skysight-inc/HackerNews huggingface dataset:
I'd already been pondering the paperclip-machine universe that could be created by a Twitter bot that just pipes tweets to bash and posts the output.

Now it could just trawl Twitter for addresses at https://textdb.dev, and throw the contents through bash, post the result back to textdb, and tweet a new link... :]
Yes, my question admits that it is inevitably a factor.

But the incompetent response was incompetent because it was incompetent, not because a sensible electoral strategy was pursued ahead of pandemic control.

As things play out, responding incompetently and saying nice things about the economy looks like a really bad strategy through the electoral lens.
> I sometimes wonder how many fewer USians would have died in this pandemic had it occurred outside of an election year.

The time to judge the different strategies has not come yet. At the least, we need to wait until the pandemic is over and the counts are in. I don't trust any count until somebody takes a good look at the excess mortality. Right now it's just way too easy to manipulate the numbers in any direction until your hospitals overflow (and even then, the press might not report it). The real case numbers may be off by a factor of below 2 or over 10 and immunity in the population may already exist due to other corona viruses or maybe not, we don't know yet. Other counties which seem to be doing very well until now may still fail horribly. The economic impact may play out in vastly different ways. Currently it seems that hard containment is the best strategy but it requires coordination in a large area and high compliance in the population. In a few months, the vaccine could be available any day and it might work perfectly or very poorly.
What if they hacked you months before pulling the trigger? The article mentions they were hacked in December and the attack launched in March. Restoring a backup would then still leave the hackers inside.

And even if most data were backed up, most computers still have to be wiped and reinstalled. I don't think most companies backup the entire disks off all employees, it's normally just a dedicated file area. So while the data can be restored, the IT department still have to set up hundreds of computers for all kinds of different workers or machines on the spot.

Nothing is ever easy, don't be so dismissive about things you haven't thought through.
Fwiw, I've found that the inversion approach of fighting procrastination works considerably better for me. So, instead of trying to not do something I try to do something instead. In more detail this means focusing on achieving a certain amount of deep work hours per day. First this means that I have to condition myself to want to do deep work in the first place. Rereading the first few pages of the book from time to time helps with this part.

Also, if the last thing I think about before falling asleep is about what it is that I wanted to do next, then the next day starting to do meaningful work is a lot easier, as I actually feel like I want to try this thing I thought about. Keeping a work logbook is another good method in being able to start up easier, as you can just pick the easiest item in the list and do that. Once the ball starts rolling and you get deeper in the zone, then procrastination is rarely much of a problem.
Same, graduating in a year and interested in advice.
Delayed test results are a nightmare that will guaranteed plunge us exponentially deeper into the mess we’re in in the US
Secret police detaining protesters in Portland, USA
Yeah, this is mine https://GitHub.com/hyperhyperspace
As far as I know, essentially everyone is either asking for either "in some way reorganise this, maybe lose the leadership, or at most fire the lot and make a new one" or "pull money and responsibilities from this and give to social services/community groups/whatever". However, those make for awful slogans. "Defund the police" is a good slogan.

This is, incidentally, probably the US left learning the Hillary Clinton Lesson. Detailed, costed proposals of what you want to do may be very practical, but people prefer a good slogan, and to leave the details to the detail people.
Are the Navy UFOs “Real,” or Just in the Low Information Zone?
Why can't I pass std:vector&lt;Child*&gt; as std:vector&lt;Parent*&gt;?
1. I'm a Scrum Master.
2. I really wasn't great at it. I loved it, only did it professionally for 2 years, but did side projects for years before I took an official job. I wish I was good enough to be productive in a professional environment.
ELI5 - If the test has 50% accuracy and is producing equal false positives and false negatives, is the coin producing inferior results?
We posted this:

https://medium.com/@vrchat/security-update-web-panels-4699fa...

It was severe enough that I ripped them out, though we were unable to find any evidence of the vulnerability in use.
I rarely see a sense of humor on HN. It’s a nice surprise and I hope to see more of it. Nice job!
Sorry, I think you are a bit mistaken about how payment platforms work. Stripe and PayPal provide an interface to a country's banks. In exchange for abstracting away the underlying bank infrastructure, you pay them a fee for every transaction. Stripe and PayPal support a limited number of countries and a subset of the bank's functionality. So if you want to interact with any new countries or access any non-supported financial instruments, you'll have to directly integrate with the banks and implement those yourselves. To give you a sense of scale, Uber's payments volume is like 10% of Stripe's.
The few instances I was assisting companies with ongoing ransom ware attacks, all had a similar pattern. Some initial breach of a client system (think malicious office document) gave attackers a foothold inside the network. From there the attackers ultimately pivoted to own the Active Directory. Equipped with this level of access they identified key assets and proceeded to encrypt them. Backups, if not stored offline, were rendered useless.

It is quite challenging to recover from this kind of breach since the attackers had every opportunity to touch every system connected to the AD and leave backdoors behind. I have seen companies trashing their whole AD, re-imaging all machines and basically starting from scratch at great cost.
Why do you consider tech brutal?
I don't understand why you are adopting this tone, read my message again as you seem to be misinterpreting it. I explicitly mentioned that I am blaming the laws themselves and not the corporations for abiding by them, it is the entire point and premise of the few comments I left on this thread. These laws are at fault for allowing corporations to make money in country X and pays tax for it in country Y, to defend this form of taxation seems boneheaded to me.
You can be FIRE at around a million in assets. My wife and I ran the numbers and it seemed possible. But we wanted kids and stuff so retirement wasn't in the cards.

If you have FU money you don't need to run the numbers.

That's how I look at it.
Without contact tracing, there's an argument that tests don't give you much actionable information. If you're sick, you'll (hopefully) self-quarentine anyway. If you're sick enough to go to the hospital, you'll go anyway and be presumed to have covid. If you feel healthy, unless you're being tested because of your job, you probably aren't going to get tested.

The case that's somewhat interesting is the one in article where someone might have gotten people sick at a party.
This is correct. Eventually people can be very nice, once you get to know them, but you either have to be a certain type or simply have guts to tell people to sod off, as then they would start showing respect:) I think this is very similar to construction and some other related industries.
Nice idea, thanks. I have to check that my router can do that.
Introducing the MyHeritage Photo Enhancer
It's nice but it could be cleaner, by dropping the sidebar, and constraining the width of prose. See "Why is the text on your site so narrow? It wastes screen space." here: http://www.paulgraham.com/gfaq.html
Apart from all the places that are doing it successfully of course which you have for some reason ignored.
Thanks!

Most of the credit goes to Alex Shpak (https://github.com/alex-shpak/) who created the "Book" theme for hugo (https://themes.gohugo.io/hugo-book/).
My understanding[1] was that these types of devices sync by sending a blob over bluetooth to the paired cell phone, and then the cell phone uploads this to the cloud to be decrypted. What kinds of devices are you talking about?

[1]: https://hackaday.com/2017/12/29/34c3-fitbit-sniffing-and-fir...
Whether or not there's a formal difference in the terms, there's normally a difference in how they're used.

1. FIRE tend to mean sufficient money in the bank/money from passive incomes that let you live a fairly frugal lifestyle. See the Mr. Money Mustache stuff that various people are especially taken with. It doesn't tend to mean Retire Early and take expensive trips, buy nice cars, pursue expensive hobbies, buy second homes

2. FU money, on the other hand, tends to mean you don't need to work and can have enough money to do virtually anything you want to. There are degrees of course once you're talking things like private jet ownership.
Reason 5,431 why I carry a 3g flip phone (with the battery often removed).
Right, but in the context of this application, there is NO OTHER security except the obscurity of the UUID or it’s hash. The mantra applies quite well here since an attacker could stumble upon a valid hash or UUID and then change the data.
Ha I was going to say, I was trying to read receipts and Tesseract was having problems, those are machine-printed not hand written. Granted supposed to clean up/up contrast/etc... but yeah. Scanning a screenshot of a website though accuracy is almost 100% every time eg. just black/white text.
It's unclear. Rates in South Korea are rising, and they've generally used somewhat broad shutdowns in addition to contact tracing. (For example, when there were positive cases found in Seoul bars, they closed all the bars in the city for weeks.)
The biggest advantage of strong unions these days is that it will create a strong push towards automation.
Most if not all the highly successful and most secretive quant funds execute hundreds of thousands trades per day...while not considered to be "HFT"...the idea of trading hundreds or thousands positions per second is quite a high frequency.
Are you getting that interpretation from the article's text? The article says that Instagram found and is fixing a bug in iOS. That is incredibly doubtful, since they don't have the source code or OTA update mechanism for iOS. They found and are fixing a bug in Instagram code on iOS.
The level of nerdiness required for software engineering translates well to tech bindings! I was an early importer/user of European gadgetry (they are way ahead of us due to the racing scene) so developed a fairly large mental repository of such minutiae. I personally answered all questions for the first several years and still do occasionally.
I find simulated and remote fans to be mildly distasteful for reaaons that I find hard to articulate. I suppose it has to do with notions of authenticity. One of the reasons I enjoyed the NBA summer league is that you can hear the players and ambient noises of the gym so much better and it created an interested experience that is different than a normal crowded stadium. Why not just have a distinct moment in sports where things are genuinely different due to outside circumstances rather than pretend like things are the same?
No longer a Software Engineer, but still in "IT" in the broader sense.

* Left SE job for a PhD in CS, roughly 50% of a good SE salary here in Northern Europe

* Do some Product Management/Innovation advisory on the side

I left SE because I found the type of programming one typically does, as well as the Jira ticket-pushing, uninspiring. I still write code, but (almost) only because I enjoy it (a PhD in CS does not necessarily involve much, or any, programming).
Does anyone have suggestions on how to learn dancing during a time of social distancing? (i.e any good mooc or video courses?)
'More masks than jellyfish': coronavirus waste ends up in ocean – The Guardian
Eventually the accumulated sweatshop tech debt and incompetent management with no technical understanding result in teams not being able to accomplish anything, and situations like the one OP and his team are stuck in.
> counties which seem to be doing very well until now may still fail horribly

Sweden was an example of this, but Australia is looking a bit sketchy now and us next door in New Zealand are feeling a little uncomfortable.
I don't think it's possible to correctly rate limit IPs behind NAT, at least with NGINX.

> Note that IP addresses can be shared behind NAT devices, so limiting by IP address should be used judiciously.

https://docs.nginx.com/nginx/admin-guide/security-controls/c...
The full wording:

“We found and are fixing a bug in iOS 14 Beta that mistakenly indicates that some people are using the camera when they aren’t,”

makes it sound like the bug is in iOS, which is exactly how they want it to sound. and they want people like above to confuse make it seem like facebook did nothing wrong. facebook never does anything wrong.
Starting this autumn I’ve cut client hours to 25 per week and will use the remaining 15 to try and get a physical print shop going. I’ll be printing stickers, tshirts and banners. Currently toying around which niche to serve.
I too had my go at this, and it was very effective

Checkout these two files

https://github.com/Shokodemon/smallhacks/blob/master/sh/depr...

https://github.com/Shokodemon/smallhacks/blob/master/sh/proc...
Tell that to the IEEE https://www.hotchips.org
My point is that unstructured free time itself and parental supervision itself are unrelated to the problem. The solution that Iceland has found is more specific than that, and it is an important distinction.
I'm afraid that might be asking for too much subtlety from the law. :)

It just says "children age 12 and younger may not be outside after 20:00 unless accompanied by an adult. Children ages 13 to 16 may not be outside after 22:00 unless they're returning home after an approved school-, athletic-, or youth-program function. Between may first and september first children may stay out an additional two hours"

Even though it's not stated the "accompanied by an adult" applies to ages 13 through 16 as well.
> Reading between the lines, I think that several states hired enough to handle the load near the end of lockdown

Government being government, I understand why this doesn't work, but states literally have a list of people without jobs and their occupations that they're already paying. If the health department could/would just talk to the unemployment department...
On a related note for all the financially independent people I see posting here, how did you get enough money to just peace out? Was it just the tried-and-true strategy of work at FAANG for like 10 years?
All Intel options on the T14s are 4 core. The only other AMD option is still 6 core. The slower AMD part is still twice as fast as the fastest Intel chip:

https://www.cpubenchmark.net/compare/Intel-i7-10610U-vs-AMD-...

AMD wins on price as well. That people don't usually make good buying choices is not an argument about CPU performance.
> No amount of budget-boosting would be enough to keep up with exponential growth.

Right now it would take an atomic mushroom cloud and/or the military in the streets to keep people at home for an extended period of time. And even then we would see 3-6 weeks of exponential rise in case numbers because testing is just so far behind and you will have tons of follow-up cases.
Nice work, any plans to expand beyond 300 companies and calculating more metrics?
A Fitbit won't even sync with the app on your phone unless it has internet access and can connect to Fitbit's cloud servers. Without them it's basically a paperweight.
I'll posit that political will counts double because you need everyone behind you to contact trace, both the agencies and the populace. It's not just budget.

Anecdote. An acquaintance is a disease export working for NIH near DC who also does contract tracing in the field. Sometimes their contact with the public includes death threats, refusals to cooperate, and even been spit on. They are good people trying to prevent more illness. Some of the public has been coached that the doctors are taking their jobs, closing employers, etc.

Leadership needs to get everyone behind the same spear so we can snuff this out quickly.
ML could be an overstretch, but centralised approaches definitely do allow for more analysis and a deeper rules-based approach.
Herd immunity thresholds for SARS-CoV-2 estimated from unfolding epidemics
I believe Dart is a more exciting language than Go. It's the most well designed scripting language out there, that can also be AOT compiled into native binaries. It's a better JS and a better Java at the same time. It would be also a killer language for backends and simple websites. Just imagine a better node.js built around Dart's excellent tooling.

What made Go more successful than Dart was a mix of decisions, luck, and momentum. On an alternate reality, Dart would swap places with Go. Dartium VM would have replaced Javascript on the Web and everyone would have been happy. Go would be seen as an obscure language with missing features that doesn't really do anything better than java/C#/C++
Wikipedia says Machu Pichu is only 2,400 meters / 7,900 feet altitude? That's not that high.

I mean, sure, try to acclimate somewhere if you're coming in from sea level, but much of Colorado is at that elevation, and the peaks are above 14,000 feet. Traveling to ski at Telluride is more elevation.
Kinda specific, but breakdancing: https://www.youtube.com/watch?v=AIDaadRNPpg
That doesn't actually say at all. Symantec's report has more detail but it still has gaps:

> The initial compromise of an organization involves the SocGholish framework, which is delivered to the victim in a zipped file via compromised legitimate websites.

> The zipped file contains malicious JavaScript, masquerading as a browser update.

So are people just like "this random website is trying to download a browser update, ok I'll unzip it and run it, even though I never normally have to do this". Seems plausible.

Then:

> Privilege escalation was performed using a publicly documented technique [there's a link] involving the Software Licensing User Interface tool (slui.exe), a Windows command line utility that is responsible for activating and updating the Windows operating system.

> The attackers used the Windows Management Instrumentation Command Line Utility (wmic.exe) to execute commands on remote computers, such as adding a new user or executing additional downloaded PowerShell scripts.

It's not really clear to me how local privilege escalation allows you to execute commands on remote computers though.
Weight lifting is better for making you more attractive and confident. If you are in good shape men and women will both take notice. Not everything's about squeezing out that last IQ point. I enjoy dancing, don't get me wrong, but weightlifting is the obvious choose when it comes to quality of life improvement. I used to run a lot too, no one gives a shit about your 5 minute mile and no one is impressed by your skinny body. Weightlifting; dudes figured it out 80 years ago.
That's my interpretation as well. You have somewhere in the mid to high five figures revenue stream without touching capital and own your property--presumably somewhere that costs aren't super-high.
Out of curiosity, why not make the app source-available?
> I'm a Scrum Master.

It's a the job title? I always considered Scrum Master more like an additional (sometimes rotating) responsibility of a team member, be it a dev or PM.

On the other hand, Scrum Coach is more like a job, or rather a contracting gig.
Right, that's why designers generally work with a component library, in an application like Sketch that is designed for building websites and mobile apps. Your component library might first start off with just all the basic HTML stuff, but that eventually becomes tailored to your company's own custom stuff. You're not just hiring abstract artists who then whip up a fever dream in photoshop.
Knew a guy that quit to be a painter.

After 2 years he’s happy to be back in air conditioning.
Adobe Lightroom for a lot of people.
Ask HN: How do you determine the truth of a statement?
To give some background to this question, I have been spending a lot of time being basically a newsjunkie, sucking up information about all kinds of topics. One thing that is most painful is to find out that something I learned earlier was a deception or misportrayal.

Culturally this is becoming a problem for more and more people as the general access to information is causing havoc among people that can't invest the time to properly research topics or that are biased not to do so for any reason imaginable.

I notice that even the basics are spotty, the Wikipedia Article for Criteria of Truth[1] is markedly in dire need of editing for the past 5 years and nobody seems to be willing to step up.

So what are ways to determine if something is true and what chain of proof/evidence is necessary for you to consider something verifiably true?
[1] https://en.wikipedia.org/wiki/Criteria_of_truth
I’m in Georgia Techs online MS in cybersecurity program and have argued these points a few times. Most of the cybersecurity classes are just CS classes. I think it was just a money grab to repackage their existing CS degree into a more marketable package.

I’ve argued that we should have some type of network and OS hardening classes. There is a required network security And secure computer communication class but they are much more about programming vs implementation. The counter arguments I get are that what I’m suggesting is more aligned with a vendor cert. But a lot of cyber security is doing the hardening of os and proper user access.

A lot of the cyber students end up switching to the policy track instead of the information security track. They are admitting students with almost no prior CS experience. They get away with only having to take an intro to cyber security CS class. Their remaining classes are all management classes marginally related to security.

I’m going to use this article to backup my arguments that there is more to cybersecurity than programming.
You missed solo dance as c). Lots of hip hop is solo or semi solo, as are things like solo Charleston.
If tests are much more useful if they come back quickly, then first come first served with huge queues is the exact wrong way to handle excessive demand. Instead you should test the newest round of specimens that you have ready, and catch up on older ones if you can when you have a lull.
Then in the uncurated version, they could disable the like button, which is what makes things go viral...
Fellow lindy hopper here too. Yes the communities around the world have been hit hard. Social dancing is unfortunately an ideal setup for the virus to spread. I share your hope and look forward to dancing again.
Small Mailserver Best Current Practices
Swing/lindy, west coast swing, waltz maybe. But it takes at least a year to become a good salsa dancer and Argentine tango even longer. The difference in these dances is the level of coupling (no pun intended) between the lead and follower. In Argentine tango both dancers meld into one moving unit and the brain has to learn how to do that.
Sweden seems to get it under control now. Cases and deaths are falling quickly. In the beginning they made some big mistakes (in retrospect) but now the strategy seems to work (for now at least, we will see in a few months when the people get tired and want to return to normal life).

OZ has a problem.

NZ is in a similar situation as VN where a local transmission appeared today without known infection chain. It only takes one error and you're back to square 1.
But the airspace of a US carrier strike group shouldn't really be a "low information zone".