skysight-inc/HackerNews huggingface dataset:
A few things come to mind reading this:

> For comparison, Google Play has 2.7M Android apps in its store, with a download rate of 84 billion downloads a year.

I assume Google Play downloads are actual people making decisions to physically click a button, downloading an app intentionally. Docker downloads, on the other hand, are 99.9% automated by the number of times I pull images. Downloads are nearly always part of a CI pipeline, docker-compose.yml or some other automated sequence.

It strikes me to see these numbers compared.

> At Prevasio, we have built a dynamic analysis sandbox that uses the same principle as a conventional sandbox that ‘detonates’ malware in a safe environment...

Ok, this sounds pretty cool. Would be great to see an open source repo of the work.

> With no built-in security mechanisms present or exposed to the industry, Docker Hub today reminds a Wild West that Google Play once was.

Yup, that seems fair, but I don't know if it's a bad thing. When I download Git repos or take code from the internet I am not expecting it to be safe. It is my responsibility to vet code before using it somewhere sensitive. Does Docker want there to be an expectation that user-uploaded content is somehow safe?

> Malicious... images... split into the following categories...

> - Coinminers: 44% (2,842 images)

> - Other: 6.6% (426 images)

> - Hacking Tools: 20% (1,269 images)

> - Windows Malware: 6.4% (413 images)

> - flatmap-stream: 23% (1,482 images)

This is great to see. I assumed most of the malicious images were "malware"-types, but it makes sense that coiner miners are more lucrative.

> Some publicly available Docker containers include open source web platforms or other web applications that are found to be trojanized.

This is alarming. I often look for a Dockerhub link on master repos or other official project pages, but very few are "obviously" official. For example, how are we supposed to know "jupyter/scipy-notebook" is official, but not "jupyter-notebook/scipy"? It would be great for projects to standardize on a way of flagging official images.

Finally, I will admit to not seeing the one type of vulnerability that concerns me most: host-breakout. That is, when code in the container can affect the host system it is run on. I think there is a sense of security when using a container, and if you accidentally download something malicious within the container than you can `docker rm` the whole thing and still have a clean system.

I would be interested to see an analysis of malicious Docker images that can break out into the host machine.
My Funny Habit: Code Review for Solo Projects
Our project is definitely open-source, but has an LF sub-project with a pretty decent amount of funding. We've been playing with the gitlab functionality, and was thinking it would be good to support a fellow open-source project financially, since we can.

But to move to one of the licensing models on their pricing page requires us to start to pay per-user. How many seats should we buy? I have no idea. Right now, if someone who's given one or two drive-by patches wants their own space on the project, we just give it to them. If it cost us an extra $50/year (or $240/year or $1200/year depending on our tier) for such users, what's the cut-off for who gets to be part of the project? It just changes the whole calculus.
IANAL either, but I think, if someone were to take it to court, it would:

1) Travis achieved a market-dominant position in part thanks to widespread use by open source projects.

2) Open source projects invested significant resources into integrating with Travis based on their promise.

3) Moving to something else would take significant resources. The exact loses are probably exactly how much it would cost to pay to continue to use Travis (and collecting some of that money is precisely why Travis stopped offering a free service). If it wasn't significant, Travis wouldn't have made the change.

That doesn't mean it's worth anyone's time to litigate.

As a footnote, the traditional way to handle something like this is to continue to provide a free service, but to make it worse and worse and worse. Travis could satisfice the promise by keeping an insecure Raspberry Pi under someone's desk running old code as the "server farm" for open source. Courts don't necessarily consider satisificing to be following through on a promise, but costs of litigation go way up when there are open legal questions like that. At that point, it's usually almost definitely not worth anyone's time to litigate.
Virus can infect cells in areas that are difficult to reach for immune system - epithelial cells lining the nasal mucosa for example - but they still would produce viral particles that could be sneezed on someone else.

Indeed this paper found association between viral load and symptoms - hospitalized patients are shedding less virus

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7332909/
> Each individual microservice becomes simpler, but the whole system becomes much more complex than an equivalent monolith with a single DB.

Indeed a distributed system forces developers to think through how dependencies communicate, which otherwise would be taken for granted.

However, that misses the whole point of microservices. Services are peeled off monoliths because the monolith no longer meets operational requirements, which is trivial to provide with a distributed system. I'm referring to aspects such as reliability, or ceasing to be able to scale vertically.

In addition, some people simply mindlessly develop monoliths not realizing they already have a distributed system, once we account for the fact that managed services and even running a database already opens that door wide open.

> Microservices have their advantages, but simplicity and testability aren't part of them.

Not really. Contary to your claim, microservices make systems more easy to test. The only thing that changes is that you're no longer able to drop a breakpoint in a request and track it all the way through a database. However, you get cleanly separated components with very crisp boundaries that make it trivial to test interactions.

Perhaps the main cultural clash that is added by moving from a monolith to a distributed system is that developers start to need to thing things through when they put up an interface.
No. Hence the curiosity.
The uncomfortable fact is that the message is not being taken seriously by the spanish-speaking population. It is what it is. They are younger, highly mobile, family oriented, large households with strong socialization tendencies. It's not because of their occupations or access to healthcare. The infection rates are 4 to 5 times higher. Just check the county data. Facts speak loudly. This message is coming from a mixed race household, so no bigotry involved.
Big fat phony we got here!
Improve Your Creativity by Applying Constraints
Funny that covid deaths are diagnosed the other way around: even if you die WITH covid it's assumed that you died BECAUSE of covid.

But when it comes to the vaccine it should be the other way around? So we have to apply common sense to the vaccine related deaths but not to the covid related deaths?
This is a great reply, and is a good reason why down-voting the original question is counter-productive: if it gets down-voted too much, fewer people will see the informative replies!

If the OP were spreading unsubstantiated panic then I would take a different view of it, but to me it appears as an honest concern about a novel medical procedure.
1. Relative risk

2. The study of the vaccine thus far evaluated immunity, not transmission; not the same thing.

3. A 90 year old is far more likely to die of the virus regardless of whether she is infectious.
>>more force than necessary.

"Necessary" is a very subjective term, and many people disagree on what is "necessary."

For example I do not believe it is "necessary" to assume with out cause or evidence that every warrant enforcement will be a violent encounter the requires a military style response like we see here

Sure if you are going after a known violent criminal that committed a violent act (like murder). however IMO These types of tactics are not "necessary" in cases like the one we have here
Easy Steps to Applying Makeup – information drawer
That is a good question that the parent comment has prompted me to consider. As mentioned above, I have attributed the specifics to the Yeager biography for many years, but incorrectly.

My treatment was to apply Vaseline to my wounds to keep them soft, then 2-3 times per day to scrub the wound with a gauze pad soaked in hydrogen peroxide. It was very painful, but resulted in none of the predicted scars. Similar to Yaeger's treatment, but different in the specifics (as further review pointed out to me).

I am not a doctor, please don't follow any medical advice I share.

As for the 0 references, I found 1 (or .5, it only mentions Hydrogen Peroxide): https://pubmed.ncbi.nlm.nih.gov/23561480/

In addition, I found the following:
https://skeptics.stackexchange.com/questions/5752/can-burn-s...
http://www.poetv.com/video.php?vid=37867
> 3. A fortified monastery gave enemies a hard time in WW2 in Italy, I forgot its name now.

Monte Cassino?

See: https://en.wikipedia.org/wiki/Battle_of_Monte_Cassino
The line was every pilot wants to sound like Chuck Yeager and every ATC wants to sound like a NASA mission controller. I remember hearing that one in an SR-71 video (I think it was the air speed story).
>And more importantly, how do we make more Elon Musks?

You take rich families from apartheid states that made their wealth of gems trade & slavery, get the kids excited about space, and give them a world-class education and a huge supply of slaves mining cobalt in africa.
Years ago I read about some game service that detected cheating and put cheaters into games with other cheaters. The author said it was pretty effective.
There's the third way: https://wiki.postmarketos.org/wiki/Devices

You can buy the used devices cheaper than Pinephone and play with them. Not perfect hardware support, but enough for hackable mobile device with privacy and low-distraction mode.
Drowning is not a pleasant way to die. I drowned as a child and lived to tell the tale, but it's not an experience I would not recommend. At all. If you've determined that you won't survive your shipwreck, you might want to consider a faster way to die.
Here’s [0] an email she sent to the Brain Women and Allies internal list. I’m not sure if that’s the “email that got her fired.” Deans document says that Gebru sent an email with specific demands and a date for resignation and neither are on the Brain Women email.

If this is the email that Google used to say “we accept your resignation immediately” then I can see how she feels fired. It just seems like a venting complaint and doesn’t seem like a resignation email or ultimatum at all.

[0] https://www.platformer.news/p/the-withering-email-that-got-a...
Jesus, that second cop is going to pop himself in the face if he actually fires his gun doing that Call of Duty cosplay like that.
Can someone explain why it’s not enough to just vaccinate people who want to get vaccinated? Doesn’t that cover everyone who wants to avoid covid19?
Would aimbots be impossible to make if there was no anti-lag / network prediction code? As a thought experiment, imagine a game which has only single player and LAN multiplayer (Local Area Network), where you have to physically connect computers to each other. Games used to be played like that decades ago, and today we have PCs that are much more mobile - notebooks and laptops. As far as I know, LAN has super good network latency and it could work without lag compensation code. Didn't DooM work like that? Also Quake before QuakeWorld.

You don't have to lecture me about the practicality of releasing a game that has LAN only multiplayer, or that people have jobs, kids and responsibilities. I get that.
Bootstrap 5 Beta: RTL support and namespaced data attributes
That sounds like needless idealism

Do you really think your front page needs all the queries reran for every single user that visits? Even though things won't change for, let's say, even 30s?

Even the front page of HN is cached. Their system is pretty snappy but not caching what's trivial just doesn't work in the real world.
Not really, it's typically water limited and not run full out. If water was pumped up during sunny (or windy) days when there's a surplus you could reuse the same water over and over again.
You're right that the recent efficacy studies of the COVID vaccines only demonstrated protection from the disease. That doesn't mean that they do not prevent spreading the disease, only that we don't know whether they do. Presumably the reason for this choice of endpoint is that we can detect sickness, but we can't reliably detect transmission.

If I may pick another nit, it's not asymptomatic but presymptomatic that seem to be the major concern, from what I've heard: that is, people who spread the disease will eventually show symptoms (usually within a day or two). The balance of evidence seems to suggest that people with viral loads that never get high enough to cause illness are probably not enough to cause a significant number of transmissions, but we will have to wait for widespread vaccination to confirm it.
I would be gobsmacked if it isn’t available privately. I’m sure someone is planning it.

I’d guess that wide spread availability privately will coincide with when the highest risk groups have been vaccinated and then the government will say it’s “only right and proper” that people who aren’t very much at risk, who “can pay, should pay” rather than “burdening” the NHS and timed that they won’t look too callous.
Thanks so much for your awesome article. It was a fantastic resource which gave me invaluable insight while I was working on this project: https://github.com/ajxs/jsFO
Probably the billions that governments have paid for their place in the queue
Wonder if any of these are suffering from the high pooling rate issue for gaming mice on Big Sur[1]? Not sure if it affects M1's.

Just ran into this on my 16" Intel MBP after upgrading to Big Sur and attempting to play a game while using a Razer mouse.

Basically many gaming mice in including my Razer have upwards of 1000hz poll rate by default and apparently macOS does not handle that well causing high cpu in WindowServer, however in Big Sur it really doesn't handle it well hitting 150% cpu in WindowServer and games seem to be almost unplayable do to massive stutter. Supposedly some improvement in 11.1 but still recommended to lower poll rate.

Had to plug my Razer into a PC to run their config software to lower the poll rate to 125hz. Now everything runs great, didn't realize how much it was effecting everything and now games are smooth and playable again.

1. https://www.reddit.com/r/mac/comments/juqcrd/calling_all_big...
Not really. The closest thing, and not foolproof, is to enlist a notary; have them verify and document the contents, seal it, note the location, then do the same in reverse when it's found and unsealed. But even then you cannot guarantee the finder wasn't told where to find it.
Vaccination also prevents catching it, which prevents dying from it, which this age group is much at risk at even without prior complications.

There is a heck of a lot more people who are at risk of being superspreaders, not even mentioning the huge number of middle aged people going to protests against a diseases existence. You won't get those people vaccinated. They will massively contribute to the spread.

Additionally, vaccinating risk groups in the high age category first lets you spot complications with the disease more early and it's ethically somewhat better to risk long-term vaccination issues with 90+ year olds than 20+ year olds, as one of these groups will have to suffer the consequences for a shorter time. It may sound harsh to make comparisons like that but you'll have to make decisions like that in a medical environment.
I was looking at this for StarCraft 2 and Diablo III. Both have conflicting reports. Until they have like 90% success, I couldn't risk spending the money on Apple Silicon and not being able to play.

I also love playing these (rather older, now) games on modern hardware with very high settings and very fluid framerates.

Definitely envy the battery life of the new Macbooks, but until they have proper gaming, I cannot "have my cake and eat it, too."

I'm in the middle of trying to find a Ryzen/Geforce/huge battery combo that I like, knowing full well that I'll be lucky to get much more than 4 hours doing non-gaming things off cord (with brightness where I prefer it.)
>
What, this was so time-sensitive that we couldn't pick her up with a traffic stop when she was out of the house?

It is standard operating procedure to catch online criminals in the act, with the computers booted, terminals unlocked and drives unencrypted.

In general, your premise that police should avoid confrontations with (allegedly) very dangerous individuals, and leave them wiggle room to destroy evidence, is untenable. Clearly, this case is an outlier, but the fault lays with whomever ordered the raid without reason, not with police officers themselves, that performed the raid as any raid should be done in a trigger happy country.
I didn't see any mention of "federal government" in his statements. Regulations can be localized.
To be clear, the UK entered a lockdown excluding schools on the 5th of November.

Within a week, positive tests started declining significantly. The lockdown ended on the 2nd of December.

Within a week, positive tests started going up again.

https://www.theguardian.com/world/2020/dec/08/covid-cases-an...

There is plenty of evidence that lockdowns do work. Whether they make sense from an economic or overall quality of life perspective is a separate issue. But they work.
We think this is the future of agile product development
Location: Singapore

Elevator Pitch:
Simplest, AI-powered, visual feedback loop for SaaS companies. We make it super easy for customers to provide feedback, and made it super scalable for businesses thanks to advances in machine learning algorithms. We truly believe that this is the future of agile product development.

Details: We are in the validation phase, 2 Technical co-founders

Looking for: Feedback, developers
Like a lot of private equity takeovers, Dell is now riddled with debt and having issues with debt load

https://webcache.googleusercontent.com/search?q=cache:zDTt0E...
Подвесные украшения «снежинки-балеринки»
Modern Monetary Theory – why can't we print more money?
Is it that out of character though?

I have been having the same, but the main reason why I notice it now is that every time I have any symptom, even the mildest of them, I take notice and consider the possibility of Covid, whereas in past years I would forget about them if even notice at all.

For context, I'm a fairly healthy individual who hasn't seen a GP or other medical doctor in at least a couple years, probably longer. Last time I've been to one was because of exercise-related injuries.
Should have been titled "How to escape the Titanic using your seer git to know everything that's going to happen down to the minute (in which case you probably wouldn't have boarded the ship at all)". But interesting anyway.
Interesting to see that many are PDP-8 and -11 clones.

"CVAX... When you care enough to steal the very best."
Mount Everest: China and Nepal agree on new, taller height
The fact we are having this conversation indicates a key difference between our situation and the situation in North Korea.

Another is that the Pyongyang Times is state-owned. Military.com is owned by Monster, the job placement company. They have no incentive to lie about something like this and every reason to drop a scoop if there's a scoop to drop. But there isn't a scoop to drop, because this is a simple issue of fact.

You have given me everything I need to understand. I've spent time hanging out with flat-Earthers and I recognize the telltales of a conspiracy theory---disjoint from commonly-accepted facts and a widening gyre of organizations that have to be "in" on the conspiracy to maintain it. So far, this one encompasses every mainstream media outlet (since they are consistent on a raid in Germany never having happened), a Presidency that has lost dozens of court cases yet is secretly super-genius, multiple layers of the intelligence community, and an army division that by all accounts is a training division but, says the conspiracy, is in reality a super secret special ops division.

Hm... that rings a bell. I remember when people in Texas got upset about the Jade Helm training exercise, believing it to be a front for something sinister, like rounding up all the presidents enemies and putting them into detention centers (https://www.texastribune.org/2018/05/03/hysteria-over-jade-h...). It turns out, that information was sourced to Russian psy-ops, as part of their ongoing campaign to delegitimize the United States government in the eyes of its people by sowing doubt and mistrust. Quite a bit of overlap, I think, with the QAnon conspiracy claims. A conspiracy of multiple independent and often opposed organizations maintaining secrecy about a rigged election, or suppressing information about a CIA operation to raid an election machine manufacturer, strains the limits of credibility. But a Russian psyop inventing a story like that and feeding it to a public convinced that the mainstream media is not to be trusted and looking for alternative sources to find out what's "really going on..." that's not only plausible, it's already happened in the past. The recent past.

Let's assume for the sake of argument that the mainstream media is either corrupt or incompetent and not to be trusted. Why should we trust the alternative sources you link to me instead? Lacking a history of journalistic integrity (or, from what I can tell, any attempt to follow basic journalistic practice, such as validating stories with multiple independent sources), wouldn't the sources you're using be at least as susceptible to state actor manipulation as mainstream media, if not more so? Mainstream media not having the truth doesn't imply that we accept the alternative that the truth can be found at brighteon.com.
There's a ton of padding in this article to be honest; the tl;dr is that the guy that found it revealed his identity because of impending lawsuits, notably one who claimed her text messages and e-mails were hacked to spy on her ideas of where the treasure might be.

The rest of the article is just a ton of fluff, repeats, and padding. I for one would just like to know where the treasure was located in the end (and I don't understand why it's not just revealed, given that there's no treasure there anymore), and what was in it. Don't really care about who found it.
Because 100-200k people will die while the vaccine is being rolled out.
Lack of supply. They’ve already pre-sold all they could make to governments.
They could theoretically try to order it I suppose, but they're going to be at the end of a very long backlog.
COVID cases are diagnosed this way because Big Pharma needed to induce panic, in order to sell their "vaccines". They probably bribed some WHO officials to push this way of counting on all countries.
> there were (and are still) a _ton_ of OSS projects out there that are configured to use Travis CI for their testing and build pipelines, and it's not free to switch to something else (even though there are many adequate alternatives).

Github Actions is free. I migrated some repos to Github Actions this year and the process is relatively painless.

Also I do not expect Microsoft to turn off Github Actions for OSS projects as long as you stay within your rate limited budget.
All Recordings of GoogleAI Graph Mining NeurIPS 2020 Now Publicly Available
Closed for Vacation
And a tool like that doesn't get any advantage from Rust - manual memory management would just be a chore with no benefits, and Go's crypto library is pretty good ( no idea about Rust's)