skysight-inc/HackerNews huggingface dataset:
In principle, what you've built is quite similar to a cryptographic nonce [1], usually used to prevent replay attacks against authentication services, etc.

We use similar tokens in our API for idempotency as well, though we called them nonces. Standardizing a bit on terminology and how to implement them properly would be really helpful.

[1] https://en.m.wikipedia.org/wiki/Cryptographic_nonce
> What is currently still not feasible is to create a custom git repository whose HEAD matches that of the Linux kernel.

Hang on, that doesn't matter though, does it?

I was under the impression that git's SHAs were to be treated as repo-wise unique; not universally. There must non-adversarial 'collisions' across repositories already, surely?

I thought this attack potentially allows creating two commits in the same repo with the same hash - although it may only be possible for these to be root commits.
So why aren't mouse studies done in acoustically isolated rooms? Too expensive or lack of forethought? I know metrological laboratories that are mechanically insulated with all sorts of contraptions making the space vibration free so it'd not as if buildings could not be adapted for their intended scientific use as a matter of principle.
Thank you for your role in creating such an amazing community. Things definitely began to decline post '07 and I eventually retired my dA accounts back in '12... But you're right, the experience it offered was completely unique and will be a subject of my nostalgia for the rest of my life. I met so many great friends through common interests, and would never have continued my interest in writing without it. And I almost certainly wouldn't be working as a web developer today.

I am currently drafting what I think could be this generation's dA, improving upon some of its shortcomings and offering new collaboration tools.

If you have the time and think you could provide some insight, I would love to email you some questions about your experiences building that kind of community, because it is exactly the kind of community I wish to serve.
What Panera Had to Change to Make Its Menu ‘Clean’
The process is fairly simple. Files are concatenated and that blob is then chunked into multiple-of-16KiB-sized pieces. Each piece is hashed. The hashes are concatenated and embedded as string in the torrent file. Then a specific subdictionary of the torrent file including the piece hashes, filenames and the length of the data is hashed to yield the infohash.

Magnets only convey the infohash. .torrent files convey the whole metadata, including the pieces hash string.
> In practice, collisions should never occur for secure hash functions.

That is mathematically impossible when reducing an N bit string to an M bit string, where N > M.

All hashes have collisions; it's just how hard are they to find.
There is a difference but it is only interesting once you get really close like in a lawsuit IMO.

Google has copyright on the code and runs the infrastructure?

Very much a Google product to me. Paid or not. Official or not.
>This company is firing (no pun intended) on all cylinders

I ask this of all the bulls: at what price would you start selling TSLA rather than buying?

If you don't have an answer than I question your analysis.
This would be a pretty big step - right now there is a big incentive to be first to publish. Often the researchers who would be doing the replication are competitors, who are racing to publish their results first.

Part of publishing is to put it out for discussion. It should be the best effort and thought to be true, but science is about the evolution of knowledge. Very few things are completely understood, especially in biological and micro/nano fields.
>Pycharm tries really hard to paper over the lack of static typing in Python.

It does and IMO this is the wrong approach. I usually fire off a test and use that the push the code to the line I'm interested in, at which point I fire up IPython.embed().

That gives you perfect code completion, instant variable inspection (including instant docstring and code lookup) and the ability to execute and inspect on the fly.

You can then fairly easily copy and paste the lines you want back to the text editor.

IMO that's a step ahead of just having autocomplete in an IDE.
Looks like the stock is down 2.4% from yesterday. Folks are taking a closer look at the numbers.

One analyst specifically took aim at the fourth quarter results, calling out the beat as "phantom" given the exclusion of the SolarCity acquisition from consensus estimates.[1]

[1]http://www.zerohedge.com/news/2017-02-23/market-sours-teslas...
India’s largest homestay startup Stayzilla appears to have shut down
Positrons cost $25M/mg and antihydrogen costs $62.5B/mg.

An interstellar trip to Alpha Centauri using antihydrogen-hydrogen annihilation reactions would cost more than 50 years of the entire economic output of the planet (as of 2016) just for the fuel. Since we need a large portion of that economic output for basic survival needs, there will be no antimatter rockets built any time soon.

As far as I am aware, we currently lack the capability to create a singularity massive enough to persist long enough to observe as a black hole. But it is possible that we might be able to locate a primordial black hole near enough to build a propulsion system around it, or even trap one as it passes through Earth. This would, of course, require that primordial black holes exist, and that they emit Hawking radiation.

Yes, for now it is purely speculation. Anything beyond chemical-energy rockets is speculation until we actually demo the technology in a real spacecraft. If you launched today, bound for Alpha Centauri, the best you could do is drop fusion bombs behind your vessel until you get to about 0.08c, turn around at some point and throw fusion bombs in your path to decelerate, and be prepared to arrive a long, long time from now.
Couldn't you get nearly the same intermittent-attack behavior just by saying something like "break out of codec, only do malicious behavior one time in 1,000"?
Still Using Google Chrome? – Don't Fall for This Malware
Sometimes medicine helps patients, sometimes the medical-industrial complex makes work for itself. I took a lot of medicaid patients to & from doctor appointments where nothing much was accomplished.

> In 2012, Brown had coauthored a paper that examined every randomized clinical trial that compared stent implantation with more conservative forms of treatment, and he found that stents for stable patients prevent zero heart attacks and extend the lives of patients a grand total of not at all. In general, Brown says, “nobody that’s not having a heart attack needs a stent.” [...] Nonetheless, hundreds of thousands of stable patients receive stents annually, and one in 50 will suffer a serious complication or die as a result of the implantation procedure. [emphasis added]

(This comment recycled from the earlier submission of the propublica version this story: https://news.ycombinator.com/item?id=13705761 )
DeviantArt has been one of the better online hosting services when it comes to their handling of copyright. Buying them won't magically grant additional rights to Wix.

Based on the Submission Policy on DeviantArt's site, the essence of the agreement seems to be that as long as the work continues to be on DeviantArt, any DeviantArt site can use it royalty-free under a non-exclusive licence. The artist (or other submitter) is free to remove the work from DeviantArt at any time, and with some provisions about orderly handling the work is then no longer available for use on DeviantArt sites under those terms. The copyright and related legal rights in each work remain with the artist throughout (or with whoever else had them before, but they're not automatically transferred to DeviantArt).

Whether the acquisition means sites run by Wix now count as successors and therefore enjoy the royalty-free rights regarding uploaded works is one for the lawyers, but even if it that is the case, it seems that anyone who objects can simply delete their work from DeviantArt and in doing so withdraw the consent required to use the work on any other sites as well. That being the case, it would seem unwise for Wix to try to pull a fast one here, and a more collaborative approach would seem to be in everyone's interests including Wix's.
Tree’s Company: AI Maps Biological Riches of the Rainforest
I went on a five-day hike on a whim, and was pretty badly prepared. I suddenly found myself at the head of a trail, and decided to give it a go -- the things you do when you're young and invincible.

I had a few packets of ramen. I'd eat two packets for breakfast, but alredy an hour or so later I'd feel painfully hungry again.

I dreamed of huge, juicy steaks like you wouldn't believe.

After I returned to the world, I treated myself to the biggest steak the supermarket sold. DELICIOUS.
Well I can say wix.com definitely isn't going to fly in Germany (eg. for the same reason that Mitsubishi's "Pajero" vehicle isn't marketed under that name in latin/US America and Spain)

[1]: https://en.wikipedia.org/wiki/Mitsubishi_Pajero
Another fact to consider here also is that eagles do not fly at night.
Yep, and even if you feel the need for low-frequency attacks to keep seeding high, you could probably just fix a low chance of actually executing malicious behavior.
Given he linked to the Daily Mail, it probably goes doubly so.
Revolve Game Free Full Download with Latest Version Here
~120.
I simply used reader view in Firefox.
This is how the team built its toxicity model:

What's toxic?

This model was trained by asking people to rate internet comments on a scale from "Very toxic" to "Very healthy" contribution. Toxic is defined as... "a rude, disrespectful, or unreasonable comment that is likely to make you leave a discussion.

I'm not sure if it will ever be possible for algorithms/sentiment analysis to identify sarcasm as it is extremely situational and is often misread or misunderstood even by humans.

Seems to me that sarcasm will keep human moderators employed for some time to come.
In my experience, people have trouble describing something in sufficient detail that another human can build what they want. I think we're a ways off yet from AI being able to do so.
Not really a paradox – a free society needs laws to maintain its existence.
Me while looking at the examples: Hmm F# looks like an easier version of Rust. I wonder how much of Rust was inspired by F# (since F# is older).
I'm not sold on Alexa personally. I can guarantee with 100% certainty that if this case moves against Amazon I will never knowingly be in the vicinity of one of these devices. Not because I plan on killing someone, but because of the litany of privacy implications.

If it goes the other way, I might get one because I think it would be useful but I'm still very worried about the privacy aspect, and I know my wife would be more lax than I - not to mention I don't want to have to be vigilant about every comment I make in my own home.
Many of the bigger city marathons are simply placing them at every 5k interval (20k will be 21.1k). I try and run 1-2 marathons a year and the results are posted minutes after I cross the line. It's always fun to see how many places I creep up as the days go by afterwards from people getting DQ'ed.

It's too easy to match pictures to a bib number and then simply look at the splits and wonder why someone ran a record breaking 10 minute 5k near the end after cruising along at a series of 25 minute 5k's. An 8 year old kid can investigate this stuff.
Sounds like they'll let people build websites ala Wix but using their images from DA. Seems fine.
> On the other hand it's useful for denial of service. If you want to disrupt a swarm feeding it bad data is 'good enough'.

No you can't do that either. Again, this is not a preimage attack: https://en.wikipedia.org/wiki/Preimage_attack

That means you can't use this to match an arbitrary SHA-1. That means you can't use it to generate bad parts of a larger file.

What you're describing is already possible by having clients connect to a swarm, pretend they have parts of a file, and send gibberish. The receiver won't know until they finished downloading the part and hence waste the part-size in download capacity (i.e. DOS). I bet with IPv6 it'd be really easy to have a single malicious client pretend to be a world of swarm members.
No, it's written like a thought on how we as a species would have evolved given the possibility of visiting a close planet instead of the moon at the same age of technology. I mean with closer proximity it would have been a race to a neighboring planet rather than touching down on the moon, and where we are now we could have feasibly accomplished interplanetary travel without issue already.

His comment doesn't even bring up our current situation, but would could have been if we had closer neighboring planets.
Not to mention all the "patient advocacy groups" funded by the pharmaceutical industry: https://theintercept.com/2016/12/01/new-report-exposes-patie...
An idiotic response given that "subprime autoloans or deceiving the press or sharing private user data for fun and games at a party" cannot be due to drivers.
Regular software updates from reputable sources. Buying a cheap chinese Xiaomi phone or a Google Pixel / Apple iPhone makes a difference.
Is this a correlating effect with the fact that a large number of published scientific results are botched? If researchers are not allowed to do good science they are no more progressive than the augur reading from the entrails of a fish.
So in order to track the phone he had to:

1) Get physical access to the phone and be able to unlock it.

2) Manually disable the Android setting so that non verified apps can be installed (the setting is enabled by default on almost every Google Android phone to protect users). By doing so a clear message warns the user that the phone will become vulnerable to attackers.

3) Install an obscure apk on the phone (side load or via link) outside of the Play Store.

I would call this just installing an app that is designed to track you. Such an app is trivial to code.

When you decide to set your OS free to make it possible to install anything then obviously you can install anything on it, including a spyware.

It makes no sense to compare this to iOS because iOS doesn't allow 2) (walled garden). Android leaves it up to you and thus provides more "freedom" to users. Freedom comes with additional risks. The equivalent is jailbreaking on iOS (unofficial).

I like to compare this with someone being locked in a room. This person is obviously less likely to die from a car accident than a free one. But does that mean you want to live locked in a room ?
Superdollar
Use a viewer like openstreetmap.org.
Based on the analyses I've read, it looks like a big driver of the non-GAAP difference is Tesla completely ignoring the cost of acquiring SolarCity. Is that a fair analysis? It depends. Those non-GAAP numbers suggest the car manufacturing business is doing well, but hide how Tesla is doing overall (including cash flow) as a result of SolarCity.
Oh it's general. Apart from anything else, a majority of all scientific papers rely on some form of software, be it simple R statistical scripts, to complex programs. None of those programs ever have bugs in them, right?

Then to be fair to the authors, scientific papers follow a fairly fixed format, often with hard limits on paper length (cf. Nature, etc.). Putting all the detail necessary for replication, and a decent literature review, and an overview , is simple not possible.

And then the meta-problem - which is general - every aspect of science from hiring to grant writing, to managing a phd. farm, to goofing off on ycombinator..., essentially works against anybody trying to do detailed, methodical, provable work, no matter how brilliant they are, because doing all aspects of science properly is incredibly time consuming in a world with an ever reducing attention span.
10 million GPUs is not insane when you have a billion dollar security cracking infrastructure budget. Especially when you compare it to the rest of the cyber warfare budget.
Did you use something before Bokeh that you preferred, or is your comment based on Bokeh being generally better than Matplotlib?
>I hope Model 3 can beat the Bolt in range. That would be a nice surprise.

Why do you care whether Tesla has a good car or GM has a good car, rather than, overall, we have many good cars to choose from?

>I know Musk has already mentioned that Model Y will be cheaper, but we don't know just how much cheaper. Hopefully, it will be like $25,000.

We haven't even seen the M3, or heard the price. But we're already talking about the next, cheaper model?
Herpes virus may be a trigger for autism
Well, we were told by the account manager there is support for it. Then a Linux tech said they simply do not support it.

Same case with CloudLinux but understand there. To be honest, it's a bit much for what I needed and confusing as hell to work with myself.

The support used to be awesome but I just feel in the last year or so it hasn't been that great.
Your entire comment is misleading. To install things from an APK on Android you have to go into the settings, disable security, download the APK and click through multiple prompts.

On iOS, you can't disable security at all (yay freedom), but you can just jailbreak the phone and install whatever you want. If the attacker has physical access to the phone, security on both platforms is comparable, i.e. zero.
Seeing how they ridicule MD5, I think they should have spent a bit more time on the proof PDFs, and have their MD5 digests collide also.
So. Having been a scientist, I observed an interesting phenomenon, several times. It's almost as if scientists enjoy leaving out critical details from the methods section, and other scientists enjoy puzzling out what the missing details are. I think there's this sort-of assumption of competence that for any reasonably interesting paper, the people in the field who are reading it, they have the level of skill to reproduce it even with missing information.
Well it's all carbs. I don't see how adding water changes the macronutrient makeup.
One interesting point made in the article is that an awful lot of the gains we have made in life expectancy have come from public health rather than medical advances. The article claims that the increase from the public health revolution in the late 1800s did more to increase life expectancy than antibiotics. Which makes sense, not getting sick is more effective than any treatment once you are sick.

A sibling comment mentions that lobbyists worked to get the 21st Century Cures Act passed, but a potentially bigger issue with the act is that it transfers $3.5 billion of public health spending to medical research.
Or even some kind of "Always online" MMO like chronicles of elyria. Being able to just tell your character to play while you are away without 'scripting' them would be nice.

https://chroniclesofelyria.com/
Popeyes is clearly circling the drain, then. Burger King's corporate standards and culture lead to sloppy, unclean restaurants with inattentive staff, and greasy, inedible food. BK will ruin whatever Popeyes has going for it.
The complexity of the issue concerns the specific use in this instance and its application to broader uses in other possible cases. I think they're fighting/trying to fight future fights with this approach. I say this because their current stance is relatively weak when regarding this case alone (IMO obviously). The guy was murdered, Alexa is a recording device, they want to see the recordings. This isn't overly broad in this case, but in the future it may be attempted to be applied to other cases walking down the proverbial slippery slope.

This is of course in addition to them already fighting a technophobic AI battle in consumers' minds, gradually introducing AI functionality to the masses. This, I think, is largely why they are so reluctant to introduce push notifications even though so many fellow Alexa Skill developers would like it.

In the end though, if I were murdered and Alexa was in the room - I'd want them to give them the darn recordings. Which makes me wonder, what does the family of the victim want?
Thanks, so it can gen 2 same size colliding chunks, but it can not take an arb chunk and generate a collision for it. Right?
Yeah, Elixir or Haskell is probably the way I'll wind up going if I want to pursue functional programming again. I can do the basics enough to handle LINQ well and stuff, so I'm getting away without a strong knowledge for now.

One of the biggest disappointments in software development to me though is that practically all of the cool libraries these days are hitting the javascript ecosystem rather than those of all the interesting languages.

So if you want to interact with these great libraries, you have to tolerate a pretty shitty language with annoying tooling at best. So when I want to do something practical, I wind up going that way disappointingly often.
I think the most interesting detail here is that Wix is doing well enough that it has $36M to spend.
I agree. It's so weird to see the two mentioned side by side.

Nespresso is great for the user. You just have to buy the pods and machine and you will have the caffeinated beverage that Nespresso makes.

But then you look at the Bialetti (or any moka pot) and you wonder why so many people own Nespresso (and other pod based coffee makers. All you have to do is get coffee grounds and you're good to go. Fill the reservoir with water and the puck with grounds and throw it on the stove. Sure, it might take 1 or 2 more steps, but it will almost always make a better cup of coffee and you are not wastefully throwing out plastic every time you make a cup.
Is this an intentional straw man? No, you're not told to trust the people because they have a certain job title and trustworthiness. You're told to look at the data, which is overwhelming and consistent across multiple years and teams. It is the exact opposite of lack of reproducibility.
Couldn't they encrypt the recordings so that a user could access it but the encrypted data couldn't be read server-side?