skysight-inc/HackerNews huggingface dataset:
Ivan - I have your book, I've read it (at least a year ago, if not more) - so sorry if this is covered and/or I should know the answers, but:

(1) Seems like the argument against RSA is "what happens when the server's private key is leaked?" But with ephemeral DH, it also requires private keys to be protected (now 2 of them!), these being signing keys. So isn't it simply trading one problem for another? Or perhaps the difference is that at least with DH, in theory only /new/ sessions can be attacked (MitM impersonating going forward), but older sessions can't be opened up.

(2) Doesn't this mean that now the client needs a keypair & certificate? Otherwise, how does the client sign? And where does the client key pair come from? I'm pretty sure my browsers (i.e., clients) don't have their own keys & certificates.

TIA for answering my silly questions.
If you're agreeing with gamblor, you're doing it in a way that sounds completely different and much narrower than what they're suggesting. My take from your parent comment was "don't bother", and my take from gamblor was "this is very doable". Pretty big difference.
> excessively heavy and unsafe

Quite the understatement. I'd describe them as apocalyptically unsafe, seeing as many designs literally exhausted nuclear fallout.[1]

[1]: https://en.wikipedia.org/wiki/Aircraft_Nuclear_Propulsion#Di...
Actually Ed Witten was not a total newbie to advanced Math before grad school.From his commemorative lecture:

At about age 11, I was presented with some relatively advanced math books. My father is a theoretical
physicist and he introduced
me to calculus. For a while, math was my passion. My parents, however, were reluctant
to push me too far, too fast with math (as they saw it) and so it was a long time after that before I was exposed to
any math that was really more advanced than basic cal
culus. I am not sure in hindsight whether their attitude was
best or not. However, the result was that for a number of years the math I was exposed to did not seem
fundamentally new and challenging. It is hard to know to what extent this was a factor, but
at any rate for a number
of years my interest in math flagged.

https://www.sns.ias.edu/ckfinder/userfiles/files/Comemorativ...
This is exactly the problem Open Collective[0] exists to solve. Often times, there are people who want to financially support a given open source project, but there is no channel by which to do so. Creating the financial channel is the first step toward a much needed culture change where the assumption is you will support the open source you rely on, especially if you're making money off it.

[0] http://www.opencollective.com
Check this article out for some food for thought: https://drmalcolmkendrick.org/2017/04/01/what-causes-heart-d...

In short, alcohol may be slightly toxic to brain cells, but it may also significantly reduce heart attack risk. Not much value in having a toxin-free brain if you're dead/stroke from CVD.
> Complaints about how the architecture of new apt buildings on El Camino Real is ruining the character of MV

That's bizarre to me. The "architecture" on El Camino in MV is strictly of the suburban-strip-mall variety. Even identikit glitzy new apartment buildings are an improvement over that, even without taking into account how they can help alleviate the housing crisis.
There are indeed a lot of competing ones. Highly recommended:

• CIS 194 @ UPenn, https://www.seas.upenn.edu/~cis194/fall16/

• Haskell Programming from first principles, http://haskellbook.com/

• Real World Haskell, http://book.realworldhaskell.org/
Generally yes. The tricky part is documenting how they qualify for the R&D credit.
And it's not possible to select text at all on Mobile.

I've taken to using alternative links (archive.is, archive.org, outline.com) for sharing the articles simply because it's too much of a PITA to manage the NYTimes.com page itself.
> The ability to select from a menu of options prior to delivery would be an improvement for many of these services.

Hello Fresh, at least, has 8 or so available recipes per week. They'll pick 3 for me, but if I choose I can log in to their site and pick for myself.
Why Are Some Immigrant Groups More Successful Than Others?
I love 300sqft apartments. Maybe instead of Tiny House Hunters on HGTV we can get Tiny Gentrified Shoebox Apartments instead.
I stand corrected. That is an interesting concept.
Octave’s “business model” is “give away for free an inferior clone of a commercial product”. Why is anyone surprised that that isn’t lucrative? Anyone who has the money to spend on Octave is likely to just pay for Matlab. The defining feature of Octave users is that they want to use Matlab’s library ecosystem but they’re too cheap or broke to pay for a copy of Matlab.
Of course, there aren't a whole lot of ethical ways to get them to move

Offering people a chunk of money works quite well. If they're likely to be on welfare anyway why not offer them a few years' worth up front, to reflect the costs of their dislocation?

American society is very accounting-driven and wants everything itemized and explained, which seems awfully wasteful to me. It would be more efficient (for the state) and more dignified (for the recipient) to just offer to buy them out for (say) $25,000.
So they are abusive right up to the point where people start to leave.

That's a huge wide area where you can engage in questionable behaviour.
NYT: How Silicon Valley Pushed Coding into American Classrooms
Until you are on, say, YouTube, where the home key is hijacked into restarting the video...
It's a lot easier to do when important sectors of your economy aren't addicted to consumer credit. People don't buy tankers full of oil on credit cards, but they do buy Fords.
> That would never happen. A network tap would be able to detect a malicious update even if the main PC was implanted very well, and a Microsoft-signed malicious update would be worldwide news.

While I don't know of that specific scenario, Stuxnet used a hardware vendor's key to install infected drivers[1]. There was also a Chinese registrar that allowed a customer to man-in-the-middle Google[2]. Depending on how Windows organizes their driver updates, I could see an adversary doing a man-in-the-middle between Microsoft and their target, and pushing a bad driver update.

1. https://www.welivesecurity.com/2010/07/22/why-steal-digital-...
2. https://www.techdirt.com/articles/20140909/03424628458/china...
When both parties are in a corp network (eg across companies) you would need a server anyway. Many either offer a FTP server or have switched to Accellion (which is kinda cr.p, and full of security holes)... so this is a nice, fast and secure alternative.
No surprise.

I interviewed there a while ago, it was one of the most surreal experiences ever:

First the HR lady refused to proceed unless I told her what my current salary was. I refused, as I always do. She said they cannot proceed if I do not, and I said that that is fine and I am happy to leave. She said no, we can go on. She then tried to get me to sign a very large NDA. I refused, as I always do. She said that without that they cannot demo their technology to me. I said OK, i do not need a demo, if, after interview, both the company and I feel like we match, we can do that then. Ok… she brought her boss, same story with him – salary, NDA, etc… Eventually he said we can proceed to interview.

Two guys walk into the room – #1: Asian, 50s, #2: White, 30s.

#2 did not say a single word the entire time at all.

#1 looked at my resume, and asked why I thought I was a fit. I said that they called me and spent weeks convincing me to come interview, so that is not a question for me. He asked if I had done any embedded work. I said yes, and a list of my cooler projects was on my resume and website. He looked and said: “this is all crap.” I asked “excuse me?” He said that none of my projects were interesting or useful. I pointed out that my world’s smallest JVM has actually been licensed by a number of companies, indicating that it is useful, and that, uARM, my modular ARM emulator was being used in a few universities to teach courses on architecture. Se said that he doubts this, and even if true it proves nothing.

#1 asked if I was familiar with running linux on very limited hardware. I said that yes, and I had in fact run it on an AVR a while ago. “That is all crap” was his reply.

At this point I was a bit stupefied. Instead of asking me questions, he was just insulting. But ok, perhaps it was a cultural difference, so I persevered.

#1 asks if I had had any experience porting android to any devices. I pointed out that yes, I had ported new versions of android to a number of old devices, and once to a watch that had had no android support previously at all, and besides that I worked in Android at Google. He told me none of that is what they are looking for.

I asked what it is they are looking for, and he said: people who have experience with android porting. I re-explained carefully that what I had just told him is that I had ported android to a number of devices and was quite familiar with the process. He again said that “no, that is not what we need, this is worthless”

#1 asked me if I had ever made changes to android graphics stack. I said that yes, I had, including writing my own implementation of gralloc and HWComposer on a weird 2D accelerator on a weird MIPS chip. He said that yet again no, that is all “crap”

At this point, I had had enough. So when he asked me again (for some reason) why I thought I was a fit, i replied: “well, I clearly see now that I am not. Sorry for wasting your time.”

I got up and left.

Given this sort of interviewing process, I am not at all surprised of the outcome of this company.
I think it is absolutely true that homelessness is much more nuanced than "housing is expensive." It is also pretty clear from the last 5 years that where SF is spending its money is not as effective as they would like. (it is called out in the article, millions more spent and the problem hasn't changed). There is also the issue that while you have population counts you can't really track individuals, so did last years money get 5,000 people into homes who have been replaced by 5,000 new people for a net change of zero, or was it just ineffective? Hard to say given the data sets available.

One of the observations is that homeless populations tend to self select into encampments. And part of the expense and challenge is that where they choose to camp does not facilitate maintenance (cleaning, services, etc). I have not found any papers or articles on municipalities that have built infrastructure that specifically designed for hosting a homeless encampment. Could you build a system that would support a locally hosted infrastructure? Passive sanitation systems, trash depositories and collection points, water supplies?
Quite a few of our conversations with my ex (who is an artist) revolved around the contrast between mathematics and the arts. We realized quite early on that mathematics is actually quite artistic and could have easily been considered one of the arts, if it weren't for its inescapable rules and structure. High level mathematics takes just as much creativity as any of the arts.
Look at the numbers before assuming this is a solution to funding Open Source. I'm not saying it's a bad thing, just that the amounts it's bringing in for most projects is effectively like buying the developer a cup of coffee. It's not a sustainable sum for someone to live on, in almost all cases.

Right now, Webpack has $99k; which is respectable. That's a decent annual salary for a full-time developer that lives anywhere other than Silicon Valley or NYC. But, it falls off a cliff after that. Next is MochaJS at 16k; that's two months salary, maybe three or four in cheap places. After the top twenty projects, you're closer to nothing than you are to something. The time it takes to set it up would be worth more than it'll return (there are lots of $0 projects in the list).

Maybe it'll improve with time. I dunno how long this project has been going on, and it looks really well done. It's just that the numbers are abysmal. I hope it'll improve. I wish we had a way to fund our software without having to sell a commercial version...but, it's so far from realistic, we can't really even consider it.

I've been making my living from OSS for ~20 years now, and it's the great curse and tragedy of the thing that because the software is free, there's an incredibly pervasive belief that tiny sums are sufficient to keep a project afloat.

We tried, very early on (~14 years ago now), to crowd-fund some major enhancements to our software...we raised a total of about $15,000 (this was long before crowd-funding was a thing), which to a lot of people seemed like a lot of money, and it caused a lot of folks to feel extraordinarily entitled to specific results (e.g. because they contributed $200, they assumed it would mean we'd develop a big feature they were the only person asking for, and that would take days or even weeks to build and test). But, for two developers working full-time on something, $15,000 is practically nothing. Most developers just don't have the freedom to trade in a full-time job paying market rates for a sub-poverty annual wage. Realistically, we couldn't commit full-time to the project until we started a business based on it that brought in predictable, recurring revenue. And, we couldn't effectively do that without providing things that the OSS version didn't have. OSS is a really tough way to make a living, is what I'm trying to say, and I don't know a lot of people who do it successfully without being employed by someone that does a lot of non-OSS stuff, too.
Almost any time nuclear is mentioned, I find this link to be relevant: https://en.wikipedia.org/wiki/Nuclear_lightbulb

The thing is, even if you got the system small enough (lightbulb reactor or otherwise), you'd have one hell of a time with cooling. It works with rockets because they need to dump massive amounts of heat into propellant and generate a lot more thrust with it but airplanes fly slower and generate force through lift. If the money were there though, using something like the lightbulb for synthetic jet fuel could massively change their environmental impact.
What It Costs to Open a Restaurant in San Francisco
It really is a shame that this accountant person is tripling down on everything without actually having the needed domain knowledge.

Thanks for following up on each of these -- as a small business owner that might pursue this, it's often difficult to separate signal from noise without having much time to spend on it.
You're calculating the cash flow of an all-cash financing scenario, but not the real cost. Since the buildings are durable you need to amortize their benefit over the life of the structures. Using the standard depreciation schedule on the $525M gives only $18M per year + maintenance & tax -- close to the figure derived from rents.
Canada is used as an example of why AT&T didn't need to be broken up.

Ask a few Canadians how they feel about the telecom oligopoly.
all of the above; plus a janitor or a police officer cost $200k+/year each when you factor in pay, benefits, overtime. So you can imagine they might be a little thinly staffed.

http://www.mercurynews.com/2016/11/01/bart-janitor-grossed-2...
I don't mean to belittle you either, but this is hogwash. Of course a Rails or Node developer wouldn't be able to write Postgres without ramp-up time...

Maybe what you're saying is that the ramp-up time would be LONGER for someone starting from Rails or Node only knowledge to being an infrastructure developer?

Any highly sophisticated application ( Postgres, LLVM, etc ) requires some advanced levels of domain knowledge but they aren't impenetrable fortresses of skill that no mere mortals can access.

I think, somewhere along the way, a lot of developers started believing this fantasy that they were the keepers of secret knowledge that only a few select individuals knew... GOOG and MSFT perpetuated that with esoteric interviewing processes and cult-of-personality style branding. The truth is... the fundamentals of CS aren't terribly difficult nor are they even terribly exciting. You can absolutely learn them on your own or even as you go.
I'm sorry to have to be negative on this. I look at a bunch of this stuff that is DOD/Armed Forces funded and all I have seen for decades are nothing less than what I would call scams. Total waste of taxpayer money. And this isn't universities only, it's companies that win stupid-as-fuck "research" grants and produce crap in return.

There are a few companies out there playing with what are nothing more than ridiculously expensive toy RC planes (< 6 ft wingspan) that almost anyone could build out of parts available in the open market.

This MIT thing is nothing less than an overgrown model airplane. It uses what looks like a stock 4 stroke model airplane engine with a stock model airplane propeller. It probably uses stock model airplane servos, electronics and 2.4 GHz TX/RX.

Oh, wait, advanced materials. Nope. I have been designing and building RC airplanes as a hobby for three decades. I was vacuum-bagging large (12 foot wingspan) glider wings from fiberglass, carbon fiber and also Kevlar twenty years ago. I still have and use my vacuum bagging setup to build planes today. I have also made custom carbon fiber propellers by CNC machining aluminum molds and stuffing them with epoxy impregnated carbon fiber rovings.

So, this is what I would call "advanced hobby" stuff.

Special airfoils? Nah. Any serious RC glider pilot who has built planes knows what airfoils to use. Not a secret. These guys didn't do anything special on that front.

Oh, but it can be taken apart and stuffed into a box for FedEx shipping. Guess what, so can any large scale RC glider. Nothing new there. Make the wing in six foot sections and you are golden.

Yeah but...

Yeah but nothing.

Here's a guy flying an OFF THE SHELF 6 meter wingspan RC glider. What do you think the wings are made from?

https://www.youtube.com/watch?v=k3xxjqpIRNg

That's nearly 20 feet. The MIT "drone" has a 24 foot wingspan.

Here's another guy flying a 6.5 m, 21 ft motorized glider:

https://www.youtube.com/watch?v=r_U_e_EEduo

Replace the electric motor with an internal combustion engine and a fuel tank and bingo. Again, off the shelf.

And here are a BUNCH of guys with huge gliders, powered and not, including one that has a 51 FOOT wingspan. And, look, no truck for launch, they use another large scale RC airplane to tow it up to altitude.

Here's a list of a bunch of large scale RC sailplanes you can buy off the shelf today.

https://www.scalesoaring.com/scale-sailplanes

Here's an 8 to 8.8 meter (~26 to 27 ft) DG 1000 S you can buy and build for about $5,000 Euro:

https://www.paritech.de/content/modelle/dg1000.php

Shame on MIT for being a part of a scam. It's embarrassing.
Until some bozo forgot that not everything is 16:9, and the "slim" header linebreaks into a double height version...
At the college level physics is almost completely math.

It's not the formulas; it's how you look at them. And what they "mean" to you.

Linear Algebra, Functional Analysis, and Abstract Algebra aren't exactly 'measurement-based' subjects.

Right; but those are just the ABCs, is it were.

Physicists and astronomers, by and large, are interested in a broad range of mathematical subjects -- but generally as tools, just enough therein to make sense of what's coming out of their particle detectors and their telescopes.

Pure mathematicians, meanwhile, are into things like the Langlands program, or Inter-universal Teichmüller theory. And they constructions they consider aren't the mere means to some end, grounded in the prospect of obtaining some better understanding of the physical world. They are, rather, the end goal in itself.

Or if you will, the "music".
There's a simpler reason it won't work over the long term: as people get better at cooking, they don't need things like meal kits any more and just make smarter grocery shopping choices.
Original NumPy author here. I have a lot to say on this topic, given that it has literally consumed my life over the past 20 years. You can go here for some thoughts about some of this: http://technicaldiscovery.blogspot.com/ There are several articles there that relate but in particular http://technicaldiscovery.blogspot.com/2012/10/continuum-and... and http://technicaldiscovery.blogspot.com/2017/02/numfocus-past...

I knew what I was getting into when I wrote NumPy. I knew there was not a clear way to support my family by releasing open source software, and I knew I was risking my academic career.

I did it because I believed in the wider benefit of ideas that can be infinitely shared once created and the need for software infrastructure to be open-source --- especially to empower the brightest minds to create. I did it because others had done it before me and I loved using the tools they created. I hoped I would inspire others to share what they could.

There have been a lot of people who have helped over the years. From employers willing to allow a few hours here and there to go to the project, to community members willing to spend nights and weekends with you making things work, to investors (at Continuum) willing to help you build a business centered on Open Source.

There are many people who are helping to fix the problem. In 2012, I had two ideas as to how to help. Those who know me will not be surprised to learn that I pursued both of them. One was the creation of NumFOCUS that is working as a non-profit to improve things. The second was the creation of Continuum (http://www.continuum.io) to be a company that would work to find a way to pay people to work on Open Source full-time.

We have explored several business models and actually found three that work pretty well for us. One we are growing with investors, a second we are continuing with, and another we are actually in the process of helping others get started with and ramping down on ourselves.

Along the way, I've learned that open source is best described in the business world as "shared R&D". To really take advantage of that R&D you need to particpate in it.

We call our group that does that our "Community Innovation" group. We have about 35 people in that group now all building open-source software funded via several mechanisms.

We are looking for people to help us continue this journey of growing a company that resonantly contributes significantly to Open Source as part of its mission. If you are interested, contact me --- I am easy to track down via email.
Nvidia to launch graphics card specifically designed for digital currency mining
You almost seem like you're trolling, but to clarify in case anyone else doesn't get it:

This is a low friction app ecosystem with 70/30 rev share[1] for what CloudFlare claims is 6m+ websites. Also, their VC are also willing to back companies in their app ecosystem, too.

[1] https://www.cloudflare.com/apps/developer/docs/writing-your-...
Sincere question: What is wrong with clickbait if the article fulfills the promise? The title here seems to be what the article is about.
First, threat of terrorism is real.
Second, monitoring citizens' behavior does not automatically translate to totalitarianism.

Personally I prefer safety. And I avoid showing myself over online for privacy concerns. But I do not call safety measure a poly to implement totalitarian government.

If you have a systematic approach to achieve safety and counter terrorism, without monitoring citizens, then please state it briefly. I personally have no idea how to prevent without close monitoring.

China is different, it has always been totalitarian. It's natural for the government to monitor citizens without much resistance. This is a statement, without value judgement.
This is why I append .compact to the desktop URL to browse with their older mobile version. I find it much more usable.