skysight-inc/HackerNews huggingface dataset:
Except that using a build number in the way you're describing is just a worse semantic version. You now have no way to indicate if your changes are breaking. Separation of your pipelines also just got a lot more hectic because you could have a situation where you don't know what happened when you're missing "versions" (builds) because it's failing but still incrementing... Using build numbers for versioning doesn't really work in a large ecosystem and often relies on picking the latest of a branch or having to sift through builds when deploying to find the right one.
Why not just treat it at home with ivermectin if it works? It did for me for long covid.
Where in South Carolina are you?
How do you overcome upset stomach? If I don't eat for half a day my stomach starts to hurt.
Teafuljs/teaful: Tiny, easy and powerful React state management
You ascribe far more rationality to the process of developing drugs than is actually applied.

Pharma mostly avoids low-profit avenues, but at least partly because that would be a good way to go out of business. However, to suggest that they intentionally suppress researchers with the goal of reducing costs seems a bit far-fetched.
No, we're a contracted provider for these customers. They ingest their data into our network through APIs or CSVs.
If you're running software maintained by someone else and you don't let them do that, and there's a security or major bug fix and you lose business or esteem of peers -- it's YOUR fault.

Ignoring upstream security fixes on a work-related machine that you use to make $$, is ASKING FOR IT. WHEN it breaks something that is your fault for being so stupid.

Neither of these extremisms are helpful. It's clearly more nuanced than any of this.
Any guesses about how effective this compound will be and to what percentage of patients?
If I remember correctly, it’s not Covid that kills you directly , but a runaway immune response. What was the name… Cytokine storm?
My comment doesn't make much sense now that the title has changed :(
In the case of ORCA a bang is an activation

So a clock periodically emits a bang that can be used to trigger the synth for a simple example.
Well, apparently Kansas is passing the buck to other places: https://news.ycombinator.com/reply?id=29119688&goto=item%3Fi...
They dont need to ask for consent for legitimate interest, that is why they are opt-out (default on) as opposed to the consents which are opt in (default off)
We rock a Breville toaster, as well as a Breville toaster oven. They both perform really well, plus we like their customer service -- at one point, we had a problem with the toaster. We called their customer service line, they sent us a brand new one, and asked us to send the old one back in the same box. Few questions asked, postage paid both ways, no charge!

A little pricier than some brands, but well worth it in our opinion.
I was tangentially involved in a major healthcare medical error lawsuit.

The physicians being called as expert witnesses had fee schedules that were in the range of $2,000 an hour for testimony, $1,200 an hour for document review.
All these quoted studies were under-powered or administered far too late and low dose and many only gave 3 does of ivermectin. It does work if you have a higher dose at .6 mg/kg, take it fairly early and as recommended by the NIH.
If you can install Linux on your device you won't have any of the problems he is talking about. He's talking about microcontroller GUIs.

Honestly running a node.js website with a Redis cache and a Python script for an embedded GUI sounds like a completely insane and fragile mess!

Qt or Flutter are clearly the best options for embedded touchscreen devices where you can run Linux.
There’s something to be said for being on the oldest minor version that still receives patch releases (usually the LTS if there is such a thing). Unfortunately most FOSS libraries don’t have the luxury/resources to support parallel releases. So to get security fixes you need to keep somewhat up to date with other changes.

The worst place to be is having to fix a CVE in a hurry, but first having to upgrade your framework a few major versions including fixing some breaking API changes. I’d rather pay a small tax every month than have to risk those late nights.

Dependabot is great here, you can get updates for free, or at least preview if they are going to pass all your tests.
> It is probably a reference to the AUR, but its use is not as common as some people seem to think and is somewhat discouraged

Arch proper has like 60% the package count of openSUSE, fewer than 1/2 as many packages as Fedora, fewer than 1/3 as many packages as Debian, and fewer than 1/6 as many packages as NixOS.[1]

Maybe some of this is Arch having larger packages (splitting fewer of them out), but whatever fudge factor you wanna add in, the Arch repos are extraordinarily small. You have to get into really niche shit like Solus or Exherbo to find a distro with a smaller software selection than the Arch repositories.

The idea that Arch is as usable as most Linux distros without leveraging the AUR is ridiculous.

—

1: https://repology.org/repositories/statistics/total
SDLC Models vs Software Development Methodologies, Which Is What
Based on the photos I can find of BSL-3 suits, I highly doubt that others on the street or in stores would let them "get on with their lives" :-))
For me that's argument against glorifying past of your nation (because every state was built on violence and conquest) rather than pro-annexing territories.

Humans genocided other people for tens thousands of years. That's not a good reason to morally justify genocide today.
> Credit cards offer consumers the widest fraud protection

That's for consumers, but what protection do I get on my company credit card?
I'm happy where I live now. Bangi, Malaysia. Great food, and it's cheap enough to eat at a restaurant every day. Everything from the humble fried rice to wagyu steak.

It's next to Putrajaya which has some amazing parks, whether it's skate parks or just picnic spots. Weather is great. Lots of beautiful people. About half an hour's drive from a cinema or major mall, but that's not too bad.
> Looks great design wise, but I still see some dark patterns like making the accept button green, and decline grey

Since all the other consent forms are like this it makes sense to not change the established standard. I would for sure misclick, since I've by now gotten this dark pattern ingrained (I automatically go for the grey button).
It is not a joke, just a very frustrated (clickbaity) hyperbole rant.

"My premise is that updates are a massive waste of time, most of the time. Obviously, someone will jump out and say that "Hey, if you don't update, your Windows XP installation will get added to a botnet in less than a week," and they'll also be right at the same time. "

So my understanding is, when compared to a academical, idealistic point of view, handling of updates is not optimal. Sure thing.

But in reality, you still must patch your WinXP system if you have no better alternative and the author likely agrees. And if you do have a shitty legacy java project that is still needed in production - you still have to patch it, if you have to use it in the wild.
The issue has been investigated over and over, and nobody found any actual evidence thereof. Iran would have had all motivation to threaten to expose Reagan - yet US policy remained mostly pro-Iraq.

When push comes to shove, you have a few unimportant Americans which consider any publication to be evidence, and Banisadr, which was an loony exile by that time (actually he was more than a bit loony beforehand).

I also recall the hearings were far more incensed with the idea of funding the Contras (ignoring the Congressional ban) than with Iran arms which was considered merely a cynical play to serve US interests.

e.g. the Chase Bank memoir, despite the publication being if anything an argument against, since the Reagan campaign wouldn't have to spread rumors if they had a deal.
> Assume (1) A -> B, (2) A is sometimes true, and (3) B is sometimes false. Then isn't it provably true that P(A | B) > P(B)?

No, this is not true. Consider a population of 200 people, with 20 in group AB, 0 in group A, 80 in group B, and 100 in group Nil.

We see that A -> B, since group A has 0 members.

We see that A is sometimes true, since group AB has 20 members.

We see that B is sometimes false, since group Nil has 100 members.

P(A | B) = 20 / (20 + 80) = 0.2

P(B) = (20 + 80) / (20 + 80 + 0 + 100) = 0.5
Disclosure: I work for AWS, but I am not paid by AWS to comment on HN on Free Software matters, on which I have my own personal opinions.

SSPLv1 is not a free software license. It is constructed to have unsatisfiable obligations that, in practice, restrict how the program can be used for completely legitimate, legal, and ethical purposes. Because the obligations cannot be satisfied, the license restricts the freedom of the user, thus software licensed with SSPLv1 is not Free Software.

See also the blog post from Bradley M. Kuhn, one of the main Free Software organizers who led the work to draft the Affero GPL and AGPLv3 licenses. [1]

Additional disclosure: I (personally) am a Software Freedom Conservancy Sustainer [2]. Consider donating if believe in fighting for digital rights, including rights to repair and improve software.

[1] https://sfconservancy.org/blog/2020/jan/06/copyleft-equality...

[2] https://sfconservancy.org/sponsors/
And that's why many old banks still use COBOL.
Sandoz's original explorations into LSD were medically focused and it was marketed (and distributed for free in high purity) for psychiatric indications, but after it grew in popularity an illicit drug, all pharma got out of the business of working with highly psychoactive compounds for decades because of the negative press assocations.
Could we maybe work on better default settings and Microsoft Office compatibility first?
Even if you ignore the keyboard and the ports, the M1 has significantly worse battery.

The M1 13" has 58Wh, the M1 14" has 70Wh. And while the M1 does use less power in idle, under load it's just as power hungry as all the other processors, so for serious usage the battery would become a bottleneck.

The aforementioned thinkpad can get 95Wh, and you can swap batteries if you carry a spare. That's 170Wh of power in just 1.6kg. You can get a LOT of mileage out of that.

Now imagine an updated T470 with a more power efficient processor, e.g. a recent ryzen or an M1. Such a hypothetical device would last you forever, even if your system is at full load.
How is it these politicians continue to get voted in if the majority is against their policies?
Auto-updates are an attacker's dream too.

Also, this disclaimer in the very first sentence of the article:

> "Here's a fair warning: this article is reductio ad absurdum"
The LD50 for Ivermectin is 10mg/kg. The standard dosage range is .1-.5mg/kg. (from memory... YMMV)

So, you would have to guzzle 20 times the recommended dosage of a foul-tasting elixir to get near a lethal dose. It sticks around in your system for ~4days, so there could be a cumulative effect if you guzzle enough over a few day period.

But still, much less dangerous as Tylenol (toxic at 10g dose; typical therapeutic dose on the order of 1g):

Paracetamol poisoning was first described in the 1960s.[6] Rates of poisoning vary significantly between regions of the world.[8] In the United States more than 100,000 cases occur a year.[1] In the United Kingdom it is the medication responsible for the greatest number of overdoses.[7] Young children are most commonly affected.[1] In the United States and the United Kingdom, paracetamol is the most common cause of acute liver failure.[9][1]

And furthermore, since Ivermectin is a potent antiparasitic, many people are likely to experience Jarisch–Herxheimer reaction to the death of intestinal parasites, which indicates its working, not dangerous. So, take is slow if you also have parasites.

But, by all means, carry on believing what you're told to! ;)
My point was at a hardware cost it may save you software development cost by adding a Linux machine to an otherwise embedded platform
All great points, thanks. It would definitely reduce the surface area for attacks. In practice, it may just change which kinds of packages are targeted (packages in the build-time dependency tree instead of runtime), but it would still be a win.

Ultimately, I still think we need real sandboxing built in to the runtime to really solve this problem. Is there something inherent to node's architecture that would make this impossible or is it just a ton of work? Could Chrome's sandbox and CSP implementation be piggy-backed on perhaps? Deno takes some steps in this direction but they stopped well short of what's really needed.
Edit: I apologize. They didn't deserve that. I'm having a bad day

Hey guy, how's it feel to be a piece of shit?

Imagining working your ass off on something, making incredible progress, and reading some asshole in the internet with psychic powers tell you "this will push out like the rest", even though it's literally nothing like the rest

Nothing you said was true, side from that remakes have had issues in the past. You're talking completely out of your ass.

Being negative know it all and trying to drag people down.

"You will" go fuck yourself.
If you could dig up sources on studies I'd greatly appreciate it. I never pursued psychology to the end after getting a bachelors in it, but mental health is still I cause I care about and would like to see improvements.
I wouldn't sell my diarrhea for $10 (OK, I would if anyone said they would buy it).

For something that can't be proven to exist or not, but with a high perceived value (based on all the religious bullshit and movies), I wouldn't even try to sell my soul for less than five figures.
Building stuff from source
Not from the US, my country already has a multiple party system.
Should I teach that 1 kB = 1024 bytes or 1000 bytes?
Busting the myth of cushioned handlebar tape
I’m not saying there isn’t value - there is. I’m saying it’s unlikely to become as mainstream as a phone, Facebook, instagram, WhatsApp, etc.
Has anyone heard Chattanooga TN is cool?
During WW2 the US managed to mass produce about as much fighter planes as it needed.

It couldn't mass produce fighter pilots, though.
Having been involved in the discussions, maybe I can give a bit of an inside view here: When we got the suggestion to involve Igalia into building the TM6, it was on the one hand because of their proven expertise in webkit dev but on the otherhand also because they walk-the-talk on the OSS mindset - which is something our team values very much. We saw this as a chance
a) to have a higher chance of including changes into the upstream that would benefit our products and
b) to give back to opensource projects which our products benefit from for many years.

And yes of course we did consider that this might attract more like-minded fellows who are eager to build great products with great colleagues than our „corporate job advertisement“ ^^
Having two servers with an unpatched CVE 10/10 vuln will get both pwned in short to no time.

Or just one, exposing your data in a ransom attack.

Dependency and update management is hard. Welcome to IT.

From my experience, extreme viewpoints and religions are convenient in the way they have answers to all hard questions in life that are simple, clear and wrong.

If you like simple and correct answers, you're usually better off choosing simple questions instead.
Looks like a neat idea. How is it powered?
I have pretty high pain tolerance, but I can't handle eye injuries. I had a scratch on my cornea back in high school and I still remember how there was no ignoring it and nothing that alleviated the pain. Got a corneal ulcer a few months ago from the fancy 24/7 contacts the optometrist sold me. It wasn't near as bad as I remember the scratch being, but I definitely called into work and hid under the covers for a full day.
We are on the cusp of a new Enlightenment post the nightmare of prohibition. MDMA, Ketamine, Psilocybin, LSD are now all available easily, the middle two in good quality to normal people.

I love it. A couple of my friends take this stuff for the mood uplift. Personally, microdosing has never done the trick for me, but a solid 2.5 mg plus is a solid trip that just pushes me into the motivation zone so hard. I usually avoid it because of the length of the trip but hell is it awesome.

Occasionally I leave the Bay Area and am astounded by the degree to which other people like to have Big Government dictate their personal lives. Texas, for instance, blew my mind. It was like taking three steps back from progress. There are trade offs, I know, but for me, my personal individual freedom is paramount.

I love America’s federal system. I wish more power would be devolved to the states.
Its much more possible with a vaccine that reduces the severity of the disease and permits people to still be out and about, perhaps even unaware they might be infectious. If it puts you on your ass or worse, you aren't out spreading it.
You're going to need to explain how scraping publicly available information on a website is theft.

If information is your competitive advantage maybe you shouldn't have it on a publicly accessible website, and should instead stick it behind an API with pay tiers and a very clear license regarding what you may do with it as an end user.

Note, a simple sign up being required to view a website makes it not publicly available information any longer and you can cover usage, again, in a license.

Then you have a whole bunch of legal avenues you can use to protect your work. Assuming you can afford it that is.
I had to ask. I thought maybe I missed a whole world of blocky letters!
I hear you and your argument sounds rational. I wonder what do you think about receiving it for the sake of potentially vulnerable people around you. Just to reduce the likelihood of spreading it to someone who, unlike you, might be in real danger.

I personally didn’t mind the side effects, but mainly got it because I thought: What if I get Covid and give it to someone and something happens to them? And then I thought that it still worths the risk.

Of course no one should blame you if you want to care for yourself but I’m interested to know your feelings on this.
100% is extreme, but I agree that if we're guessing, it will be a high net positive effect to the majority of users.
Huh? 0.06% and 0.08% are 2 orders of magnitude different?
I've got some sympathy for this perspective.

It's frustrating when you update in order to get the latest security updates - and you get forced to do a bunch of pointless busywork because some asshole has made some arbitrary change like deciding that 'which' is deprecated now.
So, you don't want to review the 128 independent studies, 89 peer-reviewed -- you want me to find you more neutral sources?

You're on your own, buddy! :)
This is a placebo-controlled trial. The statistical comparison shown (85% fewer hospitalizations & deaths in the treatment group) already takes into account the non-hospitalized cases in the control group.
Do what my Tandy 1000 did, and burn DOS 3.3 right to ROM. None of this wimpy flash-but-with-a-read-only-bit, no fancy UV-erasable EEPROM...just honest-to-goodness-blown-fuse ROM.

Boots immediately too.
Yes, it works very similarly in the US.

You have your gross salary - let's say, 100k.

From that, before taxes, is deducted the employee health insurance premiums (may be $0 to ~10k), employee retirement contributions (up to 19k), perhaps health savings account contributions (up to 7k), and possibly some others. Obviously, these can be quite substantial! But, at least, some of them are "optional" in that you are, for example, free to underfund your 401(k).

After that, federal and state income taxes are taken out, and a special tax for Medicare and Social Security.

Many of these are impacted by the vagaries of each employer. If you know your pre-tax income, you can easily calculate your taxes. But figuring out what your pre-tax income will be is not something you can figure out from the headline gross number. The biggest factor is the employer health insurance plans and your expected premium contribution - getting this out of an employer before being hired is like pulling teeth.

Although HSA and 401(k) contributions are elective, so you'd think you could determine that ahead of time...well, if the employer doesn't have a HDHP, then you don't get an HSA at all. Conversely, if they do, the amount of the deductible and the amount of the possible employer contribution (which counts toward the maximum allowable contribution by the IRS) factor into how much you expect to come out of your pay check. This is also tough info to get out ahead of time. 401(k) contributions fall into a similar but less severe problem - there's often an employer contribution, but it counts toward the allowed maximum, so you cannot determine from your gross salary alone how much you will be contributing toward your 401(k), even if you know ahead of time the dollar amount you want to contribute. Employers are often a little better about telling you their 401(k) contribution benefits ahead of hiring, though.
Of course it is. Context matters. I was trying to keep with the spirit of the article: 'Here's a fair warning: this article is reductio ad absurdum, therefore you shouldn't take it as gospel. ' Usually though in my experience, if you also control the network, then most security updates can wait to be tested on a non-production machine. Also it helps to Never ever use Windows.
I love Chicago, but where are you finding cheap housing? Genuinely interested what areas.
When presented in a clear manner with Accept/Decline, the absolute vast majority of users will click decline.

So the leeches at IAB, OneTrust and everyone else employ a variety of dark patterns to make the user just click "Accept".
I “hacked” tickets worth € 30.000 at the Websummit for a good cause
It boggles my mind that languages and package managers do not support ACLs for libraries.

leftpad has no need of install scripts, nor `eval`, reflection, or access to my disk or the network. nor should it be allowed to gain them in the future, at least without a million alarm bells ringing and explicit approval.

ACLs would allow establishing "moats" of dramatically-more-difficult-to-attack libraries, and encourage libraries to voluntarily reduce their attackable surface to make them more likely to be approved. Instead we have this.
My understanding is that girls are more likely to attempt suicide, while boys are more likely to die from suicide.

As a sibling comment mentions, a big factor in this is differences in how the groups go about in their respective attempts.

I am also not aware, however, of statistics on long term effects of survived attempts of suicide.
In general, of course. However, the article describes the ridiculousness of today's update mania. And there are actually systems that I don't update very often (my OpenBSD-based firewall) without losing any sleep over it. Unfortunately, such systems are very few in the real world.
Most processes that fork know that they are going to fork. Therefore they can pre-fork very early, so as to commit the memory when they only have a bare minimum allocated. Your typical daemon does this anyway.

Some other type of process like an interpreter that can subshell out doesn't know how big the allocation is going to get, would have to pre-fork early on.

In this way, you wouldn't "need" overcommit and the Linux horror of OOM. Well, perhaps you don't need it so badly. Programs that use sparse arrays without mmap() probably need overcommit or lots of swap.