skysight-inc/HackerNews huggingface dataset:
While I'm no expert, just a bit of Googling leads to suggestions that it's also the demographic showing a high (and therefore arguably much higher) incidence of heart inflammation after infection (e.g. from the American College of Cardiology recently):

https://www.acc.org/latest-in-cardiology/articles/2021/09/28...

Note while no deaths were found in the studies, the fact that these small studies are finding inflammation common suggests the effect is much larger than the (very unusual) cases being intensively surveilled in the case of inoculation. (I.e. you find what you're looking for...)
You probably noticed, but in case others didn't, if you click on the "Globe" icon in the upper right for the links I gave it gives a good sense of the Great Circle, and helps make it clear why it's actually an efficient route.
The “Usage” section in the readme doesn’t even give you any information about how it behaves on inputs that aren’t numbers. I hope the is-odd package has some way of detecting whether the input is a number or not. Maybe other packages need this too!

isEven(0);
//=> true
isEven('1');
//=> false
isEven(2);
//=> true
isEven('3');
//=> false
Peer to peer networking is still expensive because there aren't as many peers in it and it is not likely that data is cached at a peer close to you. This also reduces redundancy and availability.

There is nothing fundamentally stopping a peer to peer file system from having speed, redundancy, and availability, except that it doesn't have the economy of scale yet.

I think the fact that providers like Cloudflare are offering an IPFS gateway (in private beta) is an encouraging sign that we could soon reach the point where there are many more peers and providers caching IPFS at the edge, in distributed locations around the world: https://developers.cloudflare.com/distributed-web/ipfs-gatew...
Oh yeah! Forgot about that movie thanks
also interested in seeing pictures/diagrams of the setup
that is odd
I've simplified the rules I enforce because it was just getting out of hand. I enforce a reasonably long minimum length, and enforce a limit on number of repeated characters in a row (so someone can't set a password of "aaaaaaaaaaaaaaaa")

That's it.
If I ever have an interview where I can use this, I’m 100% doing it and I hope that people appreciate it as the social commentary that it is.
I think we're on the same page. That's kind of what I was saying about how you're essentially open sourcing the "read" on data.

Also, I'm not trying to sell the write side short! Owning writes is the major value proposition of a blockchain. I just feel like people conflate the two when talking about on chain ownership
> I wonder how many jobs they’ve applied to while bragging about their millions of monthly NPM downloads.

Do people really do this? Does this explain the dumpster fire ecosystem of NPM?
but this is an npm package, would a client side application be importing this code? surely at that point you could just include some Number polyfill as well (but you're right I was only thinking of node)
> It uses far less energy than the legacy banking system

False equivalence. It supports several orders of magnitude fewer transactions and throughput.

>When we finally phase out the legacy banking system completely for cryptocurrency

This will never happen.

>it will represent a drastic reduction in finance-related energy consumption worldwide

Assuming this hypothetical, prove it. Explain mathematically how proof of work supporting global finance levels of transactions would result in a net reduction in energy consumption.
You might be projecting. That read like the authors personal experience, one that you might reasonably suspect others have shared.
If you have a US bank account, and you've ever been asked by a different app to "link to" that account, you've almost certainly used a service that stores your username and password and plain in text and screen scrapes.

A common place to see this is apps that enable instant transfers, like paypal, venmo, and cash app. The main way they offer to link a bank account so that you can send money from that account involves a fake authorization screen that takes your password and stores it.

Scroll down to the "how it works" section on https://plaid.com/use-cases/personal-finances/ and you can see what this looks like.
Browser Tamer (Windows ImGui App)
NIST best practice recommendations state:

* Require more than 8 characters

* Don't require special characters

* Don't force the user to reset their password

* Do check for compromised passwords

* Require MFA

* ...

All very sensible.

https://auth0.com/blog/dont-pass-on-the-new-nist-password-gu...
Everyone Can Be a Developer
“who's to judge which of us is objectively right?”

History, hiring committees, the general public, artists assessment of their own work, artists assessments of other peoples work, common sense, to name a few. Obviously I have come to my own conclusion on the matter. My interest is in why others can’t see what to me seems self evident. I too used to not understand, to think it’s all subjective, that there is no there there. But I hadn’t thought about it deeply enough. It seems some are confused because of books they’ve read or ideas put forth by thinkers they’ve found persuasive. I guess I would need to read all of those the same books to understand their position, but what’s the point if I know they are wrong? When alchemy was a thing I might need to read enormously to understand the full scope of the beliefs of those practitioners. A waste of time frankly.

I like to engage who have less invested in their own mistaken conclusion about art, because many people are like me or Paul, ready to be turned around if prompted to really think about it more deeply. Those people may find, as I have, that art becomes much more meaningful and enriching when you believe there’s something to it. To believe it’s all subjective is a great insult to the professionals and artists who devote themselves to it. It robs the person who possessed those beliefs of the opportunity to fully appreciate art. I know this from personal experience. I’ll leave it at that. A long way of saying I agreed with the essay.
I read this, and I still don’t know what this means.

> Rather than exiting to an acquisition or IPO, we want to transfer ownership to our community. We will be working to make that a reality.

So… the shareholders make a private sale?

There’s a lot of fancy talk, but it sounds like they can’t find a buyer, and are trying a Hail Mary whiles giving some “we deeply care about the mission and the people” clap trap.
ENS is only on Ethereum which that is not only expensive to purchase and renew the domain (due to gas fees) but with the way ENS is designed, you don't truly 'own' the domain as the keyholders are the ones that have access to the .eth TLD.

So basically it is more like a 'centralised' domain service with 'Ethereum blockchain' branding similar to GoDaddy, rather than 'a distributed blockchain version of DNS'.

The idea is interesting but the execution is not quite as advertised. Especially on a blockchain that is unable to scale.
What's insane to me is how much certain plants will grow in tap water with zero regard for their nutritional requirements. I frequently propagate houseplants by putting cuttings in a glass of water and sometimes I get lazy and don't re-pot them for weeks or even months. And they will often grow very well - shooting out tons of roots but also additional leaves and stems.
At this rate, I wouldn't be surprised if some one ported doom to their electric toothbrush.
Roughly 46% of all Americans expect to retire in debt
The real story here is not about the code.

When it's your own personal project and you can be your own little tyrant, do whatever you want. Be as "clean" as you need to be. But this was at work, and Dan was being a bad coworker.

He snuck in a change in the middle of the night over a coworker's code. This code wasn't his responsibility. He didn't leave his thoughts on a PR where others could discuss it. He overwrote someone else's code without asking. There was no opportunity for discussion or collaboration. Dan's actions said he's right and his coworker is wrong. They said he doesn't trust his coworkers. They said he knows best. They said if you want something done right around here you have to do it yourself. Dan was not being a team player. This story is less about code and more about team dynamics.

I hope Dan knows this and he was just trying to sneak the message past people who don't take social cues as easily as others. I hope his boss didn't just tell him to revert his change. I hope his boss told him why.

EDIT: I just reread the article and I think Dan missed the point. This wasn't about the code, as I said. But Dan really does seem to think it's about the code.
> But it only takes a few packages like these to explode the size of the dependency tree.

and create another future opportunity for a supply chain attack
Well... you're right. But humans have a tendency to become zealots. They (we) take a good thing, and make it The One True Thing(TM). It happens with many people with many different things. It seems to just be human nature.

So it may be good to remind ourselves "Hey, this is just a thing. Use it when it makes sense, and don't overdo it."
Will glow-in-the-dark materials someday light our cities?
So, for a bank the maximum is to allow NSA to crack it if they wish, right?
Sure and sounds like you live close or live in a city. I'm 35 miles north of Baltimore right over the MD/PA line (closest to York PA) and work from home. I enjoy frequent road trips to New England and to the Mid-West so I would add those who are similar roadtrippers who just want to get out and go without thought nor have to wait 15 to possibly 60 minutes to charge the car EVs aren't ready for them either.
Web 3.0 was about RDF, RSS/Atom feeds, microformats, and document semantics.

This crypto business is web 4.0. Don't trample on all of the things we learned.
that sounds great - thanks for the quick reply looking forward to it
The study mentions this on page 14, I'd paste a quote but the highlighting is wonky.
Show HN: A container registry vulnerability scanner based around image layers
There are many children where you have a choice:

* Subsidize them with 15 years of child care for a relatively small amount now, and they will become productive members of society.

* Do nothing now, and in 15 years be forced to subsidize them via crime, the justice system, and outreach programs for the remainder of their life.
Wait, you'd be more comfortable working with someone who got arrested for publicly fighting?
Thank you, this is super helpful -- I didn't look close enough to spot that myself. :)
https://www.youtube.com/watch?v=NykZ-ZSKkxM
> This is as ridiculous as stating that bitcoin won't replace gold because dental fillings are made of gold.

But, that's not ridiculous at all.

The point they're making is that gold is a raw material that can be simply dug up out of the ground, and then processed to be more useful for us in all sorts of ways. Bitcoin on the other hand, requires gold to even exist in the first place.

The idea that bitcoin is going to replace gold - that is the ridiculous idea.
> Several years ago I switched careers from sales, marketing and consulting[1]

The author's bio on his GitHub profile explains it: he's approaching development with a mindset of sales and marketing. It's also followed by his GitHub stats front and center.

[1] https://github.com/jonschlinkert
I don't think the point stands because of the differences, though. Ukraine's "insurgency" is not really an insurgency, it's an invasion. You can make an argument that a lot of insurgencies are supported from the outside, but a) you can't say that about Chechnya, and b) the one in Donbass wasn't just supported from the outside, it was initiated, armed, financed, manned from one outside country. So on a kind of insurgency gradient where on one side you have people rising up against central government for grievances real or imagined, and on the other side a pure invasion by another country with a very thin veneer of "insurgency" just to cover things up, Chechnya and Donbass are on the opposite ends, and places like Iraq and Afghanistan somewhere in the shadier middle (e.g. Iran's support for Shia militias in Iraq, Pakistan's support for the Taliban).

Insurgencies happen. Civil wars happen. Although intervention in them is often driven by geopolitical interests, it's hard for countries in the free world to justify doing so without other rationales, e.g. terrorism, genocide, etc. No such problem exists for countries like Russia, run by authoritarian imperialists. They intervene early and often, and also create fake 'insurgencies' to invade without committing.
submarine?
I only see buzzwords and hype in the post. Nothing technical, nothing much about why would make a good business sense to use their offering.
The term has frequently featured in Ethereum docs for quite a few years now.

Not sure if that's where it originated from, but that's where I first came across it.
Now this is what I come to HN for. A true hack in the classic sense of the term. An absurd attempt to do something with technology that its designers had absolutely no intention of supporting, and learning quite a bit about it in the process. Bravo!
Yeah no, the Turkish Lira is no longer useful.

"The Turkish lira hit its weakest ever level against the US dollar on August 7, trading at 7.36 at one point, having lost nearly 20% of its value since the beginning of the year....The lira has been on life support for the past two years and the economy has continually struggled."

https://theconversation.com/turkeys-collapsing-lira-governme...
Ah, the infamous npm spammer jonschlinkert. This guy has even crazier packages like https://www.npmjs.com/package/ansi-red and I quote:

Related projects
----------------
ansi-reset
ansi-bold
ansi-dim
ansi-italic
ansi-underline
ansi-inverse
ansi-hidden
ansi-strikethrough
ansi-black
ansi-red
ansi-green
ansi-yellow
ansi-blue
ansi-magenta
ansi-cyan
ansi-white
ansi-gray
ansi-grey
ansi-bgblack
ansi-bgred
ansi-bggreen
ansi-bgyellow
ansi-bgblue
ansi-bgmagenta
ansi-bgcyan
ansi-bgwhite

That fucking ansi-red "package" has 1.3M weekly downloads.

I have to actually check to make sure he doesn't have packages like regexp-left-parenthesis, regexp-dot, etc.
isNotArray is not a ray of sunshine.
With rent, it's a guaranteed loss, with a mortgage on a property there's a high possibility of a return of investment, in addition to a return on investment.
> Please no, this is how you end up with 20 different experiments and zero consistency in everything.

This comes from a lack of discipline in the org, not from the parent's (IMO) correct guidance that an org should undertake architectural changes with pilots in isolated parts of the code base.
Hi Hacker News!

Last week I wrote a blog post (https://blog.atomist.com/comparing-docker-base-image-layers-...) telling the story of how a container scanning feature came together and started to show us some interesting data about our vulnerabilities. We've just pushed it live (into Beta!) and I'd love to hear some feedback from people able to test it out by scanning of their container registry.

You need a GitHub account to sign in and we support Docker Hub, Elastic Container Registry, Google Container Registry and Github Container Registry.

Let me know if you have any comments or suggestions. We've had loads of fun exploring our vulnerability data and managed to patch up some issues!

I'm an engineer working at Atomist and a very long time HN reader, if a bit of a lurker!
> While undeniably true, this feels completely orthogonal to the question of clean code.

I think this mentality and the Clean Code Movement (with capital Cs) actually have a lot in common.

Much of the Clean Code movement is occupied with the idea that there is one, single, right way of doing things. Anyone who does things differently is doing things the wrong way.

There is a subset of programmers who are attracted to these movements because it can feel like a free license to feel superior to your peers. Once you understand all of the rules and intricacies of the Clean Code Movement, it can feel like a free pass to push the Clean Code rules on to others and the codebase. No need for code review or consultation, because you've already decided that the Clean Code Way is the right way and therefore there isn't anything to discuss.
I find that the digitalised approach makes it much easier to document and reference exchanges.

France traditionally required a letter (un petit courrier), you got weeks later a paper response and so on. If you did not get a response, your letter may have been "lost" (where, it is a mystery).

At least now with the integrated messaging system on some govt platforms you have a trace.

What we are missing is integration. Each entity has their own system, with their own messages. We have a common login system at last (France Connect) but it is not a unified identity system (just a way to use one of the 5 or 6 "official" systems to connect to a new application).

Then you have the problem of answers: you send an email, and receive a letter. To which you cannot reply back.

When I look at countries such as Estonia or Poland, I envy their digital approach. Poland for instance has an app that will download all your key information: id card, driving license, the car papers, your visits to the doctor, the drugs prescriptions, the medical results - everything. Of course, if this is hacked it is a problem but I would like to have at t least the possibility. In France I have to have a huge pile of papers for everything.
In my experience, updates have been completely painless to the point that at first you hardly notice you updated at all.
Really glad to see you guys launching out of beta! I remember trying Budibase a while ago, one thing I notice you didn't mention was an Oracle database integration, is this something that might happen any time soon?
Bottoms of green onions to me are the weirdest. You can get multiple cuttings just from water.
Russia blows up satellite, NASA boss 'outraged' as ISS crew shelters from debris
One of the most important thing people overlook is network effects. By being around longer those chains have built those networks, so even if you have something better, it'll have a huge uphill battle for adoption.

For same reasons that many startups tried to compete with craigslist for years and failed because they didn't account for network effects.
I did it.

https://www.npmjs.com/package/is-even-cyclic has a cyclic dependency with https://www.npmjs.com/package/is-odd-cyclic.
Just like how in the "web 2.0" days there were a lot of "thought leaders" pushing their ideas, brands, and courses
Ask HN: Why should I create QR code of this page?
a recent "feature" update of google chrome has a "create QR code of this page" button on its search box (address bar).

does anyone actually need/use this?
This is very close to part of current NIST* / NCSC guidelines. I assume you mean no frequent /forced/ reset?

* https://pages.nist.gov/800-63-3/sp800-63b.html#memsecret
What a ridiculous article. Is there a name for this? Dressing up obviously biased partisan opinion as “Science”.
> They did not plan to invade Ukraine, they planned to provide the conditions for fair voting in Crimea and they did that, which allowed for Crimea to join Russian Federation.

What is this brazen propaganda of Russian militarism doing on hn?!
DAO just means decentralised organisation. Like token, also a very generic term, it can come in many forms. There is nothing inherent about a DAO that even includes tokens, let alone tokens that are fungible or even acquirable.
There's a pattern in UK govt. websites that pisses me off: multi-page forms with one page per field.

What is your biological sex?

Male []
Female []
Other []

[Continue]
After struggling to comprehend JS import and modules as much as I did as a single dev, I concluded that it’s my fault - that there’s something wrong with me.

I had to read the MDN guides multiple times and still need to refer to them.

Setting the build system part for my new projects is still the most challenging task.

Why do I have to learn how to build a grand piano every time I want to play a simple melody?

require ‘thing’ in Ruby requires the thing and that’s it.

require in JS should be use i. Node but not in the browser if I remember? Or maybe not? I don’t know, I guess I’ll just try things y til it works.
Yes agreed, Agriculture is very data-reliant nowadays, hadn't thought of that.
Powerful Terminal and Command-Line (CLI) Tools for Modern Web Development
I've reached the point where if I see "substack.com" in the URL I'll automatically assume it's propaganda bullshit. Can't imagine that was their goal when they launched it, but sadly that's where they've ended up.
No idea! If Ethereum can get those kinds of transaction times and fees that'll be awesome and a big step forward for everyone though. If all I get from learning Solana is an excuse to learn Rust then that's a win in my book!
I think paper titles should be as thoroughly reviewed as their content. This goes for almost all psychology papers. Researchers should not generalize their results haphazardly.

In this particular case, they have only looked at two particular video games. And yet they claim that video game play is correlated with well-being.

I know that the title is technically correct but if you always have to resort to such cheap tactics to make your research seem relevant then the entire field should be put into question.

There is no way you'd find a paper in CS titled "An optimal solution to the Traveling Salesman Problem" when the paper has only solved a constrained, limited version of the problem.
Parkinson's Law is real
Mention of Fourier transforms over fields other than the complex numbers brought this up to mind: https://en.wikipedia.org/wiki/Sch%C3%B6nhage%E2%80%93Strasse...

TL;DR: It's a way to multiply n-digit integers in time O(n log n * log log n) time, developed in the early 70s, using DFTs in the ring Z mod 2^k + 1, with a slightly clever choice of k. Since the runtime was so tantalizingly close to O(n log n), it fueled speculation that O(n log n) was the optimal runtime. This bound was finally proven in 2019: https://hal.archives-ouvertes.fr/hal-02070778v2
Sure, they already make those ("radio" headphones); they sell them in pairs with 900MHz transmitters, for — among other things — people who are hard-of-hearing to better hear their (old, non-Bluetooth-enabled) TVs.

But I'm pretty sure what you're really trying to mentally re-engineer here is one of these: https://en-ca.sennheiser.com/stage-monitoring-headphones-hea...

Ever wondered what's in the rack on rear center stage of a concert? One of these, so the performers can all hear the mix over their own instrument/the crowd without tripping all over cables.

(More recently, they're two-way, meaning that the e.g. electric guitar you hear is passing through a chain of: headphone pre-amp, wireless transmitter, wireless receiver, mixing board, amp. Effects pedals? These days, they're wireless MIDI controllers that signal to a DAW plugged into the mixing board!)
This is true! But it's also hard to think of a situation in which you would need to store that encrypted data on chain. Why not store it on a central server? Or, encrypted on a p2p network? And if order of events is important, you could just store a hash of the data on chain.
1 photo of actual aircraft in the article taken from Wikipedia
Could this be from the Covid layoff? That is, if you don't play for a year, and then you start back up and try to play at that level, you might be more likely to have a cardiac failure.

I'm asking, because I don't know. Did FIFA lay off for a while due to Covid? If so, how long?