skysight-inc/HackerNews huggingface dataset:
What’s the Right Way to Give in a Pandemic?
TL;dr it's an ad for semgrep.
What does socially and psychologically healthy social media look like?
It’s important to find a tribe of likeminded people, it makes us a lot more acceptable of ourselves and socializing with them is no effort whatsoever. Ultimately we all need to fit in, no matter how small the group is
I live near one as well. It’s straight and boring but it’s 50 miles long, which gets it from just outside DC all the way to the edge of the suburbs. So, I can ride out (I live near the mid point), loop on country roads, and ride back. It’s not exciting but it beats driving 25 miles to start my ride.
Dysfunctional for commoners.
I'd figured that rails-to-trails would actually help the odds of restoring old rail lines as they keep the right-of-way intact. Perfect being the enemy of good and all that.
Is there a way to enjoy all the pleasures of org mode without having emacs installed on my computer?

If there isn't, it seems that "org mode" is a very bad name and it should be called simply "emacs". Or, if you want to be too precise, "emacs, with some configuration tweaks".
Someone on our school's group chat shared they had a technical interview where she was asked to write code on a shared google doc. I really hope that was an outlier.
Learning.

If problems were solved, nobody would write code. That new code or config is being deployed shows these problems (new feature rollouts, migrations, scaled resilience, etc.) are not yet formally solved. As such, things not known will become known — and usually be revealed in prod.

Similarly, in technology systems, there’s no such thing as human error, only uncaught error conditions.

Postmortems capture learning, so the conditions can be caught next time.

Publishing them shows the engineering organization understands and applies this learning loop.
Of course people will fly on it. 95% of people will be just thinking of what they want to do when they get there. They assume that someone else has verified the planes. And what else can they do? I certainly can't verify the safety of a plane.
That’s not a fair representation of the advice. Using the metaphor, it’s more like: “when learning to use a hammer, try to use the hammer for things that you don’t see as nails; if you don’t, you may miss that it’s also an excellent tool for prying and some kinds of demolition; if you do, you’ll also learn where it’s ill suited for the task, such as tightening screws.”

It’s excellent advice.
> Today, California’s wealthiest 1% pay approximately 46% of total state income taxes. Adding the wealth tax to individual taxes and including those taxpayers who have abandoned California, the combination of the two proposals would have 1% of the state’s population paying about 53% of individual taxes.

This is insane. That 1% will simply pick up and leave and the state will end up in a long expensive legal battle to collect from them all.

And then who will be left to pay for everything?

> For most taxpayers, the cost of compliance would far exceed the amount of the tax. A resident with a net worth of $31 million would be subject to a wealth tax of $4,000. The cost of an annual appraisal of each of that taxpayer’s assets could easily exceed $100,000. The state would have to hire auditors to chase people all over the world.
From dangerous drug dealer to lifesaver
I used to go to the subway down the street from my house. There was this old strange employee that at first gave me the creeps, but eventually we became casual friends. On his last day before retirement he gave me the book he wrote. It turns out this guy was a millionaire and had a very diverse set of skills.

His book said that even though he was an accountant, stock broker, song writer, etc he preferred to work in the restaurant business because he liked working with the public and being social.

What I learned from him is that you really aren’t your job. Even if you have to work at subway to enjoy life, don’t think less of yourself ;)
Firefox to ship 'network partitioning' as a new anti-tracking defense
How often does portability ever appear as a tie-breaker between to different languages?
So you disagree that if everyone stayed home the virus would go away?
I rode the trail from Pittsburgh to DC two years ago. The little towns on the trail were all welcoming. The scenery was fantastic. I look forward to doing more multi-day rail trail rides in the future.
thanks. yes I think so - for me it's just another form of investment. instead of investing in being around people, invest in being content with yourself. it's hard work but the reward is all yours. and just because anxiety or depression looms every once in a while doesn't mean the "project" or strategy was a failure. just means there is more work to do.

fwiw I still love being around people but instead of spending 9/10 hours among people I now spend 9/10 hours alone. that is I still have a job and can't always shield myself. but it works better for me than by chasing potential friends, or worse chasing a potential romantic partner (if I have a partner I will need friends even less, at least this is how I see other men my age, ... getting rid of all their male friends is what many men do once they start building a nest ...).

The difference is also that I cherish every chance to socialize a lot more now because it's not a given. When hiking I didn't see anyone for several days - so even the odd hiker I met seemed like a gift. In a way it also changed me from saying "hell is other people", to "I love company and being around people".

doesn't mean that I never feel lonely, the difference today is how I respond to that feeling I guess.
> Later, a vaccine candidate that has been proven safe in clinical trials could be given to a group of healthy adults in this age range, who are then exposed to the virus in a controlled environment. They would then be closely monitored by medics and researchers to see if the vaccine is successful in preventing infection, as well as identifying any side effects.

> https://www.thelancet.com/journals/lanres/article/PIIS2213-2...

I imagine they will do what they did for the vaccine candidate ChAdOx1 nCoV-2019 and swab at least every week to test for infection.

Do you have any source to back up your claim that a challenge trial wouldn’t work for SARS-CoV-2?
Oh, Microsoft innovating again.

So Apple has iPhone? Now we will have Lumia!

So Apple has iPad? Now we will have Surface!

So Apple has M1? Now we will have something!

Too bad OSX came too late and Microsoft couldn't just copy it by then.
Mindfulness Exercises for Developers
We give police extra rights over the average citizen. Those extra rights must come with oversight, otherwise they'll be abused heavily (which, depending on region, does seem to be happening a lot).
If i don't know a few sigils it looks like line noise...

Let's make a PL without sigils...

Now...

What is the 'foo' that i'm reading? is it an $scalar? an @array? is it a %dict? a reference? an object? a función? a keyword?
When I was a kid (some 15 years ago), I remember people like you would wait till early 30s and then setup a software house, which is basically a small contracting firm, where you use your accumulated contacts to get contracts and hire junior and mid level people to work for you.
Is that sort of thing not done anymore?
Tell HN: BLC-1 982.002 MHz Signal from Proxima B Probably Caused by Hardware
BLC-1 signal recently discovered at 982.000MHz:
https://www.scientificamerican.com/article/alien-hunters-discover-mysterious-signal-from-proxima-centauri/

That's also the wavelength (982MHz) of the Intel Stratix 10 FPGA:
https://www.intel.com/content/dam/www/programmable/us/en/pdfs/literature/sg/product-catalog.pdf as well as the NVIDIA GeForce RTX 2060 6 GB GDDR6 with ROG Boost (Base: 982 MHz) and Fermi DVFS (982 MHz at 0.981V):
https://www.sciencedirect.com/science/article/pii/S2352864816300736
On the other hand how can you become an experienced researcher if you just work in your own bubble? By spending time in other places, you see different ways of working, thinking, organization, approach to problems, focus etc.

It looks like as college has become standard that everyone "needs" or even "deserves", we are getting to the point where academic positions should also be handed out on a basis of some social distributive program.

Yes it's hard to do and involves sacrifices. But not everyone needs to do it. It's not immediately obvious that we gain a lot by opening the gates wide and accommodating any life choices to be compatible with any prestigious careers. Artists and scientists used to do this kind of traveling around and being under the patronage of various rich people or institutions. It isn't clear that making it into a steady stable job with orders of magnitude more people chipping away at it incrementally has brought proportional results at all.

If it's not for you, why not find something that is?
i am from india. i see the "terrorism" narrative more than you will in your entire life. you are not getting my point. all the boogeyman "terrorists" in the world today are made with the same narrative "death to america". be it in iraq, afghanistan, syria, libya and such. these probably would not have happened if usa hadnt waged wars in those countries. i am saying the given countries dont just go out and engage in decade long wars. they have participated but the leader has always been usa for the past 30-40 odd years. why. why is usa the bully big guy starting wars?
Luckily, I've never been hit intentionally, although I've had some drivers steer towards me and come close.

I've had all sorts of things thrown at me: bottles (empty and full), rocks, eggs, fast food sodas, and more.
I guess I can see that perspective. Screw the recreational trail users is probably easier than screw the suburban home owners who built on the former right of way. But in practice I assume it's still pretty irreversible.
Homemade Silicon Integrated Circuit
Google did this during the pandemic

Are other companies copying them to the Tee?
I've been considering using a sprinkler system for the "Anointing of blood" this year. We're gonna need a much bigger fire, too, for the social distancing.
Yeah, this was why I stopped using it as well. It would fall into musical ruts and just repeat the same handful of songs forever. It wouldn't work to thumbs-down those songs because I did like them, but I also wanted to hear new recommendations.

Spotify by comparison will also often recycle stuff I've already heard, but there's still always some new stuff in their weekly recommendations. Sometimes it's a hit, sometimes not, but at least it's something I haven't heard before.
Yes. It goes to show how much they care about safety.
That looks awesome. I always feel bad for the US that it doesn't have a decent use of the rail network for such a beautiful country.

Hands down one of the best things you can do as a young European is get an Interail/Eurorail Pass. Wake up with your friends in a hostel in Berlin? How about looking on a map and deciding going to Prague that day? Easy.

We did about 15 countries in five/six weeks the first time and it gave such a great feeling of being a European, of the benefits of EU membership and getting to explore the culture, history, partying etc of the place. For very cheap. The train is so nice to chill out compared to a car and to see things you wouldn't see by flying. Plus you find yourself going to places you wouldn't do otherwise as you can just jump off somewhere along the way and maybe stay there for a few hours or days.

It's so awesome that the EU is bringing in a discounted/free pass for young citizens soon. It's by far the best way for people to really appreciate some of its best benefits as you sit chatting to people doing the same thing from half a dozen other countries over a beer on a train adventure somewhere.
> Not everything is an object (Ruby)

If you think Ruby goes far with that idea, check out Pharo. In Pharo, even an object's fields are objects. Not just the value the field references. The field itself.
They can be both. I actually like markdown for collaborative team documents because they are so simple. I’d rather people focus on the content rather than trying to make the perfect PowerPoint or format a word doc or something.

I also like that the on-ramp document can get PRs from new hires who find some improvement, etc etc.
This is increasingly not the case but there is also mir, which is effectively a smaller standard library along with a lot of extremely fast numerical code
Thanks for presenting this "contrarian" view about desertification. I was surprised to learn about global greening due to rising CO2.

Carbon Dioxide Fertilization Greening Earth, Study Finds - https://www.nasa.gov/feature/goddard/2016/carbon-dioxide-fer...

While it sounds like good news for the ecology, I think the overall destructive effects of human activity on the global environment far outweighs any accidentally beneficial effect of rising CO2. Celebrating it as "global greening" seems to be just as much of an oversimplification as the fear-mongering of desertification.
I think the latest C# also has match (a pattern matching overload of the switch keyword).
I postdoc'd for 4 years, then was an instructor for another 3. When I finally got out of academia, my life became so much better. So much more: money, stability, free time, choices, advancement opportunities! Research science is absolutely a broken system and you should strive to exit as soon as possible.
It's interesting to learn it is a local word, perhaps "irrespective" is less upsetting to HN users who were too upset to express their complaint.
I think this only works if the average consumer can assess what is being asked for, though. “Do you want to let this website know what hardware you have?” is not a simple question.

“What is hardware?”

“Should I let a game know my hardware? Should I let a news website know my hardware?”
Sure, that’s the easy part. The hard part is to convince payment processors to use it. There are too many economic incentives to going your own way.

The incentive for a generic data interop framework with logical and cryptographic proof (which was the intent of the semantic web) would be arguably high enough that adoption would be universal (similar to HTML). Alas that too hadn’t been true, yet.
Facebook: Free as in Bullshit
Things work in similar ways however the market is organized. But a monopoly will have a much easier time extracting value from the activity than companies in a competitive market.
Sensor seem a little expensive still unfortunately. (compared to say a ADS-B one)
Star Trek gets a pass because there's only so much complexity that can be crammed into 40 minutes of television. And because it's a science fiction themed moral play which, unlike GoT, doesn't pretend to be realistic.
Scrolling on that site lags so badly on Chrome on Android (Pixel 4a).
That bug was fixed long ago, even before the referenced video
was produced.

The described attack is clever. It exploits the fact that
an attacker might alter the schema so that it invokes an SQL
function with side-effects when an app simply tries to read
from a table. And depending on those side-effects, an exploit
might be possible. In the video, there was a bug in a built-in
SQL function that caused exploitable side-effects. But that bug
was fixed long before the video was even produced. The examples in the video were from an older version of SQLite. They did not work for the latest SQLite release on the day that lecture was given.

Since the checkpoint.com attack was described (in the video and elsewhere) new defense-in-depth features have been
added to SQLite to make similar exploits increasingly unlikely.

(1) Built-in SQL functions that have side effects cannot be
used in the schema. Side-effect functions can only be invoked
directly by the application.

(2) When applications register their own custom SQL functions, they can now mark those functions as "direct-only", meaning that they are prohibited in the schema.

(3) Run-time and compile-time options are available to prohibit the use of SQL functions in the schema that are not explicitly declared to be safe for use in the schema - that is, functions without side effects. This is for use in legacy applications that might have been created before the per-function flag that prohibited use within the schema was available. It is also an extra layer of defense for complex applications that might add hundreds or thousands of side-effect SQL functions - to ensure that the "direct-only" flag is not accidentally omitted from one of them.

(4) Run-time options are available to disable triggers and views in applications that do not need them. This is not necessary to avoid an exploit, but it does provide an additional layer of defense.

See https://sqlite.org/security.html and especially paragraph 1.2 item 8 for additional information.
Before I had a car, the W&OD trail was how I got places. Maybe I was just a weird kid, but the freedom of getting places on my own, trumped any monotony of the ride, and I doubt my parents would have let me bike in car traffic.
The statistical approach definitely gives a developer more confidence in the correctness of a solution and guards against regressions. Though any test that checks the outcome of a random process against statistical measures is expected to fail occasionally.

For example, if the test flips the coin 1,000 times, there is better than a 99% chance that the outcome would result in 450 to 550 heads. So if you write the test using `450 <= heads <= 550`, you know that it will fail ~1% of the time. And if you expand the range to reduce the rate of false negatives, you have reduced the confidence the test is validating correctness.

Having said that, I still find statistical tests to be very helpful when building out code that uses randomness. However, these tests typically do not make it into the CI/CD pipeline.
An interested party in Ecom or ..?
Vim Tips compiled from 16 Years of Vi + 10 years of Vim
I see it the exact opposite way: 5/6 of a PhD rounds down to nothing, more or less, so you’re somewhat trapped. As a postdoc, you have a lot more flexibility to leave whenever.
Depends - eBPF is statically verified pretty well, but spectre (and all its brothers) is a cruel mistress
Repeat the check an arbitrary number of times then? We have infinite universes, remember. :)
The Year We Lost
This is nonsense and a bit childish but if you want to compare, here are some things that Microsoft had before Apple:

1. A journaling filesystem

2. Protected memory

3. Preemptive multitasking

4. Access control

5. Intel chips

6. Tablet computers
Interesting suggestion, thanks. I live in the Washington, DC, area and NIH is right here, so...
But now you're leaking information about the host, which I would think is worse given the purpose of a VM.
I chose local anesthetic when I got my impacted wisdom teeth removed in NYC. This was in 2006 at a dental school though.
> But what's to stop _anyone_ else from getting into that same business? And doing it better?

You mean your main business or your complement?

If it's the complement, you commemorate, and try to push more people at entering there and doing it better.
> The times should reflect this evolving need.

There's no need since, these needs are already addressed in their own files for decades IMHO.

Readme files are a general map most of the time. Other relevant files are "Install", "Contributing", etc. Your README should be concise and refer to another text (or markdown) files in the repository.

Of course people adapt and evolve but, I don't understand the attitude of "We've just invented this". No, we didn't. README.1st, CONTRIBUTING files are as old as computing now.
I loved this book! Got it out of the library a bunch of times (which shows my age, I guess) and I implemented a few of the algorithms described.

Pairs well with Ken Musgrave’s work on fractal landscape generation.
Bill Gates is the same guy who said I only needed 640K in my Mac.
I got all the way to the end and then felt like the kid from A Christmas Story.

S-E-M-G-R-E-P. semgrep? A crummy commercial?
You can’t change the email on existing accounts however you can definitely delete it.

See the docs
https://help.shopify.com/en/manual/your-account/privacy/GDPR...

Their account management is definitely poor. But you seem to make it a bigger deal than it is. You don’t have to lose the order history, even if you don’t have access to the email anymore nothing would prevent you from logging again with the user/pass.
And the order history is really the only valuable info... you can also save the email with your receipt. It’s not ideal but again, how much it actually impacts your life is about close to nothing. Request the account to be deleted under GDPR and then save the emails with your order history.
Bandcamp admittedly exists to be an exception to this rule, but yeah, they're definitely a buy-music-oriented platform. They're also the most artist-friendly platform there is (among other things, they've been doing "Bandcamp Fridays" all this year where they've foregone their cut of sales to help artists make it through the year).
"no realistic hope of being converted back to rail in the foreseeable future"

I think the two biggest issues are changing regulations around setbacks and turn radius requirements. Both of these impact maximum loads and speeds, and can mean that even if an existing right of way is there, it may not be practically usable.
>The people expanding our scientific understanding of the world being undervalued by society

I fully expect to get downvoted for this, but maybe it is because the expansion of scientific understanding produced by academia and academics has dwindled when it comes to applications in real life. Sure I will come across click-bait articles about new research on black holes and dark matter/energy/whatever every week, but it all seems so far from industry and application.
Railway right-of-way was often procured with eminent domain. In some cases, original landowners had received guarantees that land would revert to them if the railway ever ceased to operate; but those agreements were not honored. The big first wave fiber giants of the 90s dealt with a lot of that.
It's already the case with JavaScript bloat, which destroys performance and network efficiency of the internet in many countries.
I meant for convenience since launching VM is part of the OS.

Wouldn't every Qubes VM (whatever the underlying physical machine) return the same fingerprint? Something like VM Fedora version XXX running on Xen hypervisor.
Hear hear. CMake scripts should be very boring and driven by boilerplate and design-patterns, rather than each having a character of their own.

I rambled about this a while ago over here: https://news.ycombinator.com/item?id=24203172
assert test_performance > threshold ? This would only be a sanity check for big deviations though. For more subtle changes one may need to do a proper statistical test. I believe the jury is still out of how to do that properly for deep ML models - challenge is the lack of independence in CV folds and generally the compute time it takes to evaluate.

However, I would probably not do performance check inside a unit-testing framework. Instead treat this as quality indicators like performance benchmarks, code coverage etc. It may be a "gate", that needs to pass to allow a new model into production.

To evaluate performance over time, one would preferably want labeled datasets for test gathered at different points in time. Which requires a (reliable) continuous labeling process.
One can also gather customer feedback about performance, track those as metrics.
These things are probably more in the "monitoring" part of a system, rather than unit-testing time though.
So 1% pays 46% of the taxes. Do they own more or less than 46% of the total capital? Because if they own more than 46% they should be paying more taxes. It doesn't matter that they are only 1% of people. What matters is how much they own (or at least how much they earn).
so aliens are calling by phone?
U.S. agencies' trust in untested software opened the door to hackers