skysight-inc/HackerNews huggingface dataset:
> "the fact that employment plays any part into this whatsoever is a problem"

Yes, I've said exactly this about half a dozen times now. It seems you're arguing based on myths and preconceived notions against the USA rather than actually responding to anything I've said. Let's end it here.
I have seen reports that Pfizer and Moderna have had blood clot numbers too. I'm getting pretty tired of all the anti-AZ hysteria. I got the 1st shot of it and will get the second.

Put it this way, if you get actual covid, your risk of getting a blood clot drops to something like out of 1,000. That's way better odds than a million. So logically right there, the vaccine is a great idea.

Secondly, I haven't been convinced that some of this negative press isn't intentional. AZ is non-profit, Pfizer and the others are for-profit. Who benefits from negative AZ stories?
Commercial (parser games), not (commercial parser) games.
it could also be that relative to alphabet, apple and shopify they had jsut a good quarter. MS beat estimates and saw daily losses yesterday, likely attributed to rebalancing market-based portfolios.
I think you'll find that using an old Rust from Debian is not the default development workflow for most Rust users: https://blog.rust-lang.org/images/2020-12-rust-survey-2020/r...
Some of the past related threads:

“They introduce kernel bugs on purpose” - https://news.ycombinator.com/item?id=26887670 (1954 comments)

UMN CS&E Statement on Linux Kernel Research - https://news.ycombinator.com/item?id=26895510 (320 comments)

Open letter from researchers involved in the “hypocrite commit” debacle - https://news.ycombinator.com/item?id=26929470 (374 comments)

Linux Foundation’s demands to the University of Minnesota - https://news.ycombinator.com/item?id=26955414 (168 comments)
P.S. /e/ = LineageOS, which breaks Android's security model.

Graphene, then Calyx, is a great place to start.
"Largest reasonable upper bound" "certain as possible", I know I'll hire you to do PR for my next project.
>So why go for dark mode if legibility, detail perception and performance is lower?

Ok you're arguing that dark mode itself is useless. I don't know enough about it to have an opinion on it one way or another, I can find sources on the web going either way.

What I'm asking for is the evidence for the slippery slope implied by "gateway" whereby Hacker News staff will be more likely to add further "useless" features simply by having added one. Assuming for the sake of argument that it is useless.
So does life expectancy. You retire later, but in total amount of years retired per person? Probably even more today still? I don't think "standard retirement age" tracks perfectly with life expectancy.

Also consider. The life expectancy of a 60 year old is above average. At age 60 you have already "survived" quite a lot of danger (adolescent drug abuse, driving accidents while young, opportunity to be a soldier in a war, crimes of passion in your twenties, mid life crisis, et cetera). So the life expectancy of a 60 year old is above the "average life expectancy", as many die before ever reaching that age.

Isn't economics fun?
That’s a real risk. Being a senior engineer on a team can make you very valuable to that team in particular, so you might have the power to make an ultimatum. It could get a lot harder to line up that alternative remote job, however.
>Your argument boils down to “I want the right to poison myself and the convenience to do it at easily accessible retail outlets.”

That is the argument, and I find that it holds up just fine. It's not like cigarettes appeared on the market yesterday, their dangers are well known. Adults should have the ability to make their own decisions, even if those decisions are harmful to themselves.
The thing is that citizens shouldn't have to be doing any of it.

> It's simply that EU citizen are much less used to go to court over what they consider trivial things, eg for a 20€ steam game.

If it takes few hours to find out where to lodge the case, fill the forms and all that then be anxious about the outcome for considerable amount of time, this is already way more expensive than 20€ even if the request itself is free. Even if you win, you'll lose.

Instead of sitting on their bottoms, the civil servants should be actively going after companies to make sure they are acting lawfully. I think much more sensible would be a complaint system that would trigger an investigation into a particular company and then solving it for all users instead of clogging the courts with individual claims that could go on forever (as in thousands customers lodging thousands requests for the same thing).
Mozilla laid off most of the people working on Rust last year, so there is a bit of a diaspora.
I think it’s because early adopters had success (same with things funded via Patreon) and then the resulting bandwagon and influx of labor competition made it a race to the bottom.
...so they claim to be a consensus based registry, yet they block existing trademarked domains and are the only entity receiving money? How does that even hold up with their core argument that DNS is too centralized?
It got me LAX-JFK for $361 during Xmas holiday... usually it's like $600.
anything new added?

Some earlier discussion:

1 year ago https://news.ycombinator.com/item?id=21903007

4 years ago https://news.ycombinator.com/item?id=13249675

7 years ago https://news.ycombinator.com/item?id=7611093
> Can flu jabs be made more effective, and multi-strain, using mRNA vaccine technology? That's a genuinely new tool in the toolbox.

In theory, yes; in practice, I don't see this happening for some time (outside of a possible combined SARS-CoV-2 booster + flu combo). The mRNA vaccines are expensive to produce, and it's hard to justify a cost multiplier that's a magnitude higher & harder to produce. Flu vaccines are already multi-strain, and the current techniques already attempt to generate the recombinant strains that might be generated in the wild. Flu mutates faster than the current egg based vaccine production pipeline can handle, and the mRNA vaccine pipeline is orders of magnitude smaller in scale. This will change, of course.
Was this comment supposed to be left on the other AI Dungeon post? This one is about a security hole.
"I guess we can take comfort in that a lot of people are in the same boat." How did that help anyone? Would you say that to the Auschwitz prisoners? This is exactly what right-wingers have in mind when calling people sheeple.
> I would like to better understand how/why mRNA vaccines can't/won't eventually turn into a dangerous prion.

Why would it? A prion is a specific protein, why would this specific mRNA molecule, which only exists in our body for hours, cause that specific protein expression, when we have hundreds of thousands of other mRNA molecules per cell all similarly experiencing their own self destruction?
(Only if they require SafetyNet or whatever, otherwise, you can get them with Aurora store)
And reminds me once again that .plan files and finger was twitter before twitter.
My opinion: security researchers attack an organization’s products, like their code or website or services. UMN attacked the organization’s people to test their defenses.

Lots of companies run bug bounty programs and thank you for finding vulnerabilities in their product. Humans don’t scale so well, though, and if you pester the hell out of a company’s office manager trying to social engineer them, that company is going to be super freaking annoyed at you.

If UMN had analyzed the Linux code to find problems, then patched them, the kernel team would be happy. They didn’t. They spammed the human maintainers with a flood of patches and lied about why they were sending them. They conducted an impromptu and unanticipated phishing test, and you just don’t do that.
Thank you, this is reassuring!
video flyover

https://www.youtube.com/watch?v=9N1Qxs_KOYo
Here's a good discussion of that very same debate that is happening right now.

https://www.lawfareblog.com/lawfare-podcast-nicole-perlroth-...
Ditto. I did the same for my partner for his Lego instruction booklet collection. He have over 150 sets and managing all of his Lego booklet (through Lego official app) and the official Lego website don't have every single booklet. And those PDFs are rather large file (averaging 40+MB, some are 100MB, a few is 200MB). It wasn't feasible to keep it all in his iPad due to the storage space. So I used my desktop to handles that for him. The best thing about calibre-web, it allows him to upload the PDF and edit the metadata directly in his iPad's Safari than depending on me to put it up for him (I don't mind doing for him, just that I have terrible time management.) For him, he don't have to do manual management and it is in one place.

Right now, I am trying to set up a scrapping the metadata from few sites in calibre (Import List plugin). Because LibraryThing, WorldCatalog and Amazon are usually scrapping for books. The thing is I don't know how to do XPath expression even I tried to read the guide. I couldn't understand how the hell it work. I can understand LaTeX, Homebrew, Chocolatey, Bash, CSS documentation just fine, but XPath I am just dumbfounded.
https://github.com/ynniv/vagrant-opengenera
> This is the big problem that no policymaker wants to address, because there is a huge amount of money being made off of the status quo.

The people trying to pass things like Medicare for all would disagree with the “no policymaker” part. Not a majority but they exist and are generally vocal about mentioning this exact point.
As a long term investment, I think it'll be great. I expect it'll be another 5-10 years before it's as employable as C++, but it'll last at least another 20 beyond that.
I wouldn't be surprised if there was more flu testing this year. I've never intentionally taking a flu test, but some of my COVID tests also screened for influenza a/b at the same time.
The various personal freedom takes on regulation like this seem ring hollow.

Regulations like this impose constraints on economic and commercial activities, not personal ones. No one will be prevented from rolling a mint leaf into their own cigar. It was perfectly legal to walk around New York under Bloomberg with a bucket of homemade sugar-water and a straw.

The thing curtailed is profiting from activities which create undue harm. Should we feel our inability to buy a poorly-insulated household appliance, or a car without seatbelts[1] as a loss of personal freedoms? Should the market decide the appropriate level of inflammability for home furniture? I think we generally recognize that allowing the profit motive to justify a failure to prevent harm as immoral and socially undesirable. Why should limiting the motivation to induce harmful activity in others be viewed as paternalistic and patronizing?

[1]: sidestepping the question of seatbelt-use regulations, which are arguably a restriction on _personal_ freedoms
It seems counterintuitive that as the volume of tweets increases, the variance increases. What could be the explanation for this?
I'd expect lower or negative excess deaths in countries with very effective COVID responses because those responses can also prevent other causes of death. Masks, hand washing, social distancing also prevent the flu and other diseases. Lockdowns and working from home can reduce commuting and traffic-related deaths (though I heard in some places in the U.S. car deaths were up, possibly because drivers were driving faster and more recklessly on the lightly trafficked roads).
Ah, so, eliminating the flu with internet memes and a McDonald's ad campaign or whatever?

There's no scenario where eradication is realistic without involving government.
Not to disagree, I just would make a slight correction: in this case it is more like people seem to be missing the trees for the forest.
Not at all, you can cherry pick cities and that proves nothing, they all have vastly different demographics, different density, different climates, etc. For example, New York City is one of the worst performing metros on the planet despite harsh restrictions (and high compliance) at the city and state level and in neighboring states. There's no discernible pattern in the data.
Other than your router you should not have ANYTHING directly on the internet these days.

There is just too much surface area for device software now and cost pressure doesn't allow for security to be much of a priority.
Contrary to microservice cargo cult, it's possible to build a relative monolith that scales infinitely. The bottleneck is the db, but if you have a schema where data is easily sharded you can scale it infinitely.

There's plenty of giant monoliths that scale fine. Like Google's analytics and gmail. If you have a database that can scale microservices are more about isolating code between different teams than any performance advantage
State of the Art of Reinforcement Learning
Can't you pin the cert (http pinning)? Can we pin a CA cert of one CA? Can we add to dns which CA is allowed to issue certs for this domain like which ip is allowed to send emails?
Hi throwawayboise, Boise resident and native myself for the record, the idea these bypassed needed studies is a complete fabrication. Please stop harming both of the communities we seem to share by spreading this nonsense.
I think the number of people that changed their shopping habits is probably pretty small compared to those that continued to do what they used to. For one, things sold via Amazon are very expensive (especially liquids) compared to in store options and most people were and are stretched so they can’t just up and spend an extra 20%+ or whatever to get delivery.
I don’t want to argue with you or change your mind. I just don’t want to live in the same country with you.
Because then I can't install any of the apps that are no longer on the app store.
Ubuntu 21.04: Wayland vs. X.org Gaming Performance
Perhaps this could be described as "refurbishing" rather than "recycling"?
What Was “The Music Institute”?
One big difference is explained in the article. The fact that code going into the kernel is not as secure as we might hope is already known to the open source community. Maintainers are overworked and none would be surprised if you told them that it would be possible to smuggle in backdoors. This is not a "bug", but an issue with time and resources, and because the researchers attempted to add bugs to demonstrate it just makes it worse.

On the other hand, security researchers are finding vulnerabilities that weren't previously known. They've discovered specific exploitable bugs, rather than introducing new ones. Following disclosure, the company can patch the vulnerabilities and users will be safer. Which makes that a laudable thing to do.
Ask HN: ACH Payouts
Hey all!

Working on a side-project which will require sending payouts to customers (thinking ACH at the moment). This will all be done programmatically.

I've looked at a couple of companies out there which offer customer payouts:

- Stripe Connect (onboarding is a bit intrusive to customers)

- Sila (monthly rate is high)

- Dwolla (looks promising)

Was curious if anyone is currently doing customer payouts via ACH and what their experiences was, any companies they liked, etc.

Will do a "Show HN" post on this account once our product is ready to launch. Hopefully in the next couple of weeks.

Cheers!
How is Synology software better?

I've had the pleasure of setting up rsync between Synology and QNAP and I would say the Synology software appears to be better but actually isn't as good.

Synology appears to use older versions of a lot of tools like rsync. Although it doesn't say so, it doesn't rsync the data files, it rsync's the files that make up the backing of the software-raid. It's like rsync of the blocks of a sparse disk image instead of the files within the disk image. This makes it impossible to resume or adopt a previous backup. If any of the configuration for the rsync-send changes, it appears to download the entire remote so that it can compare the contents of the files to the local instead of hashing remotely, which nearly completely defeats the point of using rsync. It took my backup task WEEKS to adopt an existing backup that had very few changes.
The sole reason really is that the contents of a HttpOnly cookie cannot be exfiltrated by an XSS-exploit, while a JWT stored in localStorage could be.
This would probably only make a difference if the JWT either has a long lifetime, or is usable outside of the site's origin.
The Linux kernel is infrastructure. If it has bugs or security flaws, that directly impacts people’s lives.

Intentionally publishing pseudointellectual nonsense in a journal of pseudointellectual nonsense by wasting the time of peer reviewers in pseudointellectual fields of study does not have any direct effect in the real world. The stakes are simply not comparable. To be blunt, even the value of the reviewers’ wasted time is not comparable.
If you want to host your own data, it sounds like you need opera unite!
https://news.softpedia.com/news/Download-Opera-10-10-Final-w...
As far as I know...

1. cookies can prevent js access (httpOnly flag)

2. cookies can enforce https only (Secure flag)
The Great Roadside Motel Comeback
You do realize you can donate to Sci-hub via PayPal and credit card?
Spaghetti: wall / money: bonfire; occasionally: winning lotto ticket makes the IRR for the fund/angel.

Don't throw out the winning lotto ticket. Oh well. ;-)
Even just a little bit of flexibility can save you money. One EU vacation I was able to save $500/ticket by leaving early in the morning and flying to the hub airport, paying the $50pp for the nice airport lounge, and working all day (those lounges are built for business travelers are a lot like co-working spaces) from there. I finished working, had another 'free' snack, got on the plane to the EU, and started my vacation.
Bruce Schneier has been complaining about this tradeoff for more than a decade: https://www.schneier.com/blog/archives/2014/05/disclosing_vs...

>The NSA can play either defense or offense. It can either alert the vendor and get a still-secret vulnerability fixed, or it can hold on to it and use it to eavesdrop on foreign computer systems. Both are important US policy goals, but the NSA has to choose which one to pursue. By fixing the vulnerability, it strengthens the security of the Internet against all attackers: other countries, criminals, hackers. By leaving the vulnerability open, it is better able to attack others on the Internet. But each use runs the risk of the target government learning of, and using for itself, the vulnerability — or of the vulnerability becoming public and criminals starting to use it.

Unsurprisingly, the NSA often chooses to keep zerodays for their own use.
I don't understand that any question about a potential corruption motive is treated as a taboo.
Corruption is more rife than ever in the current politics and nothing is being done about it.
Why people downvote genuine worry that such thing might be happening is beyond me.
Corruption is what destroys societies and yet people look away hoping if they don't see it then it is not happening.
i dont disagree but then comes the question -- how can product effectively create a roadmap without any estimates? which then brings me to the question of whether roadmaps are a waste of time? but senior leadership needs to understand priorities and what the company will be addressing in the next quarter.

so it always folds right back into -- we need to create estimates even if they're completely wrong which seems stupid and insane
Interesting that Apple still uses Broadcom Wi-Fi + BT chips in most of their product range despite lots of issues with them.

Apple Watch nowadays is using Apple (codenamed Marconi) Wi-Fi + BT chips, hopefully they'll switch all their product lineup to those.
I tried LMMS (an open-source DAW) and it was really hard to use. Then I tried Reaper and after bit of a learning curve, it feels much very natural. You can do almost anything and (albeit with the learning curve) simple actions are still simple - exactly how I want a software tool to work.

I wonder how it compares to more expensive software like Abelton or Logic Pro. I'm not going to shell out the extra money but is there actually a big difference?
Sales cure all.
Someone said it elsewhere but the point of UML was to remove the 5-10 minutes from every meeting where you describe the language of your diagram.

From the authoring side it helped that it was UML because that meant I had a standard language for defining the diagram with plantuml.
To be honest, I liked The Catsters better. Short and to the point.
Just received one of the most irresponsible copyright strikes and takedowns yet
I think there's a factor that people are missing when they try to define these gig workers: marketability -- who directly benefits from the reputation from customers if a worker does a good job?

If the worker does a good job does that impact their marketability -- enable repeat customers and advertising for them specifically (such as via word of mouth) or does it reflect more on the company they are "contracted" to?

In the case of Uber and Lift and Instacart, the platform practically prohibits customers from preferring certain providers that have provided good service in the past, so all of the reputation goes to the platform provider. Things would be a lot fuzzier if these platforms provided matching services and would depend on how competitive these markets effectively are. The market for transportation from point A to point B with pickup in the next 10 minutes is inherently limited by providers that can be at point A in the next 10 minutes, so this market may not be competitive for all sources and destinations.

In general, contractors should not be interacting with their hiring company's customers on the company's behalf. Only employees should represent the company, since the benefits of those interactions reflect on the company and not on the worker performing the interaction.
I learned to always, always use -w back around y2k, when my buddy taught me Gentoo. IIRC he had gotten his firewall config messed up at some point, or similar, due to forgetting that.

These days I'm still too scared of accidentally messing something up due to not passing -w, so I just do it. It's in my muscle memory after all so doesn't take much effort.
I love techno / house music. I’ve been unable to shake it since I caught the bug many many years ago in Kenya. It came as a pleasant surprise and shock to meet Carl Craig at thanksgiving some years back. My wife neglected to mention he was her cousin — real Detroit House music royalty. They understand he’s big somehow but all that is lost because techno and house are not considered “American” or “black” music for that matter. I’ve had the pleasure of hanging out on stage with Carl watching him do his thing which I could have never imagined happening.
We've heard now of two deaths after AZ shots in our vincinity (a pharmacist and a kindergarten employee), plus we heard from a doctor in Scotland who said he himself had two dead patients after AZ shots while the hospital he worked at had dozens. We haven't heard anything noteworthy about other vaccines so far (that includes Russian and Chinese vaccines).
> at some point

Hasn't this been the debate since encryption came around? I thought we've been having this debate for at least 50 years.
Read the username
> 1. Packet captures don’t use the correct channel

I've also seen this on a 2020 Intel MacBook Air. I assumed it was a Big Sur issue but had never tried it on Catalina.

Sniffing from the command line did pick up the correct channel: https://unix.stackexchange.com/a/49317/36875
I am not talking about hypotheticals or museums, I am talking about actual running systems. I know the most active restorer of Symbolics systems in the US. His biggest problem is finding enough consoles and keyboards.

Why don't you try to actually build a reproduction Symbolics keyboard (I did), and see how much time and money it is going to cost you.