skysight-inc/HackerNews huggingface dataset:
Wait until people find out about the effectiveness of wearing masks on preventing covid infection and spread...

I noticed Phenylephrine didn't work at all for me a handful of years ago after the pseudoephedrine swap occurred. Did a web search and turned up the same info here.

At the time it was amazing to me that these products were being sold.

This is a great article and I applaud the author for trying to get these products pulled or replaced with something effective.
Mastodon clone or instance? If either, explain why. What's the difference?

The benefit of federation is to have multiple philosophies in charge of moderation of their own communities whilst also being connected.
> We all know that Tesla’s Autopilot isn’t good

Damn, what a first sentence. Also, 100% wrong.
For email, I forwarded all emails to my new email. The rest was easy, except for Youtube... I need to find a way to subscribe to channels without a Google account (it would be nice if they had RSS and an external link).
This seems like a stretch. Barring some rather unexpected effect, this device will not change the amount of aerosolized pathogen emitted by a person. At most it will change the distribution — the aerosols will be presumably be mixed into a larger volume of air. So maybe they will spread somewhat father, but, if so, they’ll be more dilute.

[0] To the extent the wearer’s breath is sucked back through the filter, the total emitted pathogen load will be reduced.
> It makes zero sense that you used children and micro transactions

I somewhat expect adults to understand gambling and in-game transactions and the fact that they are somewhat manipulative [0]. I hold no such expectations for children who generally accept whatever is presented to them. Blaming a child for buying a box of digital gems or what have you will do no good.

Similarly, I don’t think blaming Ramon the wiener dog ramp salesman for advertising on FB is really going to challenge FB’s market dominance and iron grip of advertising. I don’t expect Ramon to understand issues of data privacy, internet surveillance, advertising monopolies, and walled gardens, or - if he does know about them from passing - I don’t think pressuring him to follow his conscience and resist the market size of FB will do any good.

“Blaming” businesses who advertise on FB without providing some alternative in the market will not succeed. Rather than blame Ramon, we should restrict FB’s ability to surveil people whether through private (e.g. Apple) or public (e.g. regulation) means. This way, as FB’s effectiveness dwindles, the market will produce some solutions as alternatives for these businesses to go.

Instead, pressuring and blaming FB for their handlings of these issues will prove far more effective. We’ve already seen some limited success with this strategy, landing FB in Congress multiple times and getting the Netherlands to reconsider their huge data center, not to mention issues of GDPR, the “right to be forgotten,” etc.

I chose children because just as I don’t expect them to resist loot boxes, I don’t expect business owners to resist FB advertising. I listed alternatives that Ramon should do as a good businessman if FB is not an option, and options I believe will yield more direct results and a more loyal customer base. The world is not divided into clueless children and perfectly knowledgeable and ethical adults. But rather than blame the advertisers (Ramon), we should go after the ad market (FB).

[0]: That said, I still think we should blame the companies who use dark patterns and casino strategies to trigger people’s tendencies to gamble or “roll the dice” after a couple hours playing a game. You could say “players” instead of children, but this isn’t really analogous to small businesses because I still expect some adult players to know when they’re being played. I don’t expect any small business to reject FB advertising if it is presented as a way to reach a huge customer base.
21st century definition of Fascism = Somebody I don't like.

Source: Mainstream media, Twitter, TikTok.

Looks like a lot has changed since the books of S.G Payne these days. Now everyone is suddenly thinking up ways of defining who is the top fascist villain of the month with their own loose definitions of what fascism is.

Oh dear.
Um... not for everyone.
> every other CI product still relies on VMs for build work.

Gitlab CI has dockerized runners? Works great!
Not being born is only a problem if you had the notion that your potential life was cut off. A potential zygote, not an exiting zygote, obviously has no cognition by definition and by determinism. So there is no suffering. Nothing is being aborted. In any event, if this "dog x" has to exist, why not a healthier crossbreed?

I'm not proposing to cull the existing dogs, just not to further a breed and other breeds of dogs that suffer health problems due to our artificial breeding. There are lots of other dog breeds that do not suffer more health problems than average.
Universe in a black hole with spin and torsion (2014, Nikodem J. Poplawski)
I've spent most of my day on this and can confirm there is serious potential to this. It's not a log4shell but it's serious.

You're potentially vulnerable if you use POJOs as request parameters[0] with Spring MVC and Java 9+. To support complex POJOs (like a POJO in a POJO), Spring uses the `.` separator. Therefore, you can have a request GET /somePath?innerPojo.field=foo that will get mapped properly [1].

Now, in [2], the `getCachedIntrospectionResults()` result has a `class` parameter that I believe should not be exposed. In this object, there's a bunch of parameters that can be set, that's where the problem is. In the POC seen across the web today, it was modifying the `AccessLogValve` of Tomcat. The exploit mentioned in [3] relies on passing a parameter like this :

GET /somePath?class.module.classLoader.resources.context.parent.pipeline.first.suffix=.jsp

This will access the `class` object and uses the `getModule` method of the `Class` object to get the `Module` class. Now, this class has the `ClassLoader` exposed via a getter BUT it's exposed as opposed to the `Class` class[4]! In the POC, it's an instance of `WebAppClassLoaderBase` (when using Tomcat, under some circumstances). This class has a `getResources` method that is accessed here, along with `getContext`, `getParent`, etc. all the way up to the last delimiter which invoke the `setSuffix` method of the `AccessLogValve` instance [5]. Rinse and repeat this to set the tone for the JSP vulnerability and you have a RCE.

Now, this needs some specific preconditions. However, there are probably hundred of other mutable objects accessible this way that could lead to pretty nasty bugs, vulnerability of information disclosures.

Finally, I can confirm that the workaround with `@InitBinder` mentioned in [6] works.

EDIT : Looks like a regression from CVE-2010-1622 that was fixed in [7].

[0] https://docs.spring.io/spring-framework/docs/3.2.x/spring-fr...

[1] https://gist.github.com/jebeaudet/127e6fb0b59e06c0642d2f362e...

[2] https://github.com/spring-projects/spring-framework/blob/mai...

[3] https://www.cyberkendra.com/2022/03/spring4shell-details-and...

[4] https://github.com/spring-projects/spring-framework/blob/mai...

[5] https://github.com/Oreste-Luci/apache-tomcat-8.0.26-src/blob...

[6] https://www.cyberkendra.com/2022/03/springshell-rce-0-day-vu...

[7] https://github.com/spring-projects/spring-framework/commit/3...
Oh this is lovely. I forgot how much fun text-based adventures are.
Who handles the sexual harassment complaints and the illegal hiring discrimination?

Who handles health insurance and 401k match?
The more frequent solution is to adopt some sort of credit system. When much of Europe “reverted to barter” after the collapse of the Roman Empire, and then again after the Carolingian Empire likewise fell apart, this seems to be what happened. People continued keeping accounts in the old imperial currency, even if they were no longer using coins.
To me, it's interesting how Apple's Touch Bar on the keyboard often gets criticism from technically oriented people, yet in theory it appears to solve the needs of everybody here: just figure out a way to program your desired key into one of the spaces and you have anything you need.

I've never bought one of those machines, so I have to ask, what was the problem with it? Was the issue just not having tactile feedback? In pictures, it appears nice looking at least.
I don't think cash is the answer to these issues, unless you are ONLY using cash.

The way you're describing it is a system which is specifically geared to looking at individual purchases rather than more general behavior, which is how I suspect the models these companies use now, and will use in the future work.

There is so much data about us in the world (unless you actively try to hide your behavior, which also leaves a different kind of fingerprint) that the behaviors you describe, or risk you present, is discoverable through other means.

But looking at each of the examples you give

* Health Insurance - uuhhh.... well, I don't live in America, the rest of the developed world has pretty much got this figured out. But..where you live, how much you make, how often you change jobs, all these kinds of metrics feed into the rudimentary understanding of health. Also, don't health insurance companies ask if you smoke?

* Home Insurance - I think the above applies to all insurance. If you buy more candles, are you really more of a risk? Or if you have other risky behaviors? Candles could definitely be a false positive. It doesn't matter if I have thousands of candles, a careless person with 1 candle could be more dangerous.

* Law Enforcement - I think this one shows the flaw in your thinking. If I'm buying "too much ammo", is that because I'm using so much at a shooting range? Doesn't an a risky shooter (like someone about to pull of a mass shooting...again...an American thing...the rest of the world have figured this part out...) only use like 100 more bullets in their shooting? How much time is that at a shooting range.

So yes, these are just examples, and like you said, most of this data is already available without having your purchase information.

Now, I'm also cautious about where my purchase info goes, or as cautious as I can be, but this is the world we live in. I don't think we can put the genie back into the bottle, but I think it's important we don't just burry our heads in the sand and not understand how much information is available about us.
Yes, it goes both ways; the tenant could have won by cheating and lying. There is no way to conclude anything without examining all of the facts and coming to your own conclusions.
As a binational, I am always amazed by the nationalism in the USA. I'm not even talking about "ultras" like many far-right groups, just "normal decent people".

An US flag on almost every house, the pledge of allegiance at school, the belief into the American exceptional destiny, the belief to be the best country in the world...

I lived in Brazil for 5 years and they are very nationalist as well. Many young Chinese as well.

Patriotism is one thing, nationalism another. In Europe, we have learned that the hard way. Obviously, we are slowly forgetting the horrendous wars of the past, since nationalist political parties are getting more and more votes.

The distance from nationalism to ultranationalism becomes very short when a crisis appears. At the beginning of the Putin's unprovoked invasion, many Ukrainians wanted to fight for democracy. With the huge destructions and killings, I hear more and more their initial patriotism turning into essentialism: I'll die for Ukraine, Russians are barbarians by nature, etc. That's quite understandable, but still is a concern.

Note that I do think that a large majority of Russians are favorable to this war, in the sense of a necessity. Even if they were able to listen to independent media, I doubt that it would change their mind. The collective representation is that Ukraine is part of Russia - which is not true but still taken as a self-evident truth.

If the Russian people had access to independent information, they woukd be angry towards Putin for not succeeding, for the disorganization of the Russian army, for putting their sons at risk with a bad strategy and bad intelligence. Only a minority would oppose the war on historical grounds, or in the name of the sovereignty of the Ukrainian people.

When the French army was fighting against the independence of Algeria, or during the Vietnam war, few were opposing the war. The opposition went larger and larger in the US when the draft was imposed to the youth. Otherwise...

Unconditional support of "our" troups whatever the reasons for war is widely expected, if not considered as a civic duty. To me, that's the essence of nationalism: we are right because our country can't possibly be wrong. That's exactly what many Russians say when interviewed by western media. "Of course, Ukraine is a part of Russia. Of course, our army don't kill civilians."

When I cite the 2nd Iraq war, most of my American friends (educated & decent people) say: "Oh, that was a mistake". Yeah, a "mistake"... Tens of thousand civilians killed is a bit more than "a mistake". In France, most people don't know that hundreds of thousands of Algerians were killed during the Algeria War.

We, humans, are not social animals ; we are tribal animals.
That's a valid point, but do we need badger hunters this day and age? Perhaps go back a couple of centuries before they became so deformed?
It's not a court ruling, it's a regulatory order.

Here's some detail Apple didn't include: https://www.theverge.com/2022/3/28/22999998/apple-bigger-fin...

And no, not all oversight should be appealable. That's how it became nearly impossible to permanently fire bad police officers.
I remember the loyalty I felt as a junior engineer to that first manager that actually showed empathy and helped me.

I stayed in that role longer than I should have and cost myself a lot of growth and money by not switching jobs every 2 to 3 years like I do now.
As a consumer, I don't mind if they are less efficient. Just as long as they are the cheapest option.
Honest question, what is golang a good choice for? It seems to inhabit the nether realm between high level productivity and low level performance, not being good at either.
I still don't really get pair programming. Maybe it's my inner introvert, but it sounds really draining. And what about all of the non-programming time during the day?

I mean, today I spent time:

- Digging into the analysts dashboards for some time series that seemed off. Generated a plot from my own metrics stash, filed a bug w/ the analysts about the differences. Replied to some doc comments saying that I'd done so.

- Code review of a few changes.

- Write a quick jupyter notebook (well, colab) analyzing a different problem. Basically reading the data for an example into the notebook, writing a bit of code to visualize it, fiddle until I had some sense of what the problem was.

- Decide I should regenerate a dataset with some different processing. Spent maybe an hour doing the code changes and getting them reviewed. Then build the binary, run it to generate a dataset, then launch a few-hour processing job to see if it works better.

- Write some notes on how I should decide if the new version is better than the old version.

- Fire off email to a few people. Asked one person about existing viz tools, updated another about my earlier colab experiments and asking if they know of anyone who's done a similar analysis.

Out of all this, I think pair programming would have maybe been tolerable for a bit in the middle when I was actually making code changes, but everything else was either based on huge amounts of internal context or was completely ephemeral analysis.

I think I must be doing a different kind of thing. :-)
IMO the best open source infra lock-in strategy is kube

took a while for E/AKS to catch up with G, things like ingress still vary in DX across clouds

'the same everywhere but it only works here'

(no comment on morality of this, quality of kube generally, or whether this team will do the same. docker IMO missed the chance to be a cloud host or a standard interface)
Eating only 3 times a week? The metabolic breadth of the human body is impressive. I have a hard time eating only 3-4 times a day. I do 2-3h of solid exercise every day, so I burn a lot of calories. I'm pretty sure I could get away with less, but I'm fit, not getting injured, and doing a lot more than 99% of people my age, so not going to mess with my eating habits too much at this point.

From what I understand fungus does not produce B12, it's only produced by bacteria. It's added to nutritional yeast ... to make it more nutritional. Bacteria in our (and other animals') guts do produce B12, but we tend to need extra B12 nonetheless.

I don't eat meat aside from a bit of fish, but I agree that a little meat in everyone's (especially children) diet would not be a bad thing. It's best not to be puritanical or extreme when it comes to diet. We're omnivores after all.

I have a pet idea that a real paleo diet would include insects and grubs, but not sure if there's much anthropological evidence for that.
When I use cash to pay my mechanic for something quick, they give me a discount and round to the nearest $10.

If I use a credit card, we have to go for a walk to the back office and wait for an old and creaky point-of-sale machine to navigate a slow network connection.
Different people are different. It doesn't mess with sleep at all for me. My wife has to use it with care, continued taking of it gives her overdose symptoms. (Obviously, it's not being eliminated as fast as they expect.)
I can't see that being that difficult personally. You are already searching for string + @ + string + .com, string + at + string + dot + com isn't exactly rocket science.

I have seen some people doing things like //\\//name\///at\\\///domain///\\com which might be more unexpected, and therefore might help. But any practice if it becomes common will be seen through.
Hubble spots farthest star ever seen
Well played, sir. Well played.
Possibly, but objdump can disassemble into Intel syntax.
Short (~5 min) video summary, if that's your thing: https://youtu.be/YoOFJApmPKc
I would suggest righting a letter and sending it via snail mail. In most cases letters to public offices are archived, they get a protocol number and all that jazz. Send this as Cc:ied to the local Google HQ and keep us updated.

Be frank about your concerns and seek resolution of the subject at hand.

If you have a lawyer that can assist you in writing such a letter (yes even an informal letter) that wouldn't get you in hot legal waters with Google even better.
There are lots of people who never want to get between two people arguing. Some of these people become managers or executives.
Possibly dumb question, but... why do orgs need specific pair programming policies at all. Why can't you just ask questions and help each other as needed?
Who's going to clean the house?
Why and How Migrate from Firebase to Serverless Stack?
> For good reason. Tracking of clinical outcomes is the wet dream of insurance companies.

Sounds like a sufficient reason for single payer healthcare and single payer malpractise compensation even if all the imagined downsides were real.
> The public now withdraws around £100m less from cash machines each day compared to before the pandemic

I found this astonishing. I haven’t used cash in so many years that I can’t even remember which decade I last used it. The fact that so many people are still using ATMs astonished me.
> The vast majority of software on F-Droid is My First Android App garbage, usually doesn't follow any common best practices for UI/UX on Android, is extremely specific

And thank goodness for that. If I just want an app to strip EXIF data and crop+resize, the relevant F-Droid app will be that, and just that, and will simply have a button front and center to do the things, and not hide crap behind whatever fancy multiple-taps nested menu indistinguishable-from-background options are the latest Google-driven UX fad. And as a bonus, it'll usually be smaller and lacking the analytics and ads and nagging subscription features that infest so many comparative "useful" apps on the play store.
Clone, as in a re-skinned version. But my main point is the irony of releasing a pitch deck like this [1], and just adding some custom CSS to popular open source product.

[1] https://www.sec.gov/Archives/edgar/data/1849635/000119312521...
I don’t have an existential crisis, I just seriously question dependencies that aren’t heavily used, ubiquitous libraries in the community. Basically libraries that have become so synonymous with the language or task itself that if they broke, there’d be so many teams really screwed, that there’d almost certainly be some clear migration path.

Example: Python data science and Numpy/scipy/pandas stack
I think partnering with those who are already selling electronics kits like you say, Perhaps finding some interested folks on Tindie might be the direction to go. Are there any other Tindie type websites?

Thanks for the information on the fab, Although not immediately useful for my problem it will add value to my curated list of startup tools[1] for anyone looking to manufacturer small quantity of boards.

[1] https://startuptoolchain.com/#manufacturing
Dokku is amazing. Thank you for all your work. I have this sense of magic when I use.
That was a fun read. Thanks for the recommendation. Scott Alexander will make for a fine science fiction writer someday, if not already.
"As an practioner of IT, the domain of pure logic, I don't have emotions like other people"

There's a reason this profession has the issues it does because the most drama heavy people are always those who think they're perfectly rational automatons.
> Teens, tweens, and younger twentysomethings already seem to regard Instagram as something for "old" people.

Not really. I'm in a pretty diverse sport and the high schoolers I'm familiar with are still using Instagram too.
It can't have a total "hard-stop" because otherwise it would break hard for a paper bag or some exhaust smoke.
Ask HN: What is consulting and how to start?
I spent my first 4 years in the industry doing freelance and word-of-mouth contractual work. The following decade has been all corporate, salary positions. This has all been remote/WFH.

I'm interested in consulting. I want to make sure I understand what separates a consultant from a salary employee, freelancer, or even just an entrepreneur. I am also curious how one successfully enters the consulting world.

My goals are to have more control over my schedule, avoid another decade of job hopping, and enter the next stage of my professional development. I have no interest in corporate politics nor do I care to watch Slack or have my butt in a seat during certain hours just in case someone needs me. I'm hoping that I understand what it means to be a consultant and whether its a good fit for me.

Can anyone shed some light on what life is like as a consultant along with tips or anecdotes about getting started?
Yeah it’s inefficient, but that “deadweight loss” gives you the common infrastructure required for a modern society (roads, police, fire, et al)
Hmm, the ones I saw usually weren't like that. Some episodes he screws up and makes it right. But others, he's the helper. In some ways it's good to show that people sometimes make mistakes and then fix them.

On a side note, it seems there aren't many boys shows these days. Some mixed shows, and a lot of new girl focused shows. Maybe I'm out of touch though.
That's great ;)