of the issue into their favor.
I just look into the camera. It takes a little discipline but not much.

But note that EVERYONE prefers to look at themselves onscreen (well, not me... but if you saw me you'd understand why) and therefore they don't really care if you're doing the same thing.
You are right that the system worked as intended, for now. Give it a little time and a few more lobbying dollars. This opportunity is too lucrative to pass up.
You’re saying that maybe CA should have done some middle ground closure since that might have help a little more with increasing immunity.

My point is that the goal of increasing immunity is pointless unless it can be raised to a very high percentage and without taking massive casualties.

Without a vaccine, that’s simply not possible for COVID-19.

And thus that suggestion doesn’t make a lot of I sense.

The benefit of a slight higher but still very low level of immunity is so small that there’s no point.
Yeah that doesn't sound right at all. I live in UK, we have maybe 1-2 power cuts a year max. And I have equipment running 24/7 so I'm sure I'd know.
You have to pick your poison -- is doing this better than dealing with Ubuntu drama
pop_OS! 20.04 for my laptop, it solved all my issues with wifi drivers, waking up from sleep etc., it just works

debian buster on the server i manage; it just works, always, i hope i won't jinx it but never failed me, perfectly stable, reliable, predictiable, security autoupdates enabled without issues
The US wide totals are muddling the picture substantially. Deaths have continued to shrink substantially in previously severely affected states like NY or NJ.

The other big issue of course is lag. If you look at daily positive tests, current hospitalizations and newly reported deaths in one graph the lag becomes more visible.

Here I e.g. just used a log y axis to show all three in one plot:
https://anarazel.de/t/2020-07-13/all_in_one.png

which imo makes that more visible.
It was indeed a scam - which is what I mean when I say bilbopotter is reasonable to be concerned that some darknet services are scams.
FANG you just need to be good at algorithms with a good study plan, getting the interview isnt so hard
I was also wondering about how they would handle these cables being replaced, or breaking due to some natural calamity, and so on. Will the locals have a way to repair the damage without the FB staff around? I'm assuming the answer is yes.
Why is the burden of proof on the poster arguing that India is more democratic rather than the side arguing that US is more democratic?

India is the world's largest democracy, has a multi-party system, has had prime ministers from different religions, and both men and women top leaders. The US on the other hand has only had Christian leaders (4 have technically not specified), and all men. It's also a 2-party system. The burden of proof here for this statement needs to be on the one claiming that US is more democratic.

The greatest challenge for the rise of India is the colonialistic mindset of many (but not all) Indians today. Hold yourselves equal and ask for you what you rightfully deserve.
The French Diet Is Le Bullshit (2016 originally; updated 2019)
I mostly agree with what you say, but I disagree with this:

> Besides - in reality they only the highest profile journals provide any benefits at all.

In my discipline (mathematics) there is a large middle tier of "respectable" journals, that regularly publish good work, including work by well known people. A typical tenure dossier at a middling research department might list say, 15 papers, most of which were in this middle tier, and a couple of which were published somewhere really good.

I agree that the system is a cartel and would love to see it collapse. In my opinion, whatever replaced it would need to duplicate the signaling mechanism to succeed.
We’re reaching the point where first world cannot apply to areas without fast broadband.
> there is an element of faith

That's exactly my point.

>if you take consensus to mean "a large majority like 66%+ portion of the scientific literature within the field(s) relevant to that specific instance" that becomes a lot more testable for an individual issue.

Yeah we can say that for some specific issue like choosing what time of year to plant tomatoes, expert consensus is useful, but that doesn't generalize, which was also my point.
What happened next? Did they punish you?
Great promotion for VPN services.