skysight-inc/HackerNews huggingface dataset:
Someone else already pointed out that this is actually quite significant, just the time might have been too short but there is clear indication something is there.

For me the key question is: what is the key ingredient (or the right mix of ingredients)? E.g. is it having a programme to follow (having aims/duties is known to increase longevity, see the famous 'plant study')? Or rhythmic fluid movements (so like tai chi or qi gong or yoga)? Or the combination with music (multimodal stimulation)? Or the social component of dancing (so e.g. encouraging proximity like mutual hair brushing, engagement that encourages touch, etc)?

Fascinating and raises many new questions. But it's clear the most deadly thing is probably inactivity.
Oh that. I’ve had to merge services like that.

People are always grabbing nouns and thinking they’re microservices.
Understanding Variables, Scope, and Hoisting in JavaScript
So, all Webster's, Cambridge and American Heritage dictionaries are all of them wrong? If so, who decides what words mean? Twitter?

https://ahdictionary.com/word/search.html?q=conservatism

https://dictionary.cambridge.org/dictionary/english/conserva...

https://www.merriam-webster.com/dictionary/conservatism
I recall articles saying that there's no point in lay folk wearing an mask. They're impossible to wear properly without four years of medical training, presumably mostly focused on mask wearing rather than silly things like anatomy, so anyone else wearing one is a complete waste. Leave it to the professionals.

I'm exaggerating but not by much...

Contrast with the current messaging. They work but are in short supply. If you have a stash of new surgical or N-95 masks, please donate it. If you have a used mask, please continue wearing it. You're encouraged to make, wear, and sell/give to anyone non-medical-grade reusable masks. Anything is better than nothing.
It seems that for non-proirity cases, Quest is saying that it now takes 7 days or more for results to come in. This is ~125k of the daily tests performed in the US. Of course, based on this information alone, there's no telling how other labs are doing on test result turnaround times. I will also say, for what it's worth, that personally when I was tested a few days ago it took less than 24 hours to get results, and I doubt I was a priority case. But I also didn't go to a federally funded testing site.

1.https://newsroom.questdiagnostics.com/COVIDTestingUpdates
The Awk Programming Language (Aho, Kernighan, Weinberger 1988) [pdf]
We are in this mess fully because of trump. It’s unfortunate we have a president that has no empathy for people and is constantly fanning the conspiracy theories as he also doesn’t believe in science. But finally he seems to have realize it’s bad for him so he might actually try to listen to his scientists for a day or two.

Given people are already so predisposed to their theories not sure how many people actually will listen without a full lockdown. Also it’s highly unlikely the red states will lockdown ahead of the election and go against trump. We are in a real mess. The pessimist in me is thinking we will probably have to really solve it after the election it if trump wins probably never until we get a vaccine.
Microsoft has pretty good security nowadays.

It's the fault of companies for never upgrading their machines, giving full administrators access to every employee and using Admin123 as the domain administrator password account.

If we believe the article, the virus came from an attachment in an email to a random employee. Why are executable attachments not blocked? Why is an executable running as an unprivileged user able to storm through every computer in the company?
What part of my response led you to believe I inferred we shouldn't learn difficult things? I'm simply try to show that people who haven't mastered the industry are still valuable.
In eastern Europe(Baltics) it is still a thing because people just bring over Diesel from Belarus or Russia by cars with big fuel tanks and low fuel consumption, so they simply cross the border and at the first fuel stop brim the tanks and go back to europe, In Belarus it is especially easy as the fuel price is mandated by government and is equal across the whole country.
And police sometimes checks the fuel tank for non taxed fuel, it is either Green(Agricultural, illegal for anything else), Normal taxed, and Russian(If you can prove that it was "imported" by you then its ok) non taxed.
I think the issue some want to call attention to is not the consequences that have occurred so far, it's the process of disregarding consequences.

It's like how people have been upset recently about secret police; it can't be reduced to the specific actions that we know about, it's the process being unacceptable to some.
Is there a good book of history on this? I read a bit about it on the Barton Biggs' book Hedgehogging, but there were only two chapters. I feel like Process Driven Trading Partners must have some great stories that can fill multiple books.
Parchments were also not paper and they're mentioned in the article. Parchments are leather.
Electronic artifacts.

When several naked eyes and several radars can agree on a single object, maybe then I might be willing to accept that there may be a physical object there. Otherwise, no.
As if space wasn’t dangerous enough, bacteria become more deadly in microgravity
I never really liked the fact that I need an internet connection to sync the fit files from my activities from my watch via my smartphone to a database, in order to then download it from the web to see it.

Fortunately the watch appears as a usb device when connecting with a charging cable. So it is possible to get data out without relying on accounts and social features.
> The actual physical activities the restaurant does, such as choosing a menu, cooking food, handing food to customer, playing low music, cannot be good or bad on some independent scale. What you may see as bad service, I may see as great service.

Once we went to a restaurant with hardly any diners, not at all busy. We ordered dinner. They served half our order. We waited for the other half. After about half an hour, we asked the manager. He went to investigate, and came back with the admission that they had forgotten to submit the other half of our order to the kitchen.

That's objectively bad service. I don't see how anyone could see that as "great service".

Now, maybe it was just an innocent mistake, someone having a bad day, and maybe the manager is really apologetic and offers some compensation and I forgive them. It would rule them out of consideration for a five star review, but I wouldn't give them one star just for that. Unless, if I had gone on a review site and saw a dozen other people complaining about the same restaurant messing up their order, then I probably would have left a one star review too.
That is why sometimes these Gems should be folded into Rails itself, assume it fits the need.
https://www.garmin.com/en-US/outage/
Installing ChatWoot (open source live chat) to DigitalOcean
The 19th-Century Swill Milk Scandal That Poisoned Infants with Whiskey Runoff
Reminds me of my first year in college, when we'd log into each other's machines at the computer lab for some intro to computing class, and launch a fork-bomb script that simply launched itself twice, quickly rendering the machine useless. The tricky part was to test it without halting your own machine, as a newbie programmer and Unix user.
1.) Run a small part-time electronics business. I do still write software separately when I think of a fun project, though. Programming is a creative outlet, as is circuit design, mechanical design etc. So I still spend a lot of my time in those pursuits. Some outdoor adventuring, hiking, climbing, off-roading, etc.
2.) Got really sick of the way SE is managed at modern companies now, and it was getting worse and worse. To be honest, it was a business where software wasn't their product, and thus the people in charge weren't technical people. Should have changed to a more purely technical company like I had worked at earlier in my career, but the money was too good.
More meetings, more HR directed policies, new politics-heavy boss. More projects to satisfy someone's curiosity 10 levels above me. Fortunately I was frugal and saved a lot over a lot of years, and didn't need the job anymore.
If it can be done without a degree and largely by self study than most of it can be packaged into a course or a book with practice problems and labs that anyone with dedication can finish can complete and come out competent.

Maybe such a course that covers what's needed to get into that top 10% doesn't exist yet but I'm sure it can exist and I would gladly pay for such a course to attain the required mastery rather than explore the space haphazardly myself.

Do any professional security experts know of such a course? Are any of you willing to start one?
Helping perpetuate a system that deepens inequality and is a waste of money.
LSD has quite a bit of subjective experience change based solely on mood, set, and settings. Although beyond that, everyone's reality is not the same as the next guy. Aside from that, repeated dosing of anything at all can be different from dose to dose based on body chemistry, tolerance, hormone balance, and dopamine/adrenaline type of responses. Mood plays a large factor in this as well. Tylenol does not work the same way at the same dose in each and every person, either.
> Pentesting

I think I see the problem. You're assuming several things here. Firstly you're assuming that pentesting is the definition of cyber security when in fact it's one aspect of a huge area. Secondly you're implying that everyone wants to be a pentester. And finally I feel like you read the article and came to the conclusion it was only about becoming a pentester, when in fact it was about getting into a much larger field that contains maybe jobs with many different objectives.
> If we'd managed to secure nursing homes and figure out protections for farm workers, there'd be far fewer deaths.

Yeah, it was sad to watch. It seems like it was a mistake made by a lot of places up here in the north. The States and Provinces which had more time got to see it working out poorly ahead of time seem to have been able to change course.

> My local hospital here on the east side of Toronto was on top of this early, and my tests have all come back in less than 24 hours.

I've heard good things about that area, yes. A lot of places were having long delays earlier on because they were overflowing to the regional labs, or somesuch.

> Though I live with a front-line healthcare worker, which makes me think they're giving me just a little extra speed

The answer to that is understandably yes

It has been mercifully mild here in Hamilton, most of the patients in the hospitals are still elderly people from LTC facilities, as far as I'm aware. The panic has been minimal.

One thing here in Hamilton is the handful of people who don't care much about anything in life (Hamilton has a high concentration of such people, being a hub for social services), who will gladly pretend to cough indoors near you just to make you uncomfortable.
I find it very interesting the Volume Shadow Copies and VLANs are basic tools that have been around forever, cost very little and can mitigate a lot of ransomware attempts.

There's no reason for the secretary's computer to be able to connect to the onsite SQL server... unless she uses an application that uses that SQL server.
You can configure what is added to the metadata in the settings.
Have they looked into transmission from animals?
See also: analysis paralysis. The first hurdle a new programmer has to get over is choosing a programming language to learn - but everyone will give you different answers. And even after picking one, some spend significant mental resources worrying that they chose the wrong one.
> I know, but most of these "hacks" are identified by internal scans already. The pentest doesn't add much value then.

As I said above in to another comment: pentesting isn't the job in the field and the article wasn't specifically aimed at pentesters.

> Which is exactly what a serious adversary would be doing in a targeted hack!

Sure, and that's when you bring in someone who can do the same for you but ahead of time before the bad guys get there. But to say someone who can't do that isn't in a cybersecurity position or has no value is wrong :)
It is not unusual. Contrary to what people in Linux world believe its desktop software that deals with visual image and video processing is atrocious. That's why no one ( rhetorical no one ) uses it rather than Windows or Macs for their photo libraries. It is definitely the case for the software that tries to manipulate RAW files from modern cameras.

What we actually have is a tiny number of users who use Linux as a desktop that have pretty much identical use case with a small number of images succeed. All other workflows flop.

> Neither of these is an indication that the projects low level architectural direction is problematic.

In 2020 having a project where processing a corrupted file under any conditions causes the app to crash means the projects has a bad architecture.
1. I did a year long bike tour with my partner. When I came home, I went back to undergrad to study art (illustration + painting). So now I’m mostly a student, also working on my own art and doing some part-time work.

2. Boredom which became kind of existential. I had reached a new career high, and suddenly didn’t have anything to strive for - at the time, I didn’t have the insight to try and ask for more impactful work, and I really leaned out of my job instead. The dream of doing a bike tour kept getting bigger and bigger. I couldn’t get the bike tour out of my head, and decided it was the perfect time in my life to jump on it.
- High yield savings accounts

- CDs

- Money market accounts

All pay much higher than a typical megabank savings account and are equally as safe.
How would they retire in a country without following its immigration laws? You're tattle telling on behalf of no one.
The challenge is that even having a strategy fails when you’re in a vulnerable place and someone comes along and says and does all of the “right” things.

Many people are deeply lonely and will do and believe anything someone says if that someone is offering love and affection.
Nope because we're not saving any net lives. We're only exchanging lives during this whole thing. Exchanging mostly older folks for others. The whole quarantine can be described: If you have covid your life matters more than someone who has cancer or another illness.

When all of our children become serial killers and cancer death rates rise we'll look back on this time as the worst decision the world has ever made. Being a human means excepting risk. You wake up everyday and take on risk. Yes some people are willing to take more risks than others. I'm an avid skydiver. To those people who don't like risk: Stay at home and get someone to deliver groceries and live your miserable life by yourself at home. Thanks.
Ask HN: Is it ridiculous to want to create more privilege for yourself?
I graduated a few years ago and I have a few years of professional experience already. But it's not in a really good place and I self-taught my way in.

Schools that historically sent a lot of students to internship and new grad seats at great companies to work for will continue to do so because there's an element of "institutional knowledge" built up over the years and a reciprocal relationship with these companies through the representation of alumni.

Not a huge problem in itself but it sort of implicitly makes the lives of people who exist out of this feedback loop harder in terms of getting a "top job" straight out of college. Many of which didn't even know that any of this interplay existed and just chose to go to a decent school nearby or couldn't afford to move out. Reasons that would be innocuous, but result in sub-optimal treatment for those that don't clue themselves in well enough.

It is for this reason that I've made a personal goal for myself go to a better college to get internships on my resume and become as privileged as possible.

I know I can get into a better job without needing to go back to school, but I still won't have had the more "privileged" college experience. Is that ridiculous to think about retroactively changing parts of your life? After all, we have only one life to live (that we know of) so I believe it's everyone's right to go nuts and craft the best damn narrative you can for your life and be whoever you want, not just professionally but academically and privilege-wise too.
That's a good catch. I hadn't realised it was targeting the country because I specifically searched for London. Silly me.

72k in London isn't a lot :)
I like BND. Only dropped 8.7% from peak to bottom in march (back up now), it pays out a decent dividend, and it is a vanguard etf and vanguard is awesome in my experience.
Actually many municipalities did lock down in response to the Spanish Flu epidemic here in the US. The epidemiological studies of these cities are in part why we chose to lock down this time too.
Go. Travel is the most educative thing you can do for yourself. You aren't forced to stay there forever. And you may even find that you like it enough to stay on.

I even toyed with the idea of moving permanently to the US myself at one time. However, 'quality of life' arguments for and against, as well as relationship issues, stopped that.

Personally speaking, my experience says that the EU is a nicer place to live. However, YMMV.
LSASS is a system process, need SE_DEBUG_PRIVILEGES to read its memory (full system administrator).

As far as I am aware, the last time there was an actual exploit in LSASS was in Windows XP.
I would like to leave because the stress of keeping up to date with frameworks and the competition is just brutal. Everything is just so complex to implement these days.

I still love troubleshooting systems and doing hands on work that doesn’t involve writing code with other SWEs, so I’m considering what options I have.

I basically don’t want to be part of a code review or design discussion ever again.
I'd like to know what black (white?) magic causes me to not see any jitter. Not even in virtual machines in Proxmox have I met this problem. But if he actually have proof I'm sure patches are excepted.
The Dart Type System
FAANG; Facebook , Amazon, Apple, Netflix, And Google.

We can pretty much rule out Apple and Netflix, which leaves you only with Facebook, Amazon and Google.
While I agree that he should have some knowledge about the CORS issue, I disagree that it's a backend problem.

It's the engineering/architecture problem. There's no reason why you couldn't build a proxy on the same domain as your front end app and proxy the request to the backend.

It sounds like his interface (API) was built before you even started consuming it. Maybe adding such headers increased the scope of complexity for his API and tests. I don't know the circumstances, but I disagree the fix HAS to be on his end.
I think this previous rebuttal to pg's pretence of broad mindedness still applies https://medium.com/@girlziplocked/paul-graham-is-still-askin...
I used rocketbook for a time and it worked really well. Just the erasing and having to use specific pages to take notes on meant I couldn't just grab anything to take notes on and archive it with search capabilities.

This seems like it could be nice to tinker with building something similar.

I prefer hand written notes but prefer to be able recall the notes digitally from a search.
Like a modern day laugh track
>This is not sleazy, it’s a standard business practice that most companies engage in.

The two aren't mutually exclusive; and ...

> a standard business practice and most companies engage in.

... just makes it all the more concerning.

Consumers are a tolerant bunch -- they put up with a lot of sleaziness -- but it doesn't make the practice any less sleazy.
The complicated part isn't figuring out that you should segment access or finding technology that lets you do it it's actually knowing what to segment in a way that balances risk with speed and cost.

The same is true for most things. Problems are often well known, solutions are often understood, but doing things is where the actual work is.
Yeah I've been writing a lot of Rust for my compiler and it's so much fun. But it still bugs me that indexing panics. Returning an Option would make a lot more sense...

What I've been wondering for my own language is whether I could design something like Rust's borrow checker but for ranges of values. That way I can guarantee valid indexing.
Yes and I agree with the writer on that. But I dislike his view that dividing frontend and backend expertise is problematic
I don't mean to be rude, but I want to make sure I understand the relevance of this. Are you referring to the way the inscription on Ozymandias's statue, while remaining the same, has changed its perceived meaning over time?
I'm seeking a website for politics similar to what Patheos does for religion and non-religious perspectives. All the biases are present, but they are more clearly delineated and categorized in different "channels".
Well, that's also what the author himself said.
Yes. SL launches an instance of Chromium as a subprocess in the viewer for each object face that's an HTTP browser. I wonder if Servo could do that with less overhead.
Interesting, honestly speaking we have not thought about time series data a lot yet, but I think we should be able to provide custom indices and extend Datalog with more efficient query primitives, if this is necessary. Can you elaborate a bit? I have used HDF5 binary blobs for tensors of experimental recordings (parameter evolution in spiking neural networks) in Datomic a few years ago and it is definitely possible to integrate external index data structures, but eventually the query engine will need to be aware of how to join them efficiently.

W.r.t. security, our current approach is to shard access rights and encryption on a database level and just provide many databases, one for each user. This is obviously not the most space efficient, but the most general approach. If users can share access keys and data we can also do structural sharing between these instances and factorize further. We envision doing joins potentially over dozens of distributed Datahike instances in a global address space during single queries. Since the indices are amortized data structures it does not make too much sense to encrypt chunks of them for different users as this defeats the optimality guarantees of B+-trees, i.e. you could have very bad scan behaviour over huge ranges of encrypted Datoms. How have you tried to partition the data? This is an interesting problem.

We can also expose the datahike-server query endpoint directly and you can write static checks for access right restrictions. We only do this so far to limit the usage of builtin functions to safe ones, but you could also go ahead and do the same for more complex access controls. Some work in this direction for Datahike has also been done here: https://github.com/theronic/eacl Doing this openly on the internet will also require a resource model to fend of denial of service attacks, fortunately Datalog engines can have powerful query planners and we can restrict our runtime to limited budgets as well.
Do you mean a physical visit (as opposed to virtual), or a regular physical exam? There's good evidence to suggest that there's no reason for healthy adults to receive a regular physical check-up.
Yes, RGB and CIR. Btw, all the top nav links in the dochuddle site in your bio are broken and don't do anything.
The fed lowering interest rates has murdered money market rates (e.g. 0.1% annualised return). Not a financial adviser but I’m currently using a mix of 1% APR HYSA and some bond ETFs (some total bond exposure, then some additional holdings increasing exposure to just US bonds and US municipal bonds).