skysight-inc/HackerNews huggingface dataset:
>it is really strange that people feel they have to go work out in groups. Or get together, or go to bars.

We're not all satiated simply by popping pills and plugging into the cloud or whatever it is you do with your free time.

Most humans have a strong need for social interaction.

What is the point of preserving life if nobody is allowed to live theirs?
Connect, No Matter the Speed
> I don't like the BBC because of its political slant

Do you think it’s slanted left or right? Half think it’s extreme left wing, half think it’s extreme right wing. Or do you think it’s slanted along some other axis?
Personally, I don't think $99USD/year is an unreasonable burden for any business selling software targeted primarily at the MacOS platform.
It shouldn't matter that much in that case too, especially if you have home charging. The lowest I have gone is minus 40 F during a cold snap last year. I had no problems starting up the car and going. The acceleration/regen was limited for a bit in the beginning to protect the battery. I lived in an apartment at the time and so I couldn't "pre-condition" the battery and interior from wall-power. But even then I had no problems after everything warmed up. Sure I used a bit more energy at the beginning to warm up the interior since I couldn't plug in.

On longer trips, the waste heat from motors are cycled through the battery to bring it to ideal temperatures. Even in extreme cold weather, you get full "regen" capability (meaning battery is warmed up), just from the waste heat from the motors. There is also an option to pre-condition the battery for fast charging by intentionally driving the motors less efficiently to generate more heat.
Thanks a lot for your brainstorming - some remarks are interesting.

But overall the root problem would still exist and the solutions would have to gather a majority - e.g. asking a "pool" to remove a video would mean for the "pool" to watch that video (to ensure that the claim is valid) and after the first experience (if it's child porn) we would all probably have to call a psychiatrist to help us overcome what we've seen => not feasible, it would actually destroy the pool's mental stability which is, in this concept, needed to evaluate the contents (videos in this example).

Edit:

Being ignored by some search engine would still be a no-go for me. Knowing that some personal data (general files, pics, videos, whatever) exists somewhere would make me feel absolutely NOK.
I dunno. Somebody had to come up with it. I have no clue who that is.
I feel like the normal stuff gets flagged more than the fringe stuff, possibly because it’s generally more pessimistic.
Makes total sense, I only used LiveView for a new project that I started within the last year, I can imagine it being tough to only use a little bit in an existing app, especially if its SPA hitting an api. Cool to see you evolved as Phoenix evolved.
Seroprevalence studies[1] in Italy, France, and Spain indicated we were a very long way off form herd immunity. They were in the range of 11-15%, where herd immunity would only start kicking in at about 70%. Based on cases per capita, the US might be 2-3 times higher than western Europe, but not yet at 70%.

I think the flaw in the piece is the author greatly underestimates the impact of the drastic measures we've taken to get those trends down. A lot of people are working from home, kids largely aren't back in school, and many of our other contact points outside of our households have been modified to minimize the risk of transmission. Seeing what happened to Israel when they reopened schools does not bode well for the US. [2]

Edit: NYC had ~20% prevalence in mid-June [3], after they had come back down from their peak. They've had many more cases per capita than anywhere else in the US, but their new cases have been flat since then, meaning prevalence has not increased significantly. Prevalence elsewhere in the US is likely in the 5-10% range.

[1] https://www.sciencedirect.com/science/article/pii/S004896972...

[2] https://pbs.twimg.com/media/Ees8MesX0AAbDE2?format=png&name=... https://www.wsj.com/articles/israelis-fear-schools-reopened-...

[3] https://www.cdc.gov/coronavirus/2019-ncov/cases-updates/comm...
Batteries are fundamentally unsuitable for aircraft. The energy density is easily an order of magnitude lower than thermochemical fuels: https://en.m.wikipedia.org/wiki/Energy_density#/media/File%3...

Furthermore batteries don't get lighter as their charge is expended, as opposed to fuel that gets burned off. This means a plane powered by batteries has to land with the same mass of fuel as it does when it takes off. Many aircraft are worse at decelerating themselves than accelerating. This means they can actually take off with more mass than they can land, thus extending their range. This can't happen for battery powered planes.

Hydrogen powered planes is less far fetched than it seems. The Soviets built a prototype: https://en.m.wikipedia.org/wiki/Tupolev_Tu-155

Cryogenic storage of hydrogen is less difficult than it seems. Because the engines are constantly drawing fuel from the fuel tank, the tank's pressure is constantly dropping which cools it down. Most of the difficulty around hydrogen storage is in long term storage where hydrogen permitting through the vessel is a concern. The main challenge for applying it to aircraft is being able to make a vessel light enough and in a form factor suitable for planes, namely fitting it in the wing.
GCP supports remotely loading public ssh keys onto a box. They do this using the metadata endpoint - this is (in theory) a trusted API endpoint available to instances @ 169.254.169.254. IAM actually uses this - when you call other services, client libs reach out to the metadata endpoint and get IAM creds to send with each request.

Anyway, they have a local process that polls the metadata endpoint and adds authorized keys on the host. So you can e.g. upload your public key in the web UI, their metadata endpoint will serve it up on your instance, the guest agent will poll the metadata endpoint and add your key to the authorized_keys file.

These folks spoofed a response from the metadata endpoint. They used https://github.com/kpcyrd/rshijack to inject their own hand-crafted public key, which the guest agent happily added to authorized_keys (and created the wouter user).

They then ssh'd using their key:

> ssh -i id_rsa -o StrictHostKeyChecking=no wouter@localhost

> Once we accomplished that, we had full access to the host VM (Being able to execute commands as root through sudo).

Looks like they had passwordless sudo as well.
That's with the flu having been around the year before, the year before that, one before that, etc. In any given year the most likely people to die from flu have already died from flu, and the others have already had the flu when they were young and otherwise healthy.

Can't really make a comparison with a long standing disease when covid19 is still doing its first rounds.
What does "delivering on prosperity" mean? Is that GDP per capita? Life expectancy? Number of iOS apps produced?
To the average user, yes, but Apple can see the chain of trust and can do the data science required to figure out who signed what. You better believe that in the even of a large scale malware distribution via signed binaries, they're going to be revoking those certs and tracking down the accounts responsible (like after the VLC website hack).
If the signed software is notarized, and the signature checks out, then you can be sure that Apple did some malware-scan-like process to the app on their server at some point(1) and that the app you’re seeing is the same one they saw.

(1) and probably a manual review if the App under analysis was found to call into any but a whitelist of “safe” system APIs.

Without the code signing, you can’t be sure that the app you’re seeing is the same one Apple‘s servers saw. It might be a copy of the app that has had a virus injected into it (which has happened quite a few times recently in pirated macOS software.)
Fastmail has undo send.
https://www.fastmail.com/help/send/undosend.html
Yall gotta know that life is almost totally normal in the Netherlands and has been for months. Almost no one is dying. It's likely because people get so many colds in the winter, so there is general immunity.

Or we are all about to die...?
I actually realized that this must be on HN because 2 different people emailed me to tell me this XSS workaround was bad advice :). Updated the post.
The concept of money isn't a hard measurable fact of the universe, but when enough people believe in it, it starts to acquire some pretty consistent attributes across different cultures and times.

It's definitely not a physical science, but it's probably one of the more important social phenomena. (I almost wrote social science, but imo I can't really consider a discipline which isn't based on experimentation to be a science).

So I guess I agree. I would like to see more rigorous methodology.
You should compare them fairly. Lockdowns in both or no lockdowns in both. Social distance should be higher in the less dense areas in both situations.
Sorry but my naive first-pass read of this registers it as contradictory. Your first example was clearly meta about the partners behavior pattern.
Thanks for sharing that article.

I think the most promising application of distributed compressed air is in refrigeration, especially if the power source is not an adiabatic process.
CDC Data from mid June had NYC at only 20% prevalence. Considering their low new daily cases since then, it's hard to believe they are anywhere near 68%.
I've noticed there's only ever effusive praise for Fastmail on HN, which itself probably leads to the kind of thing that Feynman warned us about re oil drops.

Spamming folks notwithstanding, I also had a terrible experience with Fastmail on the two occasions that I filed support tickets. I once wrote before: if the options are no support from a service where it's never needed, versus the illusion of support from a different service (paid, even) where the emptiness of the promise will be made evident, then the former is better.

Having said that, I don't actually use or condone Gmail; I give my money to a Fastmail competitor.
Infection rates could be grossly under reported.

Younger males in particular are much less likely to seek treatment for a mild infection.
In addition to paying the Apple Developer Program fee, you as an open source or hobbyist developer are required to sign a legal contract with Apple in order to be able to code sign your software. This can be even more problematic than the fee.
That sounds unreasonable. Did you directly download the profiles (.mobileconfig) from Fastmail?
Ah that makes sense. I didn't necessarily think he held personal disdain, just I've noticed beyond this situation the way some people seem to treat outsourced workers worse or in a disrespectful way.
1) I searched the article for "damage" and "should move" and didn't find it, so either it was in a screen cap (but I didn't find it there, either) or you meant "literally" in the new sense of "not literally".

2) Apple documentation [1] says (my highlight) "The Apple notary service is an automated system that scans your software for malicious content, checks for code-signing issues, and returns the results to you quickly."

Is the claim that Apple is not actually scanning notarised software for malicious content?

3) Random unsigned apps presumably have not been scanned, and might contain malware. I still fail to see the problem, or what's misleading (and "intentionally" so!).

[1] https://developer.apple.com/documentation/xcode/notarizing_m...
> So building Chromium becomes even more complex.

Suck it up and get used to it. Rust is absolutely the future of systems development; every major C or C++ project -- including the kernel -- is going to have a Rust interoperability story, and eventually, major components that implement desirable features written entirely in Rust, so in the interim, until the desirable but currently unrealistic goal of migrating all extant C and C++ code to Rust is achieved, you will need to have both C(++) and Rust tooling (and whatever else) to build the project.
Pretty easy to figure out what's going on:

1. You submit your app bundle and your credentials to Apple for notarization.

2. Apple records your information and goes through each library, framework, and your code, checking the code signing info and "fingerprint" of each for known malware.

3. Apple issues the ticket for stapling to the app bundle.

Now say, for example, that libffmpeg-0.1.2-beta2.dylib is found to mine cryptocurrency:

1. Apple goes through their database and finds the app where the malware was reported.

2. Apple marks that fingerprint as malicious.

3. Apple now flags any other apps that use libffmpeg-0.1.2-beta2.dylib (by checking the fingerprint) and disables any versions of any app running that version. Additionally, any other attempts to notarize apps with the malicious dylib are rejected.

Notarization provides 2 major benefits for devs that I can see:

1. Apple doesn't need to revoke your entire certificate just to block one version of an app.

2. Apple's audit trail of who notarized the app (and from where) prevents cases where stolen credentials result in a DoS of the victim (e.g. your account being locked, your name and address permabanned, and funds frozen).
It wasn’t like they just strapped a camera in there, there was a ton of tradecraft and ingenuity involved.

Example: https://en.m.wikipedia.org/wiki/The_Thing_(listening_device)
So here is how it works from a friend who worked at a bank.

It turns out that a certain immigrant demographic has the property: many get a credit card, they immediately charge it to the max, they make the minimum payment forever. Another demographic: some of them get a credit card, immediately charge it to the max, they make 2 payments, then they never make another payment again.

The way to do this right is to just spread the risk over everyone so that good people in the second demographic are not penalized by bad ones.

The way it really works is: advertising heavily targets the first demographic, using their national language and excluding other demographics.

So in regard to insurance, good drivers will think "this doesn't apply to me", and bad drivers will be excluded by making them go elsewhere.
> Everyone has electricity at their home.

I do. But I can't get the car up the stairs. :-(
A rough measure is GDP growth per capita.

Life expectancy was a good proxy in the 1800s because it improved dramatically, but now it has asymptotically approached a biological limit so is less useful. The same for average height.
yea i hate when VCs think they can treat a biotech/sciences startup is like a Saas...

like why can't you change a few lines of code, iterate your product multiple times a week and pivot???

because science.
There’s honestly very little incentive to produce a vaccine for most coronaviruses. The common human ones cause the cold, but there are a bunch of them, and they’re a minority of the viruses that cause the cold. No-one wants a vaccine that reduces their chances of getting the cold by a couple percent, and that’s all a specific vaccine would be for most coronaviruses.
I can show an example otherwise - the PM of Singapore saying no to Bill Clinton when he asked the Singapore authorities to not impose corporal punishment on an American citizen (caught for vandalizing cars).

Singapore is not just dependent on the US. It depends heavily on China too. Defense wise, Singapore has one of the strongest forces in the region.

And most millionaires in Singapore are Singapore citizens.

Singapore's status is not just some offshore tax haven, as seen by many in the west. It has a diversified economy.
"The Apple notary service is an automated system that scans your software for malicious content, checks for code-signing issues, and returns the results to you quickly."

https://developer.apple.com/documentation/xcode/notarizing_m...
Five years away, my friend. Five years. I know it's true because I've been reading the same figure since about 1972, and much earlier if you count old copies of Popular Science I bought at garage sales.
Show HN: Brish – Embed zsh in Python as if it had first-party support
I've been a long-time Puppeteer user, it's been game-changing in so many ways. We even built a whole platform with it to automate our company's social media presence, among countless small bash scripts, archiving utilities, QA workflows, etc.

Playwright interests me even more though. We've been getting a lot of requests for ArchiveBox.io to support other browsers as the rendering engine for web archives, and it's always seemed daunting to try and reimplement multi-browser support ourselves for puppeteer-style workflows, but Playwright seems to completely take care of that!
Inside both Rust and C++ there are very well developed tools (eg smart pointers) for dealing with memory allocations. These tools were never written to be compatible with each other, so you lose them at the language boundary.
Maybe a better example would be all the people who pay thousands to climb Everest. The mortality rate there is something like 1.3%.
Other people say power comes out of the barrel of a gun.
Colorado is not the state for me for many reasons. Not sure why everyone keeps suggesting places here that could never fit the requirements...

Some of the worst air in the country
How is this a 'denialist' perspective? The author is affirming that COVID is real and so widespread that some areas are reaching herd immunity...
Show HN: Lightspeedtest: internet speed test web app
Given that it was DoE it is more likely to be an inspector on an IAEA mission that would carry this.
I'm not so sure it is more complicated than that. I've been paid well in my career, and it wasn't because my employers were just nice guys.
As an interesting aside, I recently discovered New Zealand has minimum wage exemptions where productivity is low due to disabilities or other circumstances.

https://www.employment.govt.nz/hours-and-wages/pay/minimum-w...
Is that how CAPM works?
Some RISC architectures didn't have dedicated instructions/registers for the call stack either. That, in itself, isn't really an issue.

The real issue is that the original calling convention chosen by OS/360 / MVS / z/OS didn't feature a stack. It was based on the assumption that code would not be recursive/reentrant. Each routine would have a static memory block to save registers in. That was a software design issue (OS and compilers), not a CPU design issue. However, a lot of application code was written in COBOL and FORTRAN, which in their original versions didn't support recursion/reentrancy at all, and a top-down coding style discouraged recursion/reentrancy anyway, so this was less of an issue in practice than it might have been. And lots of other vendors in the 1960s (such as DEC and HP) made the same design decision.

Over time, the demand to support recursive/reentrant code became stronger. The first approach was to have each routine use GETMAIN (equivalent of malloc) to dynamically allocate a save area. This succeeded in providing recursion/reenterancy, but cost a lot in performance. Later they introduced the equivalent of a stack, called a "dynamic save area" (DSA) – rather than having each routine's prologue call GETMAIN to allocate a register save area, they'd just use a slice of that dynamic save area allocated once at the beginning of the program. Newer versions of z/OS introduce a new calling convention XPLINK, which is even closer to what other platforms do – it is more efficient, the stack grows in the normal way (top-down not bottom-up), and overflow is detected using a guard page instead of a manual check in every function prologue.

However, due to the demands of backward compatibility, z/OS has to support all three calling conventions – the original one without a stack, the legacy DSA calling convention, and the new XPLINK stack calling convention – complete with thunking macros to generate code so code using one can call code using the other. At least if you stick to C, the compiler handles all this for you, and you just have to declare which calling convention to use before you declare the function (via `#pragma linkage`). Rather similar to the situation with MS-DOS and 16-bit Windows, where each function had to declare which calling convention it wanted to use (cdecl, pascal, stdcall, fortran, etc)
> If someone contracts a dangerous disease aren't we supposed to reassure them that things will be OK? Isn't that part of good medicine?

No. That used to be quite common, but it’s unethical to lie to patients these days.
"The popular vote" is another tactic in the PR competition between Democrats and Republicans to declare every election that the other party won illegitimate. Has a predictable effect on the general public's confidence in US democracy.

It also encourages decisions like overcampaigning in California as a result of last minute polling in Wisconsin and Michigan looking like a coin toss. A loss is bad, but a loss that can't be marketed as illegitimate afterwards is far worse.
> Some are worried that the paradigm has changed, and that bonds are no longer uncorrelated."

I argue that this is what has changed:

"Treasuries have also benefitted from the wider adoption of non-cash collateral since the crisis. Just over $1.8 trillion in cash was posted as collateral against loans and other transactions in 2008, with $1.3 trillion coming in the form of securities and other instruments, according to data provider IHS Markit. A decade later, those positions have inverted, with non-cash collateral balances standing at $1.6 trillion, compared with $870 billion for cash."[0]

and

“If an institution wishes to use [Treasury] assets for financing, to gain yield through lending them out or to meet their HQLA requirements, putting the securities into triparty is the most efficient way to achieve those goals”[0]

Since treasuries (and bonds in general through collateral transformation, emphisis on "non-cash collateral" above meaning not just treasuries) are being used to finance more risk asset purchases.

[0] https://www.bnymellon.com/us/en/what-we-do/markets/aerial-vi...
IIRC, the CAs Windows trusts charge absolutely ridiculous amounts of money, unless something has changed recently.
I think the name still applies, and it's intuitive that this number is a function of the connectivity of your network.
One issues with trees is that they block sunlight. Thus if the type of crop you are growing needs a lot of sunlight, you are going to have problems.

Furthermore, since the amount of photosynthesis is dependent on the amount of sunlight, it is likely that your staple crops would be the ones that required a lot of sunlight, since those are usually calorie dense.
NYC had only 20% prevalence in mid-June[1], after they had contained the initial outbreak[2]. Therefore, the drop in new cases is very unlikely to be from herd immunity, which would need prevalence to be in the 80% range.

The author seems to ignore that most people are interacting with far fewer people because they are working from home, kids mostly aren't in school, and our other interactions with people outside our household have been limited and altered to decrease the chances of transmission.

It's nice to think that some people had memory T-cells that could deal with the virus, and it seems some people do, but based on the original R0 numbers, it would be foolish to think that is the case for enough of the population to conclude that we've reached herd immunity.

[1] https://www.cdc.gov/coronavirus/2019-ncov/cases-updates/comm...

[2] https://coronavirus.jhu.edu/data/new-cases-50-states/new-yor...
Capital is there because foreigners who park their money are not subject to a wealth tax
The rules say "strongest plausible interpretation" not "assume good faith all the time".
1.89 Crore Indians Lost Jobs in Lockdown, 50 Lakh in July