skysight-inc/HackerNews huggingface dataset:
I didn't brush it aside, it was one of many vaccines developed across the world, the refutation was of the claim

"Look at how US companies pioneer the Covid vaccine for example"

Which is bullshit, and reminds me of the opening to The Newsroom

https://www.youtube.com/watch?v=8WxdaU9AsnU
Not really seeing much here in the way of details, which always makes me worry;

Are they using rare-earth based catalysts to control some chemical reaction?
It's corrosive so will always break down parts, so have they extended the life by 10x or 1,000,000x ?
Storing heat in this medium leads to thermal losses I'm not seeing a mock-up of how it's proposed that this is minimised.
Surely trying to store high-energy corrosive materials at high-temp is dangerous even at this modular scale?

Naively this sounds like their solution to "saving the world" is "boiling acid" which is at least novel...
> it starts with an unnecessary felony conviction from a poor decision, which initiated a chain reaction that ultimately destroyed people rather than helped them.

The crux of the author's argument seems to be that the punishment outweighs the crime. But I am still hard-pressed to see how the alternative of not pursuing criminal charges is any better.

> Many of those kids who participated are probably suffering from anxiety right now, knowing any day the police will show up to their door and arrest them, let alone the aggressive media coverage they’re getting. For many of those youths, that terrible anxiety or a simple arrest is enough to never do it again. Yet the Bay Area’s DAs are all announcing felony charges for those involved.

Would they be 'suffering' the anxiety if the consequences were less severe? How do we know they would never do it again? In fact, aren't they just as likely to be pulled into a life of crime if the punishment is too lenient as too severe?
$30 is 300 pages. That's nothing. Many people engaging in democracy need much more.
> couldn't be turned off even by their creators. So no, it's not real.

If you really believe that, you should read the aptly titled The Doomsday Machine: Confessions of a Nuclear War Planner by Daniel Ellsberg, also mentioned by stephen_g in this same post.
I was being serious. Most often you get to choose, or at least to know, the names of your files. In those cases find|grep is very useful. You do not need your shell commands to always work in the fully general case.
> If you trust science as an institution the white garment of the doctor standing in the hospital which is an achievement of science will play in favour of whatever the doctor says. What if you don't has that trust (or even active distrust)?

I trust science as a method for gaining knowledge, and I understand that it has its limits. In most things concerning humans, it's is loosely based on mathematical statistics. If you've ever had a serious illness and immersed yourself in understanding medical advances in it, you'll probably be surprised by the level of guesswork and unknowns of the operation of the human body (let alone of the mind).

If you have a mathematics background, it can be frustrating to sit across a doctor who lacks such understanding, while you are trying to extract all the useful snippets of knowledge they do posses, so you could correlate that with your symptoms, since they are usually dead set on a diagnosis without sufficient proof simply because it's... the one they've seen the most (it might not even be the most prevalent one). But even in the simplest cases, you won't hear a doctor say that this is something with a high probability. Eg. give them a bloodwork with CRP, and they'll immediately tell you if you should be prescribed antibiotics or not. It's a bacterial infection, not with 92% probability (I made that number up), but 100%. Sure, it'd be hard to get the exact probability, but actual medical studies are getting into that (correlating all the symptoms and such).

Sure, for a vast majority of cases, following an easy algorithm just works: that's the value of science being applied, and this is the reason we are getting our lifetimes extended and a number of sickness eradicated. On average!

But bringing up medical doctors as the pillars of science (oh, and they are stressed out too? that will surely make them better at logic) is quite a surprising stretch.
Oh for sure, and I don't mean to accuse the authors; if pop-sci articles spread confusion about their work that's not their fault. I just want to clear things up for myself
No added sugar is something that can be objectively measured. What does "no ads" mean? No Google ads? No sponsored content? Nothing referencing paid products? No soliciting?
Totally.

Also, since we're in the weeds, you can ask yourself why you believe in math. Did someone tell you that Public Key cryptography works, or did you verify it yourself? I've read through a lot of crypto code, and in the end I can't say I really understand the details. I can point at the readings, but really, do I actually get what a pairing group is? Chances are I'm relying on authority.
“Ethical practices,” “the App Store,” and the case for “local scanning.”
Reminds me of the Java Applet exploit where you could combine system classes with overlapping method signatures in unexpected ways, to get the system to do untrusted things by itself without any user code. I bet __safe_for_unpickling__ has that problem.

In the Java case, it was something like: create a listbox on the screen, which contains a map entry, whose value is a java.beans.Expression object which calls a getter on some object which has side effects that allow an RCE. Because only system code is involved in the chain, Java's stack-based security model determined that this was some internal runtime code making the call, and allowed it. It doesn't make sense to put a security check on any individual step, until the final one which determined it was running in a system context, yet the overall effect was something that should not have been allowed was allowed.

The listbox innocently called toString() and what happened was RCE.

I bet in Python you could use the same concept and construct an object graph where some innocent method call ends up being an RCE. Find an object whose str() calls self.foo.toString(), find an object whose toString() calls self.bar.blah(), find an object whose blah() calls self.asdf.meh(), find an object whose meh() calls os.system(self.cmd). Now you deserialize this graph and RCE is triggered by somebody trying to log the graph.
Scala + Spark is absolutely the sane face of Scala. Try using stuff like cats (basically Haskel ported to Scala) to experience the deep end of the pool.
> Mass transit sucks. I’ve been to pretty much every tier-I city on the planet and the ones that really pushed transit (Hong Kong comes to mind) were by far the worst.

Strange. I've also been to some "tier-I" cities myself and liked the ones that really pushed transit the most (Tokyo comes to mind).
Redesigning infrastructure always produces winners and losers. Slowing down traffic will always make someone’s commute longer. Unfortunately, making these decisions is hard but necessary, because the trade offs are worth it.

Gentrification is when a place becomes more desirable to live. It’s caused by people enjoying themselves. Gentrification is wealth creation. If housing prices rise too much, you can build more housing. It’s something to be desired, not avoided.
Note that the class itself is not serialized. Only the instance of the class is serialized. The class itself is looked up by name in the running program. This is still a footgun because you can try to deserialize classes that weren't meant to be deserialized in this context, but it's a way smaller footgun than being able to just load arbitrary code into the program.
Alternative sources of income are growing - the share of search engine deals was down to 86% last year, apparently: https://www.reddit.com/r/firefox/comments/rcc7m6/mozilla_aga...
Julian Assange can be extradited to the US
How many code accesses JNDI using URIs for external data? Debug tools, presumably. Monitoring tools.
The echo nukes your quotes so you can't run the precise output of the echo, but yeah, if I'm doing weird shit with variables in a command I do that.

Another tip for anyone who runs history commands like `!!` or `rm !$` is the :p operator, which just prints what the shell would have executed and adds the full command into your history so you can hit ^ enter.
"the first vaccine of it's kind"

Apart from the other ones. Biontech was foudned 2 years before Moderna, and the first clinical trials started in 2013, there were many more over the next 7 years before covid came in as a shortcut.

The claim that America is the only country that does this stuff is laughable.
Google Shuts Down Glupteba Botnet, Sues Operators
The issue is, what counts as "trust"? Logging input isn't trusting it. Or at least it's not supposed to be.
In this theoretical world you would generally not authorize any code (nor could any run by default) if you were just trying to view a web page. The HTML subset would be used for displaying information.
IMHO this is a design error in find. Tools should not heavily depend on characters which are also shell metacharacters, particularly in ways which are similar enough to the way the shell uses them to cause confusion when they collide.

find . -name %.jpg

Solved.
Yeah, but azure is painful, so what are you going to do about it?

Also, I had no idea there was an outage.
Another way it happens: I was stuck on python 3.6 for a while and it meant that I couldn't just poetry add pandas because the latest version isn't compatible with 3.6 and it won't look for other versions.
Except your not actually training on noise, your training on procedurally generated images which include random modifications. It’s just the summery is really bad at describing the process.
Yes, hence why we have the law, instead of religious judges making judgments ad hoc and at will
I'm not following why storing project scoped things at the project level is a bad thing.
Even if they aren't powerless to delete it, they'd still have to pay to delete it. I wouldn't be surprised if someone finds a way to blackmail site owners with that, forcing them to pay out the nose to remove content they didn't even create.
Your comment is a kind of virtue signalling. What is your alternative? To not jail murderers or thieves?

[edit]

Just to check if you're serious or not, would you be happy to move next to a prison and then have all the inmates released?
> regulations are just as much part of the law as statues.

The ruling does apply to regulations, it doesn't apply to material referenced in regulations (either directly or indirectly), which a whole lot of copyrighted things are.

(For an example of indirect reference, the HIPAA transactions and code sets rule regulations adopt CMS’s Healthcare Common Procedure Coding System as a standard code set for certain purposes. Great, as it's a federal government product, and therefore free from copyright burdens.

Except that the “Level 1 codes” in the HCPCS are defined by reference as the AMA’s Current Procedure Terminology codes, and the definition of that code set is under copyright and not freely available.
Wait until you see laptops with touchscreens without UI for fingers, like all Windows laptops with touchscreens!
You can use another messaging app that supports encryption. Some of us don’t want your laziness resulting in local scanners on devices that we have paid for.
Top developer tools for 2022: You don’t know about it
Will he be tried by a common jury or a military one?
No way a common jury finds him guilty.
> So you own your specific type of computer for the hardware and the software...
> Is there any other reason to own a particular computer?

Fashion?
Because you like using it?
Because it fits in your budget?

So... yes.
No... not really. Actually the bad data is probably the data you most want to log. Kinda the point of logging. You do expect it to not screw up the logging system when bad data is logged. You expect to be able to log any random data (even if the log file formatting may get confusing in case of maliciously formatted data)
They claim _perfect_ emulation of OCS/ECS/AGA. I choked on my coffee.

There's no way. This is just a nostalgia-exploiting money grab: Cheapest ARM SoC they could find, a kioskified open source emulator and a small selection of games, in a box that vaguely resembles the Amiga 500.

All of this for "only" $140. What a joke. Save your money. Look at WinUAE, PiMiga and the MiniMig core for miSTer, as an alternative. Or even the real hardware, which would not cost much more than this raw exploitation device.
Exipure is a natural dietary supplement that promotes weight loss and increases energy levels in a natural and healthy manner. The formula contains potent herbs and nutrients that work to trigger an increase in BAT levels, which in turn triggers the release of fat and the burning of excess calories.
The ingredients also come with other benefits such as balanced blood sugar, blood pressure, and cholesterol levels, protection for the heart and liver, enhanced cognition, reduced oxidative stress, and relief from aches and pains.
> Featuring perfect emulation of not only the original A500 (OCS) and Enhanced Chip Set (ECS) of future revisions, but also the Advanced Graphics Architecture (AGA) of the A1200

What. That's actually a pretty cool/thoughtful move. I was going to say that the A500 did a good job of making me wish for an A1200...

If you look at Amiga sites like Lemon Amiga (tangent: still envious of their clean while also detailed and decorative mobile design) there are lots of comments on games that say "best enjoyed as AGA version".
If Python’s packaging is a dumpster fire, then what is Perl’s packaging?
> It’s the other way around - you can’t sue a state in another state’s court

Sovereign immunity means you can’t sue a state in its own courts, either, except in the ways it has agreed to be suable, which tend to be a small subset of those reasons for which any other party would be.
Very interesting, and aligns very well with my experience with synthetic data as well. (In that diversity trumps realism by a LARGE margin).
Ask HN: What tech stack would you use for your next small/middle project?
getting out from the big company where we used MS tech stack for years, with some modules using .NET MVC and the others are using even older asp.net webforms... The API was written in SOAP :)...
I want some restart and looking forward for kind advices, since what I see out there its all about backend API (nodejs, or whatever stack) + frontend with React/Next, Angular or Vue... ?
thanks
I've thought about this carefully, it is.
Spoilers: nothing in the article about the actual reason for change, other than "Pirelli was tasked by the F1 powers-that-be with delivering tires that would spice up the show" which sounds like the new ones are going to be worse. ""It's not zero degradation," said Isola, "because zero degradation is not good for the show".

What you really need to know is "For years, the choice of tires in F1 was also relatively open, with competition between tire manufacturers as recently as 2006. But since 2011, it's been a one-brand show after Pirelli won the contract to be the sport's sole tire supplier." aka monopoly, everyone uses same crap, races are snooze fests.

>Pirelli provided flights to Austin and three nights in a hotel so we could attend the US Grand Prix. Ars does not accept paid editorial content.

We dont accept paid editorial content. We will write one for you, bullet points and choice quotes, as long as you pay for our plane and hotel.
Color darkness and hierarchy perceptions: How consumers associate darker colors
https://docs.oracle.com/javase/tutorial/jndi/overview/index....

says that LDAP, DNS, RMI Registry, and CORBA Name Service are included in Java, and others may be discovered at load time (but I bet they aren't because that's very niche).
Facial animations seemed fine for me. What got me off was surprisingly the body animations. When Keanu and Carrie-Anne were walking and doing hand gestures, it felt really strange. Too smooth.
The usage of utility classes only become an issue if you have unnecessary duplication of components. Say, two buttons that should be the same but are implemented in different places.

IMO one of the interesting parts of functional CSS is that we can apply the same tactics we use for organising code to organising the styling.

Also, with separated CSS, and especially with semantic CSS, there is often a fair amount of duplication that happens in the CSS code itself, which we programmers tend to be very forgiving of. Giving Tailwind more scrutiny than we do for our CSS ends up making our code more consistent, less duplicated and better in general.
That's what I use as well. It works great, it's built in and it's easy to use and understand. Only issue is when you upgrade the version of Python you're running. In that case you might need to rebuild your virtualenv, but that's super easy.

I use the same solution to have multiple versions of Ansible installed.

If you need to run multiple version of Python, then virtualenvs might not be enough, but that's honestly not a problem I have. New version of Python, great, let's me just rebuild my virtualenv and get back to work.

One of the most important rules I have regarding working in Python is: Never, never ever, install ANYTHING with the global pip. Everything goes in to virtualenvs.
Except the article is from the bbc?
Did you ever have an overdose of Nicotine? It can be pretty stupefying.

But it was Tobacco that I referred to as a narcotic, ie psychoactive drug. And it's a very harmful one.
> ...careers and lives you followed for years will enjoy a different trust than a piece of paper that you find on the street, written in Comic Sans, even if both tell you the exact same words.

This is an entirely different thing: neither of these would be facts, but claims (hypotheses, statements, beliefs...). Building trust will make you more likely to believe someone's claims are factual, but the only facts are the ones proper scientific studies base their interpretation on. Even conclusions of most scientific studies are usually premises and hypotheses, more or less supported by the facts in those studies. As such, a scientific podcaster would be twice removed from the actual data: they'd be interpreting the interpretation of the facts a research team has collected. You trust them at your own peril.

Facts are provable/observable things which can be reproduced by others. That's why we've got the reproducibility crisis in science since the introduction of "metrics-based" science: papers are published for career advancement (sometimes with falsified data, which is why reproducibility is important before we call them "facts"), and science now comes second.

In short, it's all quite simple. But it's all so elaborate, draining and time consuming, which is why we practically must trust others' interpretation of facts. As long as you are aware that we are mostly working with interpretations and not facts, once you really want to drill down for a topic you deeply care about, you can. And that opens up your mind to changing your opinion easily.
> AWS still puts new stuff in us-east-1 before anywhere else, and there is often a LONG delay before those things go to other regions.

Come to think of it (far down the second page of comments): Why east?

Amazon is still mainly in Seattle, right? And Silicon Valley is in California. So one would have thought the high-tech hub both of Amazon and of the USA in general is still in the west, not east. So why us-east-1 before anywhere else, and not us-west-1?
Doesn't everyone buy a specific computer for the hardware and software?
I don't know anyone who goes to a store and just picks a random computer, they either decide between Windows and MacOS, and then pick a computer based on the specs.
I believe, with religious fervor, that my judgement about what goes into my body is more important than my government's opinion. I dunno if God told me this or not (I didn't see a receipt) but if applying a "religion" label to it helps others understand it then fine, call it that.
World Bank Study Finds Ports of LA and Long Beach Among World’s Least Efficient
It's objectively a dumpster fire. I don't care about other languages also being a dumpster fire on the packaging front, because I don't use other languages :) It also doesn't help me to know that NPM or .NET have rubbish packaging systems, that's their problem and not mine. I'd primarily want python's packaging system to be good.

I mean, just look at this thread. Someone asks "So in light of this, what should I use for python packaging?", and they get two dozen different answers loaded with weirdness like pyenv, python-venv, virtualenvwrapper, etc... If I wasn't using python, I would've thought this is some cruel python in-joke that outsiders don't get.

Just looking at those names, I'm already confused as to what the hell each are doing and why do I need them?

But let's go back to pip and conda. Conda is unbearably slow. Pip is not entirely reliable in resolving versions properly. There's also not entirely cooperative interaction between conda and pip. If you use conda, you should not use pip (or just minimally) because it'll result in a mess.

Yes, packaging is hard, but it feels like python has managed to solve (or not solve) it in a uniquely obtuse and bad way so far.

Hopefully the slew of new PEPs will finally bring some clarity to this mess.
Moore Oklahoma
Wow. Interesting description of experimental data from plants suddenly turned into "I saw a guy in my dream, flew to Peru to meet them, and they enabled me to talk with a plant."
And the keyboard apparently doesn't even work!
Both have been increasing throughout history. RAM in my 6 year old desktop is 16GB, 100 times the size of the hard drive I had 25 years ago.

My SSD today I'm sure is far faster than the memory I had 25 years ago.
ATT Fiber is mostly GPON with some areas that are XGS-PON. They just started rolling out 2gbit and 5gbit service in one city.

There are a couple of bypass methods on the GPON network that let you use your equipment with the ONT and bypass the RG. I don't think I would bother, though, and I'd just use the 'IP Passthrough' DMZ to assign the public IP to your router. The only problem was the size of the internal connection table on the RG was historically very small and didn't clear quickly which really only causes problems if you torrent. The newer RGs don't have this problem.

On the XGS-PON network the ONT is integrated into the RG so it's not possible right now, but again the DMZ 'IP Passthrough' mode actually works well.

They support IPv6 and they give out a /56 if that matters to you.
> Gentrification is when a place becomes more desirable to live.

Yes, but the real problem here is that this term is also used to discuss an overlapping but different thing: the poor and otherwise vulnerable parts of society being displaced by raising rent. There should be two words to describe these things to ensure we don't talk past each other.

Anyway, the displacement issue is a problem solved by ensuring affordable housing through various means, not by ensuring the housing stays affordable due the location being a terrible place to live (as you already mentioned, I'm just putting it in the other "gentrification" context).
Java is uncannily good at repeatedly allowing code execution via data misinterpretation across the board. The way it does serialization makes it impossible to secure. Templating libraries have forever been an issue. Endless extensibility in-line with data is a curse.
When I scroll down it says:

---

Q: Is the keyboard is non functioning?

A: It is non-functioning
Digitaltim| 2 months ago

Q: Is the keyboard good enough to use?

A: The keyboard is non functional.
Digitaltim| 2 months ago

Q: Will the keyboard part be fully functional? I'm sure some people may want to try programmi…

A: No, it's just for looks.
J. Wood| 2 days ago

---

I'm confused, is it something working or not?