skysight-inc/HackerNews huggingface dataset:
Yeah, no; there's a world of difference between subverting the uplink for a single client (all that you need for altering unencrypted traffic) and subverting the network for your target/victim and multiple LE servers that are designed to resist this attack [0]. If your proposed attack worked, it would be font-page news because it'd undermine the security of ex. gmail/banks. HTTPS moves the bar from "bored script kiddies can do this"[1] to "would need a nation-state-level attack to subvert that many networks at once and we'd know about it because that scale of network redirection would not fly under the radar".

[0] https://letsencrypt.org/2020/02/19/multi-perspective-validat...

[1] http://codebutler.github.io/firesheep/
Yep. Although I don’t use ISO8601 for time stamps when communicating online (for 2021-03-01T00:00Z is more confusing to me than 2021-03-01 16:00 PST8PDT), it’s easier to use for dates when discussing in an online forum where people may be from outside of the US.
Walleye are native and have been one of the hardest-hit by the loss of turbidity. https://en.wikipedia.org/wiki/Walleye also Perch, Pike and a bunch of other species.. and I never fished for them but I know there are healthy populations of trout in the western Great Lakes, too.
What is all this BS about it being proprietary...

https://www.adobe.com/content/dam/acom/en/devnet/pdf/swf-fil...

Straight from the horse's mouth, as they say.

There's also a few other implementations, although they found use embedded in games and such instead of being browser plugins.
There's no HTML5 Newgrounds. It's a true shame.
I had a really funny exchange with some longtime former Microsoft executives. They were talking about another former colleague still at Microsoft, who was not known for being that smart or talented.

“How did he last so long?”
“Oh, he never became a manager.”

It made me realize how lethal management is as an occupation. Enemies above, below and on all sides, who would want to sign up for that?
While I generally agree with this sentiment in a lot of cases, I don't think it really applies here.

Microsoft ships Flash with Edge and Internet Explorer, or allows it to be installed, but they have decided they no longer want to support this integration given that the software in question is no longer being supported and has a long history of security problems. They are no longer shipping it with Edge and IE and are preventing it from running there. You can choose to run it in other ways, but Microsoft does not want their browser used as an vehicle for exploits that come through Adobe. Chrome and Firefox are planning to do the same, for similar reasons, and you can also get Flash working on those manually if needed in similar ways.

The title here is pure clickbait. It's not Windows 10, it's a change in the default behavior of Edge and IE, and eventually Firefox and Chrome. A change that's as easy to work around as it was to get flash originally before browser vendors started including it by default.

If you want to talk about signed bootloaders and completely locked down systems and app stores and how those devices aren't really owned by you anymore, I'm totally on board. But to say that a change in the default behavior of a few applications on just some of the operating systems you can install on your PC is evidence of you not owning your computer, I think that's a lot harder of a case to make.
You can also split the difference between them. I think serverless does a good job of building artifacts and a terrible job of deploying them, and I think the opposite is true of terraform, on balance. There's no reason not to use both.
Yes it was wrong! I used the 'gameboy programming manual' which was sort of the magnum opus of gameboy documentation at the time that was available to the fan community.

I am googling it now, and there are some forum posters saying ' don't use that, it's old and not completely accurate' but it was all that I could find at the time.

I'm aware that it's not official documentation, but you have to remember this was over 10 years ago--there might be better resources now.
Yes, you'd need either a valid cert, or for the user to click through the big scary warning to accept the invalid (or self-signed) cert, either of which raises the bar way above unencrypted HTTP, where this attack is trivial (ex. https://en.wikipedia.org/wiki/Firesheep and https://stopthecap.com/2013/04/03/isp-crams-its-own-ads-all-... )
I was quite confused by the examples for Solresol

> Will you go to the countryside this year? - Fadoremi?

> Will you go to the theatre tonight? - Soldoremi?

I was very intrigued at how much meaning could be packed into such a short word, given only seven phonemes.

Finally I found a dictionary and found that those words just mean "countryside" and "theater" respectively.
No, the author is pretty clear. They take issue with verbiage they personally hear from younger people. Here is a quote from the article:

> “ The first thing I tell them is to talk less and listen more. I don’t know if this is a generational thing or they’re just nervous to talk to me or what, but most of these conversations begin with me getting machine gunned to death with someone’s line of shit right out of the gates. Bang bang bang bang bang bang bang bang bang bang bang bang bang bang bang bang…bang…bang bang bang bang…
I’m thinking to myself, “Oh my god, take a breath, kid.”
Maybe I sounded that way in my twenties too – being excited, feeling like everyone wanted to hear every thought I had on every subject under the sun. I don’t remember.
So I give them the best advice I can think of for building a practice in financial advice and developing client relationships. First of all, I says, “You don’t even know what the f* you don’t know.””

So it does not seem the author is talking about sales / client relations, at least that isn’t the primary issue they raise and the context of when they advise younger people to be quiet and listen is very different than any sales / client relations context.
I hear you! Flexibility would be the ideal.
Sanitizer is always first choice in hospital settings. It’s MUCH faster, and MUCH easier on the skin over repeated use than soap and water.
If many have tried, did none of them learn from their predecessors? Or why did anyone after the first guy try it again if it was so obviously political suicide?

Edit: Ugh, sorry, I know what I just said is a fallacy. I just want to believe that making systemic improvements — getting Congress to operate on a better rule set — would be the thing which gets a person re-elected.
They generally don't post these sorts of answers online so people don't know how to kill others.

There are all sorts of foods that can make you sick or kill you if improperly prepared.

The post is really just saying choose items that pair well with each other but not all together. (The only one I can think of quickly is sugar, yeast, and shaggy mane mushroom, assuming the yeast ends up fermenting the sugar).
This pandemia really crush all tourism industry...
Difficult to say broadly, since there are quite a few different vaccines each with their own ingredient. The biggest difference is probably the lack of ingredients in the mRNA vaccines. They're incredibly simple and contain basically mRNA, some fat to encase it in, and a few substances that allow it to survive.

This article breaks up the ingredients pretty well, although you'll have to scroll down a bit.
https://www.msn.com/en-us/health/medical/what-e2-80-99s-in-t...
It's been infuriating to watch the entire mask fiasco unfold. And this story is such a good illustration.

All masks are not created equal. They have tiers of protection.

At the top are NIOSH approved N95s. They require a good seal to be protective, but if one learns it (via a fit test), it will proved near 100% protection for the wearer as well as the non-wearer.

The next level are KN95s and KF94s. Here is a good overview: (https://www.youtube.com/watch?v=4JFed_ofCwM) These can be 80%+ protective if worn correctly. Hospitals were short of N95's so FDA authorized (via appendix A) a bunch of substitutes.

The next level are cotton masks, bandanas, surgical masks, and "face coverings". They have partial and highly variable amount of protection for the individual, but if used widely in the population, it has the potential to reduce the R0 factor. Since any reduction of an exponential factor is a good thing, it was encouraged after few months of confusion.

Now here is the fiasco. US Gov't authorities downplayed the usefulness of masks. Any type of mask, not just the N95s. The logic behind it was to preserve supplies for the medical workers.

But the medical workers had a perfectly good alternative, an elastomeric half-face mask. Since they are reusable, one set could potentially replace thousands of disposable N95s. A few US hospitals early on used them to good effect, but CDC never advocated strongly for them (https://www.nytimes.com/2020/05/27/us/coronavirus-masks-elas...). Instead, they encouraged increasing the supply of disposable N95s. US N95 production increased 10x in the last 10 months, but it's still not enough. Today, hospitals workers are still getting exposed while reusing and sanitizing disposable N95s.

And the general public was told different stories: don't wear masks because they are not effective. Don't use N95s because they should be reserved for the healthcare workrs, and without proper training, they aren't any good. Oh wait, masks are good. Please wear cotton "face coverings".

The effect of that is that some people believe face coverings are completely useless (partially true), and others believe that face coverings are actually protective (also partially true).

If the public is given clear information on different protective level of different masks, wouldn't they make a smarter choice?

Instead, it's complete chaos.

Good, protective masks exist now (Dec 2020). High quality KF94s are available, and N95s are also becoming more available (about $2/mask, in-stock, from reputable online sources). Elastomeric half-face respirator prices are now at pre-pandamic levels (MSA 200LS is very inexpensive).

And the public still don't know anything about them.
I'm not sure why lengthening the months got folded in with lengthening the week.

Months and weeks are completely independent, we could have an eight-day week and keep months precisely as they are now.

I think it's way too weird to actually do it, but it's less weird than having a cycle of months that's longer than a year.

Islam manages, somehow, to have a cycle of months that's substantially shorter than a year, and doesn't throw in an extra month from time to time like Jews do. I've always found that exceedingly strange, but I guess you get used to it.
The problem with not differentiating clearly between mean and median, is that you look out at other drivers and calculate a mean, then you assume that the median is the same. With a sufficiently skewed distribution this will hugely inflate your numbers, even if you have a realistic perspective of your actual skill.
Management is a function of maturity. There are kids who have just graduated from B school and with just a year or two of work experience, who are great managers. We have to remember that they have been living on the planet for 20-24 years and their experiences in life , families , sports teams etc. Define their level of EQ and maturity. So it’s not just those years of work experience that lead to great young managers - it’s life experience as well.
> "Anything you can do with a paintbrush you can also do with a toothpick and an infinite amount of time."

hahaha... best quote in thread.
e.g. "This autonomous car is 4-5x safer than your human-driven car."

When people hear numbers like that, they may assume it's based on sufficient data and is true, even if it's theory.

But how could it be true or acceptable, given that we're only just starting to have more autonomous vehicles on the road, and the safety could be dependent on the ratio of autonomous vehicles to human drivers?
This is a really good point - you can even use packages such as rpy2 if you want really close integration. A bit clunky but it works.
The 1950s plan for a Washington Square Highway (2014)
> Mode is an average.

They sure do claim that to elementary school children. But using mode sounds absolutely insane to me. Does any field actually do that?

Maybe you could carefully bucket/smooth your data and then use the peak, but that's a far cry from taking raw numbers and looking at the most common.
Ben Byford on How to Repair Trust and Enable Ethics for Machine Learning
Ben Byford is an Artificial Intelligence consultant at Methods and Host of the Machine Ethics and Ethical by Design podcasts.

Ben’s public speaking and lecturing blends his insights within AI and ethics, web technologies, and entrepreneurship; focusing on the usage of technology as a tool for innovation and creativity.

This is the best time to start conversations on machine ethics even as the COVID 19 pandemic continues where data tracking is used to locate people. But at what cost?

Ben has been a freelance web designer since 2009 and now mostly a freelance AI / ML teacher, speaker and ethicist and tinkerer. In his spare time, Ben makes computer games and is based in Bristol and London, UK.

Trust has been lost with regards to data privacy and how companies use data obtained from users. From police officers using facial recognition and data mining by big tech companies, we need to reflect seriously about the ethics of data.

Ben has worked on large scale projects as a web designer with companies such as Virgin.com, medium scale projects with clients including BFI, CEH, Virgin and Virgin unite, as well as having created a myriad of sites for smaller businesses and startups.
So... with the huge caveat that I don't actually believe this... if we're going full conspiracy theory, Google probably benefits the most from Firefox being as weak as possible while staying technically alive. That is, Firefox needs to stay technically an option to stave off antitrust issues, but evil-google doesn't want anybody to actually use them, so it's preferable that Firefox is as buggy and feature-poor as possible.

Again, not something I actually believe, but the presented position is at least internally consistent/valid.
Like boycotts have and do work. I think the problem is average/majority user does not quite understand the minutia.

Successful boycotts seems to deal with worker mistreatment, racial discrimination and other unethical behavior that a business may be doing. Even then they are not always successful but it certainly is easier to explain the situation to people in those cases. However, still run into issues like it is too essential like food or just too much apathy for the entire market of that product.
Yeah, he literally mentioned what you said in the comment:

> If you're lucky, you get an endorphin rush to help offset these

And if you're not, you don't get it no matter how hard you try. Did hardcore biking for the last two years (2+ hours every single day, 9-hour bike rides on some weekends), took a break, probably will continue in 2021, but not even once got any good feelings from it, just an endless chore.
If you expect society to act responsibly whether or not the government mandates a lockdown, then isn't a government mandated lockdown unnecessary? And if so, isn't unnecessary government regulation strictly worse for the economy?
nit: ISO8601 permits offsets: you don't need to always use UTC/Z. 2021-03-01T16:00-0800 works just fine.
The points don't make a compelling argument to me.

> 1) For 95% of applications you can just distribute a single SWF file

A single HTML file can hold HTML, CSS, and JavaScript.

> 2) You have a robust authoring tool that is animation/graphics-first and newbie friendly

Hard to believe that there are literally no options that fit into that category for HTML5. An example of the next-best-thing would be helpful.

> 3) You can send a link to your mom and she can just play it w/ no issues

Same with HTML5. Send a link and no problems, unless she's one of the vanishing few still running IE6.
Re "broon sauce" i.e. brown sauce:

> The recipe is a mystery, and every chippy mixes their own. However now I know the secret: Just dilute down some yourself. Add vinegar to brown sauce

I had the same self-referential discussion with a chippie in Scotland.

"So what exactly is in brown sauce?"

"Dunno mate, it's just got brown sauce in it."

-

Re Roman numerals as multipliers:

I think this must be a recent invention (the example cited is 18th c). In Roman times, 2000 was MM, not IIM, and likewise MM did not mean one million, like the photo shows.
Slightly off topic but any suggestions for the best forum for issues relating to use of Python / R in this sort of environment (thinking insurance / finance specifically)?
Why would anyone bother engaging with this after the way net neutrality was handled by the FCC?

Edit: a 15 day comment period in the holiday season shows exactly how much they care about your comments.
Yes, but in this case the author is an employee of DataDog, presumably working on their agents or clients and so is probably acutely focused on not impacting the performance of their customer's systems.
Here are my two cents on the subject:

-- The need for complex numbers (...)?

Complex numbers are just a mathematical tool. They are used to deal with calculations that involve magnitudes and phases, such as modeling qubit’s internal state.

-- The fact that an n-qubit quantum computing system is significantly powerful than classical system (...)?

Due to the physical phenomenon of entanglement quantum computers allow a coherent superposition of multiple states. Quantum algorithms sort of operate on all superposed states at the same time. Classical computing can only handle one state at a time.

A while ago I wrote a blog post explaining how quantum computing works, from a programming perspective, in case you're interested:

- https://thomasvilhena.com/2019/11/quantum-computing-for-prog...
Have you tried AppArmor? I find it much better than SElinux, if a bit more limited.
Quite:) And seriously, maybe one of these days I'll find the time to understand how docker works well enough to retrofit it onto FreeBSD, but, indeed... it takes significant time and/or money, and this is currently just a hobby-interest, so there it sits...
Funny story about Excel on corporate machines. A couple of years ago the company I work for got boight by an Italian company. When we finally migrated the Windows users over to the corporate Office installs a bunch of people found that Excel wouldn't work for them. Things like sum(A1:A20) were syntax errors.

After a bunch of digging i worked out that the localisation from corporate meant they suddenly had Italian function names not English. Very confusing.

Excel is a program that is both incredible and terrifying to me. There are ways of building spreadsheets that are reliable and auditable. Then there's how 95% of people do it.

You can start out really quickly and make great progress. But it tends to grow and metastasize before you know it.
Virtually no one (especially Coinbase users) is actually using Bitcoin as money, so this seems like only a symbolic violation of privacy but not a practical one. 99% of Coinbase users are trading crypto like stocks and treating their holdings as assets, not currency. Every stock sale is already reported to the government, so this just puts the reality of crypto on par with equities.
Lol! Those look a lot like ours did but we didn't have color - it really makes the difference.
Jobs' rant about Flash was really a good example of "shooting the messenger".

Flash is an intrinsically more efficient format; it was designed back when 56k modems were the norm, and computers far less powerful, so SWF made use of lots of interesting tricks to squeeze the most of out the platform and be extremely simple to parse.

Those who remember playing Flash games will definitely know just how much computing power they needed --- a fraction of that needed for today's "equivalent" with HTML/CSS/JS.

You will never get close to that level of efficiency with HTML/JS/CSS, although they are certainly trying with things like WASM.

I say this as someone who has implemented a significant part of a SWF player, including parts of the AS2 VM.
lofl!!!!
I'm a pragmatic person. If QC mental model is so complex that I can't learn it in a few weeks, then very few in the world can and QC will remain a subject of scientific papers understood by a few.
I learned why they didn't want it soon enough
macOS still ships with Py2.7 and has dependencies, and npm-gyp only recently switched to 3.x. same with python SDR. it depends what you use: less popular packages are still languishing.

but that discounts the tens of thousands of projects that are already out there that are in use and need conversion.

it'll take probably 3-5 years for it to really go away.
UK Chief Medical Officers on the prioritization of first Covid-19 vaccine doses
What makes that equally or more likely?

The concentration of early cases in Wuhan, hundreds of kilometers of away, would imply that the asymptomatic traveler(s) only traveled to one city, and didn't infect any other people along the way.

It's possible, but you have to consider the probability of all these events, hence the Bayesian analysis performed here.
The free market got us methanol-laden hand sanitizer the second demand rose and the regulators looked away for a second.

Don’t mistake your broken government as an argument against government in general.
Again want to say I really appreciate how thoughtful you are about this.

I just want to offer a few of my thoughts because you've been so generous with yours. So you know, I work in the industry. More on the biz side than the scientific. And I am intensely interested in this issue.

100-1000 times cheaper I don't think is achievable in the medium term, if ever. As long as we're running clinical trials I think costs will stay constrained to about a 5x decrease. A 100-1000x reduction, I think, implies a world where we can largely simulate the impact of drugs without resort to in vivo testing. A future I believe in, but one that has a lot big unknown technical obstacles to overcome - like entirely new fields of science and engineering. I'm thinking here on a 50-100 year horizon.

This would also entail a huge change for the regulatory environment, but I think we're so far in the future in this scenario that it's hard to predict what that will look like.

I think a 2x reduction is possible in the near-medium term. If we can change the probability of technical success for trials through better tox models - not testing - that creates an enormous amount of value. The stuff people are doing to design better molecules pales in comparison to doing this. I think the math and know-how exists to do it now - the challenges are more institutional - Who pays? Who provides data? Lot's of coordination problems between actors who are in economic knife fights with each other, though people are trying.

Data problems too. Pharma companies are terrible at databases. It's a mess.

Also, it's better to solve tox because it's not disease specific. The effort invested in building the model (or models) will be distributed over many development life-cycles and would remain valuable after a good drug for an indication is invented.

This is a huge win for the world because it makes diseases that are important but not economic easier to justify. The phrase 'important but not economic' churns my stomach, but there it is.

None of this will fix pricing. Not as long as the patent structure stays the same. If you can legally do it, people will do it. Doesn't matter what it costs. Coke is still charging you two bucks for something that costs them cents to produce, and they don't have a patent.

If you want a near term future with lower drug prices (as I do), I fear your route lies through congress. I think it can happen, but I'm an optimist.

Thanks again for your thoughts and your work. It's good to see other people pulling in the same direction.