skysight-inc/HackerNews huggingface dataset:
Dunno. Feynmann comes across as a bit of a twat in that video. I agree with his point but if he wasn't as self-satistfied and sarcastic it would give his words more substance.

After all, he's just bragging that he knows more than someone else. When people do that, even if they're Einstein himself (who never did this sort of thing btw) it's very hard to overlook the fact that how much one knows relates to their claims to access to goods and services and their standing in the social hierarchy.

In other words, if Feynmann's livelihood didn't depend on him being smarter than sociologists I'd give his opinion here more weight.

Which is not to say I haven't read and re-read his piece about "cargo-cult science" nodding along every word. It's just that hearing him voicing the actual thoughts he sounds a bit tone-deaf.
I think the SS7 vulnerability in question you're talking about is limited to the MAP portion of SS7. So for 2FA with a landline, you should be fine.
I'm not confused, I assume they mean /more compatible/ (with hardware on the shelf).
Thank you both, that makes sense.
>I once used a git animation tool (forget the name of it, sorry)

Probably Gource I would imagine http://gource.io/
> The second and third examples do not have namespaces.

> How would you include an HTML summary, for example?

As a text attribute, honestly — which would be necessary in XML as well (you could embed XHTML in XML, but not HTML). And in the general case, embedding one variant of XML inside another, rather than embedding a character-encoded variant of XML inside another, doesn't seem all that useful. How often do transforms need to reach all the way in like that?

I guess it's cool if it's possible, which is why I like S-expressions all the way down. But I don't think it's all that useful, as opposed to neat.
> Why wouldn't Microsoft explain exactly what is sent and make it inspectable.

I agree with you: I think it should.

I also think we should get the same info for Android and iOS as well, but we don't. Further, what about the massive amount of telemetry built into online services such as Gmail and Facebook? Again, there is only silence....

By the way, I think that the typing stuff is only relevant to on-screen keyboards, where Microsoft does a huge amount of tricky stuff to make text entry more accurate. [0]

Windows 10 obviously has a built-in touch keyboard....

[0] https://blogs.windows.com/windowsexperience/2012/12/06/the-s...

Although that's about Windows Phone, Windows 10 is a mobile operating system designed to merge the PC, phone and Xbox platforms.
I don't feel like fighting M$ for a crap-top. I've got a business to run. It's a waste of my time.

Also: only reason for upgrade? My customers have Win10. I wanted it for testing only.

And the upgrade blocker from in the store? Cause syslinux was my bootloader and Win update fails if Win is not the active partition.

Did my own upgrade a day after, took about 3h
Yes, Microsoft Store, University Village (just across the lake from the corporate HQ)
Favourite comment in ages, thank you!
The end result is an AI telling your child 'Shhhh, it's ok. Go back to sleep' and humming a lullaby. I'm OK with this too as long as we ignore the dystopian possibilities.
Big companies with margins like that fire for underperformance, so your ev analysis is missing some inputs I think
Gotta be true. I imagine quite a few of them work in China, not to mention India.
You may not leave JSON object properties unquoted, so it'd have to read:

{"object": [
{"id": "1234"},
{"isEnabled": "true"},
{"props": ["abc", "123", "false"]}]}

So you have extraneous quotes, extraneous semicolons, extraneous commas, plus the parsing code is complicated by having to handle all of that rather than atoms & lists (that's not a strong reason, since parsing code is written once and used millions of times).

I really, really don't get the visceral opposition to S-expressions. From my perspective they're both better & simpler.
Looks like the bottom line here is that you are being overworked because reasons.

I submit that "reasons" should not really matter to you. There will always be reasons - lazy coworker, new customer onboarding, big customer coming but only if we have a new feature X, other initiatives from sales, marketing etc etc.

Whatever the reason, the fact is that you get more work on top of your existing work. Nothing unusual with that.

Not much you can do but accept it. What you can (and for your own sanity, must) do is that, when you get more work X from your boss, spend some time with him/her to go over your timelines and adjust them. This is also a good time to ask which has higher priority - should you do X first, or do it when you are done with your existing stuff?

This often works. Even the most Dilbert-y PHB will likely accept that you need more time to do more work.

If not, well, I guess it's time to re-evaluate the situation.
IIRC even the Apple II could do AppleTalk. Often used in classrooms to share a single hard drive among a dozen or more computers.
> There is a very big difference - "with JSON one still must check the expected types anyway" is not really true, I can deserialize an arbitrary json and I will know the difference between 123 and "123" even if I don't know what's expected or, alternatively, mixed-type values are expected.

You will still need, in your code, to handle both 123 & "123" (or handle one, and error on the other). That's really no different from, in your code, parsing "123" as an integer, or throwing an error.

In JSON one must check that every value is the type one expects, or throw an error. With canonical S-expressions, one must parse that every value is the type one expects, or throw an error. There's really no difference.

If one is willing to use a Scheme or Common Lisp reader, of course, then numbers &c. are natively supported, at the expense of more quoting of strings (unless one chooses to use symbols …).
Why Russia Keeps Getting Away with Hacking America
> most hosting companies won't even list FreeBSD as an option (though in most you'll find some unix geek who'll happily connect KVM or IPMI and insert the install-CD for you).

Some of my datacenter clients use freeBSD for various bits, and I have been that guy. In the end they're migrating away because it's incredibly hard to find experienced engineers. What you describe as "reading docs is hard" can be equated to "my team will be slower for negleglible gain." Dicking around with ports and make is fun, but at the end of the day, we seek lower latency services and faster outage response times.

EDIT: there's also a network effect in puppet / chef / ansible -- More work for your operations team when every community module for managing services doesn't support your platform of choice.
There may be value in using an iPad as a dev machine simply because it provides a separate environment for only doing dev work. Given that habit (and thereby procrastination) depends greatly on environment, it's possible that using an iPad strictly as a dev machine could increase productivity by subconsciously associating the iPad environment with efficiency. That is, if you're on your iPad, you know you shouldn't be messing around, and you use it only for work. Whereas if you're on your laptop you might be tempted to lapse into time sinks that you already associate with your laptop.
> Honestly, what changed was Ubuntu. Being able to have a fairly robust server on the cheap and maintain it fairly well with just a few apt-get commands was a huge game changer.

That hurts to read. Debian (upon which Ubuntu is based) has been around for decades (literally: it's 22 years old), and has been providing an extremely stable server, for free, with just a few apt-get commands.

> What used to be hours each week of administration work has become minutes a month. It might be less secure, it might be slightly less robust, but overall I don't even think about systems administration anymore and (to me) that's such a huge savings in time that it's just not worth trying to go back.

Or you could switch to Debian and get the same ease-of-use with better security.

If you really wanted security, of course, you'd choose OpenBSD.
So much edge, even down to the wannabe-offensive username, and still nobody's interested.
Same with Only God Forgives, which is a heavily stylized Nicholas Refn picture.
This is not a novel tool. It is literally just running msfvenom with shikata, and setting up a listener. I'd recommend reading some tutorials on using msfvenom/msfconsole rather than relying on a tool to do what should be trivially understood. If you'd like to dig deeper into what metasploit can help you do, check out the Metasploit Unleashed material published by Offensive Security (a brief venom tutorial is at [0]).

[0] https://www.offensive-security.com/metasploit-unleashed/msfv...
If Wikileaks believe an organisation is bad, they would of course also think that the supporters of this organisation (the donors in this case) are bad. We can argue whether their initial belief is appropriate or not, but their actions appear to be consistent.
That doesn't matter. It's just the basic associative property of addition in arithmetic. As such, it's present in all programming languages.
Think of it this way: Microsoft isn't interested in individual cars, or their occupants, it's interested in traffic flows, and especially in crashes. It's dealing with anonymized, aggregated data, and the dashboards that Microsoft programmers can access look much like Google Analytics.

Microsoft wants to know how often people use, say, Notepad, but it has no interest at all in what you write in it.

They're doing that to improve the product, in exactly the same was as Google does with Gmail or Facebook does, though I think Windows 10 is a much lower privacy risk than those.

Personalization is another step, and you can turn it off. Every major voice recognition and handwriting program has always done this: they create templates (or whatever) that enable them to work better for specific users. Most of that info is held locally anyway.

None of this is remotely like a traditional keylogger.
I've always considered that Christopher Nolan movies to have some fairly quotable lines.
My experience with FreeBSD seems to mirror yours exactly. The only difference was moving into big corp world, everybody ran Solaris and RHEL. Try as I might, there was no appetite for FBSD, and most vendor SW wasn't supported.
I find that with the quantity of dialogue, I tend to observe the opposite trend in a lot of story-driven videogames: many lines will be devoted to elaborating on needless backstory, reducing characters down to walking encyclopedias. Many of these games have a hard time taking advantage of their medium as far as their story goes.

Her touching on the loss of quality in dialogue, not just quantity, seems like the more important problem. To me, meaningful and good dialogue is important - whereas dialogue for the sake of dialogue tends to suck. I'm not saying that everything that comes out of a character's lips needs to be important plot points, but writers and producers should think more about what they're trying to accomplish in their work when a character needs to say something. I think a piece of bad dialogue hurts more than if that character were to say nothing.
The payout ranges image on http://krebsonsecurity.com/2016/05/got-90000-a-windows-0-day... is somewhat quantitative. Chrome with sandbox exploit is 60% more valuable than the same for IE or Safari -- since Safari and IE are on the same tier, this is probably more due to difficulty of exploitation than due to user base.
Tesla, SolarCity set to announce merger on Monday: sources
This is more than that, though. This attaches to a web site where I can see when the button was pushed, control the color based on time of day, and turn it on/off remotely (plus define the length of time for the auto off).
It's easier if you have one device. It's easier to avoid getting tangled up.

It's harder if you want to listen to something on your laptop for a minute instead or on the phone. It's also harder when the phone is in your <front/back/just the wrong> pocket and because it's just in the wrong orientation for the BT to work your audio cuts out.
Nope. I think you should look in a mirror. Either way, that's not an appropriate comment in this forum.
I don't think the barrier is nearly that high. I could see people downloading co-op apps if they hear that they have more drivers or better drivers. Getting to that part is difficult, sure, but not out-of-hand impossible.
Sure reality is often very complicated. However there is one thing in my experience that I want to contribute, which to me was non-obvious when I realized it. Which is that in large companies often times once you are hired your manager effectively cares very little about what you are paid. Their expectations are more or less the same whether you are paid 150k or 200k. Because often HR is in charge of negotiations, and then the manager just comments on performance, and not performance relative to pay. And also in my experience extra pay can improve performance. In my current job I negotiated my pay 65k higher than the initial offer, and thus did not feel bad at all about paying for a 4k apartment which is a 10 minute walk from work. As a result of my commute being negligible I perform much better at work and am far more rested than some of my colleagues who commute to save money. And my manager does not care why my performance is good, all he knows is that it is, and that is reflected in my evaluations.
Actually, let me put it another way.

Public DNS records are intended to allow other people to easily locate and network with your server. You never want people to do that with a development server.
Oh EDI... you made me shudder.
I don't... what?

Anyway...

Since the new thing is to yell at any post that doesn't provide a link, here - change is accelerating: https://www.theguardian.com/environment/2016/mar/21/global-w...

But this isn't news. And it's all scientific.
> I also think we should get the same info for Android and iOS as well

Don't derail. What's going on there is travesty as well, doesn't mean that Microsoft should get a license to break established practice on PC compatibles if Apple and Google decided to take a dump on phones.

> Further, what about the massive amount of telemetry built into online services such as Gmail and Facebook?

They are services, they can't not touch information, when you use these services it's implied that data is processed by them (unless there's some very fancy client side encryption that almost nobody use) and you implicitly agree to it.

> I think that the typing stuff is only

More interesting to wider audiences would be what you can prove. Why wouldn't Microsoft be more specific, why wouldn't they publish exactly how everything is processed if everything was really beyond reproach as I believe you suspect.
Dust and dirt are a bitch.

The original 30 pin Apple connector wasn't bad, but when I looked at the new lightning connector I thought it would be a clear improvement. But now I'm not sure.

Lightning pins are quite small. I find my devices don't always make good contact. I find black stuff (oxidation?) building up on both pins and sockets.

Compared to lightning, USB-C just "feels" like it will be much worse. I predict it will be a disappointment in the real world (as most connectors turn out to be).
Very cool!

I too am a "pure software" guy. A few years ago I was really into hardware but started to go with buying finished solutions instead of building things on my own to save time and concentrate on the software.

I had no idea it's this simple to solder something together and speak to it.

Now I'd love to know how to do the same with a arduino or similar "less heavy" build. Does anyone have links to resources in how to do that and how to get started?
I actually ran FreeBSD as a "desktop OS" on more than a few IBM Stinkpads for years. It worked well, driver support -- well, wifi was always fun, but if you knew enough, you could get them going (orinoco cards for the win).

That said, I never saw FreeBSD as anything other than a Server OS. So I wouldn't say the "desktop" comparison really ever fit in.
> stupid way of doing it

I guess it really depends on what the objective is. I'm not talking speculatively, but concretely it seems like a reasonable way to achieve a few images that they show in the press release. They show two relatively flatly rendered lots-of-tubes images. I know SSAO isn't the same, and I get that there's overdraw, but there are a lot of details in the particular objective they want. In one shot, they show a lot of emissive tubes with depth of field, which is harder to achieve. I suppose if they're happy, they're happy.

> interactive performance for all datasets on a regular Intel Xeon processor, which can render images at 20-25 frames per second (FPS)

There's a big difference between interactive performance and a production-quality render. Something tells me it's not producing 25 frames of noise-free render per second. There isn't enough information here.

> and a dual Xeon can match a single top-of-the-line GPU

At what, like 3x-5x the price? At how many watts? And at what I.T. complexity? A GTX 1080, at better performance than a Titan X, is really a phenomenally good deal. Especially considering I can drop it into an existing workstation with all of my existing software installed on it; especially considering I can rent out computation time on Amazon by the hour.

I guess what I'm reacting to is how forced of an example it seems.
More Companies Are Choosing a Sale Over an IPO
I've been toying around with the idea of making user agents that simulate the functions a user must be able to accomplish through a software and using that as a cost function for some evolutionary algorithm.
In Hong Kong taxi drivers operate private networks known as "80% taxi's". You'll see many taxi's with multiple phones in them with different drivers operating on a few networks.

http://hk-magazine.com/article/inside-hk/mr-know-it-all/1145...
Yup, that's the same thing. And say, would you use the word "bomb" to describe it? Oh you did.

I never said it made it dangerous, I said the use of the word "bomb" made sense in light of the photo specifically referenced in the article.
He used a Pi Zero -- cost is $5, the cheapest ESP8266 module on Sparkfun is $6.95.

While the ESP8266 would save some power, the Pi reportedly uses around 0.7W with a USB Wifi adapter, or around 6KWh/year -- so would cost less than a dollar a year to operate. So he wouldn't save huge amounts of power.

http://www.jeffgeerling.com/blogs/jeff-geerling/raspberry-pi...
The financial scams continue even now. In 2011 I sold my deceased mom's house. The buyer was financing it through Chase. Appraiser comes out to do the appraisal for the loan approval. Since the deadline for closing was coming up fast, I asked when he'd have the appraisal finished. He said he'd be done in a couple of days, but when he submits the appraisal to "the middle man between him and the bank" via email, the MM always has changes. This goes on for a couple of weeks. Why is a middle man who has never seen the house forcing an appraiser to make changes to his appraisal? It's nuts. The mortgage industry was rife with fraud in the 2000's because appraisers were inflating home prices at banks' request to justify stupidly overvalued loans. Some government agency made a rule that appraisers couldn't talk to banks to avoid this problem, but now there is some other "middle man" involved who is cooking appraisals.

Here's my suggestion on how to prevent fraud in the financial industry:

1. Keep investment banks and deposit-taking banks separate, as was done successfully for years.

2. When an investment bank fails, let them fail.

3. If there is fraud, try executives and put them in prison.

Instead, we have a revolving door between govt regulatory agencies and big banks.
Tinder vulnerability lets you set custom statuses for your Tinder Social groups
Java runs on Linux. There are tons of bespoke and third party Java apps running in companies. Running Java on any other x86 UNIX is a hassle.
It's the same old problem.
Writing as little code as possible is a non-goal for a team of developers.
Writing maintainable, easy-to-understand code is much much more important.

And while I value Lisp (I started on Allegro Common Lisp on Sun OS), it's density is also its greatest problem for any significantly large codebases.
Memory bandwidth is important too. The Knights Landing processors have a 16GB on-chip memory to the cores have significantly higher bandwidth than you'd get with DDR4; the additional memory bandwidth makes more of an impact on the runtime of some algorithms than raw compute performance does.
This is getting rather off-topic from the article, but I think you're making a stronger and more interesting claim than you realize. If randomness doesn't help algorithms in general, then BPP (the class of languages decidable in polynomial time by randomized algorithms with bounded error, more or less) is in P or some other deterministic class, depending on exactly how you define randomness not helping. There's all kinds of interesting research here.

As a concrete example, primality testing has been known to be very efficiently solvable with a randomized algorithm for a long time, but it was only recently that a deterministic polynomial-time algorithm was found. That algorithm is considerably more complicated than the randomized algorithms.

See http://www.math.ias.edu/~avi/BOOKS/rand.pdf for some more detail. I think there's a lot more research on the topic that I haven't managed to dig up in three minutes of searching.

Edit: another use of randomness: expander graphs are quite useful in a number of contexts. There are easy random constructions that provably produce expanders with high probability, but I'm not sure whether anyone has found a deterministic contruction that produces an expander.
By the way, a good example of the multiple-trip RESTful API I described is XKCD's JSON API (http://xkcd.com/info.0.json)
Fun won't get it done
This is one of my favorite ongoing stories in HN. It's like a peek into a team building a time machine, and for all intents and purposes, this IS a time machine -- one that opens a window to the past.
An Interview with the Inventor of the Credit-Card-Chip Reader (Satire)
The OP specifically calls them elements of F_2. There's no harm in thinking of the elements of F_2 as the ordinary numbers 0 and 1, as they retain all the properties of those numbers that are pertinent in the restricted setting of a two-element field.

One needn't ensure that an equivalence is well founded in order to invoke it for pedagogical purposes. We don't even need to specify which structure we're talking about when we refer to "the ordinary numbers 0 and 1". It's an imprecise statement that helps beginners grasp the basic ideas, which is all the situation calls for.
Two related concepts that came to mind are fuzz testing and dither.

https://en.wikipedia.org/wiki/Fuzz_testing

https://en.wikipedia.org/wiki/Dither

The discovery of the usefulness of dithering is interesting too:

"One of the earliest [applications] of dither came in World War II. Airplane bombers used mechanical computers to perform navigation and bomb trajectory calculations. Curiously, these computers (boxes filled with hundreds of gears and cogs) performed more accurately when flying on board the aircraft, and less well on ground. Engineers realized that the vibration from the aircraft reduced the error from sticky moving parts. Instead of moving in short jerks, they moved more continuously. Small vibrating motors were built into the computers, and their vibration was called dither..."
I have seen that and I never knew that was the reason for the tons of phones stuck to the windshield.