skysight-inc/HackerNews huggingface dataset:
The core issue with data privacy is the enforcement mechanism. Yes, there are huge demands for limits on the business world's use of private data.

But at the end of the day, any company that has your name/address/credit card number because you bought something from them is going to know. A lot. It's unlikely that any data inside said company isn't going to be de facto visible to them for whatever purposes that company so desires.

I find the effort to try to stop the inflow of data to these second parties Sisyphean. It's also ironic that it directly contrasts to the new widespread regime permeating all of financial services, "know your customer."

What would be far more effective, and helpful for ensuring user privacy however, are restrictions on transferring that data between second parties, and third parties. Legally binding "no transferring user/customer data to third parties, ever," restrictions would so easy.

Simple, enforceable (because the very fact it ends up in a third party creates a paper trail) and a huge improvement.

Take HIPAA and apply it to all data.

Most of the problems in this space don't come from the company who originally collected the data misbehaving. They come from that data being passed through third parties like a game of pass the parcel.

Re recommendation algorithms, the rules should be very simple. All publicly deployed recommendation algorithms should be public knowledge.

Recommendation algorithms hold far too much power and influence in our society to remain as secretive corporate IP.
if you live in tornado alley you ought to have an emergency radio, it at least gives you something to listen to while the power’s out

https://www.amazon.com/Raynic-Emergency-Portable-Flashlight-...
Many play-by-post RPGs are more focused on developing a shared narrative than in game mechanics, so they become precisely that: pretend play with few restrictions. These were popular as internet forums about 10 years ago (I think people now play these on Discord) and I met a few players over 30 back then.
Log4j taking user input to run and execute code is crazy. You don’t think it “sits well”?
Could you explain why you wanted to avoid the term (excuse the pun :) ) "type" so much?
Does the Chrome DevTools team use Google's big monorepo and all the tooling around it? If so, that puts the author in a different situation than the vast majority of devs.
RTFA.

It says, quite succinctly:

> I currently work at Google on the Chrome DevTools team and we check our node_modules folder into source control
>The fall of TV means that in a situation like that, there isn't any "tune to your local TV station" type broadcast. All you get is a tornado siren.

You didn't get a phone alert about it happening? I thought those were mandatory for these kinds of events, I think they even overrule some of the DND rules on your phone.

I had something similar happen this summer, and I can't remember if I woke up from the alert and went back to sleep or woke up to a missed alert, but I definitely got more information on my phone without ever asking for it.
So many vendors (I work with a lot of COTS software-- not in-house-developed) have absolutely no idea what their communication dependencies are (client-to-server, server-to-server, etc). I've ended up being the first sysadmin to ask more times than I'd like to count.

I, like the grandparent poster suggested, prefer to put applications where the developer demands carte blanche access to the Internet via TCP port 443 behind a MiTM proxy and whitelist domains. (I don't do as much to stop DNS-based exfiltration as I should be doing, though. It's probably a good time to revisit that using this vulnerability as a practical justification.)
The magnificent three: Mercedes, BMW and Audi.
Dive into Deep Learning [Book and PyTorch and TF Code]
As it says in the article you linked, this type of situation js practically the opposite of what was described in Popper's book:

"Nonetheless, alternative interpretations are often misattributed to Popper in defense of extra-judicial (including violent) suppression of intolerance such as hate speech, outside of democratic institutions, an idea which Popper himself never espoused. The chapter in question explicitly defines the context to that of political institutions and the democratic process, and rejects the notion of "the will of the people" having valid meaning outside of those institutions. Thus, in context, Popper's acquiescence to suppression when all else has failed applies only to the state in a liberal democracy with a constitutional rule of law that must be just in its foundations, but will necessarily be imperfect."

I'm not sure how Facebook posts are literal physical violence. Also, it's so weird to keep seeing this supposed paradox cited (incorrectly) ad nauseum to justify basically any infringement on free speech when it was barely a concept he wrote about in passing, with very little thought put into it by Popper himself. Even if it was used correctly, It's just a very small thought exercise written by an author almost a century ago, it's not a natural law lol.
Thank you and no problem! Sadly I have been going from neurologist to neurologist, but it does not seem like it is recoverable. There is no way to reverse demyelination[1]. There are some herbs that may help with that, but I am skeptical. If anyone knows something with regarding to this, their input would be welcomed! I know there is a lot of ongoing research on this.

For now I take propolis, vitamin D, B vitamins (B1, B6, B12 especially), garlic oil, quercetin, and bromelain. I just ordered CBD oil and this will be my first time testing it. I hope it is going to work for my muscle spasticity. Additionally I ordered Ceylon cinnamon, because I read some studies with promising results. I might as well give it a try. Opiates do help tremendously, but they do not treat all of my other symptoms.

[1] First search results: "There's no cure for demyelinating conditions, but new myelin growth can occur in areas of damage".
Not keeping up with patch versions of your runtime.

As other comments mentioned even with a patched JDK you are still vulnerable in other ways, but the specific method this whole thread is about seems to have patches in Java 8 and 11 releases.

I understand that lagging new major releases by years and be prudent for different apps, but there is no excuse not to be updating your patch versions.
Heh. Was not Watergate itself about breaking in and stealing documents?

According to US, Assange went too far by playing this kid, asking him to use his privilege to scour the network for encrypted files and hand these over. How could Manning even had known of the contents? Or that Wikileaks was safe to trust for protecting its sources and avoiding state-actor influence?

At best that was cyberpunk activism, not journalism.

> At best you're blatantly astroturfing.

What's the worst you got?
In the US we have a property tax on each property, is there any reason the TV license tax couldn’t be rolled into the UK version of that? I don’t owe PBS a tax, for example, but it comes out of the US federal budget (with donations making up a smaller contribution to their budget). It just seems odd that the UK has stuck to this funding mechanism for a national public good when there are other more frictionless options.
https://twitter.com/JonathanAhl/status/1469809376894541825

Governor says it happened during shift change. Active tornado warning in the area at the time.
Considering that Minecraft players have built functional computers in-game using redstone circuits, it's not surprising to me at all. Minecraft tends to attract folks who have an eye for detail, and a passion for figuring out how things work (a.k.a. hacking).
This is insane. The only pro I'll even entertain is the potential to cut a few minutes off your CI/CD build time, but for the vast majority, even that brings no actual benefits.
So someone is more deserving? You tell us who.
Unfortunately, that's a design problem for Hacker News in general - people will be here for years and not notice features that were right in front of them.
The thing is it’s not about Java 11, 14, or 17. If you must be on 8 at least use the latest patch versions.
All ads are a form of manipulation. I can see a case that targeted ads are less manipulative to the extent it presents you ads for products you’ve already shown a propensity for. Untargeted ads on the other hand would need to more manipulative to be equally effective.

It seems the problem this site is really taking issue with is privacy.
The worst part is having to buy a new Hell every year because the old ones are unsupported.
If you give your work away for free then you are signalling to the world that the value of your work is $0. So don’t get surprised or complain when the world then treats your work as being worth nothing and therefore unworthy of support. You are effectively devaluations the skills, work, and income potential of yourself and everybody else doing similar work.
Although the Java ecosystem generally moves glacially slow, Java 11 is still supported an has LTS status. Unless you're willing to risk your livelihood on briefly-supported versions, you'll probably want to stick to an LTS release.

Java received a new LTS release this year. In the three years between Java 11 and the latest LTS there were six new releases. That's a lot of releases, and you can easily end up with a dependency that doesn't work with a new version of Java yet before the working version goes out of support.

Also, the update advice only works for the very specific demo exploit. Other exploits still work, so you'll need to update the library itself.
> Most dialects, Cantonese included, use the same Chinese character system.

I don’t think GP is arguing about this. The question is about whether they use the same sounds, whether they have the same grammar, and whether people from different dialects can understand each other without special training. Even though Cantonese uses the same character set as other dialects, my understanding is that you can’t just transcribe Cantonese word-by-word onto a page without it becoming unintelligible to a speaker of other dialects — all of which implies that the ‘dialects’ are actually separate languages.
Yarn offers "Plug'n'play" mode since v2, which basically promotes what the author says. It takes the idea further: dependencies are stored as zip archives instead of thousands of small files, which reduces the "git noise" and actually makes this viable as a performant workflow.

https://yarnpkg.com/features/pnp
I don't disagree with the general idea, but in practice, using git submodules always ends up feeling like I'm in the worst of most worlds
Top Tech and Science News Weekly (Week 1)
Check in your lock file.
> I own the copyright to it

Copyright is only valid in specific (sometimes geographically limited) legal frameworks and even then there are many nuances to take into account.

NFTs are just an easier way to establish ownership within the digital world, regardless of the chain (because of the timestamp I mentioned, since it can obviously be compared across chains).

> nobody's claiming that a RedBubble shop is a definite proof of provenance

RedBubble, being centralized, cannot be trusted to be a viable proof of provenance due to the possibility of corruption.

NFTs don't give anyone any right, they just make it easier to establish (and automate the process of verifying) ownership of a digital piece of content. They are not a replacement for copyright. Practically speaking you have two choices: you only claim copyright on some content, get mad when someone mints an NFT of it, try to identify and sue them (good luck with that) and waste time and money OR you mint an NFT as soon as you decide to publish your work.

There is absolutely no incentive in choosing the first option and if you do, well, that's on you.
Props to Rich Hickey and Co.

After 20 years of maintaining open source software on multiple projects and getting $0 dollars of support I applaud the attempt to reward these professionals.

Building and maintaining "personal infrastructure" to do open source "at scale" is expensive in time (github, continuous testing, test suites, pull requests, email, DMs, phone support, etc.) and equipment (development computer, router, network connection, AWS, backups, etc.)

In addition, if your project gains traction you'll get invited to give talks. These can sometimes be overseas (yeah, I know, nobody travels anymore). The time to prepare a talk and the travel cost is another personal expense. The most I ever got from a talk was a free hoodie. But I paid for the round-trip airfare, rental car, 3 days at a hotel, and most of my meals.

On the project I've maintained for the last 20 years I estimate that I've spent about $3000 per year. That should be the "baseline" for supporting an open source project.
I don’t agree with condemning the research because it involves animals, but you don’t even need to assume they’ll be involved in experiments. That’s what this article is about right?
Is the mechanism of action known? All I see is just throwing around scary acronyms PFAS and PFAO, but no details.
Then this solution has no value either.
They achieve the same goal.
The Truth of Biden’s Fraudulent Democracy Summit
> You'd think, in the spirit of open source, these multi-billion dollar companies--like Apple and Google and Amazon--would (...) mitigate the problems.

Your "(...)" elides the word "help," which completely changes the meaning of the quote, and your reply is constructed uncharitably as if that word wasn't in the original statement.
> There are going to be "OSS fires" more or less constantly so "some major OSS project has a bad vuln" is not the sort of thing that gets a CTO at a company like Google or Facebook out of bed.

If all your IT projects have an RCE vulnerability that’s relatively easy to exploit, that should keep you up at night.
I am Austrian. We suffered the history. We know where this goes. This is figured out, the only alternative is the descent into fascist totalitarianism.

> the very quote you supplied argues for “intolerance of intolerance” as a kind of a last resort, once things turn violent.

As it already did on Jan 6th and in Charlottesville.

We've seen all of this before. Instead of brown shirts, we have red hats. The ideas and the approach are the same.

> Second, as a practical matter, it’s not at all clear what constitutes intolerance. If you think the state has standing to adjudicate intolerance, then I can’t imagine you’ve been paying attention to the kind of routine social errors that are labeled intolerance on social media. The notion that it’s a legitimate function of the state to weigh in on these banal disagreements is risible.

All of these minor quibbles are irrelevant. There's a violent fascist movement forming and growing stronger by the day.

The Beer Hall Putsch [0] already happened on Jan 6th, the "cultural bolshevism" [1] bogeyman has been slightly rebranded to "cultural marxism" and is being used for propaganda purposes all over the place again. A new Big Lie [2] has been set up in the form of "Trump won!". Mainstream conservatives are behaving like Von Papen. [3]

Obsta Principiis!

If we don't nip this in the bud right now, we will soon see the new version of the Enabling Act [4] and all the horrors that followed.

I understand you might lack the perspective as you most likely don't have the same history to compare it to. Please heed the warning of somebody who does. These things sneak up on you and you won't be able to realize it until it's too late. This excellent excerpt from Milton Mayer's They Thought They Were Free talks about this phenomenom, I implore you to read it. [5]

[0] https://en.wikipedia.org/wiki/Beer_Hall_Putsch
[1] https://en.wikipedia.org/wiki/Cultural_Bolshevism
[2] https://en.wikipedia.org/wiki/Big_lie
[3] https://en.wikipedia.org/wiki/Franz_von_Papen#Bringing_Hitle...
[4] https://en.wikipedia.org/wiki/Enabling_Act_of_1933
[5] https://press.uchicago.edu/Misc/Chicago/511928.html
Kind of:

"Patients with cognitive impairment who participated in structured exercise for 6 months had higher plasma levels of CLU.

These findings demonstrate the existence of anti-inflammatory exercise factors that are transferrable, target the cerebrovasculature and benefit the brain, and are present in humans who engage in exercise."
There's something surreal about this being an Amazon link, for a customer in St. Louis.
Failure is the default.

Success requires relentless progress in the opposite direction.

Misguided, or too little progress, return to default.
There's something funny about an OpenJDK release being hosted on a .net domain. dotnet really is a terrible name for a programming language and framework.
Take a look at /r/nootropics and /r/peptides

BPC-157 and lion’s mane in particular.
No Mandarin goes way further back than Old Mandarin (which despite its naming in that Wikipedia article, is far from standardized, I don't know where it's sourced as Yuan, as the Chinese version of the article states it sometimes is defined as being the language of the Northern Song Dynasty and in the literature sometimes even the Tang dynasty).

For example this is how the Song philosopher 朱熹, a Fujian native, spoke in public:

若只是自了，便待工夫做得二十分到，終不足以應變。到那時，卻怕人說道不能應變，也牽強去應

(From the 朱子語類·朱子六)

That's pretty recognizably Mandarin. Even earlier from the beginning of the Tang Dynasty, we have poems that are recognizably vernacular Mandarin.

我見那漢死，肚裡熱如火。不是惜那漢，恐畏還到我。

(by 王梵志)

> The tones (esp. 平仄) are better preserved in Cantonese, I don’t think this is disputed

Ah yes I read your reply too quickly and thought you meant all rhyming. Whether the tones as a whole are better preserved is controversial (a lot of Cantonese tones have come from the loss or change in certain sounds of the QYS, so it's hard to say they're "preserved") but 平仄 is definitely way easier in Cantonese than Mandarin.
Real-World Face Restoration with Gfpgan
> I attempted to fix your questionable grammar as[sic] to make your writing easier to understand

Muphry's Law strikes again! I think you meant "...so as to make..."

(+1 to the other reply - the original was perfectly readable)
To elaborate, there's formal written Chinese (which is close but not identical to spoken Mandarin) and then there's written Cantonese (or other dialects), which is writing the characters as they would be spoken verbatim.

Written Chinese is used for anything official or formal, written Cantonese is often used online informally (like using text/SMS language in English)
it's not true. Han Chinese are clearly genetically distinguishable from Yamato Japanese and Koreans, and internally the different Han Chinese subgroups are genetically closer to each other than any of them are to Koreans and Japanese.

Gene doesn't lie
> To cut costs companies typically make teabags out of polypropylene plastic instead of paper or alternatives.

We get it, you fear science and plastics, they are devil.

This is a fully dissoluble bag. What company makes that out of plastic?

How would that work with tea bags?

What they are doing is cool, a new tech that you can consume because it dissolves.

Also made from seaweed, a resource we can harvest on mass without the same environmental destruction required on land.

Why do we have to bring this religious garbage into it every single time. It's not on topic. It just puts the people who actual believe in science off. Why can't we just enjoy the shared experience of a cool new tech.
It has stopped advancing. That's kinda the definition of bad in semiconductors.
I definitely get the Amber-alert-style phone alert for Tornado warnings in my area.
> You didn't get a phone alert about it happening? I thought those were mandatory for these kinds of events, I think they even overrule some of the DND rules on your phone.

I turned those off at the system level because the local authorities would abuse them to announce allegations of kidnapping, or license plate numbers of people who supposedly shot at cops and other such things that are not a threat to my life or safety (and thus not my business).

Apple, fortunately, in iOS 15 broke out the categories so you can turn off the "we want you to pay attention to this" crap from the police separately from the "here is critical information about something that might kill you".

Having them on the same category/priority before was massively irresponsible on the part of the police. I'm glad people with enough sense to understand alert fatigue eventually prevailed.
Not sure what you are talking about.

Java 11 was released on 2018-09-25

Java 11.0.2 that contained the "fix" was released on 2019-01-15

Java 11.0.13 (latest) was released on 2021-10-19

Also Java 8u192 was released on 2018-10-16
I'm not sure that really is the story. Homes are not exactly safer, and there was a tornado warning for all of Madison county. Perhaps you've seen photos of what these things do to small wooden structures. Yes, their home was probably ok from this particular tornado, but I think that has more to do with luck than safety.
Given the long history of labour abuse that's occurred on Amazon's watch at their warehouses and for their delivery drivers, at this point do they deserve the benefit of the doubt? Do you think these people came in to work at the warehouse while the weather reports blared tornado warnings out of love for their job and loyalty to Bezos?