skysight-inc/HackerNews huggingface dataset:
> (negative population growth in all countries).

This does not seem to be true, most of them have small (< 1%) but positive growth I think.

What were you basing it on? Some of them have negative birth rates, but that isn't the same thing - and to lead to an overall decline in population immigration would have to be reduced by more than the delta.
Personally, I use a combination of wireless and physical cables. Not necessarily the most elegant solution, but it works.

Wireless has been great for a while, but I found it does not scale the way I would like it to, especially given the explosion of wireless devices out there.
Really nice release!
Windows still does not support sub virtualization on amd hardware. I.E you cannot use kvm in wsl. Why would you want to? Testing in clean environments. Microsoft also does not allow vmware to use AMD-V if you have WSL or hyperV enabled. I believe that is also an effect of sub virtualization.

There's currently plenty of bugs wherein if you use vmware without amd-v things like disk encryption don't work (fedora 34, ubuntu 20.10 etc).

Microsoft continually says "they're working on it" but it's been a long while and it's obvious they have other priorities here. AMD ryzen cpu's have been the superior CPU for a while now, methinks there's lots of handshakes between intel and microsoft.
> You don't, but if the death rates are generally stable [...]

For example: if a crematorium has historically dealt with 20 cremations a week and is now doing 100 a week, you can estimate that 80 people are dying from COVID per week. The estimate is likely to be pretty inaccurate, but it's the best source of information that there is.
We have 4 people, with the students Quishu Wu and Aditya Pakki intruducing the faulty patches, and the 2 others, Prof Kangjie Lu and Ass.Prof Wengwen Wang patching vulnerabilities in the same area. Banning the leader seems ok to me, even if he produced some good fixes and SW to detect it. The only question is Wang who is now in Georgia, and was never caught. Maybe he left Lu at umn because of his questionable ethics.
Meanwhile I just want to write my migrations in plain SQL. Why do we care so much about hiding SQL, it’s easy.
Bill Gates quit Microsoft 20 years ago dude.
So now developers can stop writing apps for Windows. Instead, they can write for Linux and distribute on Windows using WSL.

Thanks Microsoft!
Yeah, I don't think they can claim that human subjects weren't part of this when there is outrage on the part of the humans working at the targeted organization and a ban on the researchers' institution from doing any research in this area.
This thread is paginated, so to see the rest of the comments you need to click More at the bottom of the page, or like this:

https://news.ycombinator.com/item?id=26887670&p=2

https://news.ycombinator.com/item?id=26887670&p=3

https://news.ycombinator.com/item?id=26887670&p=4

https://news.ycombinator.com/item?id=26887670&p=5

https://news.ycombinator.com/item?id=26887670&p=6

https://news.ycombinator.com/item?id=26887670&p=7

(Posts like this will go away once we turn off pagination. It's a workaround for performance, which we're working on fixing.)

Also, https://www.neowin.net/news/linux-bans-university-of-minneso... gives a bit of an overview. (It was posted at https://news.ycombinator.com/item?id=26889677, but we've merged that thread hither.)

Edit: related ongoing thread: UMN CS&E Statement on Linux Kernel Research - https://news.ycombinator.com/item?id=26895510 - April 2021 (205 comments and counting)
Never tried, but thanks, will give it a go!
I think you're really missing the mark on 4. This is not about enjoying home improvement as a hobby, it's about being allowed to improve your own living conditions.

I can do whatever I want with my property, within building codes, without having to ask a landlord. Want to knock down a wall, upgrade the stove to gas, build a shed in the backyard? You have the freedom. If my faucet is leaking, I don't have to beg someone to send a plumber.
Anyone else find the claim that "This was not human research" as erroneous as I do?
Turns out that it is delayed by 3 days.
Experiments producing lots of data doesn't necessarily mean they were useful. If the experiment was run improperly the data is untrustworthy, and if the experiment was designed to achieve things that aren't useful they may not have controlled for the right variables.

And ultimately, we know what their priorities were and what kind of worldview they were operating under, so the odds are bad that any given experiment they ran would have been rigorous enough to produce results that could be reproduced in other studies and applied elsewhere. I'm not personally aware of any major breakthroughs that would have been impossible without the "aid" of eugenicist war criminals, though it's possible there's some major example I'm missing.

We certainly did bring over lots of German scientists to work on nukes and rockets, so your question is not entirely off-base - but I suspect almost everyone involved in those choices would argue that rocketry research isn't unethical.
Hey don't forget the poor old Apple ///, Apple //e, and Apple //GS! ;)

6502 -> 6502B -> 65C02 -> 65C816 -> 680x0 -> PPC601 -> x86 -> x86_64 -> ARMv8.5 (Apple M1)
Not every country has the privilege of having the world's reserve currency. Money printing never ends well for poor countries.
Not quite sure what this has to do with the idiom's inapplicability, unless "country" in it meant "world". But clearly the reason for what you point out is that the English-speaking world is way larger than the UK.
I believe you'll find that most women are less interested in "flexes" than your post suggests. Every woman is different, of course, but I believe you'll find it won't solve the problems that women have.

They do care about being lied to, so if you claim to be a chess master and you're not, that's bad. But a link to your chess.com account isn't the solution. Playing a game of chess together is the solution. The fact that you can beat other people is of little interest, true or not.

Even if she doesn't play chess, and you can tell interesting stories about chess games, that can be successful. But that's not solved by linking to your account. It's solved by telling stories.

Women hate being lied to about your salary, but to a large degree they just want to know if you're comfortable and not have money be an issue. HN often presents a mercenary view of women, and while I'm sure it does sometimes happen, it's just not true very often.

Yes, it's hard to date when you're poor -- because it's hard to date when you're poor. But you can easily make up for it by being entertaining and interesting, which can be free. Meet in a park and just talk. That means far more to most women than anything you could demonstrated on LinkedIn.

As you say, your experiment will succeed or fail on its own merits, and best of luck to you. But I believe you'll be most successful if you treat women as people who are looking for somebody to spend time with -- from a night to a month to a lifetime. Find ways to present men that emphasize those aspects of them, and I believe you'll have a better chance of connecting men and women.
You can shorten articles with summarizing algorithms, saves you some time

I avoid social media, only read scientific articles or books. Quality > quantity
You ask about moral responsibility and then give nothing but legal reasoning. Those are not synonymous. Google acting within the law has nothing to do with whether they are acting morally, only legally.
That single word alone is enough to alter the tone of the paragraph when read. That the rest of the paragraph is plausible does not excuse it.
the man is overweight
Raspberry Pi Zero Powers the Korg Wavestate Synthesizer
It's explicitly forbidden when working with a large telecom provider in the EU
ModHeader: 400K+ users Google Chrome extension with malware
I think the part you're missing is that projects don't just materialize as "committable" or "comfortable", people have to make them that way, and the more people who feel like they can step into that position, the better it is for the project, just from a pure numbers perspective.

"Happy" is a hard term to define, and I don't think you need to be happy to feel "safe". Another way of describing "safety" is "the ability to make mistakes/ask for help without negative consequences". You may feel "unhappy" that you made a mistake, but you won't feel judged for it if the people around you are comfortable with you taking risks.

You can be deeply unhappy, personally and professionally, and still experience that shared comfort with risk taking on your team, and benefit from what Google's research shows, I think. Perhaps you're all comfortable with the risks because the project is going so poorly and you need to throw some hail marys out there to try and get out of the bad situation. The focus is on everyone agreeing that making mistakes is expected and acceptable, because risks also come with reward.

I actually really like that example, where you're on a doomed project, and the natural "safety" that forms with the team who all knows it's a doomed project anyway, so why not take a few shots at something wild? The space you create in that environment where, "we were going to fail anyway might as well throw some shit at the wall to see what sticks" is exactly what I mean when I say "safety". Projects that have that attitude apparently tend to be more successful. Imagine having that level of comfort with your team and also working on a successful project!
How would they claim this isn't a economic activity?
how is this not experimentation on humans? "can we trick this human" is the entire experiment.
No fair. But it FUNDED the start of that list! ;)
Just wanted to say thanks for your work!

As an OSS maintainer (Node.js and a bunch of popular JS libs with millions of weekly downloads) - I feel how _tempting_ it is to trust people and assume good faith. Often since people took the time to contribute you want to be "on their side" and help them "make it".

Identifying and then standing up to bad-faith actors is extremely important and thankless work. Especially ones that apparently seem to think it's fine to experiment on humans without consent.

So thanks. Keep it up.
To add... Ideally, they should have looped in Linus, or someone high-up in the chain of maintainers before running an experiment like this. Their actions might have been in good faith, but the approach they undertook (including the email claiming slander) is seriously irresponsible and a sure shot way to wreck relations.
As a business, you give up control for critical infrastructure to be managed by dedicated engineers who are experts in those areas, who can let you reuse their already-audited and compliance-certified infrastructure so that you don't have to do that yourself.

I agree it's not hard. It's also not hard to accidentally store your logs unencrypted, ruining your FIPS or HIPAA compliance and putting your company in legal risk.
The point isn't to do it for a year, but to do it for 2-3 weeks in a very strict manner. If you prepare for it, and then do it every time the spread starts going exponential, then you can keep the numbers incredibly low until vaccines are distributed.
> they've raised about 33 million

yes, this is right

> if the number of people required to maintain netbase is low (relatively speaking that is)

The Netdata agent is a robust and mature product. We maintain it and we constantly improve it, but:

- most of our efforts go to Netdata.Cloud

- most of the action in the agent is in internal forks we have. For example, we are currently testing ML at the edge. This will eventually go into the agent, but is not there yet. Same with EBPF. We do a lot of work to streamline the process of providing the best EBPF experience out there.

> I can see them not really needing to worry about making money

We are going to make money on top of the free tier of Netdata.Cloud. We are currently building the free tier. In about a year from now we will start introducing new paid features to Netdata.Cloud. Whatever we will have released by then, will always be free.

> I'm guessing they are finding value in gathering data for ML

No, we are not gathering any data for any purpose. Our database is distributed. Your data are your data. We don't need them.
The population of Texas is 29,000,000 - so even (incorrectly) assuming that these 50,000 people died exclusively from Covid and not compounded by several co-morbities... that's 0.17% of the state's population. And even as a factor of the number of cases in TX (2.84mil, last check), that comes to 1.7%.
I don't think so, you just forgot to add the remote server address. If you run `system "git", "ls-remote", " --upload-pack=$(touch hello) git@github.com:torvalds/linux.git", "HEAD"` it will fetch the remote server but still create the file on the local machine.
The definition of “gaslighting” is a form of psychological abuse where someone is trying to make you doubt your own sanity by manipulating your perception of reality. I think this is a very powerful meme, because if you think gaslighting is occurring, anyone who argues that you aren’t being gaslit is calling you crazy and is therefore one of the gaslighters. This worldview reframes self-doubt or cognitive dissonance as being a product of a conspiracy. So in that sense it’s kind of a one-way street. Any thoughts that perhaps you aren’t being gaslit are just further evidence of how deep the gaslighting goes. Other explanations like “honest disagreement” or “lying” are more parsimonious and often a more accurate representation of reality, but just can’t compete.

Unfortunately the adaptive thing to do here is go along with it. If a friend tells me they are being gaslit, I’m certainly not going to side with the gaslighters.
You could already do that with that X. Simplest way is using wslusc provided in wslu.
Sorry, we got that wrong. Fixed now.

Edit: turns out it was just that there were two different threads on the frontpage about this story and a moderator downweighted the earlier one. That's standard moderation. Usually we merge the threads (and I've since done so) but I'm the only mod who currently does that and I wasn't online yet.
Sure, but that doesn't mean these particular articles were also widely shared or read.

I think this is confusing the general ("Daily Mail is the most read paper in the UK") with the specific ("this article was shared, linked, and read a lot").
Apple is notorious for not keeping a large inventory.
This is pretty irksome. I get how satisfying it must feel, but the one thing I want as a Signal proponent is for the app to be boring and reliable. That means make it easy to use enough to be mainstream, squash bugs, and do all the lovely security work you do.

That does not mean adding stuff like untraceable cryptocurrency payments or very publicly tweaking the noses of law enforcement, and bragging about how you're putting exploits in your app to hack them.

This isn't 1993 and the last thing we need is more pretexts to ban E2E encrypted apps in the countries where they're needed the most. I think this trades a moment's satisfaction for a very bad long-term outcome.
What is the transfer rate?
> Is React language or a library? Does it have its own virtual machine?

It's a library, but it does provide a runtime. As such it IMO makes sense that it would have it's own debugging tools. This is pretty common for complex frameworks. Other frontend frameworks like Angular and Vue do it. As do backend frameworks like Rails and Laravel. Or as another example you could look at Unity (the game framework).

You can still use the JavaScript debugger, and I do all the time with React code. But for React specific concepts the React specific tools provide a better experience.

> Why does React go though so much effort to obfuscate its internals to such an extreme? There are a million other JavaScript libraries that do not have this problem, for what it's worth.

It doesn't do it intentionally. It's internals are somewhat complex for performance reasons. Which other JavaScript libraries allow you to inspect their current state with the JavaScript debugger? That's what the React dev tools give you: state inspection. IME, lot's libraries make inspecting that quite difficult (unless they're using global variables).

> Why shouldn't it be as simple as "React stores state in this variable" and I can just poke at it like any other variable?

The problem is that you can't typically poke variables using the JavaScript debugger. To do so you need to get a reference to the variable. And you can only reasonably do that for globals.

> Abstractions are great, but they all leak eventually. Being able to see through the abstraction is immensely valuable, regardless of where you are in the stack.

I guess I've just never hit into the limitations of the React abstraction (and I've done pretty complex things). Nor have I ever hit a bug in the implementation. To me it's like my database or my filesystem: sure it's great to be able to peak under the hood if I really need to, but 99.9% of the time I'm super glad that I don't. I've had much worse experiences with Angular (1 and 2) where I frequently felt like the abstraction was leaking a lot.
Unfortunately such studies are very very hard to conduct and are never well powered
I imagine a use case where you have headless devices (servers, raspberry pis, etc.) that are not connected to the internet. These devices can be measuring something through a sensor and periodically reporting the measured value using sound through the speaker. When you go near the device of interest, you take your phone and "listen" to the emitted value to see what was the last measurement.

The advantage of this is that it is a very cheap way of adding such communication channel to your device.
This sound like a bug in statute that needs patching, where if you take the property but don’t use it for the intended purpose, you pay punitive damages to the property owner (some multiplier of the value paid).
One Man Shows How the App Store Has a Scam Problem
Looking forward to testing my OpenGL lecture code on this, it works under Windows and Linux natively so working on WSL will be a major bonus for me :-)
If you're failing some basic security it isn't going to give much confidence.

But also users don't know now if their systems will explode if they try to gather Signal (or other app) data.
I want proof that the motive was in any way, shape, or form, related to or sponsored by a foreign government under the cover of university research. Not speculation based -solely- on the nationality or ethnicity of the accused.
Perhaps you've been seeing it more for some reason, or it has seemed more aggressive to you for some reason, but I can tell you that the way we moderate HN's front page hasn't changed in many years.

It's clear to me now that this case was a moderation mistake. We make them sometimes (alas), but that's also been true for many years. Moderation is guesswork. https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...
I get the irony here, but regardless:

I'm European and live in the US. When I've travelled to the Middle East and Japan, both places struck me for people doing exactly what this video suggests.

Such a calm, methodic way of handling things... made me realize that to them, we probably appear careless.
'Not ignorance, but ignorance of ignorance is the death of knowledge.' - Alfred North Whitehead
UMN has some egg on their face, surely, but I think the IEEE should be equally embarrassed that they accepted this paper.
We threw people off buildings to gauge how they would react, but were able to catch all 3 subjects in a net before they hit the ground.

Just because their actions didn’t cause damage doesn’t mean they weren’t negligent.
Careful, the prosecution’s witnesses testified on cross–examination that there was no evidence of bruising on Floyd’s neck, which is inconsistent with “cutting off someone's airway for 9 minutes”.
Maybe it's what it's doing for me but I run it for days at a time and it's only taking 2GB.
As a Signal user and moxie fan I love that post, but I worry that it places Signal in legal peril from Apple.

My fear, and prediction, is that the authorities will frame this as an even more egregious attack on law enforcement and that interfering with investigations is a crime (I'm not a lawyer, but I play one in hacker news comments, and that sounds like a crime). They'll lean on the app stores and the app stores will lean on or remove Signal.
CS researchers at the University of Chicago did a similar experiment on me and other maintainers a couple years ago: https://github.com/lobsters/lobsters/issues/517

And similarly to U Minn, their IRB covered for them: https://lobste.rs/s/3qgyzp/they_introduce_kernel_bugs_on_pur...

My experience felt really shitty, and I'm sorry to see I'm not alone. If anyone is organizing a broad response to redress previous abuses or prevent future abuse, I'd appreciate hearing about it, my email's on my profile.
Fascinating. I didn't realize the Mafia was still around until reading your comment.

After rabbitholing for a bit I realize now that they are still very much around.

They remind me of the Mexican Cartels a little bit.
Was the issue with Fei actually a bug?
Most US mortgages are fixed rate mortgages, so increasing mortgage rates would not affect the monthly payments people have to make for their homes, therefore it would not cause home owners to default (in the US).

In May 2019, adjustable rate mortgage applications were only 6.2%:

https://www.mba.org/2019-press-releases/may/mortgage-applica...
The problem with using a GPL/AGPL-licensed library is that legally, your code and the library together become a single derivative work. The LGPL explicitly exempts library consumers from any copyleft requirements in this scenario, but the GPL and AGPL arguably require the entire work to become licensed under GPL or AGPL, respectively -- and the AGPL in particular would require releasing the source code of the entire work to network consumers of the work.
So you want to apologize... Now what?
What's difficult about it to you exactly?
a loan (with interest?), on a depreciating "asset", which obligates higher risk-premium (ie:insurance) does not seem sensible to me (and never has when I run the numbers).
I own a Cellebrite, and yeah you are right. The Cellebrite box is nothing other than a phone backup tool. The nice thing it does is implement every backup sync protocol for every version of every mobile OS so you don't have to spend a whole day trying different combinations of iTunes and such.

The "Physical Analyzer" is just a forensics tool. There are dozens of competitors out there that will take a phone and surface the things that might be interesting in a court case or law enforcement investigation.

The product Signal didn't talk about - which I think is the one they are upset about - is Cellebrite Premium. That is their service where law enforcement can send locked or damaged devices to their lab and get back a an image to load into PE. However in 99% of cases devices are either accessed because they are running old software with public vulnerabilities, or using the magic phrase "would you mind unlocking your phone so we can clear this matter up?"
Here is a case, where one university's (Portland State University) IRB saw that sending satire articles to social science journals "violated ethical guidelines on human-subjects research".

https://en.wikipedia.org/wiki/Peter_Boghossian#Research_misc...
Never blame the coffee.
It's not that hard but neither is shipping patched versions of ffmpeg. This company will have some catching up to do.
I think the ELI5 is being used rather loosely and figuratively and in spirit here, which should be clear.

> When I see ‘VM’ I think first of a hypervisor virtual machine.

That’s kind of a strange interpretation to me. In the context of programming languages VM is quite clear ala BEAM VM, CLR, JVM, LLVM, etc.