skysight-inc/HackerNews huggingface dataset:
Such differences also served as a forensic tool for Sherlock Holmes, as in "A Case of Identity":

> “It is a curious thing,” remarked Holmes, “that a typewriter has really quite as much individuality as a man’s handwriting. Unless they are quite new, no two of them write exactly alike. Some letters get more worn than others, and some wear only on one side. Now, you remark in this note of yours, Mr. Windibank, that in every case there is some little slurring over of the ‘e,’ and a slight defect in the tail of the ‘r.’ There are fourteen other characteristics, but those are the more obvious.”[0]

[0] http://etc.usf.edu/lit2go/32/the-adventures-of-sherlock-holm...
Thats why hypothetically it's best to use one accepting a bitcoin payment and then fill in the other details from a fake name generator.
> They could go to bed at a decent hour but usually stay up late & catnap instead.

My wife (as a Japanese salarywoman) is perpetually tired, but still stays up late watching TV/SNS. Why? "If I went to bed early, my whole life would just be work and sleep"
A big part of the problem is that when you just walk up to someone they don't really know what your intentions are. My wife is actually currently working on this problem though. She is an event planner and has started running meetups specifically for people who are looking to meet new people. It has worked pretty well in the US, but we're actually going to be moving to London (assuming my visa comes through...).
No, it's fine if you just drink tea non-alcoholic beer. You just have to act the part. At least at my wife's company it's fine (it may help she has the excuse of having to drive)
There has been some more recent work on this lately:

https://www.dfrws.org/2016eu/proceedings/DFRWS-EU-2016-7.pdf

Essentially, with newer RAM (DDR3), the location things end up on the physical chip is scrambled to improve reliability:

> Storage of bit streams which are strongly biased towards
zero or one can lead to a multitude of practical problems:
Modification of data within such a biased bit stream can
lead to comparatively high peak currents when bits are
toggled. These current spikes cause problems in electronic
systems such as stronger electromagnetic emission and
decreased reliability. In contrast, when streams without
DC-bias are used, the current when working with those
storage semiconductors is, on average, half of the expected
maximum.

So once you image the RAM you have to figure out the scrambling and undo it.

Related: https://github.com/IAIK/DRAMA
Hopefully, if you're a thinking person, every stimulus "Gives ideas". What anecdote doesn't do, is provide us with evidence to support a given hypothesis with anything like rigor.
ResumAI. It uses viewing time and a genetic algorithm to display your resume and learns to be more effective over time by changing its layout.
Maybe its my interpretation, but it seems that you are in favor of equality of outcome and tools like affirmative action. I have always wondered what proponents for it thinks if it was to be used in gender equal language, like if government would have a policy to always use affirmative action for work groups that has less than 40% women or men. A lot of professions have above 90% of a single gender (a trend that has been increasing in the last 30 years), and universal use of affirmative action would cause a lot of movement from typical male or female professions.
My thoughts on this:

Mathematically a single queue is far more efficient.

The psychology suggests that someone seeing a line makes them work faster.

First off, this is fleeting -- in a just a few years, we won't need people at the registers anymore as RFID technology gets cheap and more people become comfortable with the ever improving self checkout.

Secondly, even if you assume we will have checkers for a long time, this is again an easy problem to solve. You have a single queue, and then you make part of their pay based on average time per client or their evaluation. They'll work faster because of it (maybe).

A counterpoint to my own point is that Target does rate their checkers on efficiency, and I've watched them game it before. The checker meticulously lined up all my items with the barcodes in a row, then hit the "new customer" button, quickly scanned all the codes and hit the "total" button, giving him a very fast time. He figured out that they only measure from when he says "new customer" to total, so even though he was slower than everyone else, he had the fastest time.

But my overall point is that humans will soon be out of this loop anyway.
MH370: Blaine Gibson's one-man search for answers
Back in highschool, me and a couple of friends tried this attack ourselves (not going after disk encryption, just looking for strings in the memory dump).

By simply plugging in a bootable USB that we made, powercycling the computer [0], and selecting boot from USB in the BIOS we were able to get a memory dump from the computer.

By analyzing this memory dump, we were able to reconstruct the HTML of webpages that were open, and generate a list of password looking strings, which did contain several actual passwords.

I guess this isn't really in the wild, as it was one of our own laptops, but their was nothing stopping us from doing it on school computers to hack into other people's accounts if we wanted to; and, the person whose computer we used did end up changing her passwords.

More importantly, if a couple of highschoolers could turn this idea into a usable exploit, I would be amazed if this was never done for actual attacks.

[0] Most of the time it worked if we manually powered the computer down then up, but it worked consistently when we rebooted from within the OS.
Thank you for your comment, which I've carefully read. Feel free to email me at wstein@gmail.com, though I can't guarantee I'll have much time to answer, since I'm pretty busy. Indeed, one must constantly guard against the many intrinsic evils of corporations.
I was feeling all good for Norway, till I read this:

> It helps that Norway is also the biggest oil producer in Western Europe and the world's third largest exporter of natural gas.

Hmmm.... You know what would really help the environment, Norway? If you stopped drilling all that oil and gas. Your measly consumption of gas isn't the problem; your mega export of oil is.
- Concatenative and tacit programming. Forth, APL, Joy, Unix pipes, Haskell's point-free style to name a few
R/shutdown – The Startup Graveyard
And not just for ISA, there's tons of patents on everything from the microarchitecture optimizations to ways of synthesizing things. "Up-to-date" textbooks that today's academics are using probably include plenty of infringing material because a good part of why they learn that is to eventually work for patent-holding firms to improve their I.P..

On the flip side, trade secrets obscure many great tricks in this industry, esp for analog, to try to reduce number of patent suits they get hit with if they expose their constructions. Plus for competitive advantage with consideration for cloners that ignore patent rules. So, one says we can't use many, good techniques where another says we can't know it.

The "joys" of OSS hardware...
In 2007, Tim Abbott (before founding ksplice and zulip) beautifully and properly packaged Sage for Debian, and in fact Sage was included in Debian standard! Unfortunately, he stopped working on the project (when he started those projects), and of course we had no money to hire somebody else to maintain what he did. If I had money, it would be a total no brainer to spend it on supporting packaging SageMath for Debian. Your remarks about it being impossible because of our package manager and dependencies aren't correct, because things we the same in 2007.
What's the utility to people in dw society of providing benefits to fw? This has happened across broad industries and dw through their governments have signed trade deals that usually include retraining for the workers affected. Otherwise, dw and their governments end up subsidizing the costs of corporations making bank which has so little social benefit that it's really not normal to allow it to go on.

It's not a free for all in places like India to allow fw to displace their dw or drive down their dw salaries. The US is getting taken for a ride with these policies.
Because you need to be you. You have a partner and they need that you too. The kids need to understand that adults need to be adults with adult activities. Subverting everything for the children puts you in stasis and doesn't properly teach the children about growing up and being an individual or how to be with a partner. If the children cannot fill the unstructured time then they will never truly be adults.
I had the same problems years back when I first tried AWS; I mostly just learned everything by rote.

Recently, though, I tried setting up a simple home "VM lab"—basically a two-node cluster of regular workstations, running bare-metal hypervisors (e.g. Xen, VMWare ESXi, etc.)

When you do this, suddenly everything IaaS providers do comes into stark clarity.

For example, you realize that with even two nodes of scale, that sticking a lot of storage into each VM node is expensive, especially if you're not going to use it all on each node; it's a lot cheaper to have diskless VM hosts (save for an SSD for swapfiles), and stick the disk volumes on a SAN, connected to the VM hosts by something like iSCSI. (This then gives you other benefits, like disks that are copy-on-write clones of other "template" disks on the SAN; the ability of VMs to "fail over" to another VM host (and thus the ability of the host to gracefully restart without killing its VMs—at least, from a user perspective); "free" snapshots with rollback; etc.)

EBS is exactly such a setup—the perfectly-sensible setup for any VM cluster operating at scale. It's the other setup—local disks in the VM hosts—that's insane and doesn't scale; everyone is just familiar with it because most people's experience of providers is with the ones just getting off the ground who are before the ROI intercept.

Or, for another example, when running a heterogenous VM cluster, you immediately realize that the unit that the VM CPU resource commitment is measured by on a VM host is a "vCPU"—which is not exactly one reserved physical core (since it can just represent a hyperthread, and can be overcommitted when other VMs aren't using their resources) and is not the same on each host, since each core operates at a different speed.

The closest you can really get to getting a useful unit of CPU allocation, then, is by rounding off the host differences to integer multiples—such that you could say that one vCPU on host A is (roughly) equal to two vCPUs on host B. That unit, whatever you call it, will then scale up over time, as you phase out previous generations of VM host hardware. That's an ECU.

Smaller hosting companies can get away with telling you what CPU you'll be running on, because smaller hosting companies are new enough to have homogenous hardware, and small enough to not attempt anything like live VM migration. A company that has both heterogenous hardware and must migrate VMs across that heterogenous hardware can't make any such claims.
Instead of removing the web messenger app, they should have made it harder to use then the mobile app... like many companies do.
The relative danger of rural vs urban areas is irrelevant. My point is that the amount of weapons and the incarceration rate should have no bearing on their rankings. A better reason would be: "statistically you are more likely to be killed and/or unfairly imprisoned due to corruption" which is not what he said.

> Anyone claiming -- explicitly or otherwise -- that there's a clear-cut causal relationship here is disingenuous, completely new to the US gun control debate, or blinded by prior belief.

Correct, there is no correlation between gun control and safety.
https://www.washingtonpost.com/news/volokh-conspiracy/wp/201...
http://www.cato.org/publications/commentary/gun-control-myth...

But in defense of the guy in the article, he did not mention "gun control" but rather the amount of guns in total -- which may actually have a positive correlation with homicide rates:
https://www.hsph.harvard.edu/hicrc/firearms-research/guns-an...
this, of course, is most likely due the fact that people will try harder to get guns if they live in a more dangerous area
I am a bit suprised they studied this with lab experiment as opposed to observations at a real store with professional cashiers.
> Do photons quantize and transmit the magnetic force?

The magnetic force is just an aspect of the electromagnetic force ("interaction" is the word more commonly used in quantum field theory), so yes.

> Are charged particles constantly sending a continuous stream of photons out in all directions?

Virtual photons, yes; they aren't observed directly, only their effects--what we see as the electromagnetic interaction between charged objects--are observed. At least, that's one way of (heuristically) looking at what is happening. This way of looking at it has limitations, but it can be helpful.
Immigration for "skilled" workers is flawed in US
Please look at other countries ( point based system ) and for the love of sanity just adopt best practices ...
flaws:
1) Skilled worker immigration should be based on "skills" (country of origin is incorrect: Indian and Chinese immigrants suffer, US workforce also suffers)
2) Immigration should be tied to individuals, influence from employer has conflict of interest. (employer wants to make money even if it comes at the cost of employees ability to immigrate)
3) Immigration as whole should be based on what new individuals bring to the table (skills, age when joining workforce, true intent and ability to adopt new country)

Point 3 is complex and involves true value for US or country of adoption.
*
Immigration overall is not as complex or difficult as most politicians publicize it, it has become far more political than it needs to be, thank you President Obama.
The server config in the gist is definitely just a proxy, forwarding all of the requests through to gunicorn. Many people add more to the configuration block, to do something like serve static assets with nginx rather than their Flask application.

From the top paragraph of http://flask.pocoo.org/docs/0.11/deploying/:

"While lightweight and easy to use, Flask’s built-in server is not suitable for production as it doesn’t scale well and by default serves only one request at a time. Some of the options available for properly running Flask in production are documented here."

In short, the Flask server is not really written or tuned for production, so we use gunicorn or wsgi which are WSGI containers that are production ready :)
Keep greeting them - they will come around.

I am from the US South and not saying hello (or waving when they pass by) is considered bad manners. I have done this all my life and people have told me that they like it when someone says "good morning" with a smile. Maybe I am lucky or biased, but I don't care. I like it when people are nice and I treat people the way that I want to be treated.

I sometimes have to spend a lot of time in New York and the people are the same. I just push through it. They won't change me because I like it when people are pleasant. Plus, the world is a nicer place when people are nice to you.
Thats a true Scotsman argument.
"Isomorphic" Javascript? If there exists an isomorphism between the code on the client and the code on the server, then someone should be able to write a proof.

Otherwise, using the same language on the client and the server does not constitute an isomorphism.

Kthxbai!
I'm sorry. The point of my talk is that Sage is not a viable alternative to Mathematica, etc., for many reasons, e.g., not having a native Windows version. Porting a huge amount of deep technical software from Linux to Windows is the sort of difficult and thankless work that will not get somebody tenure in academia. I tried hard to get funding to get help on a Windows port, and Microsoft donated $30K for this effort back in 2008. However, $30K is not enough to fund such a huge project. In fact, I once met with a bunch of the revolution analytics devs, and learned they were getting millions from Microsoft just to port R to run natively on Windows. This was disturbing, because R is just one of the 100 components of Sage. In my talk, I mentioned the new grant in Europe that is funding the first ever fulltime Sage employee, and it turns out his main job so far is working on a native Windows port of Sage. Unfortunately, though he is incredibly good, he'll probably discover how daunting this project really is. (It's not a one guy for a few months sort of project... And yes, I tried very hard once to port Sage to Windows and failed.)
>I could see that if it was a pill or injection taken periodically over 15 years, but not a single procedure

This is a pretty involved, and long, procedure. One of the main factors about psychosomatic fatigue/pain illnesses is that the patient gets stuck in a vicious circle where the stress of the illness itself causes further symptoms. Sometimes all that is required is something that breaks the cycle.

>Also claiming that MS is largely psychological is, at best, insulting to MS patients.

First of all, I never said that. I pointed out there there are psychological aspects to it, and argued that there may be some patients diagnosed with MS who have a psychosomatic illness. What % that is, we don't know.

I would also argue that it is very unhelpful for you to have that attitude, and it is a reflection of the bias against psychiatric illness that is so prevalent in society.

It also goes against what we know about how the brain works. It has been pretty conclusively demonstrated by Noakes and others that psychosomatic fatigue is a fundamental part of the human brain, and likely all mammals as well. Saying that psychosomatic symptoms are somehow bad - or imaginary - is fundamentally misrepresenting the science.

Unfortunately this is a very common attitude. I saw last week one of the world's top medical researchers say that changes in mitochondrial activity prove that an illness is not psychosomatic. That statement is, of course, demonstrably false, because cortisol (and therefore stress) reduces mitochondrial activity.
> To help kids become more creative, we actually need to start doing less.

Yes to doing less, yes to let kids getting bored, because "boredom" is fertile and even necessary. But the aim is not to make kids "more creative", this is not something you really want for your kids as a parent. What you really want is to maximise chances that your kids will have a "good (enough) life".
Oh, absolutely. (I've read wickard, but not the dissent you mention). I was trying to clarify that the issue was not that it is somehow illegal to eat your own food. The issue was that there was a federal limit that was being violated, and - as you note - the commerce clause was used to justify why even a seemingly local use was subject to federal regulation.
Minor clarification -- I'm definitely not "mainly the sole developer" of Sage. There are over a hundred people that have contributed to Sage during the last year, and our release manager (not me) works very hard putting together these releases. I did most of the work on SageMathCloud though...
Previously discussed at https://news.ycombinator.com/item?id=9368075.
The problem here was already known before the publication of the paper even though the paper was still a clever attack. Most of security research, including high-assurance software, was largely ignoring attacks on hardware. There was a subfield growing that didn't trust the RAM, disk, peripherals, etc. These designs drew a boundary at the ASIC or SOC level where anything tampering outside was protected with crypto, PUF's, etc. The first I saw was Aegis:

https://people.csail.mit.edu/devadas/pubs/aegis-istr-august6...

Joshua Edmison's dissertation lists a number of others along with his own, interesting scheme:

https://theses.lib.vt.edu/theses/available/etd-10112006-2048...

Nobody has learned anything different since for the fundamentals. The fundamentals are still to use authenticated crypto of some sort on RAM to detect attacks there to fail safe at worst. Also, use special IO/MMU's, SOC mechanisms, and software protected by them to handle stuff on disks. Stopping cold boot attack is straight-forward on such architectures that don't trust RAM in the first place.

From there, we move into cat and mouse game of SOC attack and defense. Most of those require physical possession for more than a few minutes, though, with often destruction of the chip as a result. So, this is a significant step forward in security vs just snatching the RAM out of the system.
this is cool, ive been burned by trying to move a virtualenv before and discovering everything broke. is it possible to merge this into virtualenv? i think it would be much easier to use that way.
The video is almost cringe-worthy in it's factual inaccuracy around 2012.

The reigniting of deep learning around 2012 was because of Krizhevsky, Sutskever & Hinton winning the Imagenet challenge (1000 object classes)

Contrary to how much Google tried to sell Andrew Ng's "breakthrough" 2012 experiment with tons of PR, the paper is very weak, and cant be reproduced unless you do a healthy amount of hand-waving. For example, to get an unsupervised cat, you have to initialize your image close to a cat and do gradient descent wrt the input. Or else, you dont get a cat...
It is not even considered a good paper, forget being breakthrough.
Also, those 16000 CPU cores etc. can be reproduced with a few 2012-class GPUs and much smaller time-span than their training time.

The next slide after the 2012 breakthrough that shows the Javascript neural network -- contrary to what it looks like -- is not TensorFlow either. It has cleverly and conveniently been given TensorFlow branding, so most people just confuse it, but it's just a separate Javascript library akin to convnet.js

Since your page gets a ton of hits, it's at least worth it to publish a comment about these GLARING inaccuracies.
Seriously just interpreted this as Harry Potter grammar correction using upper camel case.
Hi Jordi! Here's what we are doing: https://cloud.sagemath.com/policies/pricing.html
I have so far found a way to loose money. However, I hope that if we can grow usage sufficiently that we'll start making money. You and I are on the same team.
How about studying the most 'human' checkout setup?

Used to be that you could make small talk and feel the hole in your pocket growing bigger while you handed over that old crinkly dollar bill. Now I can hardly get out a perfunctory "Hello, how are you doing?", because I'm too busy trying to figure out whether I need to explicitly choose credit or whether I'm going to need to sign or not given the dollar amount... I'm not suggesting that we go back to the "good old days". I would, however, suggest that we progress in the direction of pathos and our shared humanity rather than toward whatever it is that tickles the fancy of Homo Economicus.
One of the problems in activating the homeless population is that they're not a community - most people have a life situation, lose their shelter, have a rough time, get back on their feet, and then can afford to rent again. There are some who live without permanent shelter perpetually, but this community is a small fraction of the overall population, and they have different goals.