skysight-inc/HackerNews huggingface dataset:
> Conclusion
The analysis generates several important insights. First, important differences arise across
jurisdictions in infection levels, death rates, policy implementation, and compliance with policies. These differences have major implications for COVID control. The portfolio of the eleven
types of policies–implemented with different levels of intensity–necessary to drive COVID
growth rate below zero depends on the jurisdiction’s COVID burden and compliance, which
reflects behavioral and demographic characteristics of the jurisdictions. Second, we estimate
that a core set of socially tolerable policies lead to COVID control only in those jurisdictions
that have unusually high levels of compliance. The socially tolerable core policies alone are
meaningful and significant, but insufficient by themselves for preventing escalating growth in
infections in 90% of the jurisdictions analyzed. For these jurisdictions, one or more from a set
of additional high-impact but difficult-to-tolerate policies must be implemented to achieve
COVID control. Third, the impact of testing and contact tracing has been lower than the
impact of other policies. Fourth, for the jurisdictions covered in this analysis, the policies with
the greatest marginal impact for achieving COVID control mainly involve restrictions on
adults through workplace closings and stay-at-home requirements, although targeted school
closings are also in the group of additional high-impact policies. Altogether, the analysis indicates that, in all but a few highly compliant jurisdictions, relatively significant social costs must
be incurred to reduce COVID growth below zero. The model points to significant opportunities for cultivating deeper understanding of the drivers of compliance and of variation in the
impact of policies, which are potentially rewarding topics for future research.

What I don't see is any analysis on the impact of the "high social cost" policies on public health and well being. Why is this so often not included? For example, what are the impacts of school closures on childhood development and isolation on mental health? Are we going to be paying more for this down the line?
Internet generations seem to be much quicker, with big shifts every 3 to 5 years. Mary Meeker's yearly summary often illustrates aspects of this.
Young Night Drifters
i have to uninstall snapd everytime... sigh...
> We now know that there were cases of Covid-19 in Italy and France, and perhaps US iirc, at the same time, and perhaps before, the outbreak around that market in Wuhan, as early as November. (So, yes the virus did stealthily traverse continents, by the way)

Can you provide a peer-reviewed source that documents this timeline, you claim "established facts" but to my knowledge there aren't any?

> While it is still most likely that Covid-19 arose in China we do not know where and when.

On that we can both agree.
I don't think relativity, quantum theory, etc. Are low hanging fruits. Physics is super old and those discoveries are "recent" in comparison
Title is "Which COVID policies are most effective?" but they study only America and Western Europe, thus leaving out all the countries in Asia that had the most effective policies.
It’s not overnight. Much like the removal of 32bit apps on macOS, this was mentioned time and again. Not paying attention to soft wear that you’re business depends on is not an excuse, neither is “thinking of the children”.
Doctors need to be paid less and it needs to be easier to become a doctor.
Really interesting! But it appears to me that it has a racial bias. I compared me (I am kinda ugly) with a dark skinned colleague (people consider him very attractive), and i had a score ~25% higher than his.

With other pictures i seem to obtain similar results (even with the AI failing to recognize some black faces).

This was the only problem for me, but very fun site :)
Choosing a new Template Engine – nunjucks
Perhaps people will not like my response but for me, this is where I tend to lose hope and I visit mostly only for the odd interesting tech article or comment.

This is the most materialistic online forum I've been to where I'd not be surprised to see someone declaring that he is building an app to help the hungry homeless folk on his street. There are people reading this who probably already wonder what's wrong with building such an app and that it will scale better than an individual taking food to them etc.

That said, I appreciate that there are fewer clickbait headlines here than most other popular places on the internet.
Post codes are sometimes totally unique for an address; they're always unique in combination with the street (or flat) number.

E.g. a short form address (useful for scribbling a return address on the back of an envelope/parcel for example) could be '123/AB4 5CD' instead of '123 St George Crescent // Upper Bockingbrook // Froimington // Froimingtonshire // AB4 5CD'.
Because unlocking it requires root and users who want to submit a crash report may not have root privileges on the system.
Protect the public? If anything the public needs protection from ticket master ands it's crime syndicate.

I just noticed that the word "master" is in ticket master. With every one renaming git branches etc. why hasn't ticket master been attacked for its "racist name"? Not that I personally give a shit.
Well it’s more what you do with a node that has been isolated or is suspect. Mounting the file system on a scratch node for analysis and then looking at the logs is a pain in the ass when you have journald in the way.

As for forwarding, there is likely a disparity between the last log written to disk and the last log received by the aggregator. What happened in that window is always interesting and always on disk on the node, unless the attacker has nuked it, which neatly leads to...

Sealing and tamper protection on logs is absolutely no use as any competent attacker will just destroy them outright. Learned that from years of windows NT. you can possibly recover them from analysing disk blocks though which is even more difficult if you have journald in there again.

I prefer rsyslog, plain text and time marking. Much easier to alert on suspicious things when the mark stops arriving.

Log journaling has few practical benefits. I. Fact I’m sceptical of any from experience.
Of interest to people who like the look of this book is Bishop's Pattern Recognition and Machine Learning, also available freely and legally online: https://www.microsoft.com/en-us/research/people/cmbishop/
I worry that this is an outplay of three things:

- reality TV's general assault on dignity: doing ""shameful"" or ""disgusting"" things makes you popular and earns money

- view-based monetisation: you can make money from people hatewatching you

- internet shaming (sometimes called "cancel culture"): like any adverse experience of a population, it provides an evolutionary pressure. We're selecting for shamelessness, because if you respond to shame you get destroyed.
By all means, make non-competes largely unenforceable like they are in California (where they aren't actually "banned"). But be aware that even in states that do or did allow for enforcement of non-competes (like Massachusetts that finally significantly weakened them), there has always been a lot of job mobility and even competitors started by people leaving a prior employer. Non-competes/not-non-competes are not some binary thing that either lets you make off with all of a company's IP or that leaves you chained to a desk for the rest of your career. There are certainly stories of serious non-compete abuse (in my view) and I even know of a couple second hand, but people do routinely move among competitors in states other than California.

I don't live in California and I've only once had to sign a non-compete and it was narrowly scoped and mostly irrelevant.
Pleeeeeeeeeeeease link to the recent Cookbook :) https://lispcookbook.github.io/cl-cookbook/
Show HN: Sonyflake – distributed unique ID generator implemented in Rust
Even worse, you might pick up regional terms which have different impact elsewhere. Mexican Spanish has some common swear terms that are super offensive elsewhere in the Spanish speaking world. Even within Mexico, it varies by region and context.
The Sourceforge version is old, please see https://lispcookbook.github.io/cl-cookbook/ !
There are actually a number of tools that allow easy HTML5 authorship for non-technical users. We make one too - Construct 3 [1].

I think one reason Flash had such prominence was their effective monopoly. Remember when you had to install a browser plugin to get Flash? They reached ubiquity, but it was basically an impossible job for anyone else to achieve. So if you wanted Flash-like content, Flash was your only real option.

Since HTML5 is based on open technologies, there are lots of competing tools on the market doing exactly what some people apparently lament are no longer available. They're out there if you look, and arguably it's a healthier marketplace since there's real competition - although the choice is more complicated now, since there isn't that one option everyone uses.

[1] https://www.construct.net
So what would the solution be when 10 million people need hospital beds and there are only 1 million, most of which are taken up by people without covid
> does this mean it can be deactivated?

Sort of. You either deactivate it completely with --gc:none ; or, you do it on per-variable basis by using a "ptr" (pointer) type, which is outside of the GC's realm. Any variable declared "ref" (reference) is within the realm of Nim's GC, and will be tracked by the gc you chose (none, boehm, mark&sweep, arc, orc, ...).

Additionally, you can define type bound operators to help the GC do its job, but IIRC (and I'm not sure I understand correctly), that doesn't turn off arc/orc - rather, it tells them how to apply some things.
Also: the people or organizations making these requests. They know making software isn't a free lunch.
But Python doesn't have to, I've seen plenty of python with 1000 line functions, no tests and no source control. It's particularly common in Jupyter Notebooks.
Exactly, high seas and maritime law means you’re under the jurisdiction of the flag country (if you have one), and US law is very lax in what cruise lines have to report when it happens outside US jurisdiction.

According to WaPo’s report last year, the most commonly alleged crime is sexual assault (with a third of the victims being minors), and it is not required to be reported. Considering passengers have to put up with that, I struggle to imagine what many crew members have to deal with.
Texas, you'll recall, has creationism in science textbooks. Techs affair with Texas will be short lived as i don't think tech people are going to want their kids taught Texas science.
Geez, reading the title, I thought Ticketmaster was offering $10M to hack its competitor...
Nice! Thanks fro sharing ;)
> Bill Gates said somewhere that steel and cement production are the key factors for stopping climate change.

Baby production is the greater key, as noted with his promoting the solutions of Mechai Viravaidya, who helped bring Thailand's birth rate from around 6 or 7 to below 2 children per woman using methods the opposite of the One Child or eugenics policies: voluntary, non-coercive, educating, and fun.
Needed this functionality in a Rust application I'm writing so I ported the Go code to Rust.
There's plenty of evidence. This is pretty much Econ 101.

The minimum wage is basically a price control on the minimum cost of 1 unit of labour.

If you increase the minimum wage, you're not increasing the value of the economy (which is what leads to the pie growing), but you force employers to spend more on the same thing. The pie is the same size but more money is going to minimum wage workers.

The end result is inflation. People are not earning more, they are just getting a higher number every month.

That being said, I do ack my own bias here, and I get there's reasonable arguments from both directions, all I can say is that it's my gut feeling based on experience:

https://www.investopedia.com/ask/answers/052815/does-raising...
> Is it really an established idea in the security community that systemd is a security nightmare?

Here's a list of systemd-specific CVEs over the years: https://www.cvedetails.com/product/38088/Freedesktop-Systemd...

Note that these apply to all programs in systemd distribution (not sure how many of these are specific to systemd init program).

It seems that a lot of criticism is due systemd doing more than a classic init process does, but some of it seem unjustified since you it is not an "all or nothing" package.

For example, this specific CVE affected systemd-resolved (systemd's DNS daemon), but IIRC Debian was not affected since it did not use systemd-resolved by default: https://www.cvedetails.com/cve/CVE-2017-15908/

So it is perfectly fine for a distribution use systemd init system but use other network daemons.
Amazon Purchases Podcast Network Wondery
The part about Kamala Harris is factually incorrect. Please provide a source where she or one of her surrogates is quoted leveling this type of accusing at Biden.
> Systemd is a security nightmare

I have yet to see solid evidence it is any bigger of a nightmare than a mess of bash scripts that was what came before, but ok.

> taking over various network services ... poorly.

The networking features of systemd are entirely optional. If you don't know how to disable them if you don't want them, the right course of action is not to blame systemd.

People who grew up on SysV init like to shit on systemd as it erases their existing knowledge, but to pretend that SysV init wasn't a total, inconsistent mess or that anyone was maintaining consolekit before logind came around is distorting the truth, to put in mildly.
systemd the init system does not open network connections. systemd PID1 does not talk to the network. `networkd` is a separate binary.

Second, systemd does not mandate using any of these components apart from `journald` and `logind`. You can pipe journald into any syslog daemon of your choice, there's a config option to do so. If you've got issues with logind I can't help you there. I don't know what it was intended to replace (consolekit, I think?) but I do remember it was badly maintained.

Third, a vast majority of deployments do _not_ accept defaults. I know that both Red Hat and Debian go for third party network managers (networkmanager and Debian's ifup/ifdown stuff) and rsyslogd was there on a default install of both Debian Buster and CentOS 8 iirc.

Finally, I repeat, systemd is a monorepo which contains many programs. Sure, you can argue about how they're tightly bound, but I can point you towards FreeBSD/OpenBSD if you'd want them to be broken up into separate repos to be more "unix-y", and if you look at systemd PID1 it's a fairly small binary which doesn't seem to offer many security holes.
Honest question: why does it matter if it's one file or not? For example if you're deploying to a web server, it doesn't seem a big deal if you're uploading one file or several... so why the issue?
Guys, they are clearly talking about CO2. A plant that doesn't output CO2 into the air. First paragraph of the article.

There's absolutely nothing wrong with carbon in steel.
JPEG XL Format Freeze
Wall Street Revives Dream of Bitcoin ETF with New SEC Filing
> So if I understand that correctly: Nim will try to do a light version of Rust's borrow checking and then gradually move from static to dynamic solutions for memory management

I think that's an okay way to put it. Though it might be best to think of it the other way around. It'll default to GC and copying data around (pass by value) and will try to optimize things if it can to more deterministic memory management and pass by reference.

> I read that Nim's GC is optional, does this mean it can be deactivated and when the static memory management fails, I can do it manually for the edge cases that would otherwise done by the GC?

It isn't optional like that. It's more that by default all data is passed by value and allocated on the stack. And if you want to create things on the heap, you need to be explicit about it, at which point you can choose if you want the pointer to be managed by Nim's GC or manually. That's done by having two type of pointers, ref will be under GC, and ptr won't.
That really depends on the high school in question, in NL the mandatory curriculum is laughably bad, mostly due to a lack of competent CS teachers. We teach JavaScript, basics of HTML and CSS, React & React Native, PHP (although I’m trying to get them to replace that with JS) , algorithmic complexity (to the level of handwavy big-O notation and some sorting algorithms), basics of UML, PostgreSQL, C in the context of Arduino, state machines, and for the advanced students I try to throw in a bit of TLA+ (mixed success there). We try and use a project based system where the students pick a project with an actual company and implement a proof of concept level solution. Last year that was a warehousing robot, this year a smart home solution to lower energy costs in social housing. Other non company related projects are a rubiks cube solving bot using LEGO Mindstorms along with a TLA+ proof it could actually achieve every position and would terminate (I did help out a bit on the TLA+ stuff ofcourse).

The trick is to never tell students how advanced the stuff they're doing is, get them excited and they'll go further than you can imagine.

But then again, I am also lucky enough to teach at a combined middle/high school that basically took the last 3 years of the curriculum (15-18yo) and shoved them into the first three (12-15yo) so I basically get free reign since they covered the final exam stuff in the first three years already. I don’t know of any other high school in the country that has this model and teaches at this level. In fact, that is the only reason I teach part-time at all: I wouldn't want to be an actual teacher, but they needed somebody with a deep enough technical knowledge, and had me in the picture both as an ex student (from before they introduced this CS-stuff though, I still deeply envy my own students) and as a 'client' of the students from my previous employer. Eventually I agreed to teach one day a week.

Generally you can expect basics of HTML, CSS, PHP, and if you’re lucky a bit of Arduino-C out of high schoolers, if they get CS at all (it’s very much optional for schools to provide a CS track in NL)
What is the equivalent book for Deep Learning?
Rats in a box eating other rats. The entire online ticket/new game/new toy buy and sell industry is composed of rats, and they are also trying to(trying??) to infest Amazon and rivals.
I have read countless stories of fraud and other sorts of chicanery (review fakery in AirBNB, Amazon, etc., that I have become wary of all their ilk.
I used to line up, buy my tickets and see a show or buy a toy. Now we have paid line standers as well as online bots that buy them all, and they then appear on sale at 10X the price, and a high % get nothing when they buy from a fraud site - often with zero recourse since they used an irrevocable or denying payment return method.
What do it do? I do not buy any items in that milieu.
I am not
Nim looks Pytonish (and has some Python-inspired syntax), but it is very much NOT Python.

People coming from Python that expect a "compiled, faster" Python often find a compiled, faster language but have very weird concepts expecting that language to behave like Python though it isn't.
Indeed. Unfortunately it seems nobody in the traditional Linux ecosystem outside Red Hat (and perhaps Canonical's Snap) is really interested in meaningfully improving UI application sandboxing.

Flatpak is often met with outright hostility and then some ranting about how OpenBSD's pledge already solves all problems. Sure, Flatpak is not perfect yet and too many Flatpaks still have to use filesystem=home (which usually caused by the application or toolkit not being friendly to sandboxing). But the Flatpak folks at least try to gradually improve security.

Disclaimer: I mostly run Linux on the desktop. But application security is definitely a blind spot for the Linux community. Many people still seem to think that UID 0 is the ultimate goal. We are mostly protected by the fact that Linux has ~1% of the desktop and is therefore not an interesting target yet.
Reference counting with cycle collectors is a well known algorithm, nothing new.

Environments like Mesa/Cedar at Xerox PARC already made use of it, back in 1985.

https://bitsavers.informatik.uni-stuttgart.de/pdf/xerox/parc...
first came tiktok, gangnam style ,anime blackpink and bts...

then nevermind...
What's the ROI on learning this?
These are my absolute favorite resources. Succinct and to the point with lots of links to follow if you want to dive in for more.
Seriously. Did any of these people read the article?
Who uses PyPy in production?
The figures I used were median figure in the range, with modern intervention techniques (theraputic drugs etc)

The range (95%ile I think) for 45-65 year old was 0.24% - 0.41%, median 0.32%. The full details are on the link.
Yet for what ever reason this company is worth more than any other car company that can actually produce a quality product.

There is a sucker born every minute. Does any one really think their extra 6k for FSD will get switched on before the end of the cars life?
> Amazon could easily require sellers to provide some basic transparency about these listings—disclosing where these manufacturers are located, how long they've been in business, and which other brands they own. This might make it easier for Amazon to punish companies that try to mislead customers with fake reviews.

In my experience they go out of their way to hide info on who the company really is and especially where it is located. Including deleting reviews that point this out. I suspect they make the most money selling in a position of maximum information asymmetry. If you built up any loyalty to the brand they could sell to you outside amazon.
Close to none. A list for normal users:

- don't delay updates

- use Firefox tab containers to isolate browsing contexts so a random page can't mess with your gmail session (not sure if Chrome has something similar)

- have backups and check they work

- use 2fa where possible

- if you use SSH, move your key to a hardware token
The advantage of democracy is the ability to correct serious leadership mistakes. China lost decades of growth to Maoism (and obviously a lot more besides), and there wasn’t much they could do beyond waiting for Mao to die. Democratic systems are designed to prevent that.

However: this does not mean that every non-democratic leader is going to make mistakes, and certainly not at all phases of their leadership career. (Mistakes are, however, more probable than not over the long term in the typical authoritarian society. It’s noteworthy that we mostly point to Singapore as the sole counterexample of an economically successful authoritarian regime that didn’t revert to democracy or suffer decades of needless economic self-harm.)
Fast search reveals this.

https://www.gatesnotes.com/Energy/Buildings-are-good-for-peo...
I assume you’re saying the theme doesn’t work for you? Thanks for the feedback, will customise it to something more readable, better colours, nicer fonts etc soon.
See this comment for libraries suggestions: https://news.ycombinator.com/item?id=25583855
Others have already commented on Volvo, but when has Jaguar ever had a reputation for quality?