skysight-inc/HackerNews huggingface dataset:
>I've repeated this because it seems to be a common misconception that the virus first appeared in Wuhan when in fact there is some evidence to the contrary.

To be frank, that article is speculation, because they assume a certain variant to be the "founding variant" because of its similarity to existing/known virus. It looks like a bit of circular reasoning to me.
Seems to me that if you don't have a pure functional language with tree-shaking, and only including existing (non-generated) code, you won't know if any (3rd party) code in particular will be called in compiled output, and you'll just have to guess and err on the side of paranoia Is there a fix?
> the mountain dew ad plays
> i have to dance for it

This is the real nightmare, active (mandatory) ad participation.

Drink the Kool Aid, say "Oh Yeah!!!"
Actually, for Germany, the head of the military is the Minister of Defence. Only if the parliament declares Germany to be in a situation of defence (Verteidigungsfall), will the command of the military be given to the Chancellor.
MOKEY-COKE!
MOKEY-COKE!
MOKEY-COKE!

(If you've never read Venus, Inc. it's even better than Manna and it's more on-point; and it was written in the 1950s!)

https://smile.amazon.com/Venus-Inc-Space-Merchants-War/dp/B0...
war crimes are war crimes, abuse is abuse. Being a past victim doesn't make ur actions any less evil.
Can someone stop HN from becoming 4chan?
NSA fuming because they have to update their rootkits now.
I think part of the problem is media coverage of the democracy - at some point, coherent, competent analysis and coverage becomes impractical.
Building an Omniscient Debugger in Rust
> this “vulnerability” is absurd in this context

Yes that's exactly the point. The audit tool has no awareness of the context and nor do the people who create severities.

If severities were absolute then there would be no reason for anyone to review them. You would simply upgrade your libraries and be done with it, but that can't always be achieved nor may make business sense.

I do agree with the author's note about providing a better way to provide feedback on severity reviews.

npm audit is better than no npm audit...telling people it's broken by design is going to discourage them from using it completely. smh.
In hydroponic culture, it's typical to measure and continuously adjust the pH and fertilizer content of the solution, using electrical conductivity (EC) as a proxy for fertilizer content and a glass electrode for pH. This is open hardware to make those measurements and automatically drive the pumps that dose fertilizer or acid, interfacing via http over Wi-Fi. Such systems are widely used commercially, but too expensive for most small-scale or amateur use. I've seen various hobbyist systems assembled from dev boards, but it's neater and cheaper to have everything in a single PCBA.

Since these boards currently do everything I need for the plants on my balcony, I don't plan to develop the firmware much more myself. I believe there's lots of opportunity for that, though--to build a UI that's friendlier to nontechnical users, to interface with existing home automation or other front-end software, to apply to other domains (aquaria, reef tanks), etc. So I'm posting this here with the hope that someone might be interested to build and extend, and glad to answer any questions.
Are you trying to say that Apple Engineers in 1978 weren’t using their MacBooks? I wonder why the democratic drum circles were in garages instead of Starbucks? LOL.

That’s beyond impressive, that in extraordinarily and spectacularly ignorant prose.
Seems like the sort of scrutiny that would produce a well-intentioned law that will end up propping incumbents. Excited to be proven wrong though.
Facebook-backed study claims default apps dominate on iPhone, Android
We're anticipating having to make some changes to our fraud scoring which uses things like location vs. credit card address as signals.
Australia has X as an option for passports. I think some other countries do too, but not sure.
Who’s behind the Kaseya ransomware attack – and why is it so dangerous?
The locals had a referendum about reverting to Spain and overwhelmingly disapproved.

In this case the local population wants to remain British. So it would be against self determination to return it to Spain.

Same for Ceuta on the Spanish side of things, or, is Ceuta diffetent?
>who appoints the prime minister?

Parliament votes on whoever the speaker nominates. If that person is tolerated (<50% of parliament votes against the nominee) they become prime minister.

If the vote fails the speaker gets to nominate someone else. After 4 failed such votes, an extra election is called.
Top Turkish Bank Suffers System Outages but Sees No Cyber Attack
It's hard to imagine of the UK or Canada, but it's a nice safety net. Perhaps easier to imagine of a smaller less developed Commonwealth nation (not an Australia joke!) - I can sort of see a tyrannical (and probably crucially also unpopular) leader getting overthrown that way if it were necessary; probably led by/combined with measures through other parliaments, i.e. military intervention.

I don't have one in mind, I don't think there's a likely one - there's an argument that it brings a sort of long-term stability that makes an actual application of its powers unnecessary, like a nuclear deterrent - I just think if there was some sort of unrest or rising dictatorial power in a state with ER as monarch 'we' would pay (even) more attention than otherwise?
Can you hear the Hum? The mystery noise that says a lot about modern life
+1 for being the only comment so far to mention USING!
Just google "sql joins diagram" and you will be rewarded by a quick one image visual representation of each type of join.
Here is one in stackoverflow:
https://stackoverflow.com/questions/13997365/sql-joins-as-ve...
I remember reading an old paper on some funky experimentat user-interface that used a pair of PDP-11s (possibly, might have been event older) essentially wired together at the busses, with extra instructions added with new logic in TTL silicon, I think it was for doing the maths for the vector graphics. It was amazing the amount of hardware hackery that was necessary to build these experimental systems.
Lots of countries have had civil wars. Most of them, one side won and the other side lost.

In the US, one side lost, and was then venerated as heroes, which is particularly odd.
responsible spending is an important part of budgeting
Democrat counties have lower crime rates? Doesn't follow from Democrat cities like NYC and Chicago.
The difference now is that, for 2 or 3 dollars, you can individually rent and stream most movies instantly. No need to pay a subscription that requires you to scroll through a small low-quality subset on a irritating interface.
> The far-right Capitol rioters killed at least one officer

Surprise! Months later it turns out he had died of natural causes: https://www.npr.org/2021/04/19/988876722/capitol-police-offi...

> Many were seriously armed.

Name the folks inside who were armed.

> It was an attempted coup of a democratic government.

I find it humorous how the same people who say the 2nd Amendment is useless because the US has tanks and nuclear bombs simultaneously believe that we were ->this<- close to having the government overthrown on January 6th without a single shot fired.
Component Story Format 3.0–simpler syntax with support for scripted interactions
> Plus, let’s be real, end to end encryption doesn’t exist if you’re using any sort of pre-built app. It’s encrypted-looking to most people, but the people who matter always get back door access.

Why do you think this is the case? I know for a fact (with a reasonably high level of confidence) this is not so.
I really dislike these "nothing to hide" takes.

It's not just "something to hide". You're giving a tiny project complete read/write access to your twitter. What if the creator abandons it and sells it to a malicious owner? What if it gets hacked? What if someone who's out to get you finds this as an attack surface?

The API separates these permissions for a reason.
I already explained why non-custody is a dumb anti-feature that only appeals to a small number of conspiracy theorists who haven't really thought things through.
The autopsy said the riot had nothing to do with his death.
>I'm not sure the author's point, that development configuration could not hide malicious code? Why not?

Quite the opposite! Quoting the article:

As any security professional will tell you, development dependencies actually are an attack vector, and perhaps one of the most dangerous ones because it’s so hard to detect and the code runs with high trust assumptions. This is why the situation is so bad in particular: any real issue gets buried below dozens of non-issues that npm audit is training people and maintainers to ignore. It’s only a matter of time until this happens.

My point is that in the sea of non-issues, real issues are easy to miss and ignore.

>If you don't find this useful that is fine, don't use it.

You can't "not use it" because it's literally the default behavior built into `npm install` now. Of course there are ways to opt out, but this doesn't alleviate the confusion.
> conscientiously objecting to Facebook

Does that mean not having a WhatsApp account as well?
Ordered Cell Capilary Transport
Politically this is good and I'm pro trans/LGBT+ rights.

Scientifically I want to ask, is there gender fluidity? I spent a few hours last weekend reading scientific papers on this topic because someone here posted confidently Male and Female don't depend on organs. I came to the conclusion that there are differences in the brain, but outside that difference, males are males. The differences in the brain could be described as a mental illness or if you prefer, something else brain related.

So my questions, does anyone have a scientific paper that can prove gender fluidity in mammals?
They do, if you remember a while back the head of Shanghai area was prosecuted and brought down on corruption charges, that consolidated power in current leadership because he was an alternate center.
I highly doubt that a person with a PhD in statistics doesn't identify as a statistician.
So you're familiar with the Guarda Civil's regular incursions into Gibraltar waters and their frequent games at the border, slowing things down so that crossing takes many, many hours? Such actions happened prior to the treaty of Maastricht in '92 and during Britain's membership of the EU and has continued post-Brexit and will do ever more, I imagine. Gibraltar's a handy distraction whenever Madrid has problems it'd rather not have in focus.

My memory of local Gibraltarian history is a bit hazy, but the original borderline was drawn far beyond the isthmus, deep in La linea itself. Prior to about the mid 90s, the connecting area beyond the frontier was mostly wasteland, generally taken as Spanish incursion. Now, of course, it is all Spanish. Some might say as a spiteful reaction to Gibraltar's successful reclamation efforts.

Brexit's a mess, no doubting it - but to state that the general British government is has been strongly in support of Brexit would be ... not wholly correct. Unfortunately some toff idiot let the people decide, which is rarely a great idea. Hence the current status of Northern Ireland, which is also a long-standing intractable dilemma. Solutions are easy, if you're content to seriously piss off a few million people.

It's easy to hate on Britain, I get it. It's a bit passé and one-dimensional though.

ed - ah. you're Spanish? Gotcha.
Which datacenters are they using? Could you provide IPs or ASNs?
> Is this a joke? Is the existing infrastructure built by countless geniuses in C not working at all?

Given all the CVEs that arise due to buffer overflows and UAF, it's not working very well. Safe Rust makes those classes of problems Just Go Away.

> Do you think inexperienced programmers could build it given a "safer instrument"?

Inexperienced programmers can get started without the near vertical learning curve C presents. Just wrapping your head around pointers scares many programmers off, and even once you grok pointers, attempting to use them correctly is a minefield. This makes kernel hacking daunting for the average dev. Rust gives them an onramp.

> How many junior devs understand intricacies of basic OS-level locking, not mentioning Paxos and other scary algorithms whose formal correctness can't be even proven in theory?

Not very many... but junior devs don't need to work on that stuff. They can make more peripheral contributions -- fixes to device or file system drivers, etc. -- while they're building their skills, completely confident that they will not make a class of stupid but very common and dangerous memory errors. Not so with C! As I said, not even great programmers can be relied upon to write safe C code -- the model presented by C is just that abstruse.
Making Things with Maths
> who appoints the prime minister? the parliament as a whole appoint the prime minister? does the king get to, but is compelled to appoint whoever the speaker nominates? does wikipedia mean "appoint" when it says "nominate"?

Prime minister is whoever gets the majority of the parliament behind them in a vote. In practice in Sweden’s case the leader of the biggest party in the coalition that makes the majority.

(Due to how the voting system works in Sweden more than 2 parties exist in the parliament and thus coalitions of parties make up the government as no party manages to get 50% if the seats)
"sufficiently advanced technology is indistinguishable from nature"

Yeast, Chickens, and Dogs are the most developed technologies we have. (Brassica oleracea gets a runner up) Everything else we have is an unsustainable fad by comparison. Should something even count as technology if it can't reproduce almost without bound in the care of the average person? (settlements and factories count as reproducing technology!). I worry that production of computers is too complex and requiring of rare resources to be long term sustainable, but then I think the same of everything invented past the Bronze Age.
Graeber actually addressed this sentence on this site a few years ago (It was a "garbled sentence in the first edition that was instantly removed").

https://news.ycombinator.com/item?id=17193121
Authoritarianism is possible with most types of government, but is necessary for communism. Most communists are well aware of the fact that an economic system with strict objectives requires a very powerful mechanism in order to accomplish this, and most of those understand that this mechanism is an authoritarian state, but there are obviously the delusional few that refer to the state by any other name (syndicates, guilds).

China, however, is not communist. China is fascist.

> Fascism: authoritarian ultranationalism characterized by dictatorial power, forcible suppression of opposition, and strong regimentation of society and of the economy
The Rise of the UAE's AI Diplomacy (The AI Journal)
>I don’t think Germany was stick with an invoice after world war 2

If only there was some way of searching for this information so you don't have to rely on shitty gut feelings

https://en.wikipedia.org/wiki/World_War_II_reparations
I think the problem is not really NPM it's the way that mainstream frontend development requires very wide and deep dependencies. If you stick to using smaller frameworks and libraries without heavy build tools then it's not much of a problem.
Soon enough it will not be enough, then other groups will want Z, K, L, Ñ and whatnot... maybe even an emoji
I like this analysis, though I personally believe the current culture and prevalent behavior that you describe as "toxic" has more to do with anonymity in and of itself, as well as how it's moderated, rather than how the site functions. Some of the slower boards, and spinoff sites have a vastly different culture as a result of this, and the contrast is sometimes jarring.

From the few comments I've read by the original creator of the site, Moot, he described the function of the site as a "survival of the fittest", where the best and most interesting ideas would stick around. He said this in the context of memes, as when the site used to be known for those, but I believe it holds some value, as people generally don't forget things even after the thread's gone, and it gets brought up again, or it gets saved in some image folder. Unfortunately, controversial content will always get the most engagement on any platform, be it through upvotes, bumps, or the sheer number of posts. You can see that on sites like this just as well, but also on the news on TV. Bad news reaches far and wide, that's just human behavior. Online this mostly becomes a question of how it's moderated and if you can even moderate it after a certain point. I believe Moot eventually gave up on this after events like Chanology and gamergate were really taxing on him, and I'm not sure the new site's moderator is very invested in regards to this.

It's interesting to note, that instigating raids is a bannable offense (rule 4), and I've witnessed many posts calling for this get deleted. But often, especially on this site, this cannot be contained once the cat's out of the bag, as just hopping on the next IP address is enough to continue posting, and people quickly move to other means of communication.
Exactly. Why does it matter if it's absurd in this context? Just upgrade it to be on the safe side. Asking vulnerability databases to judge whether vulnerabilities are safe in devDependencies or not is a ridiculous idea, even more so when you consider that the line between static and dynamic have gone blurry long ago.
How have they attributed GANs and Deep Learning to Statistics? I thought Goodfellow was doing an AI PhD and that Hinton is a biologically inspired / neuroscience fellow?
Unavailable in Europe. What kind of news outlet censors reports based on reader's location?
TL;DR: This project is not so much about political transparency as it is about the erosion of individual privacy due to the proliferation of government surveillance cameras and AI-driven data analysis.

What most people seem to overlook: Dries Depoorter is an artist/activist interested in the intersection of privacy, artificial intelligence, surveillance & social media.

Flemish cities are installing surveillance cameras and ANPR cameras everywhere, and they're quickly doubling back on their promise that they'll only be used for tracking serious (organised) crime. Already there have been attempts to use the cameras to enforce lockdown related curfew rules and to surveil streets that have been vandalised with spray paint.
SWE Interview Practice Groups
We have been running multiple groups for SWE interview preparation. We are starting one more group on July 19th. The group will continue for 4 weeks (ends August 15th). During this 4 weeks, we create private slack channel(s), provide participants with problems to solve on daily basis, provide with video/reading links they can read on daily basis and enforce daily check-ins to keep them accountable.
We have got awesome feedback from folks on how much accountability has helped. But one thing we keep echoing over and over again is how much value they are finding in having group of people walking down a similar path. We do live sessions with folks from industry to give their perspective on interviewing.

Who may find this group useful?

If you have been working on interview preparation for a while, are demotivated or not having consistency or just want to have group to study with, this will be a great fit.

What about the content?
The content is not created by us but rather curated by us. We have watched tons of videos and read many articles to select the ones that are worth a read.

What about the cost and why do we charge?
The cost to join is $99. The cost is in maintaining the group and keeping it engaging, doing live weekly sessions, doing daily check-ins, going through your solution (code and time complexity) to make sure nothing is amiss and providing weekly reports on your progress (time spent, problems covered)

However, we provide risk free purchase i.e. you can get refund whenever you want. No questions asked.

If you are interested to find out more, you can check it out here https://teamcambia.com/ or email us at hello@teamcambia.com.

So far we have around 5 people who have joined the program that begins on July 19th.
A few countrys have X already. Some countrys talk about it.
Parent here, have you asked them if not having a phone has been a problem? Or are you just assuming it isn't because it hasn't been a problem with them for you.
Yeah. I finally gave up on it last year not because of the catalogue, but because the turnaround got too slow. Individually renting movies to stream is better all-around.
How? The data stays in EU. Routing to US is clearly a bug (that violates it, yes)
national security letters and secret courts have no inertia and need no bipartisan consensus.

the political theatre is only when they don't want to do something and delay. the state is swift with pursuing its interests.
Can you expand upon how it does that?
Pentagon Cancels $10B Microsoft Contract
VVIP Access Condo in Toronto
EXP Homes is the best spot for VVIP access condo in Toronto, we have a few choices identified with condo living in Toronto, that have every one of the cutting edge facilities for luxurious living. Contact us any time you see fit we are available at your service any time.
Someone in this thread should take a minute to sit down and hold their breath to see if it triggers the notification
Yep, sounds like this guy had it coming. Good work to the men willing to put their lives on the line!
Among other things, it illustrates the insufficiency of a single numeric value for assessing 'badness', which in turn masks a management issue.

CVEs try to supplement with flags for remotely exploitable, etc. but it still intentionally leaves a lot of space for interpretation, which is necessary for any normal enterprise.

The problem comes in when analysts (or their managers) interpret inflexibly, without appropriate technical context, or without understanding business impact and tradeoffs.

If you look at the workflow, it is hard to close the loop from engineering or IT back to security. We need a set of controls for secops departments' output relevance and departmental interoperation.
In my village in the UK about half the coffee shops and bakeries and things were going cashless just before the pandemic anyway. I think it’s pretty common now.
Getting sick of this kind of things. I'm starting to think maybe I should remove as many electronics as possible and start learning electronics myself. It's sad that we are entering the golden age of electronics (with a bit of $$ and knowledge you can build products that are genuinely useful in a couple of weeks) and also the dark age of electronic surveillience.

And it's everywhere.
Agreed, you shouldn't see low risk security warnings by default, they're more appropriate for larger projects, with something to lose.

The [1] yarn package manager is much nicer to work with in many more ways.

[1] https://classic.yarnpkg.com/en/
It isn't broken by design. I sympathize and understand it's annoying to have to comb through false positives and mark them as such, but until a level of AI we're nowhere near being near exists, you can't automate this process, so the only alternative is to ignore all vulnerabilities.

Complaining about this is misunderstanding the asymmetrical costs of different types of statistical error. Vulnerability scanners are sensitive by default because the cost of lots of false positives is annoyed developers who have to slow down their delivery cadence. The cost of false negatives is anything from compromising user data to losing your company to bringing down the power grid of a major city depending on what the application is.

Which of those is a higher cost? npm can't possibly know the answer to that, so it has to default to assuming security actually matters to you. If it doesn't, your local policies can be more lax, but don't expect the tool to change for you.