skysight-inc/HackerNews huggingface dataset:
Wow, that must have been rough, I was lucky in that I came back just before they changed to the hotel only quarantine. One of my friend had to go through hotel quarantine and ended up getting a windowless bedroom during the entire 14 days (the hotel website definitely didn't mention that when booking).

By the way, always fun to meet people from HN in HK, so shoot me an email and we could have lunch or drinks after the fourth wave is over.
Exactly. Objectively this is bad. It makes me think of sometimes Youtube review videos I encounter, where the author instead of reviewing themselves the products display images or other bits of videos about the products from elsewhere. I don't deny it must take time to make these pages and videos but objectively it has little to no real information value at all.
Very cool paper. Something that bothers me is that the Floyd-steinberg error diffusion without dithering looks superior than the version with the dithering. I think this demonstrates that perceptible patterns in the error (non-linear) don’t always look so bad.
It's the memristor part that should have been in quotes in the title.
The pandemic has changed America's startup landscape
What does it being a token have to do with anything?

An unencrypted token is just as vulnerable as an unencrypted password.
That's entirely because of the way our procurement process works. We have separate capital and maintenance procurement processes. Typically, we splurge on a high capital budget (the cost to build housing) and then skimp or cut out the maintenance budget. Or worse, we expect the housing to be self supporting.

Public housing done right is distributed, low rise apartments rented below market rate and not expected to be self supporting.

As a tax payer, it's so frustrating to see us build good things and then totally neglect to maintain them.

I will say that high rise public housing in the US introduces complexity because it necessitates a degree of service infrastructure that's more costly than more, lower buildings.
Serious question, is caffeine all that bad? I mean, like most things, I understand you probably shouldn't overconsume but what if you drink a cup of day? I read these articles and it makes caffeine like its absolutely detrimental to you like smoking. Is that really the case?
The equation for the memristor seems to differ from that of the others though in that R, C, and L are constants whereas M is a function of charge. The explicit charge-dependence of M isn't noted in the diagram, but without it you would just get a resistor.
While we're discussing racist coronavirus conspiracies which can't explain the positive COVID results of Italian and French patients in November 2019, why don't we go all the way instead and discuss the conspiracies used by Trump supporters? The virus was clearly manufactured by the deep state to steal the election from Trump, to take away person freedoms and to implement a global reset. I find that theory to be much more believable and interesting than this Pottinger paid hit piece on China.
Geometric effects of certain system design choices
I own a home, and if it steadily loses value but my city becomes affordable for anyone who wants to live here, that seems like a pretty fair trade to me...
I keep hearing people day that Signal is horribly buggy, but I've never even experienced one bug in the (Android) app. I've used it moderately for 3-4 years now.

(I haven't used the disappearing messages feature, though, so I can't speak to any possible bugs there.)
And ethnicity by last name, age by looking at the education section of the resume, etc.
I might as well switch back to OpenSSL on Gentoo reading this.

I use LibreSSL and have been from early days when it was quite a bit better and there was no real reason not to but I read more and more that OpenSSL has fixed most of the issues that prompted the start of Libre and that the compatibility issues are causing some pains.

My use of Libre on Gentoo is completely seamless and simply required a USE flag change but if support end for it then it won't be a problem I suppose.

I agree with the choice argument, however; Gentoo supports configurations that are more esoteric and more of a hassle than this, some of which I do actually need, but as far as a TSL library goes, I personally do not notice any real difference between the two and it's a background library.
It turns out that most funding for innovation actually comes from the government. Even the esteemed Mr Musk has benefited from about 5 billion dollars of non-private money for his profitable ventures.

There is research that solidly backs this up. Taxpayers are bankrolling the industries but it's the shareholders who are reaping the rewards. It's further support for the argument that IP should not be private but rather commonly shared.
Let’s take a step back here.

Everybody has a different standard of privacy they want. There are different levels of trade offs they can make as they become more secure. What you’re describing is the top level of security but it’s not very convenient to use. It also uses private keys which makes establishing a new connection challenging.

There are as I see it a few main security modes: stopping automated surveillance and hacking, stopping low effort surveillance and hacking, and being “perfectly” secure from the most motivated adversary.

Being perfectly secure on a networked computer is basically impossible. Governments likely have access to back doors and 0days that can compromise anyone (and keep in mind if the person on the other end has bad opsec, you’ve already lost). But they’re probably not going to unleash the fire and fury on Joe Schmo, and would probably be reluctant to target someone security-minded who might identify how they got pwned and publicize the vulnerability unless they have a damned good reason.

Most people don’t need never-crackable, they just need to be reasonably assured that only a very motivated adversary could crack them.
Good points, and I tend to think the 'escaped from a lab' case is at least as strong as the zoonotic one.

A small counterpoint though -- the market is the Huanan market, i.e. specialising in south china sourced or styled food. I would not be surprised if some exotic animals were there but never admitted to.
Ah it's just a false dichotomy. In reality these things go together. Can't have (real fuckoff) power without money; can't have (real fuckoff) money without power. If you don't have one but have another, you'll soon lose it.
> Just look at the whole Hardware Unboxed / Nvidia thing that happened recently.

Can you expand on this? I hadn't heard of this.

I recently watched a new video on "playthrough” of Cyberpunk and it was a heavily advertising the power of a NVIDIA graphics card as he jacked up the raytracing settings and mentioning the card (which the comments section said was mean because it was impossible to find in the marketplace and/or costs thousands).

So I'm curious what you mean by this.
If they were willing to pay so much over local market price they would find local employees. In a capitalist society a labor shortage only exists if the employer is not willing to pay enough.
> The third most common death from firearms in the USA is accidental discharge.

What is the fourth most common death from firearms in the USA?
Getting Started with Data Science and IBM Cloud
The author of the article is rich. He is an boutique investment banker who has sold several 'old economy' companies.
Any recommendations for ones that run on ubuntu?
I prefer to pay someone... okay, anyone, who isn't Google. Fastmail, O365, Proton, whatever. Solves the problem and supports non-Google options.
It took me more than a couple of Google searches for me to find it in the end, so here's a link to FRESH, in case someone else is interested: https://github.com/fresh-standard/fresh-resume-schema
I agree - like only show a persons face AFTER you’ve connected somehow (I agree we’re hardwired to recognize faces - but I don’t want to try to recognize all the people as I’m browsing etc. - but when they become part of my Rolodex, then I wanna recognize their faces)
There's nothing negatively contentious in that sentence. It may be debatable.
You should elaborate on that.
Regardless of the lab theory it's pretty clear that the wet market was simply the first known super spreader location and not necessarily the origin given how a third of the first known patients had no connection to the wet market.
That reminds of what - I think, not sure - Paul Graham once said, that what is applied to stupidity of the founders is just that they have little time and other priorities. Don't remember the exact quote.
You are saying that Andy is inconsiderate in every other line. When most likely he had tons of other things to do. You can either make sure all your hover cursors and the spacing between links are consistent. Or you can ship.
I've been using AWS CDK since the first preview versions and experienced the same mind blown feeling. It really changes the way you think about IaC (Infrastructure as Code) when cloud resources are programmable and abstractable in TypeScript. This is particularly true when you develop serverless applications that are tightly integrated with cloud services (API Gateway, Lambda, etc).

I've recently started to merge IaC code with runtime code, so that Lambda functions and AWS CDK projects share the same dependencies and the same package.json. I think Pulumi does something similar, although I'm not familiar with it. It makes development one step simpler, because you only have a single set of dependencies to worry about in a project. Esbuild takes care of only deploying the code you actually need to the Lambda functions.

The next step I hope to see is TypeScript type support for AWS Step Functions. Currently there's no type checking for the input and output objects of Step Function States, or for the various selectors you can specify for them. With proper typings, AWS CDK could throw deploy-time errors when Step Functions are badly configured or don't match the input/output types of related Lambda functions. Actually, you might see the problems already while editing the project in Visual Studio Code.

The future direction here is that you can implement fully featured cloud applications, including runtime code, with very little boilerplate code, just by defining data structures, essential business logic and high-level cloud resources. AWS CDK will take care of all the details by default.
Django multi tenant tutorial using subdomains – basic implementation
Exactly, he's reading Amazon reviews instead of me, that's the whole point. (If you don't want to call that "vetting", fine by me I guess)
(Zyxel) VPN has an unfortunate backdoor security flaw
I'm not qualified to answer that. Plus, I'm not sure I've seen it (obvious LinkedIn competition) yet, but there are shades of things that might upend the recruitment industry resulting in LinkedIn's cash cow taking a hit: Lambda School, Scaler Academy, EightFold.ai, Upwork/Fiverr, Creator economy etc
Aesthetic differentiation is an interesting consideration, but even aside from that the native UI framework options are currently not practical for applications like Office. Like, their options are:

- Wait for WinUI 3, hope it’s good+stable enough eventually

- XAML Islands which I hear is super buggy and janky

- WinUI 2.x which constrains them to an AppContainer. Not gonna happen for an app as big+legacy as Office

- WPF which is on life support
I really don't get what people mean when they say this. To me, Signal is pretty indistinguishable from WhatsApp, FB Messenger, even the default SMS app. What about the UX specifically bothers you?
> the CCP just illegally annexed Hong Kong 27 years

And the brits legally stole it? Give me a break.

> violated it's autonomy in direct violation of the internationally recognized treaty

It was violated nearly 200 years ago, when britain invaded it in the first place.

> The CCP committed Crimes against Humanity to do so and passed the National Security Law which has removed rule of Law in what was once a beacon of Western values

Western values? Does that mean hong kong is going to invade australia and wipe out the people and pretend the land is theirs? No such thing as "western" values. Not sure why it is being parroted by propagandists and media all of a sudden.

So china takes back territory that was stolen from them and they are the bad guys?
> I can't think of a decent way to monetize a review site without relying on a revenue stream that's susceptible to corruption

I can. Something like the Patreon model might work.
You don't think it has anything to do with one of these people having a PhD in the field, and the other having the position solely to appeal to conservative politicians?
I think the key difference between this and the Wirecutter is less that the Wirecutter looks at fewer products (although that might be true) and more that the Wirecutter model is for an expert to form their own judgements about what is important whereas this guy focuses purely on deriving a consensus from the user reviews without using any priors or first party research.
If you believe that's how coin tosses work, you could believe almost anything.
I don't think it's quite so bad - seems more playful than manipulative. I briefly added scare quotes around "zero" but it made the title look unusually weird so I took them off.
Have you participated in any bug bounty, responsible disclosure type stuff?

>a gift card phone bot that calls gift card phone lines, bypasses captcha, and transcribes balance.

It probably doesn't but does that company have a mechanism for people to report security problems?

This is partly about what you do with what you find out or build. If you discover some loop hole or vulnerability report it to the company then publicly publish your code etc once the security problem is fixed that is very different to finding a problem and directly using it to acquire money.
Well if you are certain it works for you, then I guess don't mess with the recipe.
You could probably adapt this to rug hooking kits pretty easily. Random example site (first one in DDG search results: https://woolery.com/rug-hooking/kits.html)
The BBC series The Planets had an episode showing the 3d physical Mars map you describe. Jump to the 9:45 mark in this video to see it and some discussion of the canyon discussed in the article:

https://www.dailymotion.com/video/x7szrj4
Op arrays have the advantage of being in the i-cache, but needing an dispatcher with indirect calls.

Op linked lists are bad for the icache, but use all direct calls, which are much better cachable.
The best is when you sort the list to be adjacent. Then you have the best of both.
This is the geographic dimension, but there is also the time one. The time dimension can seem to link the outbreak to the start of gain-of-function research in labs around the world.

Roll a dice representing all the possible years of bat-human interaction.

How often do you get a result so incredibly close to the start of related gain-of-function research?
That's not how probabilities work
Jonathan Pollard
I'd assume that this is even more of a problem with focus enhancing drugs such as amphetamines, because they also will keep you awake and alert.
You can't use signal without a cellphone... and cellphones are a privacy nightmare.
Taiwan has not eradicated the virus. Their quarantine systems are good, but not perfect:

https://thediplomat.com/2021/01/taiwan-tightens-pandemic-mea...

While they have certainly come closer than most places, the downside of this approach is that it comes at a debilitating economic cost (edit: for most countries...Taiwan specifically may be able to get away with it for a while because they're a manufacturing hub), and literally any minor slip up can lead to the virus spreading like wildfire through the population.

Again, considering the vast differences in scale and complexity here, it's pushing the bounds of credulity to claim that the United States could do something similar. Even a "science-following" state like New York can't conduct a quarantine of remotely similar strictness.

Pretty much the only equivalent thing the US might have done would be to stop all immigration in January. Neither political party would have supported such a thing.
I see all this stylish eye candy on the page (animated transitions, rounded corners, dialogs with dark overlay) that takes time and care to implement, but there was just not enough time to make the text legible before shipping, eh?

It's clear that some of these were design choices and have nothing to do with shipping faster. The others are just inconsistencies that go against the general polish that the design aspires to convey.
> many are starving, being evicted and dying from COIVD in the World'd richest country

Like every human being, you are entitled to an opinion - however, I fear you are turning that into an emotional argument, instead of logically looking at it. Your emotions are tainting your perceptions.

Most people on HN have a negative view of crypto because of sour grapes. That's fine if you can afford the missed opportunity caused by this kind of luddism.

> fake paper wealth number increases--all while the currency its denominated in loses more and more purchasing power.

Personally, the only "wealth" I believe in is the one that's in a FDIC insured bank, under your name.

As for the purchasing power, it doesn't really matter in isolation: as long as your wealth can increase more in nominal terms than the purchasing power can decrease, it means your wealth increase in real terms.

So what's the problem exactly?

Purchasing power, like everything else, is just one of the "tools" - like CICD or your favorite editor, it's a nice thing to talk about with your friends, but that's not the bottom line.
> Pensions are horrifically anti-worker. You're basically withholding X% of someone's pay for 40 years, and also confiscating that pay if they don't stay at the same company until the pension vests (so people cannot leave without incurring a huge financial penalty even if they hate their job and can find better options elsewhere).

It depends. I have a defined-benefit pension that vested after a short time (5 years? it was a long time ago, but it was about the same as the 401k match). I've never felt tied down by it, and it's a nice thing to have to diversify my retirement assets, since it was one where I wasn't taking the risk.
I never got that one. Who is it for? When you're playing a game, you're not looking at the keyboard. And with just the few buttons available covered by your hands, it's not really for others... Why is the game-layout lighting a thing?
it's a privacy issue. Users who enable the feature don't understand that are basically publishing thier latitude longitude online. Which can be resolved into a home address.
> the Red Planet is too hot and dry to have ever accommodated a river large enough to slash through the crust like that

May want to proof-read this.
They're all shitcoins. What stablecoin?
> Anthony Basile, who is the current lead for LibreSSL on Gentoo, agreed, saying that LibreSSL is "more of a hassle than it's worth".

This (as the article points out), may be true now but was definitely NOT true back when heartbleed was announced.

I understand that they've cleaned up the OpenSSL codebase significantly. I wish it could have happened without the threat of an alternative implementation, but maybe adversarial environment is just part of how open-source software gets better?
The methods utilized in this compromise are consistent with methods utilized in other attributed breaches not disclosed.
A conceptual difficulty is that cryptocurrencies often intend to make financial technology truly private and permissionless. That goal itself is at odds with lots of existing regulatory systems, and many cryptocurrency developers have emphasized that they want to help people transact outside of those systems.

If you don't want to help people have more privacy, autonomy, jurisdiction-independence, etc., than existing financial systems, but just want to be faster and more programmable, then you don't need cryptocurrency. Instead, you could create a centralized intermediary that implements a system with the properties you want, and simply prepares to help governments {track,seize,freeze,blacklist,reverse} {users,assets,transactions} to the extent that regulators would like. This centralized intermediary will probably be faster, more resource-efficient, less prone to exotic attacks on consensus mechanisms, and more scalable than a decentralized cryptocurrency. It could also be moderately innovative compared to some previous financial intermediaries.

What are the properties that, say, Bitcoin has tried to purchase at the (expensive!) cost of completely decentralized proof-of-work consensus? They include the inability for a centralized authority to shut down the system, or exclude particular participants, or block or reverse particular transactions, or override or violate the predetermined rules for what constitutes a valid transaction, or condition participation on compliance with any particular bureaucratic formality. They include letting miners be anonymous. If you don't want those things, you could more efficiently replace all of Bitcoin or Ethereum with any of several of multi-writer append-only distributed data structures with, for example, a publicly enumerated set of identified, trusted consensus verifiers.
> The truth of a story does not depend on the credibility of its narrator.

It actually does. I'm going to respect the opinions of serious scientists, doctors, journalists, lawyers, etc on topics of their expertise.

> But that requires careful, critical examination.

That was my whole point. By stating claims as an elaborate story that requires time investment as a reader, with a lot of flourish from a professional writer, you're undermining careful and critical examination.

You're also risking the story being memorable and sticking with you, in the same way that people watch historical movies and then internalize that as what actually happened. Even though you know most movies are fictional, if it's the reference you feel an emotional attachment to, you'll justify it as true to yourself.

Humans aren't good at purging information once they've been exposed to it, especially if it resonates with them.

> I'm perplexed by this reaction, as if reading something with a critical eye is impossible.

It's not impossible, it's just impractical. If I read something by a well-respected person with expertise, then the point of reading is to retain as much shared knowledge as possible. If I read pieces like this, then I get to live in their narrative for a little while, but I have to be careful not to absorb too much of it or take plausible sounding things as true, at least pending fact-checking.

> Or, worse, that reading something by someone without a particular status or pedigree might become as infectious as SARS-2 itself and turn us into zombies or something.

Indeed, that is what's happening. We used to value expertise. Now everyone's opinion is equally valid.
https://www.engadget.com/2019-11-29-signal-ipad.html

Works on tablets and desktops too. Just set it up as a linked device.
As a random secret in the reporting device. The secret can then be used with a cryptographic hash to produce a deterministic but unpredictable offset, based on the current location.

Something like:

reported_position = true_position + hash(secret + true_position)
Forward looking infrared
The person who wrote the article is named John DeFeo, while the username of the HN submitter is josephjrobinson. While it is possible they are the same person, it seems unlikely.

This seems to be a common mistake on HN, and I point it out because you and others in this thread seem to have invested a fair amount of time in crafting a personal response to the author that may never actually be read by them.
Methods utilized in this compromise are consistent with known attributed methods used in breaches not disclosed.