skysight-inc/HackerNews huggingface dataset:
Lua is a language that I started programming with, and has a special place in my heart even if has some crappy parts.

The main issue I have with the language is with table accesses and 'nil'. Tables in Lua are the most fundamental type of object in the language, it can be either an array (1-based index) or a hashtable. In this language objects are basically just tables with fields in them, and with metatables you can basically emulate all the features in a typical OOP language (classes, inheritance, traits, operator overloading, etc.) Field access in objects are just table accesses (like what you can imagine with Javascript).

However, when you try to access a field in a table that doesn't exist (such as 'print(table.key_that_doesnt_exist)'): no errors or exceptions are explicitly raised, it just silently returns nil. This is such a dealbreaker that makes the language much harder to debug than other languages (at least Javascript returns undefined, which is different from null! Oh well, that actually has problems of its own though....) Some more horror: global variables are also implemented as tables (imagine that there's a table _G at the top of the scope). This means that any spelling mistakes with variables will also just silently return nil, since if it doesn't find any variable names at the local scope, it tries to find at the global scope.

The global variable thing was actually such a big problem that people came up with some voodoo metatable trickery script like strict.lua (https://github.com/deepmind/strict/blob/master/strict.lua) that prevents this from happening (a showcase of the language's power, but probably not its proudest). I'm sure you could also do this with table creation (make a wrapper function tbl() that automatically adds metatables to tables to prevent invalid field access, so every time you need to do things like 'pos = tbl({x = 1, y = 2})') But still, there isn't a solution baked into the language, and it's cumbersome to do this (and I'm not sure about the performance implications of this addition).

Right now I'm trying to integrate Squirrel (http://www.squirrel-lang.org/) instead of Lua as a scripting language into my game. Squirrel is an embedded scripting language that's hugely inspired from Lua, but also fixes this shortcoming of the language by making invalid table accesses runtime errors. And when you want to add new fields to a table you need to explicitly do so via the <- operator:

table = {}
// print(table.x) (Runtime error)
// table.x = 1 (Runtime error)
table.x <- 1
table.y <- 2
print(table.x) // Outputs 1

which is much more explicit and less error-prone.
heres a good demonstration of LÖVR showing a unique selection interface https://twitter.com/mcclure111/status/1214638887173099520?s=...
> Can you live without residence?

ding You've just discovered another hidden trick that the ultra-wealthy use to minimize their tax-burdens: in each year, they travel and ensure they do not reside long enough in each country to be considered resident fir tax purposes.
Can't Google right now but there was a story about, I think, Californian schools that installed air purifiers to deal with some kind of temporary pollution problem (fires?), and apparently they then found that after the problem had ended, the students in schools or rooms with air purifiers scored higher in some sort of testing.

(Pardon the vagueness, I'll edit later if I can)
Wow! I’m just a casual HN user but I find it genuinely cool that people as accomplished as yourself post here.
A bunch of the ivermectin studies were paid for by pharma companies that make ivermectin. Do they have any financial interests?

Also the vaccines are pretty cheap. Which do you think is cheaper, one $5 vaccine or multiple days of medical care? If the goal was maximizing money to a pharma company, you certainly don't want to prevent people from getting sick.
The article says they had double blind cognitive tests. Seems pretty straight forward?
> If by seeds you mean "salts"

Yep

> If it's salted, you'll see the salt in the plaintext and just remove it.

No. You can't use rainbow tables on salted data. Maybe when a framework has a default common salt that people forget to change.

> rainbow table for long passwords will develop pretty extreme storage requirements,

Not really, that's the point of rainbow tables. They can be reasonable, they are not lookup tables. If you are looking at large ones, they can be compacted at the expense of time.

For "CorrectHorseBatteryStaple" the rainbow table will not contain "sdfgnWlgiuwreFrglrkemnmZflgh". You map the chain to your search space. So after CorrectHorseBatteryStaple might be SimpleFineChairBook or S1mpleFineChairB00k or SimpleFine@ChairBook depending on your space.
Since we can’t get global cooperation on this, I think geo-engineering for reduced solar absorption is something to seriously consider.
Sure EVs don't pay gas tax..but in lot of states , there is a higher tag renewal fee for EVs. In my state , I pay almost double the annual renewal fee for my EV every year.
My lead taught me at my internship that "working code is better than no code. As you get better and come back to it, your working code will eventually be clean code." We have a super small team so my lead can easily say those things, but I have learned to agree. Get the product to work. Who cares if you've got a function with inefficient algorithms right now. You've got a deadline and something that works fine. You can just throw a TODO on there, set a calendar reminder, and check back later. It's not pretty and yeah it may be like three nested for loops, recursion, and a really indented mess, but so what. It works, and you can follow it. In the business world, all that matters is results. When management is happy, you can go back and fix that thing you now have some extra time for. If not, just make note of it so the next person coming in is aware it's bad code. No harm no foul. It just comes with the territory.
Regardless of what people call themselves, when they say things like "libertarianism means no government" and "libertarianism allows people to sell themselves into slavery" and "libertarians allow people to sell baby food laced with poison" they are not a credible source.
This is a fantastic post and I really appreciate your rationale (having faced similar struggles). A limited but simplified set of Haskell libraries that offers similar ergonomic benefits to Elm is very appealing! It would be great if this became a community project.

I'm not sure if the poster is from NoRedInk, but my only feedback is that I'd love to see some sample code that demonstrates the power of the handle pattern in use?

I followed the link that discussed the pattern which then referenced this https://github.com/jaspervdj/fugacious. It would be better tho if there was a concise sample.
See the recent Armenia vs Azerbaijan conflict for a list of combat drone companies to invest to ? ;-)
We traded away privacy for "free" apps and services and now we will also give away privacy to help noble causes.

Ok, I just hope the loss of privacy does not cause any harm.
Two US senators want to target ransomware by sanctioning nations that allow it
I've just tested Google Maps on an Android device without Google Play Services or microG. The app works fine, although every time you cold-start it, the app shows an alert (which can be dismissed but not disabled) and a notification (which can be specifically disabled) that Google Play Services is unavailable. On an Android device with microG, Google Maps works without showing the alert or the notification about Google Play Services.
Are we going to mandate flu vaccines from now on? I mean why stop at COVID19 at all, let's mandate vaccinations for everything under the sun if we go by that logic.
> It makes me angry that programmers feel that they "own" the concept of time measurement

Programmers feel that they "own" pretty much every social construct, by virtue of the fact that it is their job to encode those constructs into interfaces and databases. See the famous "falsehoods programmers believe about X" [1] --- and I'm sure you'll like this one about time [2].

[1] https://github.com/kdeldycke/awesome-falsehood

[2] https://infiniteundo.com/post/25326999628/falsehoods-program...
Beware of 'shrinkflation,' inflation's devious cousin
>>The pessimist in me likes to think this article is sponsored by the air purifier lobby.

Well that makes the two of us. For an article on a website called science, there's lots of info about the person doing research, his background and his life story than the actual numbers on what they define as "smarter"

In one part they mention the study was done in 2015 (no link to article) on 24 people where these people did 61-101% better on some test.

But then when they did the study on 100+ people the improvement was just 26.4%

Wut??

But like others have mentioned there is evidence better quality air helps with performing better on cognitive tasks. This article is just really badly written.
Another win for the CMU mafia.
Indian Court: Mandatory vaccination violates fundamental right to livelihood
I was gonna check that, but I'm on a test profile on my browser without and adblocker and when I saw the ads, I closed before looking.
Hang out with a bunch of libertarians and eventually they'll start arguing about who's more libertarian.

There are various types (or degrees or flavors or something) of libertarianism. Minarchy [0] is one type, but doesn't seem to be the most vocal from what I've seen. There's even libertarian socialism [1]. The most vocal type seems to be anarcho capitalism [2] which is pretty much the no government whatsover group.

[0] https://en.wikipedia.org/wiki/Night-watchman_state

[1] https://en.wikipedia.org/wiki/Libertarian_socialism

[2] https://en.wikipedia.org/wiki/Anarcho-capitalism
Vsql: A single-file SQL database written in pure V with no dependencies
Indeed. Cat with no collar > cat who choked when their collar got caught on a fence.
And nobody uses them and it's not enforced.
If sexual images exchanged by a kid are saved to the parent’s phone then doesn’t that put the parent at risk for charges if the kids are sexting?
I wonder how this compares to Dask. It also uses the pandas API and is distributed but is built on top of pandas instead of spark
It comes down to poor forest management. Don't weed your garden? Don't allow logging to thin out trees? Reap what you sow. Overcrowded disease-prone trees, drought, beetle infestations, piles of deadfall, less wildlife, huge devastating fires with choking smoke, then flash floods, removal of topsoil, silt-filled rivers, lakes, and dams, and landslides. Controlled burns occasionally become uncontrolled burns and just destroy valuable resources. But, no surprise here. You can't expect common sense from academics.
Ironically, I got into the sysadmin (and later programming) business because a wise coworker of mine told me to stop mucking around in Windows 95 and grab the Sparc LX in the corner of the shop and install RedHat on it.
Am I missing something? Why would they say they're sex offenders at all?
> If ivermectin - a $3 treatment - proves to be effective then the emergency use Authorization for novel Covid therapies goes out the window.

No, they don't, because the vaccines still prevent you from getting infected in the first place. If ivermectin (or hydroxychloroquine, or Vitamin D, or whatever) had been discovered to work last year, I would have taken it but I would also have gotten the vaccine, because every story I've heard from survivors sounds like it was a deeply unpleasant experience. And I probably would have paid more for the vaccine than the government-negotiated rates, too.

Also, those government-negotiated rates are about $20. A $3 treatment, as an ongoing preventative measure for the whole population, can easily add up to more than $20!
> They are still delusional, since the risk of COVID infection even in the young and healthy is still greater than vaccination risk

Statistics don't matter if you don't know your own personal risk. For an individual the risk of a negative outcome is binary, not 0.00001%. That's what people who talk about stats fail to realize over and over again. You won't convince anyone with stats.
NPR recently covered [0] this phenomena which is also know as 'shrinkflation'

[0] https://www.npr.org/sections/money/2021/07/06/1012409112/bew...
Thank you, Hope to see Keyri there!
>In one part they mention the study was done in 2015 (no link to article) on 24% where people did 61-101% better on some test.

I think this is the study

https://dash.harvard.edu/bitstream/handle/1/27662232/4892924...

>Results: On average, cognitive scores were 61% higher on the Green building day and 101%
higher on the two Green building days than on the Conventional building day (p < 0.0001).
VOCs and CO2 were independently associated with cognitive scores
https://en.wikipedia.org/wiki/Irwin–Hall_distribution
I'm glad you got better. I wish you good health going forward.
So I was scratching my head for a good couple of minutes trying to figure out how this works, being familiar only with HTTP Response Splitting/HTTP Cache Poisoning.

So it seemed that somewhere along the years while I haven't been paying any attention to websec, it became a common practice to send requests from different clients through the same TLS connection. And due to the non conforming way HTTP 2/1.1 interop was implemented by these webservers/load balancers request boundaries were not delimited correctly, making it possible to inject requests on behalf of followup clients.

Fine I get the issue. Sounds like another "good enough" optimization that backfired.

What is the solution aside from playing the patching wack-a-mole game? Should maybe a HTTP2.1 protocol work without a strict TLS requirement so that protocol downgrades aren't necessary to squeeze out extra performance (unless I misunderstand why the HTTP2/HTTP1.1 bridge was in place). Or is the problem that some application servers still don't support HTTP2 out of the box?
I’ve been harping on this since learning covid was aerosol based early 2020.

I like to tell new parents a trick that worked well for us: use a nice filter-based air purifier for white noise. It has deep bass, and it keeps the air near the child extremely clean. We have been doing this for our kids for almost 10 years now since birth.

A fun experiment for kids: if you have a laser pointer, shine it close to the ground indoors and kick up dust near the floor. If you see any light in the air, that is all stuff you are breathing in (works really well on carpet)…

Air quality associated with:

Alzheimers: https://www.scientificamerican.com/article/the-new-alzheimer...

Cancers, plural: https://www.aacr.org/patients-caregivers/progress-against-ca...

Sperm Quality: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4443398/#sec995...

Female Fertility: https://www.newscientist.com/article/2207560-exposure-to-air...

Autism: https://www.sciencealert.com/particulate-matter-in-air-pollu...

Bipolar/Depression: https://www.nationalgeographic.com/environment/article/air-p...
Android ROMs like GrapheneOS for now, mobile Linux distros in the near future.
we are not wiping out the rest of the planet, we are manipulating it into better serving us through thd use of technology. We are potentially able to deal with ex. astroid impact which no other species is able to, in my book that counts for way more.
My understanding is that the rate of earth's spin is "constant" (actually it is slowly decreasing on geologic time scales) but the orbit of the earth is not circular and a revolution around the sun doesn't match with a full number of earth rotations.
> Can you guess which two of the three popular authentication mechanisms Google doesn't use?

Google is hardly alone. Non-cookie-based authentication mechanisms aren't used (and aren't even usable) on any other public web site, either.

TLS client certificates have always been a UX nightmare. There is no standard UI for creating, installing, or selecting a certificate to use to authenticate to a web server; many browsers (especially on mobile devices) don't even support those features. There's no way to log out without closing the browser. There's no way for an average user to transfer a certificate from one device to another.

NTLM is simply irrelevant outside the scope of a Windows network. Other HTTP password mechanisms have many of the same failings as client certificates -- the UI is clunky and sometimes unavailable, and there's no standard way to log out.
> People who increase other people's risk of acquiring a disease should face some type of cost for that.

I wonder how you feel about AIDS or HIV positive patients.
Parents cannot be notified when a child between the ages of 13 and 17 views a blurred photo, though children that are between those ages will still see the warning about sensitive content if Communication Safety is turned on.
Not quite, they're an NGO and the CyberTipline which it operates (the database Apple will use) was established by S.1738 [PROTECT our Children Act of 2008], and they get an appropriation from Congress to run that and work with law enforcement.

It's kind of like the PCAOB... private 501.3(c) with congressional oversight and funding.

I think the strategy is that the organization is able to do more for helping children internationally if they're not seen as part of the Justice department and the executive, which after the debacle with CBP and "kids in cages", was probably the right call.
What happened to heard immunity? Herd immunity does not need 100% vaccination.
'Unprecedented' fraud penetrated rollout of Covid-19 small business loans
Free speech is a Libertarian principle, so people can claim they are whatever floats their boat.
This is cool, but I find it hard to find any use case for it. I did plenty of work as an indie game dev in the past, shipped and made money out of games based on my own C++/OpenGL game engine and also shipped a few indie games with some external indie game engines. Then I moved away from gamedev, but recently started playing around with Unreal engine again and was blown away by how much Unreal does for you. It felt like with Unreal engine, game dev is mostly about art and game design and not so much about programming anymore. Given game dev has become so much more competitive and harder to do than in the old days, and the fact that you can get a AAA game engine like Unreal for free (and only 5% royalty after 1-5M in sales), it doesn't make any sense to use anything else other than Unreal/Unity IMO.
PASETO is a bit of an odd duck, and isn't really an answer to the OIDC vs. SAML question. OIDC relies on JWT in the same way that SAML relies on DSIG, but there's a whole authentication protocol build around it. You would probably not be better off replacing an OIDC implementation with a hand-rolled authentication protocol based on PASETO.

The big problem here is that none of this matters. People do abuse OIDC as a general-purpose token for individual applications, but almost nobody does that with SAML. The point of these schemes is to federate authentication. In other words: it only matters what Okta and Google will agree to do. Your options are OIDC or SAML.

If you had to pick between the two, I guess you should pick OIDC, and think about what Ryan Sleevi said downthread about certificate verification; you'll want some kind of pinning scheme (pinning is a mess in client-server situations, but still sane in server-server applications; in fact, server-server pinning long predates browser public key pinning).

If you're not federating authentication, I don't think you should use JSON tokens of any sort.
This sounds like a potential flash trading arbitrage play between code that implements the smear and code that doesn't. As in a whole bunch of market making institutions and retail traders are going to be a few hundred milliseconds slow off the mark that day?

Speculating you may get a few extra tries guessing a PIN as well given the time based window shift, we might be able to see evidence of the drift in internet routing tables and back off penalties, the same might go for some buggy rate limiting implementations for web requests, where the number of requests you can get through in a "minute" will overflow a fixed integer value. I'm sure the blockchain DeFi people are already hunting through smart contracts for potential vulnerabilities on it.

This is a really interesting problem, even if these ideas are speculative, it's where I'd go looking for vulns.
Wouldn’t one also perhaps analyze manufacturers of drugs may be given during a course of treating covid on a hospitalization? Ivermectin is a very very cheap drug, used in bulk with livestock for worming, and likely with low margins.
I've been wanting to buy an air purifier but not sure if it is a necessary buy or not. Before spending another 200-300$ for some stuff that I usually find reason to spend on, I need to know if it makes a huge difference from day to day basis.

This article definitely supports it, however has anyone
actually ever felt that much difference after getting their purifier?
Aren't vaccinated people not at much risk of anything? That was all the point of vaccination...
>I got stuck because I couldn't get over the lack of AAA graphics

That's an artist problem. Not a programmer problem.

I've used Lua for gamedev before. I've also used C#, C++, Python, and Javascript. Nothing was more fun to work with than Lua. If Unity announced they were dropping C# support and switching over to Lua, I'd probably buy a bottle of top shelf champagne to celebrate.
It's not a paradox, just a monopoly or de-facto that.

Platforms should be required to allow users to set an alternative default app store, much like browser etc..
TFA:

> Democratizing the Tools

> We love that corporations are doing all this work, but we don’t love the fact that the opportunity to share information is asymmetric,” Lungren says. “If they amass data but then lock it down, they will be the only ones who can innovate, which would shut out the important contributions by computer scientists and clinicians around the world. That’s not a position we want to be in.”

Uh huh.

Let's scrutinize the "Stanford University School of Medicine MURA: MSK Xrays Dataset Research User Agreement":

> By registering for downloads [...] you are agreeing to this Research Use Agreement [...]

Hiding downloads behind a registration. We're off to a FANTASTIC start. /s

> YOU MAY NOT DISTRIBUTE, PUBLISH, OR REPRODUCE A COPY of any portion or all of the MURA: MSK Xrays Dataset to others without specific prior written permission from the School of Medicine.

> YOU MAY NOT SHARE THE DOWNLOAD LINK to the MURA: MSK Xrays dataset to others.

You know what? I'm going to stop there. The agreement becomes increasingly more hostile.

Someone please inform Stanford on what "Democratizing" actually means.

It's a hard pass from me.
> It makes me angry that programmers feel that they "own" the concept of time measurement enough to propose the abolition of leap seconds. The definition of unix time excluding leap seconds is really the origin of this nonsense, and it has always seemed to me that the obvious solution is computers should simply measure seconds since the epoch. Wikipedia describes this version as the "TAI-based variant" of Unix Time, and if we all used it, computers wouldn't even have to care about leap seconds, and conversion to standard time display could be done in userland, accounting for leap seconds in the process.

That's not fair to programmers: the definition of a leap second is up to an international organisation (IERS), and more importantly leap seconds added in 2020 couldn't have been known by anyone in the 1970s. Leap seconds are added only six months before they are to take effect, as per wiki (https://en.wikipedia.org/wiki/Leap_second): "Because the Earth's rotation speed varies in response to climatic and geological events, UTC leap seconds are irregularly spaced and unpredictable."
Do billionaires not need friends? I don't see how anyone with an iota of intelligence or morality could accept Zuck's wretched impact on humanity.