skysight-inc/HackerNews huggingface dataset:
> I am a bit worried about the side effects so I haven't ever taken more than thrice a week

This sounds ideal. Like pretty much anything, I can testify that in my experience you can develop tolerance and it loses its effectiveness (at least for cognition) when taken daily.
Are you implying time travel is certainly possible?

"Even if it turns out that time travel is impossible, it is important that we understand why it is impossible." - Stephen Hawking
SSLv2-style ClientHellos typically used a 16 byte random. Current ones always use a 32 byte random.
https://doc.qt.io/qt-5/embedded-linux.html
Wouldn't that just result in giant parking structures at the suburban transit stations? It seems like it's less a solution than a mitigation.
There always has to be a core group of knowledgeable people either developing or maintaining submissions to them. It's just the nature of the game for highest quality/reliability/security. So far, this has produced almost entirely proprietary or academic solutions with the FOSS ones not receiving nearly the contributions they need. You can't just scratch an itch and improve something that's nearly NSA-proof most of the time.

Only FOSS project actively soliciting and sometimes integrating best-of-breed components from high-assurance field is Genode OS framework. They recently went AGPL, though, for non-proprietary license. That's not promising... The others stopped getting any maintenance or their people and/or I.P. get poached into corporate circles.
> This seems like an unnecessary limitation of the Gnome environment. It would be nice to be able to compare your existing release to your changed copy and run them side by side.

This is because GNOME applications have a hybrid of Windows and OS X behaviors now, due to the addition of D-Bus activation.

Applications still exit when you close the last window, but each application has a unique identifier (org.gnome.gedit, etc) and when the binary starts it will search for a running instance and tell it to activate if present.
Does it scale? Who cares (2011)
I believe they're Zigbee Home Automation, not ZLL. Either that or they're improperly reporting that they support ZHA instead of ZLL, which causes issues for 3rd party bridges like Philips Hue. https://developers.meethue.com/comment/2686#comment-2686
> ASN.1 is turing complete.

ASN.1 is a horror show, and the actual implementations of it that are available are even worse-- I've still yet to find an open source implementation of BER that strictly matches the spec, correctly accepting and interpreting all values that should be accepted and rejecting all values that should not... but I believe that you're joking about "turing complete".

... But ASN.1 is so bad that I'm not completely sure. Can you confirm or cite?
Spreadsheets are people too: statistics and reality
Which site do you recommend in Canada?
I mentioned this elsewhere, but signing can tell you whether it's an authentic object, but usually not whether it's THE authentic object you had requested. So you then need something extra to validate that what you got is what you wanted, for example check the version number in the signed image. But how do you know what version number you should be looking for without HTTPS?

In this case the article points out that the metadata itself is downloaded over HTTP.
I know it's Windows only, but Dolphin Smalltalk is really much more impressive than GNU Smalltalk or Pharo.
To quote a Russian poet, Alexander Pushkin: "Oh it is not hard to fool me, for I am willing to be fooled."
I agree. I had to dust off my WRT54G for a few days when my modern router died. I accidentally switched it to https only, and none of Safari, Chrome and Firefox would connect to it because of the SSL version.
Do you seriously think that compares to nuclear holocaust? Ecological collapse caused by reckless tinkering? Hard AI takeoff? Any sort of out-of-control replicating technology? We're worried about the literal extinction of humanity. Urban decay and unemployment don't even register on that scale.
How long did it take for tolerance to develop?
I understand where you're coming from, but you're making a logical leap: you assume that HTTP over TLS somehow means that it needs to be interoperable with the full and real internet.

This device presumably already ships with a public key that verifies the integrity of the images it downloads. Why not ship with a single CA (owned by IKEA), or even single certificate?

It doesn't even need to be signed by a public CA, this can all be self-signed by the org. This completely solves the issue with regards to anchors, as you call them.

The next thing you mention is firmware update post-EOL. Again, TLS doesn't change much about this. If we apply Occam's razor, what is more likely: that Ikea's servers are upgraded beyond compatibility with today's TLS stack, or that the servers are shut down? Once EOL hits, you're SOL anyway.

PS: A current nginx or Apache can still easily communicate with IE6.

PPS: I'm not saying that I think TLS is required in this case. Just that the right argumentation has to be used.
Man, that makes me sad. I guess Fuchsia might end up being better than nothing. I wish one of the Google/Facebook/Apple/Microsoft/Amazons of the world would take up the flag and commit to a 10- to 20- year project :-)
There are actually terms in law for drawing such a distinction: malum prohibitum and malum in se.

Malum prohibitum means "bad because forbidden". It includes most regulatory law, requirements to have licences to do things, drug prohibition, etc.... Some of these prohibitions are probably necessary to have a society people actually want to live in, but many are more debatable and some actively make society worse. Prohibited conduct varies greatly between jurisdictions.

Malum in se means "bad in itself". It concerns directly causing harm to others. While some edge cases vary, almost every legal jurisdiction has general prohibitions on murder, rape, theft, fraud and such.

I'm not aware of any significant controversies in which Airbnb has been accused of the latter, nor Lyft. I think most people can tell the difference between skirting regulations that many people honestly believe don't serve the public interest and tolerating sexual harassment or deceiving contractors.
Update: Oh boy, I'm hating it. The clackety noise in the middle of the night (and no, o-rings aren't going to cut; I just realize I don't like mechs). I'm back on the old completely silent rubber-dome keyboard (my all time favorite keyboard is the one on my thinkpad x61 laptop).

I'll think for a few days to decide whether to return it or keep it as a freak equipment.
Try r/afinil on Reddit. I found some vendors on there that worked.

- Shipments are occasionally seized by customs, so don't put all your eggs in one basket. Just a risk that's part of the game. Never happened to me though.

- Credit card theft happens, even with legit vendors... based on what I've read, sometimes (often?) it happens in the maze of overseas banks, credit card processors, etc. So general consensus seems to be that buying with bitcoin is best. While a crooked vendor could rip you off just as easily over bitcoin, anecdotally the success rate seems higher with bitcoin. Often you get a discount as well for using bitcoin!
It is on the face of it a pretty weird phrase ("subject matter"), but I've always seen it used to mean what mindcrime means. The phrase is also used in general non-ML specific programming (eg among a team of people building a mobile app for a bank, the "subject matter expert" might be a non-programmer who has years of experience working for banks).

It's also disambiguated by the author saying "subject matter expert for your application" (application being an application of machine learning, eg to radiology, geology...), and saying "subject matter experts in their application but deep learning novices" in the paper's abstract.
I don't understand how this is a "dilemma." It's like saying, "on one hand, I really need to mow my lawn. On the other hand, I really don't want to. It's a real dilemma!"
Looks interesting.

That semi-declarative query language is hideous though. Reminds me of attempts to make XML into a programming language.
Russian here: Russia very definitely does use online trolling domestically (same as the US I guess). They also use paid "pro-government" rally attendees. That's very well documented, including direct video evidence on Youtube.

I very much doubt they're competent enough to pull something like this convincingly here in the US and avoid early detection and counter-intelligence response. Thus far no evidence whatsoever was presented that any of this was Russian, let alone state sponsored. That's either some truly elite level GRU work, to the standard we have not ever seen before, or there is, in fact, no "paid Russian trolls" on The_Donald. My opinion: there's no way in hell they could pull this off without getting noticed _well before_ the anointed Democratic candidate lost the election.
Well, I have that first-time experience with adderall and modafinil if I've given myself a break from it. Medication "holidays" (periods of abstention) are pretty much standard practice for stimulant meds like adderall to avoid tolerance/dosage creep and anecdotally this is true for modafinil in my experience as well.
> If Hillary Clinton didn't have such high unfavorables it wouldn't have been a contest. If Bernie hadn't siphoned off some of her support it wouldn't have been a contest.

How about if Hillary simply picked Bernie as VP? Is there anyone here that thinks she wouldn't have won on that decision alone? Don't blame Bernie supporters (I am not one, to be clear), why should they walk a mile to Clinton's positions when Clinton herself won't even make the most modest concessions to their side?
In the same way that flu season is basically the premise of "World War Z".
Any progammer, certainly anyone with a CS degree, really ought to be aware of, if not familiar with SICP. And yes, it's mentioned on HN almost daily:

https://hn.algolia.com/?query=sicp&sort=byDate&prefix&page=0...
Hi Matt,

Loved your site! Really clean theme and layout and no ugly code. Did you develop the css / js and responsive design yourself, or did you buy something off the shelf and customize it?

Are you willing and able to develop a custom theme for me for a price?
Well, I was a bit dishonest there and you've called it.

Monitor/Link and Cast/Call are all built ontop of the regular message passing functionality of the language. The point I 'whitehat fibbed' to make stands though, python might be feasable as a syntax implementation but there's a _MASSIVE_ difference in the architecture of helloworld as a flask app and the same under cowboy; trying to get one to behave as the other makes no sense to me.

Implementing a python on beam makes no sense as to actually benefit from beam you'd need to write a lot of libraries to actually play with the environment and why would anyone bother?

And sorry but no, processes are not more or less threads. My laptop can do this:

3> processes:max(250000).
Max allowed processes: 262144
Process spawn time=3.408 (15.644) microseconds
Process teardown time=3.156 (1.552) microseconds

That created 250k procs then stored the pids of each in a list, then iterated though that list and killed those processes; I don't think you can do that with threads..

Preemptive scheduling is a big deal also.
Thanks for the dialogue and information! I've bookmarked this and will make my way through it as well.
I actually have nothing to do with the project. I just thought I'd share since I've never seen OCR that is free, easy, and doesn't even require registration.
To prevent downgrade attacks, include a list of banned signatures/hashes of previous versions in an upgrade? Plus only allow higher version numbers?

Downside: Reverting is not possible if you make a serious mistake in an upgrade. If you can't initiate another upgrade process, bricking is possible...

I don't know much about the world of really small devices aka IoT, but from my laymen perspective: Is a full TLS stack still a huge obstacle there? Sane signature checks are at least a step in the right direction.
There always has to be a core group of knowledgeable people either developing or maintaining submissions to them. It's just the nature of the game for highest quality/reliability/security. So far, this has produced almost entirely proprietary or academic solutions with the FOSS ones not receiving nearly the contributions they need. You can't just scratch an itch and improve something that's nearly NSA-proof most of the time.
> HTTPS as a protocol ages extremely fast

You do not need to frequently upgrade TLS versions to be secure. TLSv1.2 will likely be fine for many years and TLSv1.1 has been fine for 11 years. If you do need to upgrade, it won't be often, but the QA is the only hard part.

> trust anchors always change

Indeed an issue, especially with the public PKI, but you can roll your own root certificate with a lifespan of 50 years or something. This is somewhat dangerous as there's now a non-expiring trust anchor instead of the usual 1-3 year key rotation, but it's still practical, especially if HTTPS is only a layer of protection around your already signed firmware.

> there's no guarantee that today's state of the art won't be completely incompatible with TLS implementations in 5 years

Well, TLS is designed to negotiate the version to avoid this exact issue, but even if TLSv1.x is not backwards compatible there is nothing blocking the update server from supporting the older version?

> Many older routers simply cannot use HTTPS for updates because newer versions of OpenSSL simply won't fit on the flash.

OpenSSL is far from the only implementation here. BearSSL is only 25KB and there are even microcontrollers with their own TLS stack built into hardware, like the CC3220 from TI, which I've been using at my job. There are concerns there too with updating TLS, but again, should be a relatively rare concern.

> the people who know how to roll the firmware images probably don't even work there any more

Indeed another issue. But realistically, yes, IoT devices are going to have a finite lifetime if they depend on cloud services.
It's a proper noun that describes an obscure sub-structure of US Congress. Now, quickly, name some sub-structures of the Russian Duma for us, and tell us what Putin thinks about them.
I'm curious how this affects file sizes? I like my static binaries and portability, but I fear this would make things balloon quite a bit to get the same broad distribution.

I've been planning on using an embedded webkit + html app in an upcoming desktop project. Are there any resources for how difficult it would be to learn Qt and create a reasonable portable, easily downloadable app?
Don't know where I've been... There is still a nuclear power plant operating in California, looks like it produces 2GWh:

"The Diablo Canyon nuclear plant, built against a seaside cliff near Avila Beach, provides 2,160 megawatts of electricity for Central and Northern California — enough to power more than 1.7 million homes."

About 12 identical plants could produce the electricity California consumes. Well... Until everyone starts driving electric cars.

http://www.latimes.com/business/la-fi-diablo-canyon-nuclear-...
The Mother of Internet
The authors explicitly compare saltpack and PGP, and all of you questions get answered when you think about it as "better PGP", an encryption designed to be used with email, generic online messengers, forums and so on:

> Not totally sure what BaseX is, how it compares versus Base64, especially post HTTP deflate compressions, but I'm not sure I like it.

BaseX is "armor" -- a way to insert binary data into the text-only media such as email messages and forum posts. It seems to be way more convenient, as it uses no punctuation and is whitespace-insensetive. For example, I have once tries to send PGP message via gmail web interface and it took me two or three tries to figure out how to properly paste the text without gmail inserting extra whitespace and making the message undecodeable. BaseX should not have such problems. It is slightly less efficient that base64, including under compression, but I think it is worth it.

> I'm pretty sure this kind of exercise is better left out, and that everyone should just use zstd on whatever encoding so as to decouple problem domains.

Are you talking about zstd as in "Zstandard - Fast real-time compression algorithm"? This has nothing to do with this proposal, there is no compression anywhere in there.

> Round two of skepticism: msgpack is a niche player with no clear big corporate sponsor. Protobufs, flatbufs, and thrift are all actively making faster better quicker implementations, but I can not off the top of my head think of any major msgpack lovers. Avro also seems to just generally have some fast impls already, especially on platforms I care about[1], so credit there too.

The deserialization speed does not really matter. All saltpack messages are encrypted, and your decryption time will dominate your deserialization time.

> I ought review, but out of hand I can't think of anything distinguishing about msgpack.

Well, msgpack is in a completely different group from Protobufs/flatbufs/and thrift. The former is a protocol, which is implemented by a number of libraries, while the latter is a specific library, available from a single vendor only.

As a result, msgpack has fewer features (no schema support at all), but is not bound to a single large corporation. IMHO, a right choice for global communication protocol.

> Definitely nice having some alternative to Salmon protocol[2] (as in Buzz, OStatus) on hand.

Wait, what? Salmon is about blogs on the web, HTTP posts, XML schemas embedded in HTML. The encryption is only a small part of it.

Saltpack is about encryption email/chat/messaging, has no specification of payload format, and designed to work without HTTP using efficient formats. I see very few common things between two protocols.

> Alas I believe it's again fully encapsulating, versus say http signatures[3], where the signature is decoupled from the payload. It takes both types!! Neither is right.

Well, the big difference is that http signatures have no encryption while saltpack has it. So just two very different goals that they want to achieve.
Git itself is another such project.
Rete Algorithm
It's a mix between these three things:

1. Being ethically opposed to working for the DoD

2. Terrible (relative) wages

3. Working environment dominated by bureaucracy

Some seriously big obstacles considering the options.
It's unfortunate that the US made this experiment illegal. At least wait for the results of the research before making a conclusion! Needless to say, put in safeguards to contain damage, if any.
They'd probably put some sort of tax on them rather than letting me have ten empty cars cruise about for fun.
> none of them save Russia & Turkey are larger than Texas

I don't know where you got this bizarre notion. The populations of Russia (~144m), Germany (~83m), Turkey (~80m), France (~67m), The United Kingdom (~65m), Italy (~61m), Spain (~46m), Ukraine (~43m), and Poland (~38m) are all quite a lot larger than Texas (~27m).
People will be gone Keep the memories or works
Yeah, this is the reason I rarely take chronic doses and certainly nothing more than 1-2 pills a week. Tolerance usually doesn't build up much, but the comedown the day or two after long periods of dosing (personally >2 weeks, every day) made me somewhat more scared of the drug.

That being said, I highly recommend it, but to be used with caution.
> Even the most native of idioms can be learned

the parent's point though was that there's a mismatch between the level of idioms used and the broken grammar used (which is, imo, pretty obviously intentionally obfuscated; it's just… not how a non-native speaker would write it, esp russian)
In general, Adrafinil is fine, but I personally don't like stuff that messes too much with my liver.
'doktrin perhaps you have confused this subthread with a different one; it would be understandable since you've seen fit to post on this page sixteen times already. (Bonus points: you've used the phrase "paid shills" twice!) Unless you're willing to admit now that you are the DNC staffer who leaked all their dirty laundry to Wikileaks, you've got to admit that this tawdry hermeneutical argument no longer suffices to prove The Russians Did It.
For some value of “exists”, considering these rules.
It can detect whatever variants they put on the SNP chip, be they common or rare. The only caveat is we have to know what variants to put on the chip in the first place. That's the hard part, linking rare variants to disease. After that link is made, the rest is easy.

Is it a sure fire shot to detecting all rare genetic disease? Of course not.

Is it a good way to become aware that I am a carrier for a rare mendelian genetic disease? Yes. Very much yes.
I can't give an exact answer, but I can tell you that it happens gradually. Initially you feel great, and you're incredibly productive. Two months later you're taking the same amount, but it doesn't give you that same feeling so you increase the dose a little bit. This repeats for awhile until you start noticing side effects and try to stop. That's when you're stuck - you can't do the work you used to do unless you're medicated, and you can't stop without putting your life on hold for a very long time.
There already exist considerable barriers to car ownership -
1. Cost of car, which in itself is a perpetually depreciating asset.
2. Insurance
3. Recurring service fees
4. Non open market for parts and replacements
5. Price gouging of insurance if found liable in an accident

In my honest opinion, any design that doesn't attack the root cause is an improper one. Please make public transit a clean, safe, affordable and sufficiently widespread in coverage instead of increasing barriers to car ownership and ridership.
Improve Your German Listening with 9 “Made in Germany” Podcasts – FluentU German
The point of the black swan is that we can't say "here is a place we expect to find black swans!"
You don't even use bookmarks for short-term shortcuts to to highly-accessed, complex, URLs? For instance, someone in your team shares a google doc with you that has the specification for a feature you're building. It takes weeks to build this feature, and you've got a browser window sitting on that spec doc half the time. You won't bookmark that? You'll load it up from an email search every time?
Just as a counterpoint to all this "yay modafinil"; for me it's horrendous, I get a headache feel queasy immediately. It's a chemical feeling like your brain being coated in plastic. A lot like taking too much caffeine but without some of the edginess and instead a feeling of dread replaces the caffeine high.

Getting work done while feeling ill is more, not less difficult!
TLDR: Airlines make large profits from the credit card loyalty programs; the specifics are typically hidden from outsiders.
What’s the Maker of Post-Its Doing in the Ankle Monitor Business? Struggling
I've seen dozens of examples of people with less than a year of ML experience get great outcomes from deep learning. It's no longer true that this is such an exclusive field.
My first programming job (actually, just my first job) was technically a 40 hour/week job, but in the employee handbook it said something along the lines of: "The <company name> day is typically regarded as 8AM to 8PM." They didn't pay very well either. Brian is right, I totally hated my job, hated my boss, hated pretty much the entire company, and quit in 5 months. I was pretty disappointed. I'm still cautious about getting back into the industry. I'm at school now, not studying anything CS related.
While neural action potentials are binary (either absent or identical to every other AP) they encode temporally an analog signal (internal charge, ion concentration) with amplitude in proportion to frequency.