Hacker Newsnew | past | comments | ask | show | jobs | submit | Techies4Trump's commentslogin

Anybody who doesn't use a dev VM these days is asking for trouble. It's too easy for attackers to run malicious code on your machine with techniques like this.


I would go as far as saying anyone who does not have control and awareness of their dependencies is asking for trouble. VM be damned.


That's part of the reason I feel uncomfortable with "modern" package systems like golang's. I really want to use golang more, but I just don't feel 'secure' about building a bunch of packages pulled off of github by URL.


Third-party package management is not a modern marvel by any means. You are unnecessarily singling out golang, and if you let that stop you from learning it's your loss. Just be smart. Dependency awareness is not black magic.


odd golang has a better security story than npm, rubygems, and python. it'll at least crypto ensures the dependency code hasnt been modified since you first retrieved it iirc.

the rest is up to you as a developer to ensure its safe.


Not only that, you could end up shipping malicious code to your customer.


How would a dev vm prevent this? Vms can still call out to the internet.


No host FS or clipboard access means it would be rendered useless.


Hmmm, that depends on the virtualisation solution being used.

If someone's using (say) VMware Workstation or Fusion, if they've loaded the VMware tools into the VM it can share the clipboard and be configured with access to the hosts filesystem (at defined points).


If you set it up that way it will. If you are doing this intentionally then just don't set it up that way.


I love Grant Sanderson's YT channel. His video on Fourier transforms is amazing.


sudoaza, do you think its a coincidence that the virus outbreak began about 1/2 a mile from the Wuhan Institute of Virology?

Your argument is that Dr. Montagnier must be wrong because he believes in some crazy stuff, and you must be right because you became a virus expert about 2 months ago. I looked through your old posts and you mostly post about political stuff, so you obviously don't work in medicine, but hey I guess you know more than Dr. Montagnier, right?


This is the guy who discovered the AIDS virus, also won a Nobel prize for medicine.


Is this appropriate for HN? This seems like a purely political story, probably not the right place for it.


I was wondering why it took so long for a simple random sample study to be done, but finally it has been done, and the result is pretty much as I expected - millions are carrying the virus, making the true mortality rate tiny.

This looks like a reliable study since its testing for antibodies, rather than the more common swab tests.


If the true mortality rate is tiny, how did this virus manage to kill 153k people in 3 months? Can someone ELI5 me that? People have been saying "Flu kills 30k Americans every year" and now 30k Americans died of this disease in 3 months AFTER locking up the entire country. Something doesn't add up.


If the most vulnerable did not have flu shots, the mortality of the flu would be shocking. You may or may not need one (or notice if you didn't) but every high-viral-load-facing healthcare worker, cystic fibrosis patient, etc. gets a flu shot like clockwork. And while they don't always work, they mostly work, and that hugely reduces mortality. The problem with this one is the novelty. Human immune systems get better trained (not necessarily better) with age. Cytokine storms in the eldery with covid-19 is the biological equivalent of an overfit AI with memory leaks that runaway. If the R0 turns out to be 5.6, basically everyone has been exposed at this point (not necessarily infected).


Is it usual to see healthcare workers dying of flu as well, like they do with COVID due to high viral load?


> Is it usual to see healthcare workers dying of flu as well, like they do with COVID due to high viral load?

SARS-1 (2002/2003) wiped out ICU staff in both Toronto and S. Korea.

"High viral load" is an undefined term, so I won't comment on that.


The argument, as I understand it, is that they typically have near 100% vaccination. Akin to herd immunity in that cohort. If they did not have that, it would be much worse.


Because it's novel and incredibly contagious. Unlike the flu, where many get seasonal flu shots, no one has antibodies for the virus so there's no herd immunity. Meaning it's just spreading like wild fire. And it's all happening at once so healthcare systems are overwhelmed, which affects patient outcomes. I suspect the number of deaths are quite a bit higher because of those dying without getting tested.


Tiny mortality times huge number of infected still equals lots of deaths.


yea as some people have stated, if even 30% of the world gets infected and we have a 0.5% mortality rate, then that is 11.5 million people... not a trivial amount....


> If the true mortality rate is tiny, how did this virus manage to kill 153k people in 3 months?

Because there's 7 billion people on earth.

> People have been saying "Flu kills 30k Americans every year" and now 30k Americans died of this disease in 3 months AFTER locking up the entire country.

It's been spreading world-wide since Dec.

> Something doesn't add up.

GIGO.


This wasn’t totally random: “ This study had several limitations. First, our sampling strategy selected for members of Santa Clara County with access to Facebook and a car to attend drive-through testing sites. This resulted in an over- representation of white women between the ages of 19 and 64, and an under-representation of Hispanic and Asian populations, relative to our community. Those imbalances were partly addressed by weighting our sample population by zip code, race, and sex to match the county. We did not account for age imbalance in our sample, and could not ascertain representativeness of SARS-CoV-2 antibodies in homeless populations. Other biases, such as bias favoring individuals in good health capable of attending our testing sites, or bias favoring those with prior COVID-like illnesses seeking antibody confirmation are also possible. The overall effect of such biases is hard to ascertain”

I know at least one person was inclined to get tested because he had a bad flu earlier.


Yes this is great news. Anyone who is positive for this test theoretically can go back to work.



You're absolutely right. 10X for point 1. Millions of people are carrying this virus by now. Most (probably 99.99% of "contacts" do not result in transmission), and the virus is airborne ffs, it could easily blow down wind and somebody could catch it. Are these apps accounting for this too?

Honestly how accurate do they expect these apps to be?

Absolute waste of time. Nerds with too much time on their hands.


This is absolutely dumb. You can't solve every problem with an app.


Contact tracing apps (especially those that respect privacy) are just one tool, even given the limitation that a Bluetooth LE ping by itself does not prove a person to person contact.

I will be interested to see if they ultimately are of any benefit. Perhaps not, but we don't have effective testing, treatment or a vaccine yet.


I wouldn't be so quick to judge, usually when something like this happens there's some bad blood.

If these people are reasonably good at what they do I doubt this will affect their chances of getting hired. They also don't need to put it on their CV.


Not sure that any amount of "bad blood" excuses that sort of lapse in professionalism.

Its a shit situation but you dont gain anything by burning bridges in front of you as well as behind you.


I bet people forget about this stunt in a week lmao.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: