skysight-inc/HackerNews huggingface dataset:
I got an X-Ray and it showed nothing. The doctor basically thought I was there to score narcotics but he wasn't going to get me any (I wasn't looking for them either but was told to eat Turmeric pills believe it or not - I did and don't have any way to know if it helped.)

Does gout come and go - I have not had trouble since then. If it returns I will be sure to do a blood test - and I really appreciate you asking. I am always for problem solving with or without strangers help :)
Documents will only be good if there is a strong review process by someone other than the devs who wrote the code. MS used to do that to a great degree until fairly recently. Amazon isn't big on TPMs unfortunately.
Depending on who your customers are, you might get away with only supporting OIDC. But not supporting SAML is going to be a problem as you move into the big enterprises.

Many big companies run on SAML, and expect to auth with vendors over SAML. That's why russell_h's comment is probably futile; it's the enterprises with the big SaaS budgets that keep SAML relevant, and they don't care if HN doesn't like it.

Maybe in about a decade SAML will be less important to enterprises? SAML 2.0 is only about 15 years old.
I find it ironic that the bottom of this press release is a blurb encouraging you to follow them on Facebook and Twitter.
only downside, very few have double beds. (Only twin beds with one over the other).
>HN should have a submission statement, that’s pinned at the top of the comments. So we can review that without visiting the source site.

No, stop being lazy or paranoid or whatever and just RTFA. The entire premise of this forum is to engage with the content presented and to discuss it, to gratify intellectual curiosity. Pernicious habits like only reading the title or wanting a Cliffs' Notes version just sucks what little soul this place has left out of it.
This approach generalizes. When faced with a problem, consider the projections you have available and work in the most suitable.
How much of that can just be copied from investor relations documents, and things already submitted to the SEC?
This is a valid question and not sure why it is being downvoted. As far as I know the answer is it is a net positive for most frequently used passenger lines in the world, e.g. most in Europe and Asia.

Also, the emissions of building railroad track are also on a similar order of magnitude to building highway, so even if the goal is to displace cars instead of planes, it is still more than worth it to build.

I can imagine it being a net negative in the US where trains travel only every few hours, or in some cases only a few times a week, except maybe in the Boston-NYC-DC corridor. SF to LA is only once a day for goodness sake, which is incapable of displacing cars or planes. Compare to Japan or China where service between major cities is every few minutes. Once a day service from a city like SF to a city like LA would be unthinkable in Europe or Asia.
Try to motivate people you know to pressure the officials. By the way, not sure about US, but I've seen that often you actually need very little votes to register a motion/discussion/voting/etc for expelling an official from their office. Whether that motion is satisfied or not -- official should be stressed about it immediately.

What matters the most is how many people you can motivate to do something, and that is democracy.
I don't know the specifics, but your answer as CEO of Lambda School is a great answer. Most CEOs in your position would have not provided this level of details. Or answered at all.
Yeah, they’ve doubled down on hydrogen hard enough that switching to battery electric now would lose face.
I have a raspberry pi and encryped usb drive syncing my Google docs everyday with rclone. A nice touch with rclone is your files are synced locally as usable docs e.g docx, xls.

I have also started running my own nextcloud server locally. I will probably migrate to nextcloud over the next 6 months. I will give nextcloud a good rattle before I make the change.

It's awesome what Google gives away for free. Their killing off services has made me nervous enough to plan for a future where I don't rely on them.
Show HN: Bookmarklet to highlight recent comments in a Hacker News thread
I find myself often checking into a thread to see the latest replies, which usually means visually scanning for comments that have "minutes" in the timestamp.

I decided to automate this (and a bit extra) with a bookmarklet. Create a new bookmark in your web browser and paste the following into the URL field:

javascript:(function() {
const cutoffStr = prompt("Highlight posts in the last:", "1 hour");

function millisForStr(s) {
const [num, unit] = s.split(' ');
const parsedNum = Number(num);

return unit.includes('minute') ? parsedNum * 60 * 1000
: unit.includes('hour') ? parsedNum * 60 * 60 * 1000
: unit.includes('day') ? parsedNum * 24 * 60 * 60 * 1000
: NaN;
}

Array.from(document.querySelectorAll('.age'))
.map(el => {
const interval = millisForStr(el.innerText);

return [el, new Date(Date.now() - interval)];
})
.forEach(([el, date]) => {
const cutoff = new Date(Date.now() - millisForStr(cutoffStr));
if (date >= cutoff) {
el.parentElement.parentElement.parentElement.style.background = "rgba(255, 215, 0, 0.5)";
} else {
el.parentElement.parentElement.parentElement.style.background = null;
}
})
})();

When clicked, you'll be prompted for a string of the form "1 hour" or "23 minutes" or "2 days", and after submitting you'll see all comments on the current page that fall within that interval highlighted with a gold-colored background. Let me know what you think or if you'd like any other small features!
It’s great that you opted in, shared your address book and uploaded a load of pictures and meticulously tagged your friends in the pictures.

It’s not great for anyone in your address book or photos that didn’t opt in.
Eliminate being miserable? Maybe by giving everyone a free annual pass to their closest theme park? /s
I wonder how much original content has been lost, not that it's comparable to book burning on the humanities. Is there enough porn sites in the ecosystem to redundantly "archive" content. Certainly more enthusiastic users out there than any other subject. Pornhub parent runs a lot of websites and overlap of local laws and technical requirements means not many countries can support large online porn platforms. That said, I'm sure there are private "enthusiasts" who datahoards, 50 years from now we'll find abandoned racks of HDs and tape drives full of "vintage" porn.
I get sick to my stomach seeing this over and over. It really is gross. Like someone describing diarrhea when eating.

Do people not have the capacity to see that not everyone responds to this name the same way?

It might be fine for you, but some people are very visual and have strong visceral reactions to this. I wager there are lots of us.

I don't want to keep seeing this and being reminded of roaches.
amazon technical != amazon retail

and the conditions have only been improving, and with more robots, the number of warehouse workers will only keep getting less. drivers on the other hand is a different story..
It's the most egregious example of design-by-committee that I have ever seen.

Everything about SAML is about 10x more complex than it technically needs to be.

On top of that, it has so many optional features that interoperability problems are likely even between 100% standards compliant implementations.
Or it says one thing:

1. Men just want companionship, whatever the person/thing offering it.
Tylenol is surprisingly easy to overdose on and is well known to cause liver damage. This is especially true if you take extra strength tylenol. It is recommended to stay below 3,000 mg of tylenol within 24 hours, which is only 6 extra strength pills. If you take a bit extra and get over 4,000 mg per day for multiple days, you can get major issues. There just is not much margin for error with tylenol.

I think people often get confused because you can typically take a bunch of ibuprofen pills for pain and there are rarely serious side effects. But ibuprofen and tylenol are much different in this regard, despite the fact that both relieve pain and both can be easily bought in a drug store.
For ever new regulation that someone wants to enact, they should be forced to take at least 10 out.

100 years from now we might get down to a meaningful mix of regs. Right now the Code of Federal Regulations (CFR) is like the roach motel - regs check in but never check out :p
Both of my parents are physicians, and both have worked in emergency rooms at some point in their careers. One thing they've taught me is to be cautious about taking too much Tylenol.

At the right dose, Tylenol may well be the safest pain medication we have, even compared to Advil, which can occasionally cause problems if taken regularly over a lifetime. However, the gap between a useful dose of Tylenol, and the amount of Tylenol which will kill you, is relatively small compared to similar medicines.

My parents say they've watched a lot of people die in the hospital from Tylenol overdoses. There is an antidote, but only if you get it in time.
This isn't the first soundness/compilations bug, it won't be the last. This bug can be fixed, hopefully with some work this whole class of bugs can be made rarer. If you were relying on your safety guarantees to include a bug free compiler - rust isn't there yet and you should stop. If you're relying on a bug free happy path, rust is as close as any other language implementation (with one or two exceptions pointed out in sibling comments).

So, I mean, if you're arguing that C/C++ programmers are culturally less repulsed by bugs... you might be right about that. Other than that I think it's about the same scale for C/C++ and rust - a bug is a bug no matter what language you wrote it in.

The only fundamental implications I think it has is that maybe we need to put more of an emphasis on formalizing the memory model if we want to reduce the number of soundness bugs (something that a number of people are already doing some awesome work towards).
Fair enough, there are 2 screenshots, one of GMail in message view, and one of a nested Google Analytics menu. But in the case of Google Analytics, the author spends most of the words complaining about a bugged/glitchy upgrade rollout. Which of course is worth complaining about, but shouldn't be the main example in a screed about company-wide failure – has there ever been, in the history of tech, a product upgrade+redesign that didn't glitch and anger long-time users?

But more to the point, GA is a specialized product for an audience of (relatively speaking) power users. What is the other analytics product that purports to deliver a comparable variety of metrics, in a more useful way? That's not a rhetorical question – I honestly want to know, and expected an article with this headline to have specific and tangible comparisons.

In the case of GMail – I honestly couldn't find how to get the specific view that the author sees. I'm still using the same GMail account that I opened in its launch month, which over the years I've tweaked to my liking – such as setting "Button labels" to "Text". So I checked a relatively new alt-Gmail account, and also my main Hotmail/Live account, and was surprised to see how similar the two interfaces are.

So what is the author's point of reference when he claims "Even Gmail is a cesspool at this point. Nobody would ever design a webmail interface like that, starting from scratch". I'm looking at my Hey account right now, and sure, it's different from my GMail interface, but I also use it 0.001% as much as I do GMail, and for a much smaller subset of communications. I sure as hell wouldn't tell people Hey is so much better than GMail and expect it to be self-evident to people, not without providing visual comparisons.
They have billions in cash, but they can't afford to hire enough people to finish this task in 45 days?

I believe Requirement 12.d is not necessarily about "what are your trade secrets and future business plans?". Somehow FTC should have clear picture of "WHAT-WHY-WHEN" in order to come to conclusion.

We use digital social networking services every day, we still have nearly zero knowledge of how do their platforms actually work.
Anecdotally, I've known a few people who claimed to use cocaine and even heroin occasionally, and I don't have any reason to think they were addicts in the sense that they were compelled to use it. Indeed, at least for snorted cocaine, the most common reaction I've heard from first time users is basically "what's the big deal?" - aka the effects just weren't as intense as expected based on the reputation.

Meanwhile, I've only met one person who has been able to use cigarettes occasionally (a few times a year). Everyone else has been at at least a daily smoker, and while I know quite a few people who have successfully quit, it's almost always been a rough experience with multiple attempts required before succeeding.

If cocaine and heroin were legal and cheap, I'd probably be more concerned if a friend took up smoking than either of them. Conversely, if cigarettes were illegal, I'd be really concerned if a friend took up smoking.
The Fractal metaphor is intended to be seen in the light of their self-similar property.
It is the idea of having micro-structures of standardised infrastructure components that could be replicated indefinitely through the invocation of interface operations within a macro-structure (the blueprint).

About the AWS CDK I completely agree, we refer to CloudFormation in the article as that is ultimately the "output" of CDK, but we definitely agree that is a really good step in the right direction for IaC tooling. We "just" need someting portable across clouds now :)
Fontcase: Font Installer for iOS
Bug bounty programs pay you for the severity of the exploit, not the potential damage you could do with it. The researcher found an unpatched server with a known Ruby RCE and cracked a weak password. Whether he found the server empty or containing nuclear codes isn't what determines the payout.

Storing user data and private keys on your computer after reporting the hack and using them again to access the systems is way beyond the scope of a bug bounty program (and probably criminal).
Yup, I think it becomes very quickly obvious when using `encoding/xml` with XMLs that have multiple namespaces that the handling is incomplete. Hard to believe such an xml could even survive one roundtrip. It's also documented that the implementation is incomplete:

Mapping between XML elements and data structures is inherently flawed ... See package json for a textual representation more suitable to data structures.
Isn't that just your opinion, versus the fact that it's the most popular IDE out there, so the plurality of programmers find that it's good enough?
And it came with a circuit diagram of the computer.
That would be the easiest way. Definitely a disadvantage
It's certainly possible that in some cases that's true, but there are a lot of government check-box security people who genuinely believe complex passwords rotated frequently are a good security control. There's also a general heuristic with many people in security that the more convenient something is, the less secure it is. Therefore smart card auth must be worse!
I have taken the Oslo-Bergen night train line multiple times.

It was quite expensive. You had to buy a two bedroom coach, even if you were traveling alone.

Recently, the Norwegian train company have made a new offering which I would describe as more "hostel"-like, where you sleep in a coach with 5 strangers[0]. Hopefully this will offer a much more affordable option.

[0]: https://www.nrk.no/norge/bergensbanen-blir-_ny_-med-kraftig-...
I'm not sure that would do much to reign in virality given the number of mega accounts there are- how much of twitter is n+2 from Donald Trump, for example?
You cannot jail people for things that were not illegal at the time they did them.

There's a lot of anti Facebook hyperbole in this thread; please stick to feasible and reasonable demands and we're more likely to get them.
> How else would you phrase someone telling you "I have this bug and will exploit it if you don't pay me X amount"

Hello Strawman!

> The second case would routinely cause a further review in any decent program

We literally just read a example of how a big corp responds to #2. Do you think it was a 1 of?
But this is a different definition of "grind". After spending an hour practicing your aim on a specific map, your aim will actually be better. That's not any different than spending an hour practicing shooting hoops from a specific angle / distance, or spending an hour practicing musical scales.

I think when most people talk about "grind" in games, they mean activities that are genuinely only time-wasters. You don't gain any skill (other than patience) from killing your hundredth goblin or clicking "harvest" on your hundredth field.
Somehow I'm completely unable to sleep in a plane. Even when it's a 10-hour trip to the other side of the world. Train is by far the most comfortable way to travel. Maybe ship too; I don't have a lot of experience with that for long trips.
This is scary to read, as I've been there. All my friends know not to give me Tylenol. I think on two occasions now I had slight pain and took maybe two or three extra strength Tylenol, and was found on the floor shivering, sweating, waiting for death. This wasn't even an OD, this was recommended dosage. I don't think I'll ever take Tylenol again, I'll deal with the pain. This felt like my kidneys were on fire and not so much liver, so what do I know.
Appreciate that feedback. We'll update the homepage tonight!
You have the right to be heard by people that want to hear you.

Nothing says you have to be broadcast or promoted and nothing says you can impose on people who don't want to hear you, but the government telling people they can't talk to certain other people is not the same thing.

Also, in another comment you said "This is also great for hiding and suppressing organization of social uprising. This would have totally suppressed all the BLM content this summer."

Is this sarcasm and you are contradicting yourself or do you actually think it would have been great to suppress BLM organization and protests?
My team slide is ridiculous, please help with suggestions
I'm trying to get into an accelerator and they want a pitch deck but my 'team' slide is ridiculous.

I've built everything myself (didn't even hire consultants). My product is a specialized ML-cloud based service that none of my friends are qualified to be a co-founder in....

I couldn't find an answer in quora or google (they say add your friends - which would be conspicuously false)... Should I leave blank spots "to be filled soon" or something so it's not as silly? Or a team of robots with my face plaster on all of them (probably asinine)?

Thank you if you can suggest something you've seen successfully work before...
Even for running without a power meter a Garmin device can give you a fairly accurate VO2max estimate if you do an occasional max effort time trial. But it has to be on a flat course: the FirstBeat Analytics algorithm doesn't account for hills. I have had a real VO2max test with a breathing mask on a treadmill and the results were very close.

https://www.firstbeat.com/en/science-and-physiology/fitness-...
Alternating drugs can be pretty effective. Tylenol, Ibuprofen, Tylenol.

The two don't interact with each other which helps to keep the pain (or fever) relief going strong without ODing on either.

But yeah, be careful either way.
How could transmutation from a reference to a usize not be safe? Do you mean "and back"?
But this is LLVM IR, not C. It feels like a trick question (hear me out). Either with IR semantics the code is already UB (as in C), or it isn't. If the code isn't UB, then why? The obvious assumption is that it's because LLVM IR treats this as a model of a concrete machine (where provenance isn't a thing), not as a C-like abstract machine with UB. In which case, the optimization #3 is clearly invalid. OTOH, if it is already UB, then the optimizations are fine, right?

The only way I can see that we can implicate optimization #1 or #2 is by claiming LLVM IR has neither C semantics nor machine semantics, but with some kind of in-between wobbly semantics. There's nothing fundamentally wrong with that, but that's not what a reader would assume in the absence of other information. Especially not when the author writes "this program has two possible behaviors"—this clearly tells us there's no UB and that we should assume this is based on concrete machine semantics (where provenance isn't a thing). So, I would also say, given the info in the post prior to the conclusion, #3 has to be the culprit. I just can't implicate #1 or #2 based on the preceding text; to implicate those you'd have to pull assumptions out of thin air.
Has this shown up everywhere. Govt agencies still had it in contract docs. That might mean fedramp or PCI or some other standard still mandates it.

Enforces minimum password complexity of case sensitivity, number of characters, mix of upper-case letters, lower-case letters, numbers, and special characters, including minimum requirements for each type;
Enforces at least 5 changed characters when new passwords are created:
Stores and transmits only cryptographically-protected passwords;
Enforces password minimum and maximum lifetime restrictions of 60 days;
Prohibits password reuse for 10 generations
...
Pre social media, we lived in a world where information was generally separated by geography. Your comment suggests that by returning to such a state, it would result in increased radicalisation. The implication is therefore that social media has decreased radicalisation. I’m not sure I agree.
No rationalization or failed hypotheses here; I'm describing what I tried and what actually happened.
And how does that contradict my point to always expect the best opponent move and think about the best thing to do in return, instead of simply hoping the worst will not happen? I think you are actually even supporting my point here.
Rochester Native here, and yep: I've never been to the rail station. Probably because the frequent, short flights to NYC are relatively cheap. Checking amtrak vs delta for a random date in january, your options are a 7-9 hour train ride for $54 in coach, or a 1hour flight for $64 in economy basic.]
Yes it comes and goes.

In my case, the initial pain was relatively sudden, throbbing, enough to keep me awake at night. I also got an x-ray which doesn't tend to indicate gout, but did show some mobility issues (hallux limitus/rigidus) which were treated with increasingly expensive orthotic inserts.... and it went away after the initial issue for five years. Then it came back, new custom inserts (and some naproxen), went away for another twenty months. When it came back, it kind of stuck around, not the full on pain, but a dull aching that just wouldn't quit, thus the more thorough investigation.

In my case, I think the causes were a combination of gout triggers - not enough hydration, alcohol intake, high protein diets, etc.
I came from a Pebble and had the same complaint at first, but it's really not a big deal. I put mine on the charger in the evening after I hit my fitness goals, then put it back on later and wear it overnight.

I've had mine on since yesterday evening and still have 60% battery, so it won't take long to top it up later.