skysight-inc/HackerNews huggingface dataset:
It wasn't about one bad vulnerability. Heartbleed was just the last straw.

OpenSSL implemented its own memory management system instead of using malloc. It would allocate one pool of memory and then manipulate into that. This meant that static analysis, runtime analysis, fuzzers were incapable of finding memory bugs. Because all pointers into that pool were "valid". LibreSSL stripped out OpenSSL's memory system and replaced it with malloc() and free() as provided by libc. Suddenly, static analysis, valgrind, and fuzzers found something like 3 dozen memory errors.

That is bad on so many levels.

OpenSSL supports big endian x86_64. OpenSSL supports EBDIC paths, certs, encodings, etc. OpenSSL supports DOS and Windows for Workgroups 3.11. It had a config -D NO_OLD_ASN1 and NO_ASN1_OLD. These defs performed different things. Having more eyeballs on a project didn't help OpenSSL, because all of those eyeballs glazed over immediately and/or had forks stabbed into them.

In something like the first month, the LibreSSL project deleted something like 90,000 LOC and 60,000 lines of comments/whitespace. Not changed: deleted. Removed useless cruft like mentioned above, and dangerous cruft like SSL 3.0 support. The latest OpenSSL tarball is 9.4MB, the latest LibreSSL tarball is 3.6MB. It has fewer eyeballs, sure, but it's an order of magnitude easier to audit.
Sadly I agree - though we've got to remember it is possible to get this virus and the transmission under control - plenty of places are winning the battle - it just takes will and coordination. But something every country has currently...
Probably not wise to fire at federal officers
There's literally already a supreme court case about the government requiring you to wear masks.

Though "case law" has always been weird to me, because sometimes it just gets reviewed or overturned and now something that was taken as gospel in the judicial system can be 100% turned around, with zero new text in the law books
An element that has:

display: inline-block

is inline outside, block inside.

That is, the element is inline for the containing block, but its children feel like they are in a block.

An inline-block element can be vertically aligned with respect to the baseline: it acts a bit like a character in a paragraph. That's why you can vertically center things using vertical-align:center on an inline-block element.

At least, this is my intuition of inline-block, this comment is far from being normative.
Let’s be honest. It’s not a semester we’re talking about, following your guidelines. It’s more likely three years or so.

Doling the pain out in a few month increments is how it is made to seem more reasonable.
Yes, all of the people currently speculating on the motives behind the Twitter hack should remember how mundane and stupid things often are. Sometimes it is a mistake to overthink things. Small time grift is more common than grand conspiracy theories.
> If someone invites you over for dinner in the US you’ll often hear “that meal was amazing!” even if it wasn’t. That’s just polite behavior

You aren't saying it's impolite so say anything less, right? I've lived in the US all my life and that's not my expectation...it could be that cultural expectations are not uniform.
"Society and government at large has shown itself to be unreliable and undependable."

Take a look at the covid19 infection rates in the country a little north of you.. as others have posted, not all governments / society has failed.

You need to ask why you have so many people who are proud not to wear a mask simply because it limits their "Freedoms"??

Maybe if they wore a mask, and excersized social distancing things wouldnt be this bad?
Like Yemen and other wars, oil money flows into Saudi Arabia and Iran funding proxy wars in the Sunni / Shia divide, and against Israel.

Money dries up, so will a lot of military funding for these.
This is one of the classic pillars of fascist politics. Justify atrocious, anti-democratic actions by citing widely shared ideals.

Implement Jim Crow laws and prevent Black people from voting under the guise of "states' rights".

Invade a nation that does not threaten us in order to "liberate their people" and "spread democracy".

Encourage paramilitaries to intimidate peaceful protesters with weapons of war to "protect property and the rule of law".

And now send heavily armed mercenaries or federal agents into cities, with no identification and no accountability, against the will of local leaders, to kidnap citizens from the streets to "protect federal property".
RebootThePolice
yup. i'd be willing to bet that the guy who ordered it can be found in Mr. Saleh's follower/following list on instagram.
v2.0 of this was released just a few days ago, after several years without a major version. Hence the submission.

Btw, thanks for doing the hard and important work of moderating hn!
[Edit: I realize now that the last part may come off as sarcastic, so I want to emphasize it is sincere. While here I disagree with the action, I'm generally very thankful for the moderators' work.]
0. At least a couple did, but they were pretty niche-y. (Void was one, I think?)

1. It's a ton of packaging work even if the API/ABI were compatible (Calling it compatible is a bit of a stretch IMO).

2. One of the things LibreSSL removes is the FIPS validated stuff. Distributions that harbor ambitions of being used in large US corporate and government installations want that.

3. By the time the portable LibreSSL build system came out, there were already significant improvements afoot within the OpenSSL project.

I'm sure there are other reasons, but those are the big ones I'm aware of.
the atmosphere is incomprehensably vast compared to viruses, making the chances of getting covid outside essentially zero. worry more sensibly about prolonged face-to-face conversation if you need to worry, but not maskless strangers outside.
Ask HN: How do you market your blog/articles
Dear HN
What are some best ways to market your blogpost to the right audience and gain visibility
The Syrian civil war migrations will pale in comparison to resource / global warming migrations
The mathematics of neural networks is very well understood from a theoretical and scientific perspective. It is easy to say that a neural network will have predictive power given labelled training data.

Whether or not the predictions it is making satisfy unstated requirements is another problem altogether.
Meta: your comments on this thread imply a degree of certainty that isn't justified by the evidence as I understand it. I am just a lay person here, but that's my impression as someone who has done a lot of reading.

As far as coronaviruses go, there are four mild human coronaviruses that are responsible for about 15% of common colds and for which humans do not develop any long lasting immunity.

There are also the three severe human coronaviruses: MERS, SARS-CoV, and SARS-CoV-2. AFAIU, long-lasting immunity to these is not well understood.

I do not understand how you can make such an authoritative statement about re-infection risk based on the limited data we have about SARS-CoV-2. Here's what immunologists have to say:

> In summary, progress since January 2020 has been impressive, but there is still so much more to learn. Are T cells protective and if so which are the key antigens and and cytokine effector programs to focus on? Are all T cell responses beneficial, or are some contributory to immunopathology and to be avoided? If it is indeed the case that antibodies are transient and T cell memory is more durable (though, how durable?), what can we learn about anomalies of T follicular helper-B cell interactions in germinal centers? In the short to medium term, we need to ensure that all of this T cell toolkit and knowledge is brought to bear on robust, comparative evaluation of the different vaccine platforms, their immunogenicity, efficacy and safety. Entering the next part of the battle, there are many thousands of people suffering the chronic aftermath of infection posed by chronic, so-called ‘long-COVID’ cases, characterized by diverse symptoms including fatigue, joint pain and dyspnea (19). A more detailed understanding of the T cell immunology will be valuable in deciphering this pathogenesis.

https://immunology.sciencemag.org/content/5/49/eabd6160.full

What I read there is a lot of "we're not sure yet."
I've been involved in a lot of Data Science projects, and the most successful ones are the ones where the Data Scientist either did or was part of the infrastructure and Data Engineering.

Most of the failed projects basically were "Hire a Data Scientist to make a magic model" and nothing else was supported. Basically, "Here's some data, do some magic." I read somewhere that 90% of data is low/zero value, and I'd agree with that.

There's absolutely a place for people doing pure statistical or ML/Deep Learning modeling. But the rest of the organization has to support them so they can have that narrow focus. A lot of places want to take a shortcut and not do the data work.

5 years ago the FOMO was from Hadoop. Hadoop Here, Hadoop there...people just forgot you have to actually collect a lot of high quality data to make Hadoop useful. It's AI now.
To me it sounds like people somehow assume that wealth, success, happiness are about the same thing, which necessarily isn't the case.

You can be wealthy and still miserable, successful without being wealthy, etc. I didn't really read the whole article but I got the understanding that they were mostly talking about entrepreneurial-style success.
I don't understand the logic around the left's hatred of charters. Parents choose to send their kids there - if the existing public school was so good, why would they send them somewhere else? It's simply about choice, and sending your own kids to the best possible option. No one would ever deny their own children the best possible education available. It's so clearly about administrators and professionals over the needs of children, it's simply immoral and bordering on evil.
You’re fulfilling the Idiocracy prophecy. Those who think about their life choices are less likely to breed than those who are more reckless and have children with less hesitation. The similar survival rate of children of the two groups means the more-reckless genes & culture will out-propagate the less-reckless genes & culture. I’m pretty sure less-reckless is what we need more of, but without some extreme and questionable measures, I don’t see how it’s possible to sway the force of nature.
All of this is a consequence of ideologies that have become popular in the US both in politics and in business. Having government direct a mobilization is not acceptable. A mandate that people wear masks is not acceptable. Having manufacturing capacity to make low-value products in large numbers in the US is bad business when poorer countries can do it for less. Having spare inventory is bad, because just-in-time manufacturing is more efficient. Accepting a reasonable profit at a time of crisis is considered stupid when a business can make windfall profits by pitting states against each other or signing a sweetheart deal in exchange for a no-bid contract. We're looking a lot like Russia under Yeltsin when the place was collapsing and people were stealing everything that wasn't nailed down.

Now, all of this could be turned around quickly with good leadership that could rally the country behind a cause, but we chose someone who is committed to division, who's willing to undermine the efforts of those who work for him, who, even at this time of crisis thinks that nothing other than personal loyalty to him and that he should never make a mistake.
Tesla can indeed do that though. The super charging network is insanely good.

Edit - take your extreme big bend example. I was able to map it. Try it out at https://abetterrouteplanner.com/. Had me stop at Fort Stockton, TX. You would need to top off in the park, perhaps at an RV site.

That said - how many trips to big bend per year do you do? For most people, you can rent an ICE car once a year for ~$150, and still satisfy 99% of your driving with other options
Because the term 'Cool' went out in a blaze of glory.
Yes hackers from Russia. Because hackers don't mask their origin. Also, I ignore the little man behind the curtain because covid you dummy.
Yeah I heard they are pretty good but too bad they don't have mobile access for me. Do you have a need to access tools like Datadog on your mobile phone?
And the management practices that allowed the creative culture to thrive weren't applied to tech and IT because the creatives were the "rockstars" at Disney and everyone else was the boring business side that supported them.

I think the takeaway for the tech side of things is what parts of our businesses are we not letting thrive because the engineers are the focus.
They were made optional in C11, so any C compiler that was yet to implement them doesn't need to actually bother implementing them to achieve compliance with more recent ISO versions.

If you look beyond clang and gcc, there are a couple of candidates, specially on proprietary embedded toolchains.

https://groups.google.com/forum/m/#!topic/comp.std.c/AoB6LFH...
If you want to auto redirect to these sites (and I think there is one for instagram as well), check out the Privacy Redirect addon[0].

[0] https://github.com/SimonBrazell/privacy-redirect
Design Week Poll: 71% of design businesses worried about surviving into 2021
The IFE screens can show nose (and tail, and wing) cameras though.

I haven't been on a plane that had a projection screen at the front of the cabin in almost 20 years now...
- Flite Test (A large RC community) has collected a lot of stories & comments but suggests reaching out to a local government representative: https://ftca.flitetest.com/
- If you are a member of a local AMA (Model aircraft association), communicate with the AMA leadership about your concerns since so far they've been relatively passive and haven't voiced any concerns.

I, like many others, put a comment on the FAA proposal, but that comment period is over and the pandemic has slowed down a lot of the public progress of this legislation. It's hard to answer your question, since it feels like the FAA is proceeded as planned despite tens of tousands of concerned comments.
I have the same reaction to the stories on topics I'm familiar with, and it makes me distrust all the stories on other topics as well. There is a certain air or authority and erudition to the writing style, but I'm not sure it's warranted.
I opted out of being an employee and chose the founder path. I have very little time to be creative (the way I was, for example, when I was in graduate school or at Google).

For me, a large part of thinking creatively is about exposing myself to ideas outside of what I am actively supposed to be doing and then letting those ideas permeate through my thinking when I am working on what I am actively supposed to be doing.

Between talking to users, talking to customers, talking to investors, and perpetual catch-up on my product, I rarely find the space to think about things other than my business.

That said, we have definitely had dark moments that we came out of because of very creative ideas. It's just that creativity is nowhere near the top virtue required of a founder.
Really appreciate all the good feedback and discussion here! Maybe some topics for a follow-up
Browsers generally will not set `navigator.mediaDevices` unless you're using a secure connection (except for localhost). This is frustrating when testing apps that use these features as you then need to use self signed certs. I understand why, though.
I never said anything about herd immunity, all I've said is that immunity may not be long lasting.

Basing an entire countries policies around a supposition that herd immunity is practical is, in my opinion, negligence. It's only practical for diseases that don't kill 0.5-1% of the infected population.

It's been proven that lockdowns and slow reopenings work to limit spread, followed by contact tracing clusters to prevent reemergence until community vaccination programs.

Americans are just bitter that their governments are totally inept.
Then she can stay home - 99.99% of children wont have issues.
Immune systems are fairly differentiated across species, even for common mechanisms. Source: I worked from 2009 to 2011 in a project aiming at reconstructing part of these mechanisms in certain immune cells, and the differences between human and mice, where some models were made, were significant.
Move to Canada, our teachers are paid 86K (CAD) or around 63K USD.

"Teachers in the province earn an average salary of around $86,000, according to data provided by Ontario's Ministry of Education. Only in Alberta are average teacher salaries higher, around $89,000"
That's why we have mechanisms like the Defense Production Act. Under normal circumstances the free market works well, but sometimes in a crisis it isn't enough. We are in a crisis.
It's not like a white collar criminal who embezzled money wouldn't be out on bail. Considering the level of detail that didn't go into planning this murder I don't think involving the police would have afforded the victim any extra protection.

The police are just men with guns that anybody can call. They're only really useful in any other situation where men with guns are useful, like breaking up a brawl.
Israeli Data Show School Openings Were a Disaster That Wiped Out Lockdown Gains
Ha!

A couple of summers in the early 1970s, I worked as a stockboy at Woolco stores that were opening. I didn't mind the customers once they did open, but I could have done without the jingle that went out over the loudspeakers: "There's bargains excitingly wonderful/All the things you've been looking for/???/At your Woolco department store!"

But at least we didn't have to sing along.
While not nearly as efficient, Turbolinks (and Stimulus for interactivity) is pretty popular.
Slowly turning into Five Nights at Freddie's...
Having had applied to and even interviewed at some of the companies/jobs listed in the blog post, I will provide an alternative explanation:

These roles are just like many others in the field, companies are supposedly desperate to fill them, but set unrealistically high expectations for the hiring bar so the role is never filled.

Context: 6 years professional experience, open to moving anywhere in US, experience at two SV unicorns, fine taking a reasonable pay cut to work on these things, still rejected or never heard back from every job of this type I've applied to/interviewed for.
This has actually not shown to be true.
The sort of person that would steal from their employer is exactly the sort of person that wouldn’t think about the noise from an electric saw.
I don't know about Colorado, but apparently in Ohio it's needed "to earn the highest level of certification".

https://www.teachingdegree.org/states/ohio/#:~:text=Generall....
Zocdoc is looking for a Director of Data
We are looking for a Director of Data. Someone who is passionate around telling a story with data. This person will oversee all data efforts here at Zocdoc including data science, data engineering and business intelligence. If interested, please feel free to apply at the above link!
You're right that this is an ungrounded accusation and I changed my comment.

For what it's worth, I know several people at competing labs who applied for access and didn't hear back. If you are doing science, aren't other scientists, especially those who are critical, the first ones that should get access?
Roll the Bones #8: Hurry Up and Change
That's the approach that the Down Dog yoga app seems to take. They had an instructor go through all the poses and transitions, and they can then run all sorts of different classes by combining them in different ways. They do it pretty seamlessly, but i have to imagine a lot of planning went into it.
It's magic internet points, no matter how you slice it. Having more or less changes what you can/cannot do on the site.
Open Kubernetes Distribution 4 (OKD4) is now GA
This argument is as old as time, and the counterpoint is simply "it's revenue they were not getting regardless".

Those of us who don't want to see ads ever, for any reason aren't stealing or harming anyone, we simply don't want to see ads -- saying "well don't use the service" is not all of a sudden getting the creators back any revenue, and no, if there's interesting stuff on YouTube, I'm going to use it, and do so without seeing ads. I'll support the creators I want to support elsewise.
lol. stop trying to make "remote everything" happen. It's not gonna happen regardless of how badly you want it to.
My lay understanding is that the absolute levels of testosterone and estrogen are much less important for men than their relative levels.

I actually had blood drawn a couple of weeks ago to check for this very thing. I’m male, and while my testosterone levels are in the median range, my estrogen levels are very high relatively speaking. I’m operating under the assumption that it’s caused by recent weight gain - thanks, quarantine - so I’m working to lose that weight and will check it again.

Interestingly, there don’t seem to be many accepted options for reducing estrogen levels. My PCP suggested broccoli seed extract, but made it clear that it wasn’t a well-supported or accepted treatment. The most reliable treatment is a change of lifestyle.
The thing is that there are similar substances that are not in the amphetamine class that cause similar effects . Example would be the less common experiences some people get with PCP
I think those writeoffs were removed in the 2018 tax laws so the Republicans can give rich people a tax break yet balance the budget.
> The federal government is worse than useless,

The federal government has no jurisdiction over education. The only exception to that is the civil rights (Brown v. Board of Education) and it's quite limited in scope. COVID is certainly out of scope.

The presidential talk about it is just that - talk.

https://www.gse.harvard.edu/news/ed/17/08/when-it-comes-educ...
The sad part is that it isn't like there isn't a budget to pay teachers more. We spend more per kid than we ever have, but now any budget increases get absorbed by growth in the administration. Administration in education and healthcare is a cancer.
MacOS Catalina 10.15.6

/usr/bin/openssl version
LibreSSL 2.8.3
This comment shows an astounding lack of anything resembling human empathy. Teachers do not want to return to work because the outbreak is getting worse in many places, and the already underpaid job of being a teacher would become even more dangerous. Ask any teacher (especially grade school) during normal times: they get sick constantly, and kids constantly pass around colds/the flu. In AZ, the emergency room ICUs are so full that patients are having to be flown to New Mexico. Huh, I wonder why teachers are concerned. Probably just union BS.

America’s children not receiving education isn’t the fault of teachers. It is the fault of a failed state that is unable to protect public health. Instead, you (and probably a large portion of older, affluent Americans) will celebrate as our already underpaid teachers are forced to seek other work rather than kill their students/families. Before the pandemic, many teachers in my district were forced to work second jobs (e.g. at restaurants). This is a breaking point.

America has truly lost any sense of community solidarity or just the barest altruism. Everything has become individualized and treated like a business cost that needs to be cut off like some sort of tumor in order to boost some shitty education startups that is “innovative” or “focused on shareholder value” or some shit. Teachers have an interest in not seeing their students/students’ families die, so it seems pretty obvious why they would be reluctant to pack a bunch of children in a classroom setting. But hey, maybe we can all create tutoring startups and unbundle public education into 40 SaaS apps.
Reusing SVG elements isn't as easy as they claim either, and they seem to have taken some of the options away in SVG 2.0