skysight-inc/HackerNews huggingface dataset:
So much subtext about the undeserving poor. Except that it's not even wrong.

To give just one example, rates of alcoholism are higher in South India - both in TN and Kerala [1] - where endemic poverty of the Madhya Pradesh kind doesn't exist.

We can agree that addiction is widespread and there's been a world wide shift in the spending habits of people who earn less than a dollar a day. Banerjee/Duflo's Nobel Prize is based on that work [2]. Some relevant quotes:

> Yet the average person living at under $1 per day does not seem to put every available penny into buying more calories. Among our 13 countries, food typically represents from 56 to 78 percent of consumption among rural households, and 56 to 74 percent in urban areas. For the rural poor in Mexico, slightly less than half the budget (49.6 percent) is allocated to food.2

> Of course, these people could be spending the rest of their money on other commodities they greatly need. Yet among the nonfood items that the poor spend significant amounts of money on, alcohol and tobacco show up prominently. The extremely poor in rural areas spent 4.1 percent of their budget on tobacco and alcohol in Papua New Guinea; 5.0 percent in Udaipur, India; 6.0 percent in Indonesia; and 8.1 percent in Mexico.

> Perhaps more surprisingly, spending on festivals is an important part of the budget for many extremely poor households. In Udaipur, over the course of the previous year, more than 99 percent of the extremely poor households spent money on a wedding, a funeral, or a religious festival. The median household spent 10 percent of its annual budget on festivals.

5% is a lot on alcohol, but cannot be the major cause of poverty, festivals being an even bigger outlay. We also know that in India those spending habits are gendered, which is why prohibition campaigns have been very popular among women voters.

Nevertheless, the idea that the poor are poor because of their 'poor values' is one of the oldest tropes in the book. Please don't spread stereotypes that are neither grounded in data nor in actual lived experience.

[1] https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7014857/

[2] https://www.ncbi.nlm.nih.gov/pmc/articles/PMC2638067/
Page 9 of https://www.tesla.com/ns_videos/2019-tesla-impact-report.pdf has a chart for that (Average Lifecycle Emissions in New York State (gCO2e/mi)).

Electric: 54 in manufacturing, 74 in use

Gas: 45 in manufacturing, 420 in use
I am not sure I understand the sentence "limiting the WA spec to only try to sandbox the WA binary from outside memory". I would not say that we (as in: the authors of the paper) are trying to limit the spec, or that we tried to only look into those parts of the spec that are not concerned with security. (I hope I do not misunderstand your point.) The spec/language/memory organization of WebAssembly really does not do much to provide security inside a WebAssembly program's own memory.

I do agree with you, however, that our findings do not invalidate the overall design of WebAssembly. I really like the simplicity and generality of WebAssembly, and the technical (and social) achievement of having a "universal bytecode" supported in four different JavaScript engines (and some standalone VMs), on top of several different hardware architectures (x86, x86-64, ARM, etc.), with good performance, etc. I also think "host security" (which we are not really looking into) is solid, with two qualifications:

* In browsers, WebAssembly is sandboxed like JavaScript is, which is well tested.

* In other host environments (in particular, standalone VMs) the story might be different. It is hard to make any general statements about host security without talking about the concrete host at hand.

> they don't appear to even try to break the WA-host memory barrier

That's correct. However, just because we did not try, I would not say that breaking out of WebAssembly memory is impossible. But those attacks will be engine-specific. There have been some attacks against WebAssembly implementations (https://labs.f-secure.com/assets/BlogFiles/apple-safari-wasm..., https://googleprojectzero.blogspot.com/2018/08/the-problems-...) and surely will be more; a VM implementation is non-trivial with potential bugs after all.

> don't dump WA output you can't validate directly into DOM

Exactly, that is one of the problems with shortened statements such as "WebAssembly has great security". At the very least, one should be aware that inside WebAssembly's linear memory, many common security features are absent. This is relevant in particular when you link together large applications (including legacy C and C++ code) into a single WebAssembly binary, that all share the same linear memory.
> I am still comparing Zig and Rust to see which I am going to go with

This is really puzzling to me: in what context are you working to have hesitations between Rust and Zig? One is a production language, the other is an exciting experimental language mostly written by a single genius. Go for Zig if you want to have fun, and Rust if you want to actually build something. It's like hesitating between Kotlin and Idris!
Agree 100%. I wrote a whole post about that. https://letterstoanewdeveloper.com/2019/11/11/learn-sql/

In a more general sense, you have to be able to peel back abstractions. Those can include data storage abstractions, network abstractions (no, a network call isn't free, even in the same AWS AZ), and deployment abstractions like Docker.
I wonder if Sony, Microsoft, and Nintendo are worried that they are next? Maybe Amazon too with their Kindle exclusivity?

It's hard for me to root for either Apple/Google or Epic, but if Epic's action is the beginning of the end of exclusive stores, then go, Epic, go!
Yes, if there was a library that eval'd unsanitised input the damage potential is the same.

The practical difference is that it's a lot harder to assure code written in unsafe languages is free of defects like this since they manifest as benign operations (every write to a buffer is a potential vector) rather than obviously dangerous operations. Concretely, you could grep for eval and convince yourself that each use is OK (assuming it's rare - it ought to be) but you couldn't do that for common language constructs that could be exploitable like writes to arrays/pointers.
I suspect your kids will be fine as long as they have a supportive and conscientious parent, as you seem to be.
PriFi: A Low-Latency, Tracking-Resistant Protocol for Local-Area Anonymity
>Bullshit filter #2: Does their livelihood depend on being right?

That one is a tricky one, because pretty much every single activist organization and non-profit cannot exist unless they are correct. And even if they 'win' it's very hard for them to admit it and dissolve their organizations.

The author also references a quote from Nassim Taleb and his claim to fame is that he predicted the 2008 crash - but I never got a sense if he just got a lucky guess or there was actually something to his model.
> You give me the most well-behaved kid, ...

As a first-time father of 2.5 years old, I worry a lot about his behavior like when he hits me for no reason and then laughs. That cannot be normal, or so I used to think.

His pediatrician assure us that this is normal toddler behavior. In fact, lack of such behavior is cause of concern. Another thing she told us is that social workers look out for extremely well-behaving kids because they might be suffering abuse.

At this stage, I personally don't have experience with school age children but I imagine it is not normal for 5 years old to be able to sit in front of laptop for several hours.
Reminds me of Euthanasia Coaster

https://www.moma.org/interactives/exhibitions/2013/designand...
so in what wonderland are you charging your boat with this 99%-less CO2-grid?

And guess what, boating could arguably also be done with a 100% reduced emission footprint. It's called sailing.

Btw: what did I miss that owning and operating a boat is one of the biggest outdoor activities (especially small motorboats?)?

As far as the tech goes: it looks interesting, but safe the "we are making the world a better place" part.
An Elixir convention I've seen is to put the thing you're operating on first, so that you can compose functions using the `|>` operator, which places the previous expression as the first argument of the function to the right.

Maybe something like this?

defmodule Compare do
def clamp(number, minimum, maximum) do
number
|> max(minimum)
|> min(maximum)
end
end

import Compare

clamp(5, 1, 10) # 5
clamp(1, 5, 10) # 5
clamp(10, 1, 5) # 5

some_number
|> clamp(min, max)

As a side note, I think the Elixir |> operator is a stroke of genius that other languages should take a look at. Making the pipe operator append the _first_ argument has the following benefits

1.) It makes the most "important" argument of the function the first thing you read in function signatures

2.) If you need to add more arguments to a function signature later, they tend to be less important the original args, so they tend to make sense at the end

3.) It creates a convention for all libraries to follow so they can leverage the pipe operator. Its really jarring when the thing you want to put in a pipeline isn't the first argument (looking at you `Regex`[0] which puts the regular expression as the first arg and not the string)

[0] https://hexdocs.pm/elixir/Regex.html#replace/4
Rainwater harvesting guide for rural homes
I'm curious since they also paid a bunch of other people, totally 900M that it will be a helpful argument in court to return the 177M.
Are Space Elevators Possible?
Also saw the Zin yesterday - clearly not at the same level of production, but they went the non-foiling route, and it seems like the torqeedo has a bit more range?

17 knot min foiling speed sounds quite fast, especially for water skiing in any sort of surf, but the Candela looks fantastic for getting around the lakes / bays on shorter hauls.
Yeah this is concerning us as well ;-)

So we have two measures in place right now:
- We rate limit voting requests
- You can vote just once per tool
It depends. Given the amounts involved, it is unlikely that ACH was used. With wire transfers, the basic rule is 'once it is out, it is out'. You may be able to get money back by communicating with recipient and by sending a request for the funds back, but they do not have to honor it. Recipient's back will basically ask the recipient if they agree to the return, and if they don't, that is the end of the story. That is basically why CITI was forced to sue. Other recipients played nice. That one recipient did not.

edit: There may be some leeway if there is fraud involved, but even then it is more along the lines of bank freezing the funds than about sending them back.
16,328 results just on GitHub, though it fluctuates on refresh, and some are commented out: https://github.com/search?q=%22from+python%3A%22+apt-get+ins...

(And there's likely what to clean up in the search query to make it filter more irrelevant results).

Seems like though "yes" is the answer.
As pointed out elsewhere in this thread, there is a danger here that you have to manually verify the origin of the page you are on, which makes you far more vulnerable to phishing attacks, which are common and can be very sophisticated (things like pages that look like normal content but change to a fake Google log in page when you minimise the page, so when you come back, it is there waiting).
They go by many names, but there is a Strong undercurrent of "Capitalism Bad we must have socialism" crowd on the far left that hate individual freedoms and rights and prefer Group rights and entitlements. That promote equality of outcome not equality of opportunity. That reject merit and instead want to define people based on dynamics of intersectionality.

>>AntiVax - Flat Earth

To Attribute them only to far right tells me you do not really understand these groups. They are not left or right politically, especially anti-vax for which many have far-left economic and social positions
and now they have their 2 metric tonnes driving batteries consuming coal. Whew. Maybe we should think about systemic change.
in k:

xs: 1 2 3 4 5
max: 4
min: 2

max& min| xs
2 2 3 4 4

works for scalar, vector, matrix
Yes, you are, just not yet, exactly like revlon/brigade.
> some C library you have compiled to WASM: wrap that functionality up with an interface, compile that to WASM, and only pass it the image data you're happy for it to see

That is good advice. Separately compiling C code into individual modules with small interfaces and as little host imports as possible does make exploitation harder. This is also one of the propositions we make in the mitigations section of the paper.

> If folks start compiling large amounts of their functionality into one single chunk of WASM

However, I also believe that is what will happen soon. Many people are eager to use WebAssembly for more parts of the front-end (and also because they want to develop in Go, Rust, etc., see the increasing number of DOM-libraries for WebAssembly). With more code being linked into a single WebAssembly module, it becomes more important to look into security inside a single WebAssembly module.
HTTP/3 is built with TLS 1.3 and have faster handshake.

Second - HTTP/3 define some "idle" state of connections like 30 seconds or even more. So you can download something and then nothing. Here HTTP 0.9/1.0/1.1 and /2 closes connections. On HTTP/3 it was set to idle - nor closed. And let say after 15 sec you need new resource. On HTTP/3 connection flow continue where was stopped. On previous versions you must make TLS handshake and then to make new request. This mean performance penalty because congestion control will start with values similar to 0.
Yeah - wow.
I would argue that beauty products catered specifically to kinky/extremely curly hair and deeper skin tend to be dominated by black women. (Issues to address: Ashiness of skin, undertone colors for foundation/concealer, hair needing to be well-moisturized)

At least on my recent memory, when Fenty Beauty first came on the scene it blew up extremely fast, as it was one of the first major makeup companies specifically catering to non-beige skin colors... the company was founded by the artist Rihanna, who identifies as black.
Ask HN: Is it possible to donate small amounts to any strangers on the internet?
Hi HN! I was wondering, if you were given the task to do so, how would enable people to donate very small amounts (5cents) to random strangers on the internet (anyone on hacker news, reddit, youtube)?

Asking because my dad says it’s simple and I am trying to tell him its not. Also, I don’t think many people want such a feature.
Thanks a lot, yes I did :)
See, if I travel to another culture, I don't expect it to change to my whims. I would think if they don't value their own culture, they probably wouldn't value mine either.

I do actually work with many ethnicities and have come to the realization that they are all idiots. There are differences in representation between production and administration, but not because of bias or racism.

> so really we have to go for immersion therapy

No thanks. You are free to travel though.

> We (white men)

Jehovah's witnesses tried the same shtick once as they tried to include me in their believes, but we are no group. That would only lead to quarrels. Europe wasn't always as peaceful, even if everyone was pretty pink.

> if our daughters dont see their mothers working in IT

Honestly I think the situation got worse for women in the last 10 years. Through expectations placed upon them by others and themselves. Formerly it was a rarity but few really noticed it. Now their actions would be put under more scrutiny. Here bias does indeed play a role and some discussion emphasized that it apparently isn't normal for women to be in IT.

> we just have to kind of force a more diverse group

I fundamentally disagree that anybody needs to be forced. Freedom of association and that thing... Plus, that already happened countless times before and it will happen again.
Andiodine lets you tunnel IPv4 data through a DNS server
I don't know if I agree. I like showing that revenue models that are not ad-based can be viable. Maybe we can break the ad-supported business model that has destroyed the web by showing there are alternatives.
Luckily, this is a solved problem for go.

func helper(a float64, c chan float64){
time.Sleep(time.Duration(a) * time.Second)
c <- a
}

func clamp(a float64, min float64, max float64) float64 {
c := make(chan float64, 3)
go helper(a, c)
go helper(min, c)
go helper(max, c)
_, out, _ := <-c, <-c, <-c
return out
}
It's behind a paywall, but according to a summary [0], Marsalek or someone from Wirecard built fake physical branches of banks on the Philippines. The auditors of EY were invited to come to these branches to talk to actors who convinced them that the 1.9 billion EUR of Wirecard exist on their bank accounts.

It reminds me somehow of the movie "The Sting"...

[0] https://www.focus.de/finanzen/boerse/wirtschaftsticker/schau...
Well here is another direction I recently learned about: Amazon Prime Video Direct:

https://videodirect.amazon.com/home/help?topicId=G201978440

I found one YouTube creator who moved his videos to Vimeo on Demand and then to Prime Video Direct. I think you can choose to require viewers pay for your video, or have them included for free for Prime members, where the pay is $.06 / hour of viewing (it used to be $.15 / hour).

Anyway, it's an interesting alternative for content creators, as long as their videos are high quality. The pay is certainly much better than YouTube, so I have a lot of sympathy for this route. Plus it's like YouTube Premium in that there are no ads.

I'm not sure if Amazon will actively promote these videos, so I suspect YouTube remains king for discovery.

Here are the videos:

https://www.youtube.com/user/CountryHouseGent

https://www.amazon.com/Travels-by-Narrowboat/dp/B07S6CK8MW
The USA has plenty of problems. But they don't include murdering 10s of millions of people, harvesting organs from prisoners, policies leading to enforced abortions and murders of baby girls, and universal suppression of speech.

Moral calculus can be dangerous, but the numbers are so huge that it seems fair to me to put the 20th century communist regimes at the top of the list for most evil.
Never heard of Teamscale before, yet it has a lot of votes in all its categories.

Also one of those expensive ones.
Show HN: Kenzer – a zulip chatbot specializing in automated webapp bug hunting
Visual Lambda Calculus [pdf]
The way I see it this kind of global threat has been unprecedented since ww2 and I am also of the belief ww2 did a lot for world peace. We are indeed lucky it's not been more serious.

I am not pertaining to know the future and I do admit there is a very high chance I'm being overly optimistic - basically I accept your appraisal of the situation is sadly more probable.
> Put a negative income tax in place and ensure a minimum level of funds for every citizen and see how quickly Amazon's treatment of its warehouse workers improve. Far more than any union could provide.

We ALREADY have negative income taxes. 20% of the population are given more in refunds than they paid in. 40% pay zero taxes. When you add in government benefits and programs, 60% of households take in more from the government than they pay in.

https://taxfoundation.org/60-percent-households-now-receive-...

The point here being that hourly wages from these companies ALREADY account for theses factors. We could abolish these programs and raise wages, but that would be unpopular among a decent portion of the country.

A more interesting discussion is Consumption taxes -- taxes on spending your money. Consumption taxes account for 17-18% of all taxes. These taxes kinda slide under the radar for most people despite accounting for a huge portion of the taxes they pay. These are also the MOST IMPORTANT taxes because they affect goods and services directly (corporations pay attention even if most individuals do not).

A lot of states still charge sales taxes for things like food, diapers, and personal hygiene products (most at a reduced rate). These taxes definitely disproportionately affect the poor and should be abolished. Likewise, most states exempt prescription drugs, but still tax OTC drugs which also adversely affects the poor who are less likely to visit a doctor and/or have healthcare coverage.

Taxing services to "improve or repair personal property" exists in almost half of states and is also a bad idea. It disincentivizes maintaining things and all the important things like cars, property, buildings, etc are already taxed (and most are subject to tax increases based on improvements). Then they ALSO tax the person doing the improvement service effectively taxing one improvement THREE times. This is especially important when looking at small businesses or contractors who have to pay extra overhead to deal with the additional accounting. The most egregious part is that only two states tax white-collar jobs because the white-collar workers are rich enough to lobby while blue-collar service jobs like janitors or construction workers cannot afford such luxuries.

Finally, I'd love to see vehicles under $10,000 be tax-free (value as assessed by the state). Reducing vehicle costs for the poor would drastically increase their access jobs and offer an easier way to leave impoverished areas. In contrast, the electric vehicle incentives are almost entirely tax breaks for the well-off and disappear before the vehicles are cheap enough for the less well-off (if battery prices ever drop low enough for that to happen).
You are probably talking about how previous coronavirus exposure seems to give some people some level of T-cell protection against SARS-CoV-2. T-cells are a different part of the immune system from immunoglobulin proteins, which is what these antibody tests measure. So it's more likely that those people would show up as a negative on this test because they wouldn't have the right immunoglobulins in their blood.

It's also possible that some people are fighting off COVID via a T-Cell response while not developing significant immunoglobulins or that immunoglobulin levels fade quickly while T-Cells don't. Those people can also test negative for immunoglobulin antibodies despite fighting off the disease.

So it's actually more likely that these tests are significantly under counting exposed people in total. But these tests aren't perfect and for any specific person, they could give you a false positive or a false negative result.
I’d expect the bank to eat the cost if they could not recover the funds.

Just because the receiver of the funds is not at fault does not mean the customer should take the hit.
A different/wrong/naïve political ideology is not the same as "Hilary Clinton is literally raping children in the basement of a pizza restaurant".
Wonderful! And as it generates single stroke SVG exports, I can output to a laser cutter and have it write for me :)

I can't think of a practical use for this, but that's not stopped me wasting the last 15 minutes getting my machine to write out expletives in neater cursive than I could manage...

- ed

Oh, and this is by far the best digital 'handwriting' I've ever seen, despite the occasional glitches and believe me - I've been interested in this sort of thing for decades.
Exactly. "Does their livelihood depend on being right" is a chicken-and-egg problem. Applying this principal only makes sense if you have a preexisting bias against activism in general, which some people actually do.
Raising a Seed Round During Covid-19
Okay, who’s going to pay for that?
It uses UDP because simply can't change all TCP infrastructure worldwide.

Example - i'm still using on some place router Linksys WRT54GL with kernel 2.4 that is almost 15 years old. Because device still works and there was low network requirements.
Code: https://code.google.com/archive/p/visual-lambda/
This site could really use a filter option for cost of the product being mentioned.