skysight-inc/HackerNews huggingface dataset:
https://www.nature.com/articles/s41576-018-0055-5

https://www.pnas.org/content/early/2014/11/26/1413339111?wit...

https://www.bbc.com/future/article/20200918-why-some-deadly-...

https://journals.asm.org/doi/full/10.1128/JVI.00694-10

Covid related links have saturated any searches on viruses in general, and the doom&gloom "reporting"is at the top. There are a lot of papers and examples of what I'm talking about, though, it's just irritating to get at.

Gain of function research gives us rapid and repeatable demonstrations of vital evolution. Viruses that don't kill their hosts and develop more and better mechanisms of infection or evasion of immune system defenses outcompete other variants. There are a lot of examples in animal viruses, but Sars and hiv are examples of recent relevance.

To be clear, I'm not making the claim that this happens to all viruses - evolution doesn't work like that. A virus that leaves you mostly functional for a few months before it kills you is not at all an unlikely scenario. Viruses also exist concurrent with other variants, and they can mutate rapidly. There's no hard and fast rule, just influences and constraints that can manifest as trends.

In my opinion, the ideal outcome for sars-cov2 at this point is that a super mild variant evolves that will confer robust natural immunity while spreading fast enough to prevent the spread of other variants. It could become more deadly - I hope it won't, and what we know of virus evolutionary pressures in humans hints that we could get lucky.
We minted and sold an NFT for $1,100. Here’s what we learned
the pyramids of our time
> Why is the Dreamliner acceptable and the MAX is not?

I remember [1?] hearing that Emirates threatened refusing 777s & 787s from one of Boeing's plants due to repeated quality control issues. Have not tracked the issue.

> 180 separate, independent regulators colluded to protect

Not necessarily. But if 180 _independent_ bodies were effectively independent, one of them would probably have found issues with the max. But they are not operating effectively independent.

[1] https://www.reuters.com/world/middle-east/emirates-doubts-fi...
> The eastern block countries, experienced the fall of the USSR as an event that forced all of them to attempt to change their culture.

At least in Poland it wasn't perceived as "changing the culture" as much as "reforming the economy" and "returning to where our culture would naturally be if not for partitions and soviet occupation".

Which you can argue about, but if not anything else - presenting it that way was a successful social hack. Unemployment was 20% for a while in 90s but there were surprisingly few attempts to reverse the reforms. In fact only now that the perception is "we made it" - all the cultural problems are resurfacing.
> The common way I know is the access is given to a small number of trusted people who make the updates.

We have the same approach. A very small number of people have write access to the production databases. If things can’t wait for a schema change release (15-30 min) and can’t be done through the back office API, we do it manually. It’s very rare.
PS4 Jailbroken, Exploit May Work on PS5 Too
The size of the car is in no way constrained by the engine size. People swap V8s into Miatas all the time. You can do a K24 swap into a Honda Fit without changing any bodywork. Vehicle size is entirely determined by market segment, design, and collision safety.

As for small engines, Fiat's 0.9 TwinAir is enjoyable once you get rid of the factory tune that is super-optimized for low emissions in the official tests at the expense of driveability. It even has extra-low rev limiters in the first three gears. Starting from the 105 bhp version you can get 120 bhp and 200 Nm of torque with only ECU tuning and removing baffles from the airbox, makes it a fun little thing.
Why ISO was retired, part-2
By manipulating values on the stack (notably, return address) in non-memory-safe languages: https://en.wikipedia.org/wiki/Uncontrolled_format_string
What’s happening behind the scenes at Fedora Magazine
It's not a hack, it's the natural way of expressing it in the chosen type system. The use cases for interface{} are often hacks, because of a lack of parametric polymorphism, but that's different.
Log4j Vulnerability (CVE-2021-44228)
Ask HN: Why iPad/iPhone battery drains even when powered off?
When I power an iPad off (latest available device and software) while its battery is at 100% charge, after a week or so of it sitting in a drawer, its battery is completely drained of power and it can no longer boot up without recharging. If I do the same with my nintendo gameboy advance, the device still boots up and has almost full charge even after a year of sitting in a drawer, powered off. Why is this happening? What am I missing?
So sales gave Supply Chain a dressing down over out-of spec (was the customers measurement confirmed by in-house Quality?) LED color. Nice way of collaborating, we in SCM love this. Was the color check part of goods inspection protocols? Because it it wasn't nobody within your "sloppy" organization had any chance at catching that error.

I could write a book about customers being extremely picky about "visual" quality issues. Usually as a way of either returning inventory they don't want or to drive prices down. Dressing down someone about that, and indicating that the whole org is sloppy, is not the usual reaction I would expect.
The lack of generics was never really a problem to begin with.
Show Some Love for Log4j
This - again - lowers my confidence in the CVE mechanism...

Thanks though for your background information what is / was going on!
Regarding magnetic brain stimulation, does anybody else always fall asleep with intense dreams every time they get into an MRI machine?
I think so. The Indian technology market is ripe for disruptions as SMBs are looking for new solutions to old problems. Spaces such as agritech and manufacturing can definitely be big clients for SaaS based firms.
The grapes are sour.
The problem with pissing off law enforcement is that they have many more resources than most people, and they care a little less about costs.

I could see that if someone were to act along the lines of your cartoon, that they would be facing an obstruction of justice charge.

I could also see a large number of building inspections and other checks that the landowner was following the law.

And quite possibly the sheriff could start setting up a traffic stop at say, the end of the driveway, where they check all passing cars for DWI. Also raising the possibility of civil forfeiture.

In Minneapolis, the police decided it was fine to fly police helicopters over residential areas at low altitudes for hours at a time, every day. This is legal, you do not own the airspace above your land. Hopefully they wouldn't notice anything suspicious, which could trigger a no-knock search of your property.

All of this is just local people. If the Feds get involved, then a person could have more serious issues.
Question for anyone reading this:

Why the demand for "classless"?
> the Windows 95 backgrounds

That's XP! (https://en.wikipedia.org/wiki/Bliss_(image))
But you can't move the shell across layers. It's needed where it is.

The point of the shell is that it's how you issue commands to the computer. You (or GP) want to make the commands independent of the shell. OK. How do you issue your new shell-agnostic commands? How is the computer supposed to understand them?

For that to happen, you'll need to implement a shell in the exact place where you just removed the first one.
That's probably a reasonable conclusion. It does happen to be totally overshadowed by my bigger mistake, which is an order of magnitude. Repeating the calculations using my physics CAS today:

Starship mass: 1.3·10³ kg
Starship weight: 1.3·10⁷ Newtons

Converting that into something reasonable, it's 13 MN, not 1.3. A Kevlar fibre cable will be 22 tonnes, a PE one 9000 tonnes, and a carbon one 2200 tonnes. I wouldn't like to even imagine steel. And these are just with a breaking strength of 13 MN.

Not the most reasonable, though obviously we've held up things like Arecibo in the past. Using multiple smaller cables would be the optimal solution and what we would go with, since a single cable is >1 meter in diameter in any case. The mass doesn't get any smaller like that, though, so it's not a consideration we'd need to make.
Lovely idea! Any plans turning it into an app? I think just a wrapper around a webview would work for iOS, and PWA on Android. The only things that need a small work IMO is to remember last settings and autostart on app start.
Extralite – a new Ruby gem for working with SQLite databases
Yes, it is the total cost of vaccination programs ie the cost of the molecules + the cost of the rollout infrastructure.

Vaccine hesitancy can’t be measured until a country has reached the point where everybody who wants to be inoculated has been, and there are still excess supplies.

Australia is at 90% and still increasing, with plenty of incentives still left to try.

The most effective drivers have been the new variants - delta and now omicron. Each time the infection rate has soared, the take up rate for vax has followed commensurately.
I doubt it will save anything, I would say the lack of flexibility will highly likely cause massive headaches as applications just suddenly stop working, as will having patches forced on you.

This stuff has nothing to do with cloud but mainly on how the business thinks off and controls IT.

Some finance businesses have the resourses to hand to compete with the cloud providers or at least create internal self managed equivalent
I've really enjoyed your comments on this page, your blog, and the sample code you're pointing people at.

This feels so much like a 90's java/flash bug, it's kind of hilarious and awesome.

I think there are 2 key things (As I understand them, and I'm just some random guy, don't trust my armchair analysis)

1. The evil ldap server does not send bytecode to execute. It sends instructions about a class to create, and how to configure it. That class needs to be on the server already. One hard problem might be a hash map with initial size of 2^64 -1, which will throw an OOM, which is hard to deal with, and most people don't bother. another might be awt Window or JFrame, so your server process is trying to load up all of X, which probably isn't installed and will generate a lot of weird errors or crash, unless you've had to be pretty wiley to get around or deal with those in the past. There may be a default RCE out there. I don't see an obvious way to make ProcessBuilder do anything too scary, but the std library is huge. There certainly could be something. I haven't really thought through InvocationHandler, but it seems like it has potential.

2. JNDI support for LDAP comes with java, but JNDI is sorta like JDBC, you can plug in whatever random directory service you want. I do not know, but I suspect there are bindings for CORBA or lotus Domino or ActiveDirectory or COM+ or whatever random, crazy, 20 year old binary is still laying around out there.

Actually, I have a third tangential thing. This chain of vectors makes me worry about XML processing and what common libraries do with .xsl, .wsdl, .uddi, and whatever other crazy thing seemed like a good idea back in the day that has been faithfully preserved because change is hard and scary.

In any case, great write ups. I've enjoyed them.
https://github.com/razum2um/awesome-clojure
That's a rather useless form of "security."

It's not even going to be effective in preventing the machines running web browsers from being distinguishable, if that's a real concern.
https://github.com/wez/wezterm
First light (or do IR 'scopes do "first heat"?) in June, 2022, if all goes well:

https://www.nature.com/articles/d41586-021-03620-1

30 days to achieve orbit.

Six months to settle, synchronise, allign, and calibrate.
https://ai-service-demos.go-aws.com/polly

check the neural then british, Amy. the "smoothness" is uncanny. the samples are "almost" there with larynx you linked. good but take kathleen (glow_tts), there is "still" some robotic in there. is this something that can be improved by tweaking the training ? this sounds really cool to be used at home
Yes of course there is fault handling! That's one of the hard things about safety critical sw is that you actually have to deal with everything.. Lettings things "fail" or be "undefined" isn't really an option.

E.g. Mach is derived from multiple sensors so you have a first layer of redundancy there, then if all fails (and you can detect it ofc..) you'd probably start some kind of dead-reckoning and issue WARNINGS accordingly to the pilot and/or connected systems that change its behavior to a more conservative one.

There is almost always some kind of "safe state" that wouldn't depend on the input signals at all. It would obviously negatively affect the performance of the aircraft and most likely reduce its operational envelope.

Pilot action would be required, i.e. reduce altitude, reduce AoA, reduce air speed etc. LAND ASAP etc. :)
Exactly. If you want to buy any NFT, you have to go to a centralised marketplace like opensea.io. On top of that you probably have to exchange fiat to ETH in a centralised exchange.
If any of those two stop existing your NFTs become worthless, at least when denominated to fiat.
And if you can't convert to fiat or buy real things, it's all imaginary.
Can you elaborate further on this? Are you talking about reconstructing fiber tracts from DTIs?
Show HN: Kubernetes Ingress-Dashboard (Kid)
> The real reason is for the sort of fuzzy, hard to define feelings that connecting people together is good and that the more we get to know our fellow humans, the more we will view ourselves as one people with a common humanity.

Is this ironic? Facebook and Twitter, etc. have amply shown that "connecting people together" isn't very good.
solving people problems with tech.
Who picked the apples and oranges?
Yes, but I don't have to, because with Emacs I have (almost) the same editing capabilities in the REPL.
There is even a name for that https://www.hyrumslaw.com/

The solution clearly can't be to never ever fix bugs though.

But depending on the kind of bugs (especially when they are of the "gotcha"/"UX" kind) often it's better to just create a new API version with the corrected behaviour and keep existing software apply handle the old behaviour the best they could.

But clearly for many many other kinds of bugs (security etc) we are better served with a bug fix in the old API even if that implies a possibility for breaking somebody.
Oh I see, this has something to do with Golang. I thought it was about the Gopher protocol (forerunner of the www, and making sort of a comeback lately). So the idea of a con for it sounded great, but I couldn't figure out what generics could have to do with it. I get it now. Golang generics.
Hi, I'll admit I didn't fully understand that, and your explanation helped. I'll also use this for when my friends and family miss the point too, thanks :)
> The size of the car is in no way constrained by the engine size.

It is. Nobody will buy a full-sized sedan with 800cc engine, unless you are in China.

There are a minimal size powertrains a car body need to be able to house for its size to be sellable.

The matter is you can put much smaller, and cheaper EV powertrains relative to the body size/weight for a much better driving experience.

You can use freed space to pile in extra niceties, which would've required bigger body size for an IC powered car, thus necessitating bigger, more expensive powertrain.

The attraction of hybrids was exactly that you can get a crap engine to provide driving quality of a much more expensive setup, like a good V6, or entry level V8 at lower cost, in a smaller car.

But "just better" is the worst enemy of good enough. You can throw away the whole IC altogether, and provide a 3L+ I6 experience in a micro car.
On the page they state:

> Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.

I guess they will open up in the next few days.
Ask HN: How to pre-filter people raising GitHub issues
I’ve got quite a large number of demo projects on GitHub now. I seem to attract a lot of students looking to do their final projects - I’m happy with this - the whole point of publishing code is to help other people learn. But there is a small minority who obviously don’t have the necessary background or skills to approach the work and need remedial support to even get to the point of being able to run the code.

How can I filter these people out?

This may seem harsh, but these people also seem to be the most obnoxious and will post everywhere they can find me demanding my help.

I have a lot of empathy for them - they’ve obviously seen a project and though “hey, I can copy this and make a voice controlled robot” and then find they are completely stuck and failing - but if I gave them the support they need I’d have no time to do anything else.
Without further details, it's hard to tell. What I can imagine happened: Someone realized there is a typo. AMI was made aware of that. AMI did additional Quality Checks. Chips were in spec. Re-Labelling, after the fact, is expensive and time consuming. The batch got a concession, AMI probably paid less for that batch. All good.

In a case like this, it seems like a reasonable course of action. Assuming otherwise is borderline paranoiac.
Played around with python for a similar attack and while it needs import and usage of f-string's i was rather taken back how easy it would be to spam the internet with `f"""{exec("import urllib.request;urllib.request.urlopen('http://localhost:8000').read()")}"""` and variants, see what servers bite and then try to send them a more potent attack.

So i personally believe log4sh type attacks across languages will become a lot more common. Because the risk is relatively low and a lot can be automated.
Yeah, we can. The issue is that tensile strength is measured as pressure, as force per area. Splitting a one meter cable into 10 cm cables is certainly possible. Those are half the length of your normal school ruler. You will need 100 of them, though, and since the area and length are the same, the volume, and by extension the mass are the same. It's certainly easier to manufacture, but it doesn't change the calculation. Cranes capable of lifting metric tonnes are giant. Just the cabling alone can weigh as much as a small skyscraper. That just isn't going to space.
"Alexa, define yak-shaving"
Always good to be reminded not to eat that shit. However, article is old news on a rather dubious looking website:

https://www.snopes.com/fact-check/jamie-oliver-mcdonalds-bur...
I also love Alpine.js, but after implementing a dropdown with it, I'm thinking maybe sometimes it's too verbose especially combined with tailwind.

https://gist.github.com/egeozcan/cdc90e290271f3ea4b6801dcf1a...

I should mention, I did want it to be quick and dirty (it's a prototype), but well, it could have been a bit more concise. Double set parentheses come from the templating system I use BTW, if it wasn't clear.

Being HTML oriented is very cool, and you get a lot of things for free, but I keep saying "oh this would have been much easier with react" a bit too much.
1/4: learn to stop worrying and love excel
https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3044191/

I have benefited a lot from acetylcysteine.
>I have never heard of such a platform besides the web.

Steam comes to mind.

> ... yes, it's not the ease of use that makes users like web, it's that computers in 2021 come with browsers installed that makes users prefer web over bloated desktop applications

Wasn't comparing to "desktop applications." I was saying that the reason that the download-code-then-run-it functionality was shoved into the browser rather than coming in some other form, was that the browsers were already on all the desktops.
Just because seatbelts are "truly protective" that doesn't mean that getting into accidents is risk free.
Fake news alert
Inflation is a positive if you're holding a currency, because that suggests interest rates will go up and that currency will yield more be more valuable.

Inflation is only bad if you intend on spending that currency on goods and services affected by that inflation. Currency investors are not doing that, they'll just sell for another currency.
Monopolies (including the so-called "natural monopolies") are not a problem for the free market, but rather opportunities - bounded only by human ingenuity, imagination and capacity to innovate.

In reality most monopolies we encountered were actually created or sustained by governments, through their dear friends patents and regulations which raise the barrier of entry and compliance costs, create unintended second-order effects and generally dampen competition.
There's a difference between throwing a full grown baby in a woodchipper and ending a pregnancy of in an early stage. European countries also have limits on the stage at which you can end a pregnancy. Besides, when it comes to a pregnancy, the right to self determination and physical integrity of the women in question being pregnant is in play.
You actually rent it from the state for a fraction of its nominal value each year. Don't pay your rent (property taxes) long enough and the state will absolutely put a lien on "your property" or confiscate it - by force if necessary.
Never tried either of them, but MRI shouldn't really stimulate your brain, or interfere with electrical activity. Surely not to the level of TMS.
Be aware that using SLF4J does NOT mean you're not using log4j (1 or 2). SLF4J, as it names implies (Simple Logging Facade) is a logging facade, so your code is not tied to a specific logging implementation, like log4j. But it does not do the actual logging, and you have to use some implementation, which can be (and quite often is) log4j.

However, it is right that log4j2 is not as ubiquitous as log4j1. Spring Boot, while using SLF4J, defaults to "logback", if I'm not wrong, which is another logging framework similar to log4j, but not affected with this kind of vulnerabilities.
Same manufacturer selling out-of-spec batches initially produced for Dell on the grey market maybe? As long as Dell parts are within spec, who really cares? If anything, geting in-spec parts from Dell from, what looks to be, the same supplier while direct orders from the supplier are out of spec should increase confidence in Dell's supply chain.
Ah! Partial application != partial functions. Thanks all!
As NSO Group mulls selling Pegasus, can we ever trust this spyware?
It comes from the dimensionality of the hidden state of popular NLP models. The number 768 in particular comes from (if I recall correctly) the largest of the original BERT models.
> First, you will need a Kubernetes cluster running version v1.23

Good luck with that.
> _can't reboot their servers_ because they simply don't know how to bring the app back up

A hundred years later IT priests will demand human sacrifices to appease the server gods
What versions of the mentioned packages is this feature included in? I.e. what should I be looking for in my distro updates?
> If you want to buy any NFT, you have to go to a centralised marketplace like opensea.io.

With hicetnunc.xyz, there is already one example of a "marketplace" shutting down and being immediately replaced with alternative interfaces - which works because the underlying smart contract doesn't care what system people use to interact with it. The "blockchain is a distributed database" part does indeed work if a system is designed to use it.
https://www.kalporshujob.com/2021/12/ssc-result-2021.html
We patched when we were notified. And we have a pretty robust model around Workers that is meant to deal with this possibility.
The iPhone DND switch is something that should be on every mobile device.
Yes, but the margin on the futures contract may push you into a loss.