skysight-inc/HackerNews huggingface dataset:
> Seriously. What's the point of open source if companies just steal it, build billion dollar industries on top, and then lock everything down?

Let's imagine a VPN company is a thin front on top of Tor and they charge $50/year for their "service". They're not stealing Tor. It doesn't mean Tor should stop existing. Sure, it's a scummy thing for the company to do, but Tor is still a valuable resource that remains free for anyone to use.

The point of open source is the creation of value. That some companies capture some of that value (usually less egregiously than this example - AWS is actually providing a dynamic host scaling service that happens to host open source software, Apple is providing a software vetting service and top-notch hardware that happens to be built on Unix) is irrelevant in the bigger picture.

> Remember when the Internet was actually pleasant? When it was nice to build stuff for others to use?

This is still true if open source developers are more focused on delivering overall value than they are on their jealousy that a company is integrating their software and charging for it. This could definitely be frustrating if the developer was hoping to make a business out of their software, but if that's the real problem then the license should reflect that.
I recently bought a house here (in Japan), and our new address is

[something] 3-45-6

But apparently, the same is true for all the other people that bought their house on the piece of land where two old houses were torn down to make place for 6 new ones (parcels and houses).

I cannot wrap my head around the fact that they have a whole new building and land record, but it doesn’t have a unique address.

Uber eats is seriously confused about our address, and is guaranteed to send someone to the other end of the street instead.
I'm offering a complete aluminum body suits for $5000/each. Covers when they aim the signals upwards to catch the people only wearing foil hats. ^_^
Engineering Manager Event Loop (2018)
This suffers from the same flaws as most CVE statistics. You take some data that you have, assume it's a representative sample and then make some claims based on it. The problem is: It's not a representative sample.

If I understand this correct this is looking at CVEs where exploitation has happened as announced by the vendor. It's bad statistics, because you cannot assume all vendors tread these things equally (one vendor may be very open about known exploitations while another may try to hide stuff as much as possible). Creating such statistics also creates an incentive for vendors to be more secretive if such things happen, so it's not just bad statistics, it's also bad for security.
They produced it within months; it's the clinical trials to prove its efficiency and safety that took a while.

I wonder if this experience has led to developments to speed up the development process (without compromising on safety); I hope so, because this is not the first and will not be the last time we see a worldwide pandemic like this.
I was not comparing, but drawing an analogy. Sorry if people were affected by this in any way.
Airplay 1 or 2?
Apologies. I meant the myth of "Long Covid" – people being permanently disabled after they had Covid.
Honestly, either put in innovative, non-trivial content or remove it.
It does not — it didn't make the cut for v0.1, but I've raised an issue (#4) so I don't forget about it.
That makes sense. What I mean is that you can do that. Set up a license so rich people can’t use it.

What I meant is that releasing software under a license that doesn’t reflect what I want and the complaining will just lead to frustration.

This seems like a simple problem to solve, just release under whatever license I want. This faker.js project is released under MIT. The author can continue development under some non-OSS license and I think that will make him happier because rich people would stop using it. But I don’t think it will make him the income he wants.

I think the problem is that non-OSS licenses will result in people just not using the project, not that rich people will start shelling out.

As a small business, I would avoid these licenses as well because having multiple licenses kick in at different levels will be confusing and expensive. I’d rather use OSS or just buy commercial products.
https://www.skycell.ch/
The Russians and Chinese don't have phase 3 trials with data available to review, they're all phase 1/2.
That the timing of the press release is interesting... first business day after the election is called.

Massive corporations do have political agendas. I don't think anyone would argue they don't. But maybe it's just coincidence?
It's clacky if you bottom out heavily, and twangy even if you don't.

The sharpness of the clacks makes noise-cancelling headphones not work so well on it.
>In reality, a vaccine is probably going to offer a lower (but if this study is true, acceptable) level of protection. I wouldn’t be surprised if the protection drops exponentially after 2 months. Similar to the live virus

Serology reports for the Moderna vaccine (very similar technology) are showing 4-5 times higher levels of antibodies than those who actually contracted the virus.

https://www.nejm.org/doi/full/10.1056/NEJMoa2028436
I never had, and I ope I will never have to.
It's been a topic of discussion and low-brow comedy in Germany for as long as I can remember. Why do you lift the seat when using the brush?
3-4 swing states is still a national level. You're also talking about 20k-100k type numbers. This isn't someone winning by 100 votes.

What's funny about this situation is that Biden is on track to win most of these states by a larger margin than Trump did against Clinton. She did ask for a recount, but I don't remember her ever going on and on about fraud.
This study, and some of the comments here that state the opposite are too generic. Whether communication or focus is more important depends on the nature of the product that someone most work on. Some projects require vast amount of communication, like working in a startup that's solving hard technical issues on greenfield R&D territory. But if you're working in a mobile dev shop and doing the Nth same iOS app for example, then probably you won't need to bounce ideas with co-workers but know exactly what you'll need to do, and it requires focus above all to finish it as soon as possible.
Of course most of the jobs are somewhere in between these extremes, but even in those cases the tasks usually alternate between the two.
Lots of lower back pain is actually hip issues. Stretching and strength exercises for the win.
I didn't think that feature fit. Would people really use a general DNS client for this? I use nslookup.
>The fact so many people feel they need a gun for safety is the first and biggest issue IMO.

And the reason for that is simple - marketing.

Here in Switzerland I basically see no guns unless I go to the shooting club. There's none sold in the shops, there's none advertised in newspapers, tv or on the radio. And there is definitely no gun offered when opening a bank account.

Basically if you want a gun for whatever reason - usually for recreational shooting at the shooting club, then you have to go out and look for it.

In the US I have the feeling that they're marketed as a penis extension, and you're not a proper man unless you shoot things, with the view that you'd be quite happy to project a slug of lead into somebody else at high velocity to prove you're more of a man than they are.

To solve the problem in the US I think you need to ban the advertising - like cigarettes.

Caution: This weapon inflicts pain suffering and death to others. User may be incarcerated for murder if ever used. If in a situation of conflict, gun only increases likelihood of extreme violence - leave at home.
That's exactly what the maintainer of faker.js is doing. He decided to stop giving away free lunches.
Also note that being "diagnosed with COVID" (and COVID was explicitly used in the press release: "more than 90% effective in preventing COVID-19 in participant") is not the same as "not catching the virus at all (and being unable to transmit it to the more vulnerable -- note: at least 25% of people in the most developed countries, and even more in the U.S, can be considered "vulnerable" -- it's not "just the very old.").

So as it is written, it merely means that the from the vaccinated persons ("study enrolled 43,538 participant") in the distribution of the observed 94 "cases" diagnosed with COVID-19 it is seen that 90% of them are among the control group (among those who received placebo).

Note that the illness (as in "having symptoms") is called "COVID-19" and the test to the mere presence of the virus would have been formulated like "SARS-CoV-2 was not detected" and that's not what is written in the press release.

https://www.pfizer.com/news/press-release/press-release-deta...

Let's hope that the later information includes the tests to the presence of the virus, if it is at all regularly performed on the test subjects.
Create resizeable split panels in React
The mutations seen so far are minor and don't appear to impact our ability to vaccinate against them.
>covid deaths

You mean cases? They usually go for the biggest number they can display rather than the most informative.
That's the story.

It's funny because the Mac was introduced with a 1984 theme about PC as a uniform experience controlled by central authority and here we are.
How long, exactly, are they good for once they warm up?

I assume you aren't injecting people with something at -80C. How big of a window is there for injections?
Excellent news it's so high. For comparison, MMR is 88% effective on Mumps

"One dose of MMR vaccine is 93% effective against measles, 78% effective against mumps, and 97% effective against rubella.

Two doses of MMR vaccine are 97% effective against measles and 88% effective against mumps."

https://www.cdc.gov/vaccines/vpd/mmr/public/index.html#:~:te....
Okay pretty terrifying! How long does this random RNA stay in your cells?
Pfizer Says Covid-19 Vaccine 90% Effective Against Virus
Or maybe he didn't understand the reference to industrial sized extra cold freezers?
Could a Nasal Spray Prevent Coronavirus Transmission?
Yeah, setting aside all the politics and silliness, the science going on around this pandemic is remarkable. Going from nearly zero (yes, there was a bunch of research from SARS-Cov-1, MERS, and similar to build off of but nothing like this) to a functioning, tested, and mass manufactured vaccine in a year is absolutely jaw dropping. Even if it takes two years to distribute widely, three years to stomp out a pandemic is blindingly fast and a major credit to modern medical science, and the processes we have built up around it.
What’s such a special purpose for a Mac? Running Xcode?

This lock down will just get worse as they allow running iOS apps on macs and developers start hacking these things to bits and bypassing AppStore.

Apple will have no choice but to make macOS basically follow iOS model.
While this is interesting on itself, it does not make any claim valid or invalid.

Proving that A is worse than B does not prove that A is good or that B is bad. Or, if you are more mathematical: a > b does not prove that b < 0 or a > 0, where 0 is neutral.

And as I point out above: this was not meant as comparison but as analogy. If my analogy affected anyone, I sincerely apologise.
Enterprise Transport Security
I think "single-tasking" is key though :)
How is there a vaccine for mutants?
I wonder what will happen with the vaccine deals that governments have been doing. Like, what if they pre-ordered from one manufacturer whose vaccine proves inferior to the other ones?
Then write one. You can write a license with any terms you want. It won't be open source (per FSF, Debian, and OSI definitions) but it can impose absolutely any terms that are important to you. Don't be surprised if not many use it, but you'll have achieved what seems to be your primary objective.
Ask HN: Do You Trade Options?
There must be options traders and wallstreetbets users here. Let's talk about it, I know there are many smart people on HN. Maybe you could share some good readings, strategies, tips, stories of big wins and losses. Anything really. I'm just curious about your experiences with options trading.
FUD spreading arm chair scientist all the ol pepes have to get on to another topic with trump out of the picture.
There are reported cases of people who built up immunity against the Chinese strain and got infected with the European strain while still having antibodies for the first one.

Danish are killing 17M minks because of a novel mutation that infected 12 people (reported).
So people have the virus in their bloodstream, but it doesn't do anything and the immune system doesn't react either? I don't understand.
>I keep coming back to the idea that you should let the user decide. And optimizing on UB by default is always the wrong thing.

Aren't you contradicting yourself here?

And I do think that some UB optimizations make a lot of sense. Actually if you look at the way Rust does it, it gets rid of many UBs not by adding checks for them but by explicitly forbidding the UB condition to occur in safe code (therefore "optimizing on UB" by enforcing that the UB condition cannot happen in correct code, not by adding checks for it and slowing things down). That's why for instance pointer arithmetic is unsafe in Rust, since arbitrary pointer offsets can lead to UB.

Although I agree that there are a few C UBs that I think ought to be relaxed because they don't make a lot of sense for modern architectures though (signed overflow being the main one).
Thank you for clarifying this, I think it's much better if this paragraph doesn't distract people from the great work you are doing on Pijul. And being plagiarized totally sucks, as someone who has found his own GPL'ed code in non-open commercial products, I think I can relate, even though this is of course not quite the same. I hope you can find other ways to deal with that, though.
>Cops said FDNY fire marshals are combing through Squire’s charred, first-floor apartment to determine the cause of the blaze, an FDNY spokesperson said.

The fact that his apartment is 'charred' suggests he was doing stuff in it.

Could be he took the materials with him as he was trying to escape out the back window, or that's just where he was storing them so they wouldn't be found if a search was conducted.

I think it's useful that this was reported on, because it could make people more wary of shelling out money to a guy who was recklessly endangering others even if there were no nefarious motives.
I'm really excited to see what Pijul ends up doing. I do love git, and I think its simple mental model of content addressed commits and trees is fantastic. However I do often find myself annoyed by the lack of a "change" concept other than the immutable commit. It seems that this results in review tools bending backwards to add that on top and it makes backports and other cherry-picks harder to follow.

One of the show-stopper complaints that I had about Pijul was the lack of a version identifier. However according to this post that has now been resolved which is fantastic news.
> You don’t have to get a job directly related to NLP after you complete your degree.

This! I did a PhD in NLP and then worked as backend web developer at a startup and now I'm teaching Operating Systems and Distributed Computing classes... Go with the flow, fill the gaps as you move along..
When we buy cattle semen it's always shipped in liquid nitrogen tanks. UPS knows how to do this. It is more expensive than other sorts of shipping.
This is almost word for word the economic advice given by Larry Summers to Russia when Yeltsin (an American puppet) was figuring out what to do with Russian industries after the collapse of the Soviet Union.

He told them to put it in private hands. He told them it didn't really matter whose hands it ended up in. He told them that provided it was in private hands with property rights well respected then the economy would thrive throughout the 90s.

It ultimately ended up mostly in the hands of the oligarchs or abandoned while the rest of Russia starved. A lot of it got clawed back in the early 2000s and has been better managed since.
minus-80C-frozen? (that's -110F)
I don't think it's totally unbelievable that they waited until after the election to release preliminary results. Waiting a week or two wouldn't hurt the timeline, and would significantly damage Trump's campaign. If I worked at Pfizer that's what I would do.
Just going to plug a book here that was an awesome read in my undergrad on that topic, and the history of quant finance over the 20th / early 21st centuries: https://byjustinfox.com/myth-of-the-rational-market/
Maybe also manufacturers of liquid nitrogen dewars.
Oh, agreed. I'm more lamenting the fact that there's no good license for this (that I'm aware of, anyway).

> As a small business, I would avoid these licenses as well because having multiple licenses kick in at different levels will be confusing and expensive. I’d rather use OSS or just buy commercial products.

You could just license it from the start and not have to worry about the license kicking in, though.
It is barely to not at all noticeable. They also have a matte surface that makes the pen feel and sound like it's actually scratching on paper.
Maybe there is a slight semantic misunderstanding here, but in fact a "re-infection" is defined as such:

A patient must present a infection and the particular virus must be sequenced, and then present with an infection later on where the virus is again sequenced and identified as sufficiently different from the first sample. Otherwise it cannot be deemed a re-infection.

If these small differences in the genomic sequence are already a different strand, I don't know, not an expert.
But all 5 (?) cases known so far had a different sequence identified the second time.
dig has got the `-x` switch that simplifies the reverse lookups.
What billion dollar industry is built on top of faker.js?
I definitely understand the desire to avoid a build-time tool. Especially Gatsby is way harder than it should be to get up and running. But for me, portability and data integrity trumps ease-of-publishing. If you want to move your blog to a new system in 5 years, you'll have to migrate a bunch of HTML. If you had the posts in markdown, chances are it would be a plug-and-play with the new system.

That's the reason I pointed out the <span> usage - your source of truth for your data is HTML, but in this case it's already getting mixed up with design-related oddities.

Not bashing your choice for your blog, I think it's reasonable. I just wonder if HTML is the most resilient way to store blog data. It's something I considered a lot when redoing my blog last year.
Good time to buy shares in almost anything that's not related to online meetings or home deliveries, to be honest. Stock markets are skyrocketing.
Which would be great.
> If a server sends my browser text, however, and my idiot browser executes it as code

That's entirely normal.

There's no hard distinction between "text" and "code", and there always end up being leaks in the systems designed to keep them apart.

In the case of XSS, the difference is between "text" of the webpage that you're supposed to execute and "text" that was inserted into the web page from somewhere else.
It's a good idea and we could have data brokers built into this, software that filter out the data to companies that request it from this central store.

For example my bank doesn't need my exact location coordinates so I will only let them have generalised version to 20 miles accuracy.

An age verification service should only get a yes or no.

The police shouldn't get all details of my medical records, just the basics like if I'm diabetic or allergies.

Give the users control over their data
This reminds me of an Anatole France quote

"The law, in its majestic equality, forbids the rich as well as the poor to sleep under bridges, to beg in the streets, and to steal bread."
medical freezers of this grade seem to be pretty pricey, in the $6000 range

https://www.labrepco.com/product-category/cold-storage-produ...
Not half a million either.

Patients have died in ransomware attacks. Not half a million patients or even a quarter million but still, a browser zero day can be a threat to human life.
new link: https://i.redd.it/ve0ra9qip7y51.png
> TLS 1.3 is a recent version in a series of TLS protocol standards [i.6] and [i.3]. TLS 1.3 [2] introduces several significant changes compared with TLS 1.2 [1]. One of these changes is the removal of support for RSA key exchange and static Diffie-Hellman key exchange. The primary key exchange mechanism in TLS 1.3 is ephemeral Diffie-Hellman. Ephemeral Diffie-Hellman prevents passive decryption of TLS 1.3 sessions at any scale. However, there are operational circumstances where passive decryption of TLS sessions by authorized entities is a requirement. The decryption may need to be performed in real-time, or the packets may need to be stored and decrypted post-capture.
Situations requiring passive decryption of TLS sessions generally occur in environments where both the client and server, and by inference the data being exchanged over the TLS session, are under the control of the same entity. TLS encryption is often stipulated by internal or external security policies, but access to the unencrypted packet data is required for operational reasons, including:

• Application health monitoring and troubleshooting.

• Intrusion detection.

• Detection of malware activity, e.g. lateral movement, command and control, and data exfiltration traffic.

• Detection of advanced Distributed Denial Of Service (DDOS) attacks.

• Compliance audits.
VR is a investment for the future for Facebook. It's likely that they are operating with losses at the moment, price point where they are offering Quest 2 is much lower than most other VR headsets. I am sure that the criticism is not helping at this moment, but it's unlikely that it will affect their bottom line in 5 or 10 years time.
Pfizer mentioned them already in May and their stock has already seen an increase of more than 50%...
This.

Using a free use license and then complaining that companies and people freely use is just completely moronic.

And it's not stealing so stop with the hyperbolic nonsense.
Why, yes, you can register an XSS attack as a UK company name
Benefits of an integrated eCommerce marketing platform
Monopoly at its finest
The AppStore has every right to publish only apps they deem rightfull - so there would be absolutely no change there. Yet, apple should not be able to disallow me from using my device in any way I want to - that is I should be able to sideload anything, make it an alternative app store or a simple app.

They are even free to hide that option from regular users so the security of them won’t be harmed - they can’t install malware with 2 clicks because there will be 4 apple prompts explaining why it’s a bad idea. But I get to install a prog language interpreter or a proper browser - so win-win (other than apple’s profits, but I couldn’t care less)
I would be happy if somebody asked for timelines for feature requests, because it would mean that I have the option to extract money by prioritizing those features. Just make the companies bid against eachother, writing a bidding system (maybe second price auction for a work point where you set the number of work points needed for a feature) is really easy.
I really enjoyed that game.
Same for their repository linked from the main page:
https://nest.pijul.com/pijul_org/pijul
Yea, but aren't they also acquiring a disproportionate amount of assets/income?
No, the OSI has precedence: https://opensource.org/history