skysight-inc/HackerNews huggingface dataset:
Why would that matter to this discussion? I want x from retailer y. Retailer y doesn't accept cash. I use a card. If you have an objection to using cards, you're certainly free to decline to make the purchase. Nothing in any of that seems like it would be age related either. What's the difference between having $20, or a debit card linked to an account with $20?
A few cache misses in a row, and some branches mispredicted and your modern CPU is slower than 1.25mhz. This almost never happens (CPUs are very good at this) but when it does things can get bad.
Enumerating a cafe menu:

select *
from
(values ('egg'), ('sausage'), ('spam')) main,
(values ('baked beans'), ('chips'), ('spam')) side;

Of course, to get the complete menu, you would need to use a recursive common table expression.
I was honestly intrigued by the startup this is an ad for -- this subject is very relevant to my interests -- but their website just has more marketing copy, a YouTube video demonstrating features that don't appear to exist anywhere, and a "sign up for our spam" form.

Maybe wait to start your marketing efforts until you actually have something ready to market, eh?
Memory making involves extensive DNA breaking
Show HN: R2r: R-Object to R-Object Hash Maps
A few months ago I showed up for a flight and found out my ticket was accidentally booked with the wrong gender when I put my id in the scanner at security. The solution was to dash back down to the airline counter, have the attendant scribble something on the boarding pass, then run back to security who let me through. No further verifications or anything, just a waste of 3 peoples time. Specifying gender serves no security or verification purpose whatsoever. Why are airlines even asking for this info?
Apparently this has also created somewhat of a constitutional crisis for them: https://www.youtube.com/watch?v=6rN76uqM_6U
There’s a percentage of children born every year considered “intersex”. The percentage will vary depending on what your criteria for “intersex” is.

In the past, the doctor would just pick a gender, and then (in the case of ambiguous genitalia) perform surgery on the child to make their genitalia conform to the norms for the gender that the doctor chose. This is a bit of a crapshoot, since you don’t know if you made the right choice for that child.

This is the demarcation problem rearing its ugly head again.

https://en.wikipedia.org/wiki/Demarcation_problem

If you decide that all people are either male or female, you are going to end up arguing about where to draw the line. This is not particle physics, gender does not take “integer values” like the spin of a boson. So we add “X” to the passport to acknowledge the fact that, as much as some people may wish for gender to be a simple binary, reality sometimes defies simple categorization.
But this does not have to be the case. For example, the Amish in PA & NY get great prices on their healthcare from major hospitals, because their communities ban together and negotiate lower prices.
TFA identifies "high risk" false positives too, so this response doesn't seem to have anything to do with them problem as stated by TFA.
Hell, there’s barely an alternative if all you need is a manageable directory of your users and PCs.
Yikes. Even in Germany, which is probably the most expensive EU country for mobile plans (yay...), and using the most expensive carrier (Telekom DE), it's €39.99 (CA$58) for 6GB, €49.95 (CA$73) for 12GB, €59.95 (CA$88) for 24GB, and Unlimited for €84.95 (CA$125). Plus you can get additional SIM cards (for an Apple Watch or an iPad, for example) for €4.95 (CA$7.27)/month.
That is not the cost of false positives. The cost of false positives is ignoring it completely. I have had jobs where we just block the security scanners because they won’t listen to any feedback about why what they are scanning was intentionally setup for the purpose of testing vulnerabilities on an internal only network. Additionally at other jobs security tickets just start to get ignored because they send too many tickets that do not matter. I feel the security field likes to ignore most feedback and play holier than though. At all companies i worked at i have only had one good security team that worked with people instead of just throwing things over the wall.
Discussed yesterday;

* https://news.ycombinator.com/item?id=27751358
The only way to dispute that would be appeal to authority so I will avoid. Perhaps there was a time when he did identify as a mathematical/theoretical statistician, but his contributions were quite a dramatic break from what was the norm in statistical practice at the time.

I would argue that his contributions were central to the birth of rigorous machine learning (the non deep learning kind) as a field of its own with a focus that's different from that of statistics.

One quantitative test I can suggest -- one can count the number of occurrences of the word 'statistics' in the journals and conferences he has published and compare that with the number of publications he has authored. My sense is that it will be close to 0 and getting closer (if not already there yet).
I don’t have a horse in this race, but from the WSJ article I read it sounds like the dead president was a Trump-style wannabe dictator who was narrowly elected in 2016 and then refused to leave office when his term was up. When people don’t respect the law and democratic process it shouldn’t be a surprise when others also choose to disregard the law and take matters into their own hands.
Hi David - would love to chat with you about opportunities at Optimism PBC. Shoot me a message to set up a time, jamie@optimism.io
ctrl+F "clinton", very bottom comment. Stay blissfully ignorant, HN.
The kind that doesn’t want to deal with Europe’s laws, for better or worse.
The legal structure around telecoms in Canada also requires providers to provide at least phone service everywhere, so margins have to be extremely high in the dense areas to make up for the unprofitability of servicing remote areas.
>it's annoying to have to comb through false positives and mark them as such

There is no way to "mark them as such". That's half of the issue. The other half is that many people reporting these issues have not "opted into" any security tooling and don't understand its tradeoffs. They just ran `npm install`, and npm adopted default behavior of showing these warnings. For a lot of people this is their first programming environment.

>you can't automate this process, so the only alternative is to ignore all vulnerabilities.

I don't think the answer is necessarily automation. But as a package author, I'd like to be able to mark somewhere that a particular transitive vulnerabilities can't affect my users.

Or at least I'd like npm to offer a reliable way to update packages deep in the tree and override the resolved versions. Currently, there isn't such a way.
If you're running a single forest with/or a single AD/domain I'd argue that Microsoft has done nothing wrong. Separation of concerns has been a thing for decades now. And no, I'm not suggesting Microsoft's stuff is above reproach.
Introduction to Linting in Golang
What the megaphone guy says? I can't understand it.
You're betting this definition wouldn't have any serious unintended consequences?

A hypothetical example: suppose it becomes a legal nightmare to have even heavily censored webserver request logs retained for any period of time if your company does any advertising at all. That is, even if you have no intent or even ability to use those logs for advertising purposes, it might be a lot of work to prove that to the law, unless you take the hopefully-easier route of literally never advertising. "Boo hoo, companies have to prove they're not breaking the law", you might say; as is usually the case with these kinds of regulations, demonstrable compliance might be totally practical for bigger companies but a massive barrier for smaller companies, which on the margin means the difference between success and failure for quite a few businesses that would've otherwise created a lot of value.

That specific scenario probably wouldn't happen, I hope, but that's far from the only plausible failure mode! I would like to believe that we can figure out a good definition with relatively little value destroyed in the fallout if a law like this comes into effect, but it's almost certainly not going to be a single sentence.
> There’s a percentage of children born every year considered “intersex”. The percentage will vary depending on what your criteria for “intersex” is.

"intersex" isn't a precondition to put X on a passport, so it's irrelevant. If gender is irrelevant, then remove it from the passport all together.
It wasn't just the embargoes. They really did pay back the billions of dollars-worth of "debt".
Yeah, and there are solid performance reasons for that too even beyond any legal/privacy ones. Relaying across an ocean could actually be a fairly significant latency hit in many cases. Services that are completely focused on privacy even against some level of state actions (like Tor) may just accept and eat that, but that's not definitely not the threat scenario Apple is targeting and it would diminish its appeal as a fairly transparent service. Even purely in the browser people do engage in a certain amount of real-time activity. I can't see Apple considering adding thousands of miles worth of RTT ideal.
How are VC-funded startups different from "expand into new markets by a profitable business" ?
What laws are those? This is surely not GDPR, if that's what you mean.
Do you have any contemporary examples of this happening?

Seems like something that would be really easy to take advantage of by buying the material sold cheap and selling it later at a profit.
“Fighting oppression is more just than committing oppression” is a norm that has an incredibly long history. What also has an incredibly long history is trying to elevate the importance of the marginal consequences of those fights, over what was being fought against.
There isn't one because nobody's willing to pay for the site hosting and, more importantly, moderation costs for something like HN. Any other site (e.g. Slashdot) would be plastered with ads and optimizing for engagement; imperfect as it may be, HN is an act of charity by YCombinator to the world.
There is also DBLint (https://archive.codeplex.com/?p=dblint), which has a fairly comprehensive set of checks.
Why would you have preferred that over Montessori?
"Chaotic good" doesn't mean "Chaotic nice"
I used to do consulting work, and there's many small businesses that have "the server" that does everything for them. Microsoft used to even sell "small business server" for this role. I think nowadays they're pushing those customers to the cloud instead, but it takes some companies a long time to upgrade.
New study reveals that immune macrophages use their own “Morse code”
I found that much of the underlying cause is those mass reporting regex denial of services as being high severity bugs.

So many people are reporting these in tons of different projects: https://github.com/search?q=regex+denial+of+service&type=iss...

Anyhow it is just annoying and they broke NPM Audit based on these reports.

It is good to fix all possible bugs, but many of these are not anywhere close to the level of bad that the reports are making them to be.

But maybe this is needed to just get rid of these issues in genera? So a wave of regex vulnerability reports and then we build this type of checking into prettier or similar and we do not have these in the future?

EDIT: It appears there as a project that found 100s of CVE reported Regex vulnerabilities in npm projects -- this is maybe one of the sources of mass reports. See the bottom of this resume: https://yetingli.github.io
That's not a lot of money, period, considering the hours and the inflation due to overtime. Consider too that that is the median - many are making far below that.

Most people making money in trades make most of it working more than 40 hours a week, or, like you said, runs his own business (which is completely different. That is no longer a "carpenter" plying his trade.)

> Anyone could have done what he did (skipping the prison part), if they didn't mind working hard.

This is just not true and stated as fact. There is no evidence of this. We have no idea how capable this man really is. I know lots of dumb tradesmen and lots of brilliant ones. He should be proud of what he's done because it isn't as easy as you say.
Exactly. A friend in college, who looked stereotypically female, accidentally ended up with "M" on her driver's license. She never had a problem using it; people just thought it was funny.

It's absurd to think that if the photos and other identity markers match, some TSA agent is going to insist that you drop trou so he can decide whether you're sufficiently manly to use your own ID.
Astronomers Spot a Batch of Rogue Planets Near the Galactic Core
Dan isn't the first person to notice:

https://www.voitanos.io/blog/don-t-be-alarmed-by-vulnerabili...

We disable [1] audit entirely because it's not a good default behavior within a monorepo. It spams the hundreds of developers with the list of "vulnerabilities" on every install, but only a few folks should really be upgrading packages.

We then run audit in non-blocking CI and track the total number of issues and mostly focus on critical ones.

[1] https://docs.npmjs.com/cli/v7/using-npm/config#audit
> "intersex" isn't a precondition to put X on a passport, so it's irrelevant.

I think you may be reading something I didn’t write. I’m certainly neither saying nor implying that being born intersex is or should be a necessary condition for having “X” on your passport.
- Evidence based medicine is in all medical guidelines across specialties. It may even lead to defensive medicine. The "art" part of medicine is when you choose to skirt around the guidelines ie you need a noninvasive scan to diagnose your cancer, but you can't afford a PET scan or anesthesia so we will do the biopsy first because it's cheaper. This will open you up to lawsuits, but you do what you think is best.

- Journal clubs are in all fields of medicine. Yes the scientific rigor is definitely lacking, but it's more from poor understanding of statistics and the sci method than maliciousness

- if you want to deregulate the medical industry, many more people will die. For instance, the easiest way to make money in the ER is to refuse the uninsured dying patient without due course
Doesn't that increase the lake's overall temp though?
Trump to Sue Facebook, Twitter CEOs
Hey hackers,

Yura here - I'm the co-founder of Greenlight.
Greenlight is the new kind of job platform - where companies discover 'hidden' engineering candidates across multiple geographies. 'Hidden' means these engineers are not actively applying for vacancies, but at the same time are open to new remote opportunities.

Traditional job portal model emerged 20+ years ago, when 99% of job opportunities were inside your zip code and employers were the ones setting the rules. As a result, most job portals are limited to their local market and rely on the "candidates apply to vacancy" paradigm.

However the reality is: both of these things have changed.
The market for software engineers is one example: demand exceeds supply and now it looks like most of us prefer the flexibility of remote work.

Greenlight is an attempt to reflect this new reality: here companies apply to interview engineers, not vice versa. And this happens across multiple geographies.

Also, for the founders this is personal.
Both of us are immigrants to the United States. We both went through a 3-year long visa marathon, spending hours of each week struggling with complex bureaucracies in order to be able to move our families to the US. The process was long, confusing, costly, and stressful.

We also previously built a successful business in outsourcing - an industry whose very existence is made possible by the striking differences in what people with the same skills are paid for the same work, depending only on where they were born.

One of the greatest achievements of the Internet era is that it helped level the playing field for those who weren't been born into privilege - no matter social class, wealth, or nationality. We believe this is just the beginning of what actually can be achieved - and that geographic work permissions are a barrier that can be torn down easier and faster than others.

With Greenlight, we want to help build a world without borders, a world where every human being has equal access to career opportunities - no matter where she or he was born.
In our world, access to work is globalized: every company has a portion of its workforce working remotely from other geographies, and every job is global by default.

Looking forward to hearing your thoughts.
Hmm. This actually sounds really plausible. I wonder if there's any way to check that.
In addition to what cryptohacks said, Haiti always had horrible relations with the US because it was founded by slaves. The revolution took place in 1804, a time when Americans, especially southerners were very worried about slave revolts. In order to dissuade more slave revolts the US did everything in its power to make sure Haiti turned into a failed state.
I am trying to find a freelance gig for backend role. After applying related filters, it's showing me a single posting with a really long description. Looks like a full time job. Aren't there any freelance gigs or I am missing out on something?
I mean, they seriously done many things in Windows 10 (and analogous servers) to improve security without too much breakage, like moving font processing from kernel-level to user-level (n.b. in the process, they have thrown Adobe code). Print spooler is tricky though: even if the official design of the API theoretically allows it to run user-level, ask users of HP products (including business ones) how many times their computer crash due to weirdness in HP drivers. (Why does the HP printing drivers run in kernel-level mode? I don't know!) I'm pretty sure that nothing will happen when the spooler is moved to user-side processing, right? (In all seriousness, the drivers will break and probably crash the system. These products are officially out-of-support, so short of Microsoft paying HP to revamp the drivers nothing will happen.)

In all probability, probably even Microsoft is contemplating such move but breaking a lot of stuff is reputationally damaging to them, even if it's not really their fault in this case. Removing SafeROM is easier because it's just grumbling gamers who can probably patch up Windows 7, but imagine the support calls when the print spooler, a critical component, is moved. Even when a rational mind would put the blame on HP (et al., it's not just HP designing "weird" drivers), the problem will appear due to a Microsoft change and therefore Microsoft gets the blame.
I am entirely for removing it altogether, but change rarely happens all at once. "X" seems like a good start.
ACL 2021 Best Paper: Finding the Optimal Vocabulary for Machine Translation
NYC banned cashless stores because they exclude the un-/under-banked
Why they killed him?
I am saying it’s viable not dependable. Chile shares borders with 3 countries, each of those countries shares borders with another country. So no 2 counties could block Chile.

Now, if your saying Chile can’t trust it’s maintaining good relationships with any of those 3 counties then sure.
Also related:

https://news.ycombinator.com/item?id=27760972
Yup - agree, and also "genetics tech" 70 years from Crick and Watson to mRNA vaccines and then actual genetic engineering in adults with CRISPR [1].

This kind of progress is amazing, I think we should start the clock on QC from either Shor's paper or maybe from the first 2 bit QC in 1998 - so that takes us to say 2060?

[1] https://www.nature.com/articles/d41586-021-01776-4
> that is generally not acceptable in the wider community

That is the U.S.. Which is why I brought this point up. Different countries/cultures have different perspectives.
I'm not here to nitpick or defend genocide. A few white people might not have been killed, and some foreign troops, like those defectors, spared. Read the whole page where you found this quote to single out.

Considering how the slaves had been treated it is perhaps understandable that the backlash was brutal, but that was a genocide nonetheless, with the white population massacred, not just a few people in an unique event.

I certainly don't think that I have exaggerated anything.
Genocide was committed on both sides, and from a purely numerical standpoint the Haitian slaves had it worse. Why shouldn't France have been forced to pay back Haiti for the enslavement and genocide that it committed? Or should we just forget about the Vicomte de Rochambeau and his attack dogs?
That's ignorant bullshit. Venezuela is the only SA country one can call a failed state. The rest is doing well. No first world countries nor the highest HDI but call them failed states it's just stupid.
https://i.pinimg.com/originals/0e/ae/a1/0eaea116051e07f24314...

Still the best tutorial.
I think Grafica Obscura is my single longest-lived bookmark. I've had it in my list since he was actively maintaining it, so at least 25 years.
I appreciate the effort you put into your response!

I think the conversation has diverged quite a bit from my original point. I’m not even trying to argue that uniswap is not useful or an improvement. Instead I’m pointing out that when we compare defi protocols to the traditional system, the core services are largely the same. Defi is an attempt to allow anyone to participate in the roles which are usually accessible only for institutions. That doesn’t mean those roles are just now being invented by uniswap/aave/whatever.

Unrelated Opinion: defi’s practical utility comes from circumventing regulation and adding leverage to a crypto position. (Eg no KYC, selling AAPL tokens, borrow tether against an ETH position to buy more ETH)
Apparently yes, nasal breathing is hugely beneficial. This book was a life changer for me — James Nestor’s Breath:

Breath: The New Science of a Lost Art: Nestor, James: 9780735213616: Amazon.com: Books
Breath: The New Science of a Lost Art: Nestor, James: 9780735213616: Amazon.com: Books https://www.amazon.com/dp/0735213615

Yes, yes, we all know Pranayama and other ancient sciences already “covered” it, but at least for me, I was totally unaware of the importance and wide ranging benefits of nasal breathing, until I read this book.

For me the key take away was: when running, follow 2 simple rules: always breath through your nose, And make your out breath last (much) longer than your in breaths. I started with 2 steps for out, 3 for in, then 2/5, And now i can do 2/7. I use the nasal breathing rule as a guideline to know when I’m running too fast - if you can’t just breath through your nose then you’re running too fast. Over a few weeks of running 3 times/week I was able to increase my distance from 2 to 5 miles.
Bloomberg LP, NY Is Hiring a Senior Financial Query Language Architect
In the US system the President basically assumes the constitutional position of George III circa 1770. Executive orders are Royal decrees. The president signing laws is Royal Assent. Presidential pardons are Royal pardons. The power to adjourn Congress is proroguation.

The oddity to me is the position of the Speaker of the House, which is a weird amalgam of the role of the Speaker of Parliament and also acting as a de facto Prime Minister although there really isn't an explicit equivalent role in the US.
Yep, I've used this with huge success in PostgreSQL when needing to join the contents of tables containing potentially millions of records that could (usually) then be filtered via search criteria. Basically I'd do my search-filtering first via a sub-query, then simply join the result of that vs doing it in the opposite order. The performance gains were orders of magnitude.
Actual egress location and locations returned by various geoip databases have little to do with each other.