skysight-inc/HackerNews huggingface dataset:
The interesting thing about TLS state machine bugs is that they seem hard to prove nonexistence of ahead of time.

Look at gotofail: https://www.imperialviolet.org/2014/02/22/applebug.html

You can find it if you have a generic "suspicious looking code" check. And you can find it if you have a protocol regression test. But do you have a model of TLS that proves incorrect code paths like this don't exist?
Comments on ML “Versus” Statistics
> They don't have internet access

Do you mean they don't as a matter of manufacturing, or that you have blocked them yourself? (I ask because I am also interested in getting some lights, but would also like them to be local-network-only.)
What sort of defence in depth can work against a virus that's been engineered to infect humans very easily, and which can only be stopped by shutting down the world economy and waiting months or years for vaccination? I think the last year has proven comprehensively that we simply cannot implement any sort of defence in depth and need to try very hard to eliminate these problems at source. Just like we do with chemical and nuclear weapons. We don't wait to clean up the damage afterward, because the damage is so horrendous.
Your remark is very good. How do they balance rich answers which lead to zero-clicks with the revenues which are based on a-clicks? Thanks.
You're alleging the CCP is covering up their role a global pandemic. That's a conspiracy as there is a group of powerful people hiding something from the public.

I believe in many conspiracy theories that have substantive evidence for them (e.g. the Gulf of Tonkin Resolution was faked), so I don't dismiss the idea of a conspiracy as impossible, they happen every day. However, there is no substantive evidence presented here other than the mere possibility that someone might have done something bad.
Somehow, the EU plan to over purchase (which they did already end of 2020, early 2021) and share surplus vaccines withe developing countries to avoid exactly that gets completely ignored.
Yes and no. The response would have been far greater if the virus was more deadly. This virus was not that deadly (relatively), so ended up getting half measures.
??? In what economy do most people not have to pay just to live somewhere?
This is effectively the same as the "wiki [query]" search shortcut you can add to a browser. This is useful, but there are also situations where I want to get to the search engine's results page but weighted towards the wiki content. Wikipedia search will always send you to the page for an exact match. There are times where I want to see the search results instead.
As a result, I have no reason to believe that Wuhan is actually the first outbreak, making the existence of that lab irrelevant
>if you encounter problems with your USB-C devices you might want to try to flip the connector.

I have a Lumia 950 (one of the first USB-C phones) and a short USB-A to USB-C (or apple) cable/adapter.

One orientation does not charge the phone, so hes right it does happen.
Musk also put in his Paypal earnings into it.

Let's put it this way - if it wasn't for private entrepreneurship and Musk's vision, SpaceX wouldn't be here no matter what DARPA or NASA would have done.
I’ve been incredibly fortunate to have few rejections in my career. Off the top of my head:

- Google (the feeling was mutual)

- GitHub, if you count no response as a rejection

- I likely would have been rejected by Microsoft, but I ended the interview early

That said, I’ve been even more fortunate to have established great working relationships with peers, mentors and mentees, which has helped me get all but my first job and the one I’m likely to start next.

In a sense, the amount of nepotism in the industry is probably a barrier to many, which I’m sensitive to. But these working relationships aren’t the only way to establish good connections. I’ve seen people do very well by just attending meetups related to some aspect of the industry they find interesting.

That’s still a barrier for people who don’t have the time to devote (or wait), but for anyone who does have the time and wants to improve their prospects I highly encourage giving it a try.
No, I've already posted the article that states that the UK signed the contract with AZ in May. There are also other news articles from May 2020 (https://www.cnbc.com/2020/05/18/coronavirus-astrazeneca-aims...) that prove that the UK already ordered back then.

That's why it was considered "news" when it was reported that one particular contract was signed by the UK one day after the EU. But that's not the full story, since the UK had binding contracts with AZ well before that.

"The link also says they wouldn't export EU manufactured vaccines, except Italy blocked an export to Australia a couple of weeks ago."
I haven't seen that claim in the article you linked.
It seems to me that the problem is what these students should be the "best" at.

Taking tests and learning academic material? They appear to be super successful. Being able to navigate the world of business and working with other people? Well, they aren't learning all the soft skills and life experience they need.

I see this partially as a failure of the metrics used for acceptance. Social skills and other activities are important to the success of an individual, and they should be measured as such when considering who to accept.
I imagine if it were deadlier, people would have been more incentivised to deal with it. Bodies piling up on the streets is a much better motivator for staying inside and socially distancing than news reports of regional hospitals being gradually overwhelmed by a predominantly mild or asymptomatic virus.

The fact is that even ignoring government response, all of our medical institutions seemed to presume that this was yet another [avian, swine, bird, ...] flu outbreak and it would be about as minimally impactful for the west as the rest have been. Which indicates that doctors and hospital administration were either not reading the literature coming out of China as early as last january 2020, or they simply disregarded it as sensationalist and/or sloppy. And, to be fair, given the state of crisis that our research institutions are in globally, I can't entirely blame them, though I still think it was irresponsible that no one seemed to make any preparations for months after the outbreak was apparent. It's as if everyone sat on their hands waiting for the government to tell them it was serious.
Are we overpopulated?
Site appears to be hugged to death. Here's the full text of the email:

The OpenSSL project team would like to announce the forthcoming
release of OpenSSL version 1.1.1k.

This release will be made available on Thursday 25th March 2021
between 1300-1700 UTC.

OpenSSL 1.1.1k is a security-fix release. The highest severity issue
fixed in this release is HIGH:
https://www.openssl.org/policies/secpolicy.html#high

Yours

The OpenSSL Project Team

https://web.archive.org/web/20210322203019/https://mta.opens...
But what you are advocating for is a game in which if you aren't perfect, you are harshly punished.

I just hope no one ever holds you up to the standards you demand of everyone else.
It is optional in the sense that D's GC is also optional. Technically true but you have to go out of the way to make it work for you, average libraries off the shelf cannot be easily utilized.
https://www.libressl.org/
We should care about it because it will help prevent the next outbreak. Not only that, we should hold the CCP accountable on suppressing reports of COVID-19 early on, which delayed the world's understanding/preparation/response. Furthermore, China should have shut down all their ports much earlier. Take a look at https://economictimes.indiatimes.com/blogs/Whathappensif/how..., an article titled "How China locked down internally for COVID-19, but pushed foreign travel"
1. About a decade probably.

2. It started in the 1980s, back when GUIs were considered a luxury upgrade for the wealthy. This was the first computer I ever owned: https://oldcomputers.net/trs80pc1.html

I'd say the biggest reason for the difference is because (by my understanding) you use JSON for configuration and write functions to extend VS Code using Typescript. I've never been a web developer and I've done very little with Typescript (and not much more with Javascript). OTOH, I've been using Lisp in various forms since forever. For me to pop open my .emacs, add an interactive function, and start using it is usually a couple minutes at most.

Now I think most users of VS Code probably feel more comfortable with Typescript and JSON, but Emacs for me is just a dead easy thing due to my ability to customize tasks almost trivially.
I just tried to find references to it, but couldn’t. I’m wondering if my memory is broken. Slashdot is old though, we used to get worked up about bugs in X11 screensavers, and GNAA trollers.
HTTP is a first class member of the standard library, along with bcrypt, JSON, and a host of other useful stuff?

https://crystal-lang.org/api

This is a sweet spot for anything web-server related (which is quite a lot, these days, considering mobile API's and such...)

I would actually hesitate to use a framework for many use cases, although Amber and Lucky are competing for a "soup-to-nuts" total platform, Kemal fills the Sinatra/Express niche nicely, and you really find yourself wondering what you want.

The "shards" module system is very nice, and no external tool is needed, it comes with Crystal.

No need for a C FFI, you can directly wrap the C ABI or C libraries and call both ways (from C to Crystal, from Crystal to C)

It's not Rust nor C nor C++ but more like a better Go, in terms of being a statically typed compiled language that, nonetheless, is garbage-collected (everything is an object, check the API docs I linked above) but it's syntax is like Ruby, and so it' basically eats Elixer and all that's lunch... (Lucky takes on Phoenix, Amber takes on Rails? lol)

It's also extremely fast, and the memory footprint is tiny... (anecdotal, but a 40kloc that was around 500mb ram on node is currently using 12mb)

The compiler catches many errors and long-running applications don't apparently leak memory (cough cough anything dynamic) and one has the feeling that the static typing is allowing stack-frames scoping and Boehm to play nicely together, but this is just anecdotal.

I guess you have one way to find out "Why Crystal"

Let's not HackerNews Bikeshed this to death... go try it... you'll probably like it.

Tooling? I use gedit, so I'm the wrong guy to ask. It works fine on most "ruby" presets for text coloration/highlighting whatever you call that stuff...
The simple reform is to not have EU handle vaccine procurement anymore.
The public must not be trusted to discuss x, y, or z for fear of what the racist white supremacists might do!
This comment is spot on. Rent premiums are often not greed, but just a risk premium and buffer-collection for a catch all of issues from future non-payment to other BS.
Way to go on repeating UK media disinformation.
Nominet Board voted out by members
I think it would be a more productive discussion to ask whether go is a simpler language (compared to popular alternatives), not whether it is simple in an absolute sense.

Given how complex computers and programming is, it's easy to argue that any language is not simple.

It's a more interesting question to ask which of the languages is simplest.
>Try to work at a job that doesn't suck ass

I've been trying to do that since I entered the workforce. I still haven't found it.
As others have pointed out, try to get a financial advisor who can look at your situation and give you some objective advice.

But also understand that you're probably not going to make the best decisions about this from the perspective of extreme burnout.

First step might be to talk to your boss about your workload and see if there are some changes that can be made to make you happy again. If that doesn't pan out, maybe think about finding a new job. Even if you choose not to, just going through the process of seeing what's out there will give you some valuable perspective.

I don't have much idea as to how difficult it'd be to find another job in your 40s/50s if you take an extended break from work for a while, but my intuition is that it'd be harder than simply switching jobs now. An alternative might be to find a new job now, but negotiate a start date that is a month or two out from your planned last day at your current job. This won't work at some employers, but many will be fine with it.

On the other hand, consider that $2.8M at $80k/yr is 35 years of expenses. Your expenses will almost certainly grow over time, but even if they triple, that's still over 10 years of runway. If you wanted to take a year off, but then had trouble finding a job right away, you'd have no problem (financially) taking 6 months (or 12 or more) finding your next job. Hell, you could train for an entirely new field and work your way up from an entry level position to something mid-range in that time.
I like doing dangerous things for fun too. (See also: my 50 mph scooter.)

I think we should mitigate risk in serious software in many holistic ways such as formal verification, fuzzing, anomaly detection, good/defensive coding standards, code reviews, and so forth. Such can be accomplished in C, but it maybe easier in languages such as Rust. The advantage of C is ubiquitous portability, which is necessary for widely-used libraries.
That's more of a demo and showcase tool rather than a GUI builder. I am specifically looking for the drag and drop type.
Yes - some explanation at https://news.ycombinator.com/item?id=26245003 and the link back from there.

Edit: I still want to make this a community/collaborative effort. As HN's archive grows it gets richer, so this gets increasingly worth doing over time. The recent changes are a small step in that direction.

Edit 2: maybe someday it could be integrated somehow with the criminally neglected Usenet archive and go all the way back.
Since I began keeping track, about two years ago, I've applied to 605 jobs, rejected by 328, and the rest didn't even bother to send me a robo-rejection email. Is there any value in posting my list?
I've been on such teams. Usually it was championed by some devops who just cared a lot about it and was willing to put in a lot of work to make it happen.

It's not all that great though. I'd say that, since it's usually maintained by devops guys, it's not fully designed with developers in mind. For example, the deployment to a CI is usually unacceptably slow for at least one seeminlgy unfixable reason (or perhaps the devops don't care enough, because the slowness doesn't hurt them as much). So, in practice, the CI is only used to run the automated test suite before the final OK on the merge and before that, you're better off running and testing things manually.
It totally applies to the articles too. That wasn't in my mind when we introduced that guideline but it turns out to apply just as nicely at that level.
"He also denied suggestions that AstraZeneca might be selling vaccine doses manufactured in the EU to other parts of the world in order to make a bigger profit."
An excellent case against twitter's "fact checking" and censorship. They are not experts, and as this whole debacle proves, experts are fallible too, and it is not twitter's place to determine and censor dissent from consensus.
I know the exact article you mentioned. The real story is actually more nuanced. The guy off course got laid off and could no longer afford the rent. But he racked up rent also because even if he moved earlier, his contract would have made him pay a ton of fines to even get out of it. So he decided to stay.
Not only this, but there will be a eviction-moratorium risk premium that tenants will implicitly pay for years to come, to adjust for the added risk and to help keep a virtual buffer for future moratoriums.
What do you need TLS 1.0 support for?
The WHO will never look where they don't want the answer to be found and will actively work against it.

The chair of the WHO (Tedros Adhanom) [1] was a communist rebel (Ethiopian People's Revolutionary Democratic Front) fighter in north africa and his career has been sponsored and guided by China for this reason.

They won't suppress findings made internally because it would be too hard to cover up - but they will 'do the least' with respect to finding answers.

Only the US has enough power and wherewithal to even try to do something, but they'll be kept out direct, so it boils down to how sophisticated the US clandestine efforts are in China.

My completely speculative guess is that US operating ability in China is 'really bad' and that they've already barked up that tree and found nothing conclusive.

[1] https://en.wikipedia.org/wiki/Tedros_Adhanom
This reads like “we shouldn’t worry about the cause, only the effect”. As in, I’m unable to see another interpretation of your remark.

No! We should worry about the cause and also concern ourselves with managing the effect.

If we can prevent this, we should try. And, if our (American) politicians can be held to account for mishandling the situation, the WHO and China should be scrutinized on the international stage.
The comparison to pro athletes is apt, although a key difference here is that it isn't taboo to tell an otherwise good amateur athlete that they probably won't make it to the big leagues. So you don't have millions of kids every year sacrificing their lives in pursuit of pro sports.

Try telling an Indian parent to drop their kid out of school in grade 9 to join a cricket camp full time. But doing it for IIT is totally acceptable.
Just in case you didn't understand what the article was saying: "Labs in Wuhan might not have played any role in the origin of the pandemic. But a year later, no source has been found, and the world deserves a thorough, unbiased investigation of all plausible theories that is conducted without fear or favor."

It did NOT say the virus was definitely released from a lab. It did NOT present any evidence it was. All the article said was that given the author's experience with labs like this, she thinks the chances the virus escaped are not as remote as the scientists investigating it claim it is. That's all! Your theory might be correct, but as of now, you have no reason to think you've been vindicated.

EDIT: author is a woman, so fixed pronoun.
To keep with the thread. France (67M): https://dashboard.covid19.data.gouv.fr/suivi-vaccination?loc...

premières doses = first doses (6.1M)

rendez-vous prévus cette semaine = appointments this week (0.5M)

There is a second tab dedicated to logistics: https://dashboard.covid19.data.gouv.fr/logistique-vaccins?lo...

That makes it about 10M delivered to date. Vaccination is primarily supply-restricted, only the elderly (75+, or 50+ with preconditions), and medical/strategic personnel (inc firefighters) can get vaccinated for now.

At current pace (last two weeks), it would take ~10 months to get 80% vaccinated with one dose... :/
Are you like frequently traveling to different cities based on the covid level? Is your behavior somehow changing significantly due to slight differences in covid deaths in your city?
> "it was probably a mistake treating AZ as a reliable partner and not someone who'll try find any excuses to skip on their obligations."

Given they had prior obligations to the UK, I'd say they've been a very reliable partner - to the extent of risking annoying a major market by saying no to the EU.
Scientific Hooliganism (1903)
Knowing the environment in which the virus developed can help us better understand it, which will strengthen our ability to appropriately respond to it, now and in the future.

You should care about knowing where it came from if you want to save lives.
It doesn’t sound like antisemitism. Some people choose to pretend all criticism of the state of Israel is.

-Israel is an apartheid state.

-You fucking nazi!
Match statement exhaustiveness checking is one example, especially combined with the pervasiveness of enums (instead of constants).
For one, the US banned such research and specifically for SARS: https://obamawhitehouse.archives.gov/blog/2014/10/17/doing-d...

We should also remember that there were past lab leaks in China of SARS, including ones that led to smaller outbreaks and deaths: https://www.webmd.com/lung/news/20040423/china-sars-death
> Why not?

It's not worth the risk.
> Misinformation.

from the article you linked to:

> Our analyses clearly show that SARS-CoV-2 is not a laboratory construct or a purposefully manipulated virus.

You're the one spreading FUD, intentionally misinterpreting the original article and making up a fake argument that "lab leak" hypothesis somehow contradicts "natural origin" and implies that the virus was "designed". (If I understand the article correctly, "purposefully manipulated" means "genetically manipulated", not "gain of function".) Flagged.
> better designed than Scala

How so? Do you mean Java in general, or just the pattern matching part? Can you provide an example where Java is "better designed"?
Then, why wasn't evidence uncovered earlier? Surely the theory had just as much plausibility a year ago as today.

Are you asking me to believe a theory for which all the evidence was either not uncovered or destroyed? Why is that more plausible than origin from outside the lab?
I'd say it's more like, VendorA gives VendorB special buttons (like they kind you pin to your shirt) that promote VendorA, analogous to the "like" buttons.

You visit VendorB for private financial counseling (like an https web session). VendorB is wearing the button during the session.

Unbeknownst to you (and probably VendorB), the button is recording some metadata of your encounter: when you went there, for how long, how loud your voices were, and VendorA periodically scans the button for this data and collects it.

Just like on the web, you were never aware of the implications of the VendorB button, and had no chance to opt out before the recording began.
Latency is not that bad usually.
Substack Hate: It's All Just Displacement
Jack Dorsey's first tweet NFT sells for $2.9M
The more modern trend of businesses passing risk sort of flies in the face of the old rationale of business ownership taking on risk which justified the rewards of doing business.

Now you're just doing business wrong if you don't minimize risk or figure out how to shift and transfer risk away from yourself.
A lot of amateur athletes wind up forced out due to injury or other things outside their control (parent divorces, stuff like that) too.
> Buying a house has really high transaction costs. ~6% commission, plus more in fees and taxes. And then once you have the house, you've taken on all the maintenance and price risk. That can make sense if you're staying a long time and want the benefits of ownership. But plenty of people with high-flying jobs know that they may move soon enough that the math doesn't work out.

Interestingly, most of the transaction costs hit you when you sell, not when you buy, which is one of the ways the US favors landlordism and sequentially acquiring more and more properties instead of just renting forever, or even just buying one primary residence and sticking with just one.
Uhh, this may not be completely accurate. I worked with several CS IITians. They have/had other stuff they did growing up and took different career paths.