skysight-inc/HackerNews huggingface dataset:
For the "broken access controls", "cryptographic failures", and "bad design" categories, I've been working on an open source project to help mitigate those.

It's still early and I haven't released it yet, but I have the docs[0] deployed now. If anybody feels like helping us test this early, I'd love some feedback. We're going to be pushing the code live in a week or so. (It's been a lot of building for a while now)

I've been thinking about these problems for a while now (as a security engineer) and it's cool to see that my intuition is roughly in line with what OWASP is seeing these days. It's always hard to know if the problems you see people struggling with are representative of the industry as a whole, or if you're just in tunnel vision.

Note: We're building this as a company so that we can actually afford to continue doing this full time. I'm still learning how to find the line between open source and a viable business model. Any thoughts would be appreciated[1]!

0: https://www.lunasec.io/docs/

1: email me at, free at lunasec dot io
Reagan has much more to answer for.

The current US epidemic of Metabolic Disorder, killing way, way more than COVID-19, is a product of his Agriculture Secretary Earl Butz's program to institute absolutely massive over-production of corn. There was so much of it that it had to be turned into high-fructose corn sugar; then, a market for that had to be generated. So they demonized saturated fat and promoted adding sugar in its place.

And, here we are. Saturated fat has turned out to be totally harmless. What was blamed on it was caused, instead, by trans fats ("partially hydrogenated vegetable oil") added to replace it, and sugar.

Fred Kummerow spent his whole career, since the '50s, working to get trans fats out of the US diet, since he had proved they were responsible for the epidemic of circulatory disease. Trans fats were, finally, officially banned in 2017, although certain well-connected companies still have special permission to continue poisoning food with them.

To learn more about Metabolic Disorder, the best place I know to start is Robert Lustig's youtube lectures, and books. Short story: "sugar" is half glucose, which is relatively harmless, and half fructose, which your liver must process as a toxin. When fructose is ingested without enough fiber to slow its absorption, your liver takes a huge hit. It processes fructose by the same process as alcohol, and too much has the same effect as too much alcohol. (American children are getting liver disease just like alcoholics! Brits, Indians, and Pakistanis, too.) Take enough fiber with your sugar and you are OK. But all of industrial food processing is devoted to removing and throwing away fiber.

You can start healing your liver, fast, just by ensuring everything you eat has enough fiber: eliminate white flour, white rice, juice, and Red Bull. Livers have enormous regenerative ability, once you stop actively injuring them.
Everything you need to know about Video Watermarking
I don't get this. I've used GTK, Qt, Tk and FLTK software in OSX, Windows and Linux. The rest is usually covered by standard libraries and third party libraries.

So I take it this approach is disqualified on your terms for not being meaningful, which raises the question about what "meaningful" means.

My own guess is that it's a matter of convenience of distribution: enter an URL and you can start using the app.
Running a T-account in Excel is even more energy-efficient.
The static type information isn't actually too important to us, what our tool cares about is being able to interpret branching conditions in the code in order to turn them into constraints. We currently do this at the LLVM IR level, so as long as we can compile the code down into this form then we can analyse it. With Python a lot of the work we had to do in order to get a prototype working was in being able to handle all of the system calls that the Python interpreter needs to make when booting up. These aren't always straight forward to treat symbolically because they interact with the file system etc, but it's possible to provide mock implementations that don't affect the analysis of the users code.
I like to view THC as performing a natural transformation to the attention mechanism in the brain so attention per unit time is more distributed among all modules, and thus more combinatorial interesting things can arise. (I’m still in the midst of foramlizing a mathematical model from a PLT perspective.)

But one noticable downside to it is that the more distributed the attentions are, the more likely you are to get stuck in a local maximum as the less cohesive your modules become in terms of utilization (eg for abstracted goals) and the data-granularity gets too fine-grained to be useful from a cybernetic perspective.

The effect differs from person to person. (Eg Short-timespan-wise people lie on the sofa or keep laughing, etc, the stereotypical notion being “stoned”, and long-term-wise if things are repeated in the same settings over, reliance is formed (as a coping mechanism for stress perhaps) and person becomes a typical unproductive “stoner”))

Therefore the most important thing here are 1. the settings 2. Don’t take it lightly. Though thc is not as powerful a disruption to the default mode network as lsd/dmt, one should never take it mindlessly and too regularly. Learn to grow out of it, not in.
Yes. I would argue that it is precisely the obsession with cross-platform that has destroyed native desktop applications. If all you are offering with your native desktop framework is a dumbed-down experience, because it has to also run on tablets and phones and TVs and game consoles and smart refrigerators, then you quickly get to a place where there are few advantages in going native over shipping a webapp in a Chrome wrapper.

Windows 8 was a catastrophic failure, and Apple seems to be leaning into the same failed philosophy now.
Interesting - if it happened during the scan it would be due to the gradient coils, not the main solenoid field. The gradient coils are much weaker but turn on and off during the scan (the main solenoidal field is static).

https://radiopaedia.org/articles/slew-rate
I used to get this feeling while I was drunk (haven't been drunk in a while), I once recorded myself, my insights did not produce the same clarity and euphoria while sober, quite the contrary. Did you really prove that the ideas were a substantial part of some quantifiable success?
> Among the 133 projectile events were 35 reports (26%) involving patient walkers, wheelchairs, stretchers, and chairs, 13 incidents (10%) with gas cylinders, 13 cases (10%) of magnet components exposed during servicing, 10 events (8%) with workmen's tools.

Yeah, but a gas cylinder or a hammer flying across the room is way cooler.
I am fully convinced Ballmer's Peak is a legitimate phenomenon

For the 10k: https://xkcd.com/323/
Whats your name? What have you had? Reach for the lasers. Safe as **
You can accept it as a means of debt repayment in the eyes of the law
. No one is "required" to accept anything.
> code generation, instead of e.g. reflection

"Hey man, we noticed there's not enough compiler in your compiler, so we made a second compiler for your compiler."
What ORM was that?
I'm saying that these URL's:

https://gist.github.com/gregsadetsky/cb4754d123f0ea1eae26820...

May have be generated dynamically on the fly (probably programmatically editing / splicing the vids), but the developers, knowing that some people were going save the URLs, cache what's generated for a time so you can access it again without the expense of regen (also splicing in the different clips).

I'm just speculating though. It's part of what makes this promo really cool.

I'd love to see a breakdown. As promo sites go, it's very smart.
Are you sure it’s not just the habit? When I tried to stop vaping I literally couldn’t bring myself to draw or paint anything. Then once the nicotine started flowing again I had no problems. I assume the act of smoking and drawing has become intertwined in my brain.

That or it just puts me into a deeper state of concentration. Not sure, but it’s interesting how addictions can become ancillary to creativity/productivity.
Alcohol helps me too if I want to compose music. I tends to experiment more. But I've realized that composing just after getting out of bed is as efficient, as my mind is cloudy. So I'd rather recommend that as relying on alcohol isn't the best idea.
I think the way GP phrased it is a shorthand for "egg just after fertilization" - because today, fertilized eggs either get implanted early or rejected by the mother's body. When science and technology advances to the point of making it possible to gestate humans entirely outside of the womb, the way we talk about this will have to adjust to be more precise.

(Implantation itself doesn't feel like the transition point either, but it's just the last obvious discrete step before the continuous progression all the way to birth.)
You are wise to be wary.

There are some pretty subtle tigers waiting to maul you if you run workflows against untrusted PRs.

The way I currently do this is that our workflows run the CI build/test job in the repo of the user proposing the PR and uploads the logs/results as an "Artifact". Our repo waits for that job to complete and then downloads the artifacts and produces a pretty comment with the junit test results on the PR.

However, despite recommending a model like this, GitHub still makes it infuriatingly hard to actually do, and we ended up with all of this crud to be able to get one XML file: https://github.com/Hammerspoon/hammerspoon/blob/master/.gith...
Who says that these deaths are a necessary part of self driving progress?
Oof, that sounds like such a terrible interview experience, I'm sorry to hear it. I'm glad to say my Google interview wasn't like that at all. In my experience working at Google, code reviewers are more likely to communicate their expectations clearly, and less likely to request arbitrary style changes, than at my previous startup job.
As one of the mentioned consultants, I think the statement that one can learn Kubernetes in a day or two grossly unfair. It is a complicated beast, for better and for worse. The (almost) unique selling point is that it is an orchestration layer that is pretty much provider agnostic in a believable way.
I'm very on the fence on this topic; I've watched family members/friends pass in varying degrees of pain, and at least in those cases I'm not sure having assisted suicide would have helped that much. What _definitely would_ have helped would have been better end of life care.

> who has never been in the very unfortunate position of needing to die.

Defining that line is very, very, tricky. People only reach this point at a desperate time, when they are potentailly very vulnerable. There's a huge difference between two people in an end-of-life situation, one who is willing to die and one who isn't, yet both may "need" to die, and we have the meansright now to provide an easier transition from "terminally ill" to the former, but yet people end up in the second bucket all the time.

> Because so few people ever get stuck in that situation.

Yet we have many many people who have suicidal thoughts, and who commit suicide (arguably needlessly), when we have methods of helping. We should have the same methods of helping people who are terminally ill.

(That's not to get into the mess of what do the family of the patient want; things get messy _really_ fast when money is on the line as I've unfortunately witnessed, and it tears families apart.)
My first programming language when I started to study CS at university was SML using MoscowML (in 2001).

It seemed like both I and a lot of other students had a lot of issues with it. It seems like the university agreed as they later moved away from it.

Basic SML might not be hard to learn but you quickly have to go to concepts like recursion that is not a very easy concept to grasp for beginners. SML seems more suited for the theoretical mathematical (for lack of better words) parts of computer science rather than the more practical parts.
Right, in math terms, generally (perhaps excluding your arbitrage scenario for Apple here), insurance is expected value negative to the consumer but utility neutral or positive because of a non-linear transformation of dollars into utility -- and this also explains why your second paragraph is more or less correct for most people.
Without powerful abstraction (of course used sparingly) you will just copy-paste the same logic in multiple places. Which is error prone and unmaintainable. And I would argue that even though a small part of it may be easier to read, you will have a harder time getting the big picture with low abstraction.
Finalists in the 2021 Comedy Wildlife Photography Awards
I learnt m68k on an Amiga 500+ in a week, it's a decent assembly language which a lot of CPU manufacturers could learn a lot from.
*anonymity

Bitcoin's Lightning Network is private enough, thank you very much.
I stopped smoking cigarettes and noticed it acted as a pep for me ( the smoking, not the stopping ).
International Space Station: Smoke triggers alert on board
There are many alternatives to the proof of work concept. Cardano uses proof of stake with a fraction of energy cost and is academic proven with 100+ peer reviewed papers. Beautiful project
Serendipity, or luck if you prefer, seems to play such a big role in things.
Ask HR if they have a reccomendation for openings on other teams.
>Ordinary people aren't as familiar with death, and don't have a wide range of responses to it because society hides it and pretends it doesn't exist.

I relate to this so much. I had a period of staring my potential death in the face and there is nothing in modern society that prepares you for that. I was completely rudderless for a while because I had literally no social context in which death could be faced without making people intensely uncomfortable.

There's many things I think our society is pretty crap at, but the subject of death in general has to be one of the worst offenders by far. We shouldn't be sweeping death under the carpet as a taboo subject and pretending it doesn't exist, it should be something people talk about. Death is the one thing that unites us all, it would be a far less unpleasant thing to face if people could have a sensible conversation about it without fear or grimaces.
Indeed, pull_request_target should be avoided.

The better model to use here is "pull_request" to do the work of building/testing a PR, and then a separate workflow that triggers on "workflow_run" to collect the results and attach them to the PR.

It's really not a lot of fun to implement though :/
Wow this is what i call a police state! When a Government thinks it is the parent of his children's.
This is how I see Kubernetes:

https://imgur.com/dsiNh5d
I'm seeing a lot of people sharing very personal and very difficult anecdotes here, and I am worried that that would make someone decide to reject chemotherapy outright, or recommend a loved one to reject it.

Yes, chemotherapy has very adverse side-effects. But it's also the best course of action we currently have for a lot of cancer patients. It varies depending on the type, grade and stage of the illness, as well as the patient's overall health [1]. It should not be rejected outright.

Now for my personal anecdata: My sister in law was in her 30s when they detected her breast cancer, and got chemo for some time. It was a very difficult time for her, but it worked - the cancer receded. She kept having to do get periodical checks to keep tabs on it.

Unfortunately her cancer came back, and this time it was more aggressive - it resisted all treatments and eventually metastasised. They took her off chemo, but her health deteriorated very quickly anyway. She died 1 and a half years ago, at home.

On average, chemotherapy gave her and my brother around 7 years of life, in exchange of some very shitty quality of life moths due to side effects. They definitively made the right choice in taking chemo the first time, and not taking it the second time. A lot of people's cancers never come back.

I am not saying that chemotherapy is worth it in all cases. I am painfully aware that it isn't. But it is worth in a lot of cases. Don't reject it outright.

PS: I should mention that we live on a country with a civilized health care system where her treatments were paid for by the state's Social Security. No one in this story had to deal with "can we afford this treatment" problems. If you are in that situation, I am sorry for you.

[1] https://www.medicalnewstoday.com/articles/326031
>The general idea is that since we have stronger magnets now, we can make a smaller, and therefore cheaper tokamak quickly.

It's not that simple. The big problem with magnetic confinement fusion is that you need to control turbulence in the plasma so that you can contain the reactions for a reasonable amount of time to extract useful energy. However, turbulence increases with stronger magnetic field gradients, which is exactly what you get when making a smaller reactor chamber with stronger magnets. This wouldn't be the first project claiming to be able to build a small reactor, only to discover that it's virtually impossible without a major theoretical breakthrough. This is usually left out in the venture capital advertisements for these fusion startups. There's a reason why so much money and effort is spent on ITER - it is the only more or less guaranteed path to fusion with the tech and knowledge we have today.
This pandemic is also significant a moment in history when antivacc views gained wide social acceptance. This will hinder future vaccination efforts. I agree with you otherwise.
Bodily autonomy? Is that a thing in the law? What's the justification for the drugs laws then?
Security researchers: leaked Confluence exploit was only sent to VMware security
I did the same with a girlfriend. It was great and memorable, but didn't really bring us any closer together. At least not for me. I'm currently in the best relationship I've had and I don't take any drugs any more (including alcohol).
Yeah, you'd think so. I thought so. But I can't get myself to die. After death, there's nothing.

And I understand now why some people say it's terrifying. Between decades of suffering or eternity of nothing, what would you choose?

Don't half ass the answer, go on a bridge with a heavy backpack zip tied to yourself, put a loaded gun to your head or have a fistful of TCA pills in your hand, whatever, then answer it.

I don't want to live, but I ain't keen on dying either, to paraphrase Robbie Williams.

I really wouldn't mind being killed by something out of my control, though.
> If you expect everyone in your country to accurately produce a sound they've never heard, you're in for some disappointment.

It's Polish and we have all sorts of sounds, this and much worse. The atrocious story is that we even have an earlier Persian-sourced word "szach" which we pronounce sensibly as <<shakh>>. But at some point we've got a duplicate via English, pronounced <<sheik>> (written "szejk"). Ouch...
NICE ONE BRUVVA!
Why every second word in this article is "AirGradient"? Most important/expensive sensor is from Senseair, controller from Wemos, etc. I've made same monitoring solution using same components following some years old tutorial and have never heard about "AirGradient".
Without trust and network effect value doesn't exist and most of what you see as problems is a direct result of its success and popularity. With these new more relevant metrics of success in mind it becomes simple to see why it's undisputed for now. There's 1-2 competitors maybe but none with a track record of standing a chance over the long haul.
Exactly, and it's not even been this way for very long. There's a favourite anecdote where I come from about an old woman tending a rather isolated farm who was quite surprised when the police showed up in force and demanded to know more about her little weed field some time in the 60s or so.
When the politicians blatantly contradict the advice of medical professionals all you get is propaganda. Good luck fighting back.
This already happend in a lot of countries and has lead (together with Dr. Google) to an undermining of medical profession. I'm not saying that the doctors are all angels but, when you rely on politicians for medical advice, you get what you paid for.
> One of the big problems with existing power plants is that you have to build them near where people are.

I don't know how it works in the US, but this is notably not true in the UK and Europe. Gas plants are comparatively small and nestled in, but big coal (to a limited degree) and particularly fission plants are frequently in the middle of nowhere. They're somewhere near a village that can supply a workforce, but siting concerns for nukes were more based on making sure any criticality excitement could be shared with neighbours across whatever nearby border was handy than putting them anywhere near cities.
Thoroughly appreciated this article, thanks for posting it.

Another one that will delight fans of Poe:

Poe’s Best-Selling Book During His Lifetime Was a Guide to Seashells - https://www.atlasobscura.com/articles/edgar-allan-poe-seashe...

HN thread: https://news.ycombinator.com/item?id=27324511
> I grew up very religious and when I lost my faith in my 20s, I tried to replace it w/ absurdism and existentialism, but couldn't shake the notion that lives deep in me that ultimately, even if humanity spreads across the cosmos and we're able to find meaning in our own individual existences, the universe will inevitably suffer heat death, from which there is no eternalistic escape.

Seems that this view of human existence as something inherently temporary underpins a lot of nihilist thinking. However, there is a lot of scientific evidence in favor of eternalism (i.e. the philosophy of time, as opposed to presentism) if you only care to look.

For one, it seems to me you have to basically reject all of relativistic physics if you want to maintain a perspective on the universe where only the present moment exists. This is because the relativity of simultaneity tells us that there is no such thing as a universal present moment. How can only a single moment exist when there is no such thing as a single moment?

I think a lot of people who despair in nihilist thought would do a lot better if they simply updated their understanding of universe from being stuck in the 19th century.
Why are developers so vulnerable to drive-by attacks?
I always find it fascinating how HN dis-acknowledges the crypto movement. I admire both and wish they would go hand in hand
You can always extend Electron apps with platform-native capabilities.

Things like Neon [1], a wrapper for writing node bindings in Rust, make this particularly convenient. You can then use Rust to call into platform native APIs.

It's more work, but you can still benefit from cross platform UI development and augment it with native code where appropriate.

[1] https://github.com/neon-bindings/neon
AppleCare is such a non-issue here in Norway. We have five years of "reklamasjon" (think of it as kind of a mandatory warranty). I wonder how electronics would have been built if this was a global thing.
No one is forcing you to use it in that case. You can continue giving away your privacy to big corporations.

Meanwhile I'll not only keep my privacy but also make wild, wild money speculating on crypto assets. Win-win by all accounts.