skysight-inc/HackerNews huggingface dataset:
Regarding 1, it is also worth noting that we may not ever achieve truth here, at least not in our lifetimes. "What should I eat so I have less risk of vascular disease and cancer, delay decrepitude as long as possible, and have good to excellent ongoing physical and mental function?" This question is almost impossible to answer. The basic problem is to experiment on oneself, you need to use surrogate markers of ill health, and you never know if you are on the right track for what matters. A recent example are drugs which improve the measured HDL value (good cholesterol), but fail to reduce cardiovascular events. Randomised trials on the other hand give us average effects in certain populations, but how this relates to the individual is always unclear. This is why people are still arguing what some randomised trials mean 20 years later (like the Lyon diet study, which is uninterpretable anyway due to woeful dropout). RCTs with diet are terribly difficult, prolonged and expensive to conduct.

Considering all this, my approach is to just try and eat less, hence mitigating the downside of dietary induced problems. A good way to eat less is to eat more non-starchy vegetables, which are mostly micronutrients embedded in paper.

There are also a few surrogate markers with strong evidence it is worth measuring in a serial fashion and trying to improve eg LDL, glucose tolerance, CRP. Coronary calcium scoring with CT is also worth doing if you are 40+ and have been eating like shit most of your life or have bad genetics for heart disease.
...and to your question, I think you're missing the point of CRT. The point is to look at the systemic effects that may otherwise go unobserved because they aren't experienced by the majority. Swapping it around so that it is the experience of the majority takes it out of that context and makes it pretty much a joke.
Can't see the article...but I think you can still have random conversations and spontaneous ideas it just requires adjustment. Slack and Google meets make it easy to hop onto a call. I tell people sometimes I'm tired of typing let's just do a quick call. Or try to work out in the open, dump things in our teams chat or bigger org chat rooms. I think once we start to have more people who grew up on the internet posting in forums and wasting time in chat rooms in leadership positions we'll see less of an emphasis on watercolor chats or what ever. I think it's even easier to be outgoing on a text based environment. I don't want to talk in front of 30people or even really just small talk in passing with aquantiences, I don't mind putting a message in a chat room with 300 people. I guess others feel simmiliar?
1. Extensive game theoretical analysis, and even computer modeling, has shown that approval voting resists tactical behavior better than virtually any other voting method.

https://electionscience.org/library/tactical-voting-basics/

There's even an entire book focused on the game theory and tactics of voting methods, which advocates score voting, approval voting being score voting on a 0 to 1 binary scale.

https://electionscience.org/library/tactical-voting-basics/

Approval voting elections have been successfully held in 2020 and 2021 in Fargo in St Louis respectively, and there were no indications of voter confusion or anything like that.

https://electionscience.org/press-releases/st-louis-voters-u...
I live near that area and had heard and seen a drone above my house in the very early morning before dawn a month ago.

I first heard a sound like a swarm of bees overhead but looked up to see the drone.

It took off southbound at a high rate of speed in the same flight path that the police helicopters use.

I have no idea if this is related but I thought it was very odd for a drone to be flying at that time over a heavily populated area near the University of Arizona.
Is there any reason to believe that the famous welfare state, and thus broad workers rights, is not a large contributor to the fact that the same set of countries seem to be the happiest?
Fines in Germany usually follow the "Tagessatz", which is the income of a day, as calculated based on your tax records (and other information). So you might be sentenced to pay 90 'daily incomes', which hits a poor person as badly as it does hit a rich person.

Also note that there is a minimum amount of income that you always will be granted access to ('Pfändungsfreigrenze'), so a fine will not make you die from hunger nor make you homeless.
Vaccination Paywalls – Bertrand Fan
There is absolutely no evidence that bullet voting has been a problem with approval voting.

https://www.rangevoting.org/BulletBugaboo.html

> I think STAR is slightly worse than Score

I would say they are probably roughly equal, but the best computer modeling we have shows that star tends to perform a little better.

https://electionscience.github.io/vse-sim/VSEbasic/

> However, STAR's main benefit may be in overcoming political resistance, if its properties are simpler to convince voters. Majority criterion sounds nice even when it is inefficient.

You're definitely correct on this.
no it’s not
My gut feeling is that even if you did remove distortions, the problem would persist. If the price for a commodity ultimately stabilizes at material cost + labour, I think rent ultimately stabilizes at 'everything you can afford to pay and some'.

Ultimately, commodity price is driven down by the fact there's always some industrialist who can flood the market with cheaper crap, until there's basically no profit in it. You can't flood the market with 'living in walking distance from work', and a large part of the cost of any building project is simply buying the plot to build on, because each landowner has no direct competition.
That's neat! For those curious, the API seems to be:

https://developer.mozilla.org/en-US/docs/Web/API/TransformSt...
It seems like the guy doesn't want to have a bank account anymore.

If he just is moving to a different bank, then all he has to do is make a ACH transfer.

Also, the Bank may have a reporting requirement for over 10k withdrawals in cash but they will let you take even more than that in cash if you want to. You may have to work it out with them to get enough money on site at the branch if you have hundreds of thousands of dollars, but they will let you withdraw in cash.
> Heavy fine yes but not arrest AFAIK.

Newsblur is an American org. GDPR is a foreign law that has no relevance to American firms lol.

<insert Saruman "you have no power here" meme>
Defense in depth... VNets, TLS certs, RBAC etc.
The History of Soap (2020)
It's not necessarily cultural, for some people dogs/pets are a substitute for human company and are held in higher esteem, since they don't have some of the negative behaviors humans do (such as dishonesty, etc)
I've never interviewed at Google personally, but I've heard lots of people complain about the needless difficulty of the questions so I assume they're something harder than just turning a sorted array into a binary tree.
I know the CICD code I wrote and manage at work launches approximately a million docker containers a day, so I suspect the total number of docker containers used per day is well into the billions.
The same thing happened to me a few years ago. I used DigitalOcean's Docker image and it had some message about UFW in motd, so I assumed it works with Docker. So I created a container with passwordless mongodb and it got wiped in a few hours.

And DO still have this in motd for newly created droplets:

Welcome to DigitalOcean's 1-Click Docker Droplet.
To keep this Droplet secure, the UFW firewall is enabled.
All ports are BLOCKED except 22 (SSH), 2375 (Docker) and 2376 (Docker).

Full motd: https://pastebin.com/cdaecHU8

Though it links to https://do.co/3j6j3po and it mentions ufw problem:

> Note: The default firewall for the Docker One-Click is UFW, which is a front end to iptables. However, Docker modifies iptables directly to set up communication to and from containers. This means that UFW won’t give you a full picture of the firewall settings. You can override this behavior in Docker by adding --iptables=false to the Docker daemon.
Plz don’t be lame
> the ORM still makes no sense to me for more complex cases

IMO, it also doesn't make sense for simpler cases where nearly everything can run in a browser.
What's unsettling is you throwing around claims without any proof/references.
But then the video viewer doesn’t have the necessary features. Especially in 2010 when those videos were put up, everyone would have used the superior Youtube or Vimeo player. But they would have chosen Youtube because you had no guarantee Vimeo would be correctly paid for years.
Is "opinion-driven design" an attempt to reinvent YAGNI and to try to pass it off the concept as a brand new discovery?

https://en.wikipedia.org/wiki/You_aren%27t_gonna_need_it
From the parents cited article (aka, 2021 data) states:

> The American Customer Satisfaction Index independently measures customer satisfaction with top-selling smartphone brands available to U.S. consumers.

Smartphone brands is what I’m referring to as “comparing phone hardware”.

That article doesn’t asses satisfaction with the two successful proprietary ecosystems, directly.

By measurement artifact, I mean that the appearance of consistency could actually be artificial statistical noise hiding a confounding variable.

ie, did they actually ask questions that compare satisfaction with App Store vs Play Store or only ask for satisfaction with Galaxy verse Pixel verse iPhone, etc.
Researchers at Atlassian: People are working longer hours during the pandemic
My theory is that its MongoDB that is behind the ransomware, why else would they 1. Not have auth protection 2. Open up the firewall !?
And the exchange is centralized?
Looks like this is an automated campaign:

https://www.shodan.io/search?query=READ__ME_TO_RECOVER_YOUR_...
If based in Europe I think the best option is Fairphone. I'm not sure whether its fully open hardware but at least to a large degree it is. In addition ethical sourcing of materials, easy no-tool replacement of most parts, and you can install Ubuntu, Sailfish, etc.

https://shop.fairphone.com/en/
Unless this is literally running on a single 1U host in some colo, there is no excuse for not having defense in depth. An old school DMZ if you are in a datacenter. A VPC if you are on the cloud. Then client certs for everything. Two factor for ssh. Auditing. These are straightforward to set up, with different options if you have time-but-not-money or money-but-not-time. If you have not-money-and-not-time then this is probably going to end badly no matter what.
Especially at night, and the drone apparently only had a small light on it, so you'd probably make out nothing on the video.
I guess most people have faced this. I got years ago too but after a few seconds some internal monitoring system alerted me that new ports have been exposed.

I am not sure anymore how i solved it but after some time (and none of the documented solutions working) i decided to let docker do to iptables whatever it wants to and used another firewall which filtered the traffic again after iptables was done "filtering" it.
https://www.google.com/search?client=firefox-b-e&q=%22inebri...

Five other hits in the entire Google corpus, all of which are the same use from 1921. It's so uncommon it's literally a shibboleth until you ruined it.
Political correctness has caused women rights to go backwards over half a century. Nobody had the spine so far to stand up for obvious women rights and unfair treatment to the point where Olympics - one of the highest sports organizations has become a complete joke with allowing this to happen. This will only stop when women and girls simply boycott all these events.

And this isn't just happening in Sports, even women beauty pageants are now being won by transgender.

"What a great message for young girls... No matter what you do, men will always be better than you at it- including being a woman!"

Absolutely absurd.
> The reason people think it was man-made have to do with strangely well-adapted protein sequences found on the virus with no known natural ancestors.

I was under the impression it was a natural sequence, I read about it way back in the beginning:

https://www.labmate-online.com/news/laboratory-products/3/br...

They found that the spike protein, a receptor-binding domain (RBD) that hooks onto host cells, had evolved to target ACE2, an enzyme founded on the outer surface of human cells that helps to regulate blood pressure. The team say the COVID-19 spike protein is so efficient at binding to human cells that it could only be a result of natural selection, not artificial engineering. Another tell-tale sign of natural origins is the molecular structure of COVID-19, which is substantially different from other known viruses. Rather than mimicking other viruses known to cause severe illness in humans, COVID-19 more closely resembles strains of coronavirus found in bats and pangolins.

"These two features of the virus, the mutations in the RBD portion of the spike protein and its distinct backbone, rules out laboratory manipulation as a potential origin for SARS-CoV-2" says Andersen.
Do you really expect readers spend 29 minutes watching a video to eventually see the example?
Do Samsung have their own Fabs?
I think the "script kiddie situation" comes from the part of trying to ransom the data
You didn't actually refute any of the points above, you only disagreed without any actual reasoning.
If you have an Apple Pencil, I highly recommend “Concepts” [0]

I use it for general software design/planning like UI wireframes, flowcharts and various other things

[0] https://concepts.app
The actual CNN title is "As Covid-19 deaths hit record lows, those dying are younger and more disproportionately Black than before" currently, so the HN title using "Blacks" is an editorialisation (I checked because I found it weird that a major news organisation would use "Blacks").
Lived in Albany in the SF Bay Area (East Bay, near Berkeley). Though they do have one in Georgia representing.
Stop Putting Pressure on Developers to Rush Games to Market
> With all the talk about Russian hackers hacking Dem Party, elections, etc, there are zero people in the jail and zero evidence presented that it was even Russians. So it's hard.

couple that with the literal marketplaces of hacked Windows computers that you can remote desktop into by country, postal code and bandwidth metrics, the best case is that you end up framing someone
As I understand it, the cone cells in your retina responsible for "red" have a second peak on the violet-side of blue. This means that a violet wavelength will get efficiently absorbed by both the "blue" and "red" receptors but not the "green" receptors.

That sort of creates a "periodic boundary condition" to colour perception, wrapping a monotonic wavelength spectrum into a colour wheel.
0.03 BTC?! Someone is doing this for a lousy thousand dollar? Unbelievable.
I may not be fully understanding your scenario but it sounds like A needs to prove to B that it knows a secret but doesn't want to actually reveal/send the secret to B?

And the idea, therefore, is that A sends the secret to an enclave, which inspects the secret and, if correct, signs a message to say "I, the enclave, have verified that A does indeed know the secret". (Apologies if I've oversimplified or got this wrong).

But assuming the above is roughly correct then, without remote attestation, you have a problem, and it comes down to the question of who's running the verification code, I think.

If A is running the checker, why should B believe what it says? If A is running the code, they can just change it so that it signs the statement irrespective of whether it's true.

But If B is running the checker, then A will have just sent their secret to a service run by B, violating the requirement that A doesn't send the secret to B!

You could ask a third party to run it of course. But if you don't want to introduce that third party then this is where remote attestation comes in:

If A is running the checker in an enclave then RA allows B to verify that the "A knows the secret" message really did come from a codepath that has actually done the right thing. In this scenario, B is the "user" of the enclave from the perspective of reliance on Remote Attestation. (Aside: I know it's weird to think of an actor that doesn't interact with a system to be a user of it, so I'm probably using poor terminology when I say 'user'... it's more that, in this scenario, B is _relying_ on properties of the enclave such as its attestation)

And if B is running the checker then RA allows A to verify that it won't just turn around and reveal the secret to B.
OMG we are finally gonna have self-driving cars then huh!!111
Surprised 14 hours later Apple hasn't issued a take down notice. I remember Apple forbid anyone, including an App that copy the iPod interface.
How to craft winning email subject lines
Anecdotally: all the Inuit people I've talked about food storage with will dry (often fish) or smoke (most land-based mammals) their meats.
Ask HN: How to have a reflector to direct a laptop camera facing to the opposite
I don't wish to get into a 2000 year old debate about who is a true Christian. We do better to unite than to fight.
I was merely confirming that it is not necessary to consider the Bible to be infallible for it to be valuable. I do not need to call myself a Christian any more than I need to call myself a human. I am one, and luckily you cannot take that away from me.
I think so because Nvidia uses their 8 nm process from what I recall.
care to elobrate a bit?
The protection is not against people like you. It's for the average joe.

Knowing how to use the dev tools makes you like a 1% in the world. And blocking out 99% with a simple div or something is a pretty good ROI
Surely when the Camp Pendleton Ospreys fly within a literal stones throw of my house or just above the beach on their training routes they are violating every reasonable airspace law there is. LAPD police helicopters don't even fly as low as some of these osprey or other obnoxiously loud military helicopter over LA.
So the operator can see it in the sky?
That is why nowadays there is a WebKit fork that runs uBlock Origin - Orion browser.
There is plenty IRL examples eg BTK https://abcnews.go.com/US/btk-serial-killers-daughter-living...
> there is no excuse for not having defense in depth. An old school DMZ if you are in a datacenter. A VPC if you are on the cloud. Then client certs for everything. Two factor for ssh. Auditing.

Maybe there is no excuse, but literally every company I've worked for (including Fortune 500s) has been missing at least one item from your list. So "industry best practice" means committing less time and money than it would take to implement all those things properly (rightly or wrongly) and you need to triage and prioritise.
I have a theory that we are seeing a "Times Square Billboard Effect" where as we progress and some marginalize groups are being better heard and included other groups are both seeing an opportunity and need to get more noticed. Similar to Times Square billboards having to get brighter, flashier and larger to be noticed. With how traditional and social media are working to get noticed it has be as big and loud as possible.

Where this goes I have no idea.
Your dismissal of both the DRF tutorial example and generics as a whole is entirely unconvincing. For a very simple example such as the one provided the suggestion to not use them appears reasonable, only because the accompanying serializers which answer your questions in an even more clear and declarative manner are not included. For more complicated endpoints your suggestion becomes an absolute nightmare.
If you read what the author said and understood it, you would see that mongodb didn’t open up the firewall and it does have auth protection but the author chose not to enable it.
The GA of Azure IoT Edge for Linux on Windows
New Features In PHP 8 2021
> quantize the angle

Round the angle quite severely. E.g. if using 10 degree steps you'd round anything below 5 degrees to 0 degrees, and anything above to 10 degrees. Anything above 15 would get rounded to 20, and so on.

> look at the event stream

Look at the last two directions the above procedure generated.

> and take the sign of the pairwise difference

If the new angle is higher it's a counterclockwise motion. If the new angle is lower it's a clockwise motion. Do some special handling if the angle wraps around from 350 to 0 degrees or vice versa.
255 characters is the default to a variable length string column in databases. So if a developer did not pay attention he just used the default which is in some cases to short for an url.
They have, but every fab on the planet relies on Taiwanese supplies for one thing, or another.
Accidentally (or because of some other tool’s poor design) open up a server to the WWW. But unauthenticated unfettered remote admin access by default?! Is it still a thing for Mongo? Oh my! I guess that’s what you get when the “conversion funnel” guys take over “engineering”
> You attacked probably the weakest part of that entire statement.

I wasn't intending to attack.

> Your claim that it's a subject for post graduate study/research might have been true at one point, but many of it's principles have been leaking into multiple levels of society, and in my opinion, to the detriment of society.

It's not my claim, and the "principles" you're talking about aren't CRT principles.

> Firstly, the focus on storytelling over data that is a hallmark of CRT. This has clearly metastasized. Note the prevalence of personal narratives, and the use of personal narrative to explicitly supplant other sources of truth that's common in today's conveyances.

The idea of a narrative being an important aspect of history education goes back... essentially forever. It doesn't trace back to CRT. It's a core principle of CRT because it predates it... and of course there's the whole thing about certain stories being excluded from our narratives.

> How punctuality and other such professional merits are now just white people's oppression [2] and that any acceptance of such is considered internalized racism?

The narrative on punctuality that is currently making the rounds is deliberately misframing the context. There's a reality (that has been studied) about how racism colours the application and enforcement things like punctuality. It's not that punctuality is intrinsically a tool for oppression, but rather how systemic racism plays out through things as trivial as punctuality.

There may indeed be a lot of the thinking here that has percolated out "into the mainstream". That's kind of the point of these things. You would expect that most ideas would get around throughout society. But no one worries about String Theory being taught in grade school, and the idea of actively trying to ensure it doesn't somehow slip in to the curriculum in grade school is laughable. If you can get students to the mental headspace where you can even begin to examine CRT, you're doing an amazing job as an educator, and I kind of don't care what you proceed to expose them to at that point.

Do you remember all the concern about CRT in 2018? All the brawls at boards of education? The 1100 times that it was mentioned on FOX News in just the first half of that year? Yeah, me neither. Yet somehow, I'm supposed to believe a narrative that there's been some massive nationwide covert shift in school boards, school administrations, and teachers that was executed without any turn over, public policy, etc.? I'm sorry. It's a lot easier to believe that the narrative about CRT is propaganda that plays a role in a larger, otherwise unrelated, political landscape.

> I certainly don't like it.

...and that's the crux of it. We're used to the propaganda we've been fed, and the idea of it changing in anyway is just really upsetting.
No way congress would do that if the matter is top secret