skysight-inc/HackerNews huggingface dataset:
If the labels are random they don't correspond to anything, so any "features" are essentially noise.

The classifier is, in effect, memorising every element in the training set. It's training a compression algorithm for storing that data.

It should be noted that "training a compression algorithm" isn't always a bad thing per se, because that's how autoencoders work, which is one of the main ways to do deep learning.

The key term in the article is "the effective capacity" of the model. If you have a big enough network, it can simply memorise everything you give it. This makes it difficult to know if such a model will generalise. A much smaller model won't overfit in the same way, but also might not perform as well as a larger, more sophisticated model. The problem in deep learning is nobody can tell how much of the training data has simply been saved somewhere in the model (in an obfuscated and compressed way).

There is some related research about reconstructing the training data from deep networks (which has privacy implications), but I don't have a link handy.
To add to this: the original 32-bit SYSCALL/SYSRET in AMD K6 just changed EIP and cleared a few flags too, and they "fixed" it for 64-bit by providing a mask of flags to clear and adding SWAPGS:

http://web.archive.org/web/20120813101603/http://www.x86-64....

http://web.archive.org/web/20120615223202/http://www.x86-64....

When Intel copied SYSRET, they added a canonical address check which was a mistake because the fault would occur on the user RSP.
If a bug is wormable & your OS is still in widespread use then this ought to be the least you can do. If you’re unwilling to put the effort in, then open source the OS in some form so that someone else can.

There are vast numbers of XP boxes out there. They represent a risk to all of us.
Yes. Since you seem to be a fan of hyperbole, allow me to put why in hyperbole :

The islamic conquest started in a small village near Mecca, more like a square with some tents. Big tents, but tents. This is according to their own legend. Now on the lands they conquered and massacred their way across, there is about a billion people that are very different from the original inhabitants of those lands.

Let put em back in that small village and give Saudi Arabia back to the Jews (the south) and recreate the Eastern Roman Empire and give the North to them !

The same modulo historic details is true for Europe, Asia, Australia, South America, even Africa. The group currently living there either fought or massacred it's way to control of those lands.
Direct links for english have been provided (as stated in a sibling comment). Yet the catalog server (to download localized versions) seems to be under heavy load or otherwise hard to reach...
The problem is us still believing that the press has any interest in the truth. They get paid for telling the most interesting story. If it's total lie, maybe sometimes someone gets fired, but the corresponding newspaper/channel still made a lot more money in the mean time.

Newspaper should be read like a novel that is "based on true events".
The tools in reference are from the Equation Group dump the Shadow Brokers did. Equation Group is believed to be the NSA (a group within). EG activity dates back to at least 1996.

More info on EG: https://securelist.com/files/2015/02/Equation_group_question...

The dump contains many tools; but the ones used in this attack are two exploits for vulnerabilities in Windows SMB (Server Message Block, a file sharing protocol) implementation. Microsoft patched this in March, but as we all know, many systems remain unpatched. The vulnerabilities allowed for remote code execution.

Practical exploit info: https://www.exploit-db.com/docs/41896.pdf

The two exploits, EternalBlue and EternalChampion targets respectively SMBv2 and SMBv1. That's not how the ransomware gets inside the network in the first place though, that is done by a user executing a file received via email, or downloaded from a received URL. But, through these two exploits, once inside, it can spread through the network (subnet) worm-like. Actually, the ransomware first checks for the existence of the backdoor (also from the same dump of tools) called DoublePulsar. If the ransomware does not find it to be implanted, it will use one of the two aforementioned exploits, based on which ports and protocols it makes a connection to.

The DoublePulsar backdoor is installed on at least 400,000+ systems worldwide.

You can read more about it here: https://countercept.com/our-thinking/analyzing-the-doublepul...
Styling Your Private Office in a Coworking Space
Original title is "Customer Guidance for WannaCrypt attacks"
As an aside, I find that while many (all, I'd hope!) professional pilots recognise their own limits and the necessity of modern CRM, many non-pilots still like to hold on to a romantic notion that on a flight, the captain is as god, even ascribing the captain powers well beyond the job.
Not all vulnerabilities are equal. If I understand correctly, the reason this one enabled extremely easy spread of ransomware is that, reading the description of MS17-010, it is enough for the computer to be a part of the local network and have the "file sharing" enabled to be infected.
Tokyo and other Japanese cities have massive underground metro networks and there are earthquakes every single day. Even during the 2011 Tōhoku earthquake, there was not a single derailment.
What about all the other patches they're holding back? This can't be the only security issue they've only selectively distributed patches for.
I can't get this to work on Win 8. The application starts up, then says "Searching for updates on this computer".
I have been waiting for like 15 minutes now
I spent two weeks delivering for Uber Eats and made $4.40 per hour
Continuous delivery and the fear
I am answering the same in two different comments but, if you look at Japan, their major cities are all covered by huge metro networks and they have earthquakes daily.
More info on Wikipedia: https://en.wikipedia.org/wiki/QLine

Note that all rides are free this weekend!
1. I'm sorry you've had to go through this. Really, I am.

2. This was Your mental break. Folks with other diseases and issues have other ways of breaking down. Some folks can get to the doctor because the fear goes a different direction, and the doctor is a safe spot. Please don't discount other's troubles because they don't match your experience. Yours could have easily been a suicide attempt or something like that as well - my ex did so to try to silence the voices. His paranoia made it difficult to seek help until he got help, but not everyone has this.
There was a Microsoft Research project that made it possible to run Windows XP (or Server 2003, I don't remember exactly) as a PV guest.

That was really cool, but the whole project disappeared.

If it had been open source, I bet it would still be actively maintained to this day.

Edit: Found the paper https://www.microsoft.com/en-us/research/wp-content/uploads/...
I did enjoy that, thanks!
By looking at the first page, Spanish verbs are so similar to Italian and French ones, almost certainly Portuguese and maybe Romanian. I wonder if translating the data file at https://github.com/andycloke/verb-master-development/blob/ma... would be enough to make a similar site for those languages. There are some differences in the pronouns to account for but it's probably a little work on software and a lot of work at building the database.
I think you just need to learn to interpret the numbers. For a big Hollywood movie, anything sub-8.0 on imdb in the week after release (where the shill votes still aren't outweighed by the general population votes) is bad. Just for this week, this rule of thumb tells me for example that the "Alien: Covenant" is probably not worth watching, and "The Circle" is a disaster.
"The Woodward route will employ off-wire technology, with 60 percent of the line operating on battery power provided by 750-volt rechargeable lithium-ion batteries."

http://www.detroitnews.com/story/business/2015/06/08/rail-bu...
A good example how to not write performance sensitive code, in general, and specifically in Java, would be Minecraft. Though commercially successful Minecraft is (or at least was) an excellent study of how to not do stuff, be it memory management, networking or rendering (when I played Minecraft it still used immediate mode GL if I recall correctly)
Yes, they hold back a lot of fixes. It's exceptional, a lot of unfixed flaws are still there. :)
Actually I would argue to social systems and people arguing like this blog post we already have some slowing that process and its effect. We are actually already doing "better" than nature in this regard, because of culture (if you consider sacrificing survivability in exchange for social benefits better).

In general this is just normal evolution, something more efficient replaces something less effecient. And it's not completely stopabble. Let's say you can create laws that force McDonalds to keep staff and not use robots. Then at some point McDonalds will get bankrupt and another company will take its place. Maybe you can make the laws that forces all companies in your country to employ people despite not needing them any more. Then at some point your country will be too poor and gets replaced by another country, either through invasion, or revolution, or both.
The flexibility and lower cost of buses is actually a profound disadvantage from an economic signalling perspective.

I'd argue the most important reason why tram or rail line is better than a bus is the sunk cost of installation, which prevents rerouting and discourages withdrawal of service. This encourages private investment along the service corridor because the route is not subject to political whims. In other words, it can be relied upon for time scales on the order of decades, and that matters in real estate.

(Also they're generally much more pleasant to ride than buses, but I don't want to overemphasize aesthetics. The real reason people prefer trains over buses is reliability.)
If you are working with SCCM and 20,000+ clients (computers), you will know that all machines will never be patched. It just does not happen. On any given large network there will always be a certain number of unpatched clients. There are a myriad of reasons for patching to fail, from advertisement errors to installation issues, to machines simply being offline (and later coming back online).
A roadmap to an industrially self-sufficient Mars base in the minimum time
Is the answer not just simply "the generalisation is encoded in the data"? And that is exactly why deep learning models need huge amounts of data.

The model, size, hyperparameters, optimiser, etc - all they do is convert the data into a form that can be used to make predictions.
The "complex protocol" is actually "plain" Windows file sharing, which is practically always enabled in the local networks. That's how the computers in the local network are traditionally supposed to be maintained.

I've managed a bunch of computers which weren't configured so, but configuring them that way you lose everything Microsoft created for the management of the computers in the local network -- to be effective you'd have to maintain and develop your own tools, which most of the companies wouldn't like you to do. It the users are supposed to "normal work" on the given computers, not enabling the file access is much harder to achieve.

I know there are "everything virtualized" approaches, but they are really expensive.
What Science Says About Achieving Peak Performance
It's true that they are not exclusive to Stoicism but unlike most of the others these principles are central to Stoicism.
People have demonstrated similar types of ideas are effective for optimizing network size - after training a highly redundant big model it's often possible to reduce it down to 1/10 of the parameters without significantly impacting performance by doing stuff like this (even simpler, I think pruning is often effective).
There are two exploits. One targets SMBv1 and the other SMBv2. Then there's the backdoor.
How would you handle emergency situations where communications could be disrupted?

Instead of remote apps, I think we need something more like Microsoft's edge intelligence they demoed at Build. The central data-centre pushes containers down to the devices and monitors them. You get the centralised control without the latency and disruption that remote communication would add and be unacceptable in many medical scenarios.
Luscious Lips Giveaway – Cheap Beauty Deals
Does that mean that they will fix all future (major) remote vulnerabilities?
Have you considered getting Windows 10? The update isn't so expensive.
There are standard techniques to remove (eg DC) bias from such bit streams.
Something something submission guidelines. Something something this is intellectually stimulating, and I haven't seen it before.
> complete inability to read nonverbal cues

Isn't that the default in software departments/companies? However, usually that is considered an "asshole" by the general population, despite actually being a good reason for not reacting to nonverbal communication.
I think gmail does the same sometimes?
I remember buying books to learn a piece of software (whether COTS or a development library) and inevitably things would go off the rails and not work for some reason. Since then I have learned to be skeptical of written tutorials and prefer the video approach whenever possible. With video I can see the exact steps and don't have to worry as much that I'll get stuck. So I consider efficiency a little differently. I don't mind scrubbing a video if I have to. In the end, I get more value from sources that demonstrably work and reliably teach rather than wasting time on an n step tutorial only to find that step m doesn't work the way the author claims and having to thrash around for the real solution.
OCaml GC uses bit 0 of a machine word as a flag that the address in that word was allocated under GC. Hence, integers only have 63 bits for the value, and bit 0 saying that this is not a GC-able address. IEEE doubles, however, need all 64 bits. You can't chop off bit 0 for a different use.
Useful. Thanks, Andy!
Here's the TLDR:

"As the authors succinctly put it, “Deep neural networks easily fit random labels.” Here are three key observations from this first experiment:

-The effective capacity of neural networks is sufficient for memorising the entire data set.

-Even optimisation on random labels remains easy. In fact, training time increases by only a small constant factor compared with training on the true labels.

-Randomising labels is solely a data transformation, leaving all other properties of the learning problem unchanged."

And conclusion

" This situation poses a conceptual challenge to statistical learning theory as traditional measures of model complexity struggle to explain the generalization ability of large artificial neural networks. We argue that we have yet to discover a precise formal measure under which these enormous models are simple. Another insight resulting from our experiments is that optimization continues to be empirically easy even if the resulting model does not generalize. This shows that the reasons for why optimization is empirically easy must be different from the true cause of generalization. "

This paper was pretty hyped when it came out for seeming to discuss general properties of deep learning, but the details of it are a little dissapointing - okay so sufficiently big/deep networks can overfit to training data, and that's exciting how?... it's a curious finding, but not one that's all that hard to believe or that is all that informative. Or so it seems to me. I don't see how they justify claiming that they "we show how these traditional approaches fail to explain why large neural networks generalize well in practice."

I suppose the notion is that memorizing random labels implies memorization should also work on non-random labels (and thereby no generalzation to test set is needed), but it seems intuitive that proper labels and gradients with regularization will find the answer that generalizes because that is the steepest optimization path available. I have not read it all that deeply and not in a while, so perhaps their arguments are stronger than it appears to me, though.
'genuine correspondence' refers to the high level features that are similar in similarly labeled images. For randomly labeled images there is no similarity.

If there is no detectable patters from images to labels, the network does rote memorization. It learns a compact way to remember the label for each image.
Someone the other day wrote an excellent comment explaining why you can't just replace Windows with Linux in some professional environments like hospitals: medical hardware drivers that are only available for Windows.

I'll try to find and link that comment that managed to make a better point than I did.
It's an interesting conundrum. One could argue this is a precedent. Then it becomes a question of "for what levels of severity do they patch vulnerability for?".
Left paying job to pursue music.. writing butt songs now
Research with modern tooling like git?
PCs without network are useless in a hospital context, anyway, as everything is already networked, even with applications being running locally (the database is not stored locally). It is easier to ensure connectivity through simple protocols (TLS/HTTP) running remote applications, than running local applications plus complex "remote monitoring" stuff. Regarding latency, if the servers are in the same building, you can get < 5ms latency with the default configuration (e.g. accessing Windows remote applications using HTML5 web clients).
I think trains/subways aren't as much of a concern for most people. On a bus, it's not uncommon to end up with a stinky or fairly creepy person stuck next to you with nothing you can do. Trains make it easier to get up and walk away, even moving to another car if you want to.
Banking Trojan App(s) on Google Play
The XP SP3 update was signed on 2017-02-11.
Unlike biological contagions, digital ones typically aren't transferred just by physical touch.

Don't run or open anything off the stick on your machine and you'll be fine.
The UX idea wasn't bad but the arbitrary grouping and the deep nesting ruined it.

They did not give enough thought to the user workflow and mental process to locate things (i.e. Why inserting and deleting a row had a completely different workflow at the beginning)
Only it the technology pretends that business/greed somehow does not apply. Google could make selling updates on the Play store an optional part of treble, problem fixed.
I don't do step 3. Viruses hardly ever work that way. An infected computer can infect a USB drive, but not the other way around for an up-to-date OS and if you're careful not to run mystery programs you find on it.
Windows file sharing (SMB/CIFS) is complex, in comparison to delivering remote applications using HTTPS (TLS/HTTP) through one single port (which is very simple, and easier to secure). So compare: local applications running many client remote protocols, or running remote applications through HTTPS (TLS/HTTP) with all the complexity at server-side (e.g. in-building data center, or remote data center, with high availability and being fault-tolerant, etc.).
And when the IDE exploits Python 3 type annotation, the "static vs. dynamic" gap is much less painful.
It's still free afaik.
Are you on 8 or 8.1?
Correct, the issue isn't in Linux itself.

It's in drivers, third party kernel modules, libraries, etc.

But that doesn't make it any easier.

On desktoo GNU/Linux or GNU/NT we don't have easy stable environments, and the fight between dynamic and static linking is always won by static linking. In the GNU world, that ended with snap/flatpack/docker/rkt/containerd
If you are on 8.0, upgrade, it's free in all the cases.
I think it is young person with many friends thing. Roommate suggest either college student or someone not wealthy - wealthy people have own apartments. They are probably all members of the same social group.
All the jobs you've listed are white collar and require a probably at least above average intelligence. The high school dropout you remember from your childhood (the one who sniffed glue and never completely comprehended basic fractions) is not going to be a video game story writer. Once he got his issues in order, he made for a good truck driver though, and was a valuable member of society. I'm afraid it won't be so in the future.
Ask HN: Why does HN throw an error page when a link is clicked repeatedly?
When i click on `new` link repeatedly (5-10 times), I see an error page.

I made a gif: http://imgur.com/a/IJY53

Error page

===========

An error occurred.

Sorry, the page you are looking for is currently unavailable.
Please try again later.

If you are the system administrator of this resource then you should check the error log for details.

Faithfully yours, nginx.

=============

Is this some sort of DDOS protection?
I couldn't either from Firefox on Linux or IE11 on Windows 7, but the download started automatically in IE8 on XP.
Crashplan worked well for me, sometimes I have to restore a file that I overwrite or that ends up being corrupted because of buggy (in-house) software and I never had any problems with that.

My main issue is that I went with free plan + my own server because transfers to their servers were really bad. But to supply your own storage, you have to install Crashplan on the server, which uses significant amount of RAM. So this rules out backuping to my NAS (not enough memory there, even though it's x86 and technically people ran Java on it).

The other issue is that file format is (AFAIK) closed, and also you an account and connection to Crashplan service, so I'm not completely sure that you really own the data. I didn't do much research here, though.
I am on 8.1, problem is I tried upgrading to windows 10 a year ago. I was one of the "early adopters". I cant remember properly but there was incompatibility with Visual Studio with Xamarin on. I was reliant on developing an app at that time and could not afford downtime, so I reverted back to 8.1.

I will try upgrading again when I get time.
In many but definitely not most.

There are a lot of European cities and even whole countries including fairly developed ones with pretty shitty public transport.

You also need to check the walkability of many cities.
In Europe it's better in the center of old cities but gets pretty bad, in the US the cities tend to sprawl much more especially newer cities like LA.
You won't have a highway crossing a city in Europe in the US it's much more common.
It's pretty clear that this completely 100% predictable and predicted attack - open source and free software people have only been talking about the incredibly obvious dangers of a proprietary IT monoculture for 20 years now - is such a damaging "welp, Stallman was right again" moment that Microsoft didn't really have much choice.
Weird, maybe you are IP banned or it actually is some corp firewall on your side.

It's a conference presentation titled "Remote Code Execution through Intel CPU Bugs" by Kris Kaspersky and Alice Chang. Google finds copies elsewhere.

I can't say that I see how the "remote" part could possibly work, but as for local exploitation, errata often state that things like "data corruption" or "unpredictable behavior" can happen under "certain internal conditions" so this stuff may be exploitable if one can execute arbitrary instructions which trigger these internal conditions.
Guidance on the FCC Sunshine Period in the Restoring Internet Freedom Proceeding [pdf]