skysight-inc/HackerNews huggingface dataset:
Why would someone use this over Vault or SOPS? Your (somewhat condescending) "stuck using FTP instead of Dropbox" is a very poor characterization. I think you've entered into a very busy space without bringing anything new to the table.
To make this code clearer:

def get_users(f) -> Tuple[List, List]:
return (logged_in_users(f), logged_out_users(f))

def user_count(f) -> int:
return len(get_users())

Now it's clear this is just wrong code. To fix it:

def get_users(f) -> List:
return logged_in_users(f) + logged_out_users(f)

def user_count(f) -> int:
return len(get_users())
Can't post this link to Facebook as they ban this site ineffableisland.com.

Here is the reason:

"This URL goes against our Community Standards on spam:
ineffableisland.com"
Unfortunately DDG doesn't publish any law enforcement request data :/ They say they have nothing to give, but they don't actually publish any info abount what kind of requests they're receiving and what they're giving in return.

Google does: https://transparencyreport.google.com/user-data/overview?hl=...

Apple does too: https://www.apple.com/legal/transparency/
I think one of the main problems is lack of good OS security protections on mobile phones. For example, there can be different kinds of GPS accuracy available to applications. A weather application obviously doesn’t need high accuracy gps location, stuff like this should be made clear to user through OS.
How to Fail on TikTok
Because the people here are pro lockdown as they can work from home, their companies are making crazy money and last but not least - they are antisocial losers that cannot find their way home without a GPS.
Frankly I do not experience any problems mentioned by the author in my single page apps. Maybe because I avoid giant frameworks and my app does not drag down megatons of dependencies. Instead they feel nice and respond instantly. Customers love it.
For someone who found f=ma challenging (especially when it got to general motion and tensor math), this page of comments commits me to days of Wikipedia and pulling down Hawking's books from my bookshelf backdrop, yet again. Thanks, folks.
>USB 2.0 is fully capable of 1080p60 without issues. I have Logitech C910 and it does 1080p60 flawlessly

mjpeg compressed

https://telestreamforum.forumbee.com/t/6363z0/psa-windows-10...
Reduce boilerplate code with automatic synthesis of Equatable and Hashable
Whoa! Now I know where the newsletter signups came from :)

Hello HN - author here. Yes, I did audit this entire course over the fall of 2018 (edited again in 2019).

In fact, very soon I will have a podcast episode out with Prof. Skiena to talk about his book and the course.

Any questions or comments you want to shoot over please reach out!
I think cleaning up old sites should be prioritized; this is kind of the same commons maintenance as decommissioning old nuclear reactors.

Unfortunately the purely-for-profit structure of these long-term ventures can mean that there is no money to cover the cleanup if things go really wrong, depending on who owns the site. I think you need to look at some sort of cleanup fund in escrow as a precondition for building sites like this, which should incentivize improvements in safety measures too.
There is definitely an aspect of the 'the appropriate tool for the job'. We use Python extensively for 'glue' scripts on my project (build, deployment etc.). It's wonderful and convenient for programs that are 10 to 1000 lines long. The result is clear and predictable and maintainable (particularly when compared to a bash script alternative).

I would never write a large production app in Python though (having done it a couple of times). The flexibility becomes unwieldy at that scale and you have to have tests that exercise every corner or you'll have problems hours or days into running.
Who are these guys? Aren’t they dragging down the salary of the entire computer industry? Somebody, ... do something.
+1, I'm impressed how far these prototypes can get you, especially if there's an extra layer of correctness on top of the existing Haskell type signatures. For instance, LiquidHaskell [1] can naturally shift you towards implementing most of the necessary validation and parsing logic as part of your work on precise type signatures.

[1] https://www.youtube.com/watch?v=zCJV0xNY06o
As a non-Qt developer: which are the limitations of using Qt bindings?
This is fag packet math, so I'll spare any exact figures.

But if the second wave data for the UK is anything to go by, confirmed cases vs actual cases was at _least_ 5x for the first wave.

There obivously are other factors, but with increased testing that multiplier only climbs, bringing herd immunity numbers actually within reasonable grasp.

I strongly suspect there have been similar effects in the US.
How to deal with too many ideas
> I sell eggs

Is this like an actual side business you run? Can you tell us more?
Following this. It's my experience that for all the rhetoric about VCs being ultra-helpful at the end of the day the success of any venture lies with the founders/operators - the VCs can merely allocate some time, monetary capital or social capital to push things in the right direction. But that can be a huge lever.

Good question here!
The problem isn't the technology, it's the people. People don't want to share their data. You have to get people to actually accept that their competitors might be able to easily scrape data out of their website. They don't want that, and they'll pay money to keep it from happening.
There is precious little actual information in this article, and as the top comment already puts out, doesn't tell the whole story either.
16% is a good estimate of US infection rate.

https://covid19-projections.com/
(Excellent source during these times. Sad to see them deciding to stop moving forward but it's good for now).
Those are the type of things that I've searched for in the past. I just like knowing things.
Good list. I’ll add: If your company does feature freezes or general code freezes around holidays or corporate earnings, it can be harder to get “run the business” changes approved during these periods in a monorepo. So even in monorepo companies it’s common to have a separate “infra” repo for network and cloud configuration, sometimes for auth too. Makes the politics easier.
> Based on the political opinions of some manager somewhere in California?

There are some simple rules you can apply evenly with little or no political bias.

#1 Is it true? - Is a politician making a claim about the election which is false. "I won the election"... Likewise, are they making a claim which is verifiably false about current events? "Police have arrested Antifa activists in Oregon for starting the Holiday Farm Fire."

#2 Is it inciting violence — Is a politician making a statement that might incite violence. This applies equally to both sides. "Burn down all police stations" or "Show up in force and armed" are both calls which will lead to violent outcomes.
Maybe it’s just a counter narrative to TikTok is a security threat. Everyone has their bogeyperson.
I'm definitely planning on doing that.
Winter One
Oh totally, as I mentioned above I am not an infosec person and I hope I didn't imply otherwise (I did mention this specifically above). The above is just my impression from the outside but as someone who talks to and works with a lot of security/RE/infosec people.
"constexpr of all things" kind of proves the point in compile times, and so far Rust isn't fairing much better in that regard.
Are there any particular features from LLVM 11 that are interesting to Rust users?
“is actually a white-hat—e.g. by validating that they’re registered with the bug-bounty program of your client?”

I don’t think black-hats would feel ethical remorse from registering with a bug-bounty program in order to get access to information.

“Or does it not even matter, and you should just answer even a black-hat hacker’s questions about your APIs”

I can see the headline: “Foo, inc. helped hackers break into their systems”.
What I found fascinating is that Google is digitally signing the data given to authorities. This is more than any free or paid user can obtain.

You have a green padlock in your URL but can you prove in court you received a given email? No, because a SSL connection is transient and you can't replay it to show that Google's certificate digitally signed that email in GMail.
>And they'll say "See, see! This works, this should be legal it catches bad people, look at what this guy was doing"

You lost me here. Of course people are going to conclude that arresting a person that set fire to a car in order to intimidate a witness in a sexual abuse case is a good thing. And why shouldn't they? That sounds like a slam dunk good thing for society.
> The world already sees unblockable ads. They're called "Ads by Google" on the first page of Google search results depending on the search query.

I don't see them even when searching for commercial things, so I guess they are blockable (I just have uBlock Origin).
> The name and location of the store where Mary Hunt shopped are now forgotten, and the historic cantaloupe itself was not preserved: after the mold was scraped off, it was cut into pieces and eaten by the staff.

Well ain't that just horrifying by modern standards (both culinary and lab safety standards). It's funny how people speculate about the desperation required by the the first person to try various "challenging" foodstuffs... seems to me that revulsion is the unnatural, learned reaction.
Pros: reusable tooling, consistency across projects

Cons: huge blast radius, makes it difficult for groups to be truly independent
According to the blog post, the interviewers weren't even aware of the matrix solution until one candidate brought it up.
Yes, but the risk if you’re caught is huge.
So how do you propose to do error handling? I mean proper error handling where you can show the user a meaningful message and that can handle normal stuff like timeouts, 500's 400's and so on.
I don't know why you got downvoted. If the grammar is misrepresented as you suggest, then I'm inclined to agree with you. That's unless it's not so much a misrepresentation, but rather a non-standard presentation with pedagogical benefits. It doesn't seem like you believe that's the case, though.
In theory yes, with the current LLVM toolchain doesn't look like it.
well... that's part of the magic we're bringing to this. PyTorch Lightning is built exactly for this purpose, so it is highly scalable and designed for working at this kind of scale.

I built it while doing self-supervised learning research at Facebook AI research where I was running dozens of model versions each on 256 GPUs!

We've applied a lot of these lessons to Grid, so when you use Lightning with it you have to do nothing. For other frameworks you also don't have to do much in most cases but if there's some friction there we have tools and guides to help!
Sorry man, but there's a lot of truth to that. I noticed Russian-based attacks against the website within minutes of publication. I guarantee you by the end of the day, they'll be hammering it.
These models are fundamentally flawed in that they assume immunity or susceptibility are binary conditions. Based on recent research it appears a significant fraction of the population has at least limited immunity from prior exposure to other coronaviruses. They can still get infected but the immune system clears it more quickly and they tend to suffer fewer symptoms compared to immunologically naive patients.

https://www.jci.org/articles/view/143380

https://pubmed.ncbi.nlm.nih.gov/32978311/
2. SPAs can cache UI state in the client. The alternative is to store it in a server side session specific to each client.

Non-SPA doesn't mean 0% JS.
Also probably because you're close to the server. I doubt someone in say New Zealand would have instant page loads on HN.

The solution of course is having distributed data and logic which is becoming much easier and cheaper these days.
check out America's Test Kitchen's review:

https://www.youtube.com/watch?v=-suTmUX4Vbk
> R0, which is a constant inherent to the virus strain

I think you just devalued your argument.

https://wwwnc.cdc.gov/eid/article/25/1/17-1901_article
Unless they publish some canary they may not be able to do that.
Absolutely. This is one of the big problems with recycling as currently implemented in the US; it’s based on shipping our waste to countries with much worse waste-handling practices.
Multi-layered priority with org-mode
No it isn't! I'm sick of dealing with Vec's that do need to be a defined length to be valid, but could be any length! That's what a type system is for! But nobody uses the proper type for that, because actually working with the proper type is so awful!

It's the single worst aspect of working with Rust. I am very happy.
Cool project and I support it. However looking at this list I am seeing several things I intended to use for life and instead lost somehow.
Also, something like a renault zoe is selling like hot cakes because it is a relative cheap and small car.

Also, it's a really simple car aswell (which is great in my opinion).
> R0 is not a constant inherent to a virus strain. It's a contextual number, determined by population and behavior, population immunity and other factors.

From Wikipedia: In epidemiology, the basic reproduction number, or basic reproductive number (sometimes called basic reproduction ratio or basic reproductive rate), denoted {\displaystyle R_{0}}R_{0} (pronounced R nought or R zero),[20] of an infection can be thought of as the expected number of cases directly generated by one case in a population where all individuals are susceptible to infection.

https://en.wikipedia.org/wiki/Basic_reproduction_number
PR is good but it wont keep the lights on. If you want them to return to work for you, pay them with exchange currency. Apple's motive should be to encourage skilled hackers to come forward with exploits - i.e. make it worth their time. Not drive them into the arms of a competitor.
Why don’t you try to give an answer to the following questions?

After player #1 has picked door A, player #2 has picked door B and door C has been opened revealing a goat:

a) if player #1 stays with door A his probability of winning is ___

b) if player #1 switches to door B his probability of winning is ___

c) if player #2 stays with door B his probability of winning is ___

d) if player #2 switches to door A his probability of winning is ___

e) the probabilty that the car is behind door A is ___

f) the probabilty that the car is behind door B is ___

g) the probabilty that the car is behind door C is ___
Thanks for the insights. Yeah you raise good points I hadn't considered. I admit I know very little, what I know is based on what people have told me (few friends living in the US) and watching the documentaries "Waiting for Superman", "College Conspiracy", and "Stupid in America".
Hyperloop sounds like a bunch of hype. High speed trains are a thing already, as are MagLev trains, as are trains that go through tunnels, called the subway. The lack of their success in the US market has little to do with the technology itself and more to do with politics.

The addition of vacuum tunnels does little to alleviate the administrative / financial challenges of our struggling train systems. Vacuum has few practical upsides and a lot of downsides such as safety, reliability, and cost. It boggles the mind as to how investors are falling for this idea.

But perhaps marketing and branding are where Musk/Bronson's talents lie when it comes to high-speed rail? Please tell me otherwise, as I would love to see better rail infrastructure in the US.
App store principles to promote choice, fairness and innovation
Three meetings your remote startup must have (and one to avoid)
Yeah, after a day passed and my head cleared — and cooled, 38 °C yesterday —, I can see how my comment can be seen as low-effort at best. Lesson learned.

Thank you for the polite answer, by the way.
Mono-repos are either a shortcut to avoid release management and dependency management, or are a way to manage development at scales approximating Google's.

First, for almost all companies copying non-selectively what Google does is harmful - you are not Google.

Second, if you are a small team, your code only produces one binary that is shared across team boundaries, then you might be able to do with a monorepo. But if you are refactoring pieces of your code into libraries (you probably should be) and sharing those libraries for use by other teams in your company (you maybe should be), then you probably shouldn't use a monorepo.

However, converting may be a painful process. Using multiple repos, one per shared product (library, SDK, web site, documentation package) is harder to manage because you need to manage your dependencies much better and pull in the correct versions for the current product.

You also will need to communicate changes on products better across your teams, ideally with automatic notification of new releases that include a changelog and examples of new/changed features.

As part and parcel of the above you'll need to have better release management, including a release repository. What you use will depend on your environment, the language(s) your team uses, and your budget. There are some good Open Source dependency repositories out there that can be used to accomodate NPM-style dependencies, JAVA dependencies, and others (e.g., Artifactory).

In summary migrating away from monorepos is going to mean: investing in good DevOps people and giving them what they need to create/install/manage good processes; learning these new processes and dealing with the added work they impose on developers. But, it also will likely give you better products and over time both speed up development time and reduce defects (in part through more well-defined API touchpoints).
That second bug they describe would have allowed them to mess with inventory in a warehouse. They could have easily "disappeared" millions of dollars of products. Some of these other bugs would have required apple to disclose PII leak disclosure which could do tens of millions of dollars of damage to their company valuation.
I would be too if Russian agents weren't actively infiltrating our political groups:

https://www.bbc.com/news/world-us-canada-44885633
Yes and they say as much in the post:

>Just remember that the script showed in this article was created for educational purposes (just for fun) and it shouldn’t be used in places where you are exposed to anybody that could reach your keyboard. This is mainly because of the fact that your Bluetooth MAC becomes effectively password to your system, and despite of techniques that hides Bluetooth MAC it should be treated as public information. It works ok when using it at home, during pandemic, when the only hackers nearby are 2 and 6 years old and mostly using brute-force keyboard attacks, not Bluetooth MAC spoofing.
Right, fair enough. I think having as many as possible makes sense and they're worth the loss of convenience.
Chrome: Gaining security and privacy by partitioning the cache
hat aims to help machine learning engineers <scale up their models> more efficiently
Extraordinary claims require extraordinary evidence. Please provide us with some.
Yes, Russia is probably the greatest and most dangerous nation on Earth.
Gabriela Gomes was one of the first epidemiologists making this observation (as far back as May), and has found even lower thresholds (10-20%):

https://www.medrxiv.org/content/10.1101/2020.04.27.20081893v...

https://www.medrxiv.org/content/10.1101/2020.07.23.20160762v...

https://www.medrxiv.org/content/10.1101/2020.09.26.20202267v...
This is true, but many contaminants can still cause serious diseases and uneven distribution of active substances may lead to accidental overdose. Also unknown composition of the "drug" can cause unexpected interactions with other drugs people may be taking at the same time.
There also seems to be no proof that drop in prevalence of those diseases caused by needle sharing actually is caused by this program and not by cultural change and education that maybe changing the method of administering the drug is "healthier" (e.g. consumers started to prefer smoking over injecting).
Former semantic web researcher here. The problem with semantic web is that it's way too complicated for the average user (unlike html), with no clear payoff/ I see the need for Machine learning to automate several of these tasks. It is a laudable effort, but I'm not sure if it'd be anything more than some marginal improvements in data interop on a web-scale.
The conservative content that is popular on Facebook is not news, it’s people like Dan Bongino, Ben Shapiro, Mark Levine... and it’s not like there is a shortage of right wing media personalities.

You have to remember, a huge proportion of engagement on the Facebook Blue app are boomers and folks outside of large cities.
Ha, I have to agree. But never will I claim our government is perfect. In fact, right now, it is embarrassing for us Americans.
> Rust has very strict checks, and we -want- those. That's why we're using Rust in the first place.

One could argue that outside of safety guarantees that Rust provides it also happens to be a good language that people would like to use for those reasons (I really like the tooling, ecosystem and standard library when it comes to Rust, not so much the language itself).
I appreciate this paper because I feel like every single article about "herd immunity" completely misses the mark and makes some rather poor assumptions. These assumptions are likely made because they make COVID seem like a bigger deal which sells more papers and gets more clicks.

When an article discussing herd immunity assumes a completely homogeneous population I just shake my head and wonder how in the world this article got published.
>My child had a fever a few weeks ago, it was an ORDEAL finding a place to get him tested. You have to be quite motivated.

That's because the test won't change anything. If it's positive, they'll tell you to isolate your kid. If it's negative, there's a high enough false negative rate that you'll still need to basically treat them like they have COVID (stay home and isolate).
> Most people think "why do I care, I search google for sourdough recipes and to see what the heck sus means. The chances of me getting in trouble because I did this is really low."

Even though many people think like that, there is also this: https://www.socialcooling.com/ (https://news.ycombinator.com/item?id=24627363).
> So what's this person to do?

Right. I dunno what they're to do. I also don't really know which side I come down on 100% of the time. Maybe this is an ok practice? It probably works to catch bad guys more often than not. But it's also likely to be abused often. I understand the arguments on both sides, and I tend to side with the privacy side rather than the other side. But I get the arguments on both sides.

> Also: what does sus mean ?

Suspicious. All the cool kids say "sus" now :-)
To my knowledge, no... but I didn’t work at TI, only with the grad student who did the analysis. The effect isn’t unexplained, just mostly accidental and likely due to other constraints. It’s possible that after the effect was known that particular process changes were made to ensure/enhance it, but again I have no knowledge of it.
They removed Aaron Swartz? You've got to be kidding me.
Top IP attacker: 85.173.126.145
Everybody wins here. It's a bargain for Apple, because their ledgers deal with numbers that require the -illions suffixes, but it's ALSO $10k per person, which even after taxes is still a lot of money on top of their regular salary for anyone with bills to pay.
> noticed Russian-based attacks against the website within minutes of publication

Providing some proof of these things is part of the story, but instead we just get an "I guarantee you".
Simplicity and being able to checkout and work on single folders, this is not directly related to the repo being mono but usually you wouldn't use git as your vcs when working with mono repos.