skysight-inc/HackerNews huggingface dataset:
Tasty Tiles Beta
Tasty Tiles in on Open beta
hope you'll check it out
here's the link:
https://play.google.com/apps/testing/air.com.PritoStudio.TastyTiles
'Planetary Resources' is a scam. They get good PR by talking about space mining while working on something completely different.

To put things in perspective if we knew about a 1,000 ton 100% gold asteroid at say 1.2 AU, getting that to earth right now would cost more than it was worth. Add on top of that the need to refine stuff in space or send back less valuable material and it's a pipe dream until we get a lot better at spaceflight.

PS: You can increase the gravity of living spaces on mars 'easily' by rotating the habitat. Though we don't expect that to be necessary.
I've heard of a company in Ottawa hiring students who worked on a final project immediately after graduation. They would set up a subsidiary, and give them a project manager to help guide the new projects.
What I see here is a mixture of tech's standard gender issues along with the hazards of "changing the world".

If you think that you're changing the world, it's very easy to dismiss other concerns as less important than your core mission. This problem only gets worse if you actually are changing the world. At the end of the day, even Tesla is just a company with a bunch of people working their day job, you do need to make sure that your employees feel safe and enjoy their time there within reasonable bounds
As I get more experienced in operations, I find regex to be more and more invaluable. I used to dread doing a regex, now I get enjoyment out of sorting out a tricky one.
When we moved our certs away from COMODO we received a sales call from one of them. They found the contact info for an executive here and told them that by replacing our COMODO certs with another brand, we were at "tremendous" risk for not having our websites work on the latest iPhones and iPads.

The entire call (which we ended up pulling and listening to, and then sent back to COMODO as a prime example as to why we're threw with their business) was designed to have a non-technical decision maker make an impulse decision over the phone to buy thousands of dollars worth of certificates again.

Wildcard certs from Let's Encrypt cannot come soon enough.
Making Culture a Tangible Metric
Ask HN: What are the implications of the comparison of GitHub profiles?
Mobile Invoicing for Creatives, Designers and Developers
The constant is measured via experiments and because mass appears in the expression of the constant given above, a measure of the kg is obtained. I.e. the closer we approximate the constant (6.62...) the closer we get to determine what a kilogram actually weights (in relation to meters and seconds).
Wouldn't all but the most naive scanners use time-out settings, maximum lengths on bytes read etc?
My wife got angry quite a few times in graduate school because the university's Women in Computing group forcibly signed her up to their mailing list at the start of every academic year. She unsubscribed every year and, without fail, they silently added her back. Apparently they thought a woman in computing couldn't manage without being part of this group!

It's one thing to give people the space and support they ask for. It's quite another to shove space and support, unsolicited, upon them.
The idea here is - instead of looking for problems, you should ask yourself what you are passionated about.

Problems come and go, but the passion to stick to one thing and see it through to the end is what will truly make you successful in whatever you wish to pursue.
That's not a pun.
It's not just Schaeffer. The research department has a huge and deep history of AI in games (GAMES group).

https://chessprogramming.wikispaces.com/University+of+Albert...

The principal author of AlphaGo did postdoc work at UofA in computer go. This link isn't new - it's old friends and collegues.
I see my score has been 73.39. I wonder what is the upper limit?
The most "interesting" thing is that they decided to effectively combine all of the components of a mail server into a single binary. This is actually advertised as a feature ("packaging is hard"), which is quite worrying because having everything in one address space means a minor bug in one piece now affects the integrity of all of the server components.
I don't know of any that require it. But it's common to see punctuation characters escaped like that because Perl (and PCRE and its various cousins/descendants) allows you to escape any non-meta-character and have it treated as a literal.

I suppose the two main benefits are

(a) neither the writer nor the reader has to remember which punctuation characters are meta-characters (you just have to remember that it's always a literal if it's escaped), and

(b) in implementations like PHP's which try to replicate the Perl-style 'delimited' syntax (e.g., /foo/), it prevents characters in the pattern from conflicting with the delimiters.

Maybe there's some other advantage but i can't think of what.
Things go in a strange direction in the comments section...
Red Digital Cinema Announces Holographic Media Machine
I want multi-wildcard-certs (using subject alternative names aka SAN). Also, if I get a cert that covers:

[*.a.company.com] and [*.b.company.com]

Can I please also have [a.company.com] and [b.company.com] stuffed into two additional SAN slots!

p.s. How do I get an inline asterisk into my HN comment!?
Hacker Ethic
Oh this seems quite an interesting experiment. Curious though if this defence poses no additional risks (beside bandwidth) on the server. I mean, is there any significant chance that the random data could cause a glitch on the server implementation?
The java version of dpg is a GUI.
It does not make sense, practically. So they'll be using a balance with multiple moving parts made of multiple minerals that have to be precisely calibrated with margins of error adding up, instead of a simple platinum cylinder?

Although, it makes sense politically
> Since there is no cost to downvoting, it is cheaper in terms of time and effort to--anonymously!--censor opinions than to express them.

Sometimes it's cheaper in terms of time and effort to downvote rather than engage because the comment or commentator displays obvious* signs that a discussion will be fruitless.

* To me, of course; I only represent myself and my opinions.
I don't see how it would help, once you use lets encrypt no amount of not-shadiness would ever make you go back to them ever again.
I looked at the website and I couldn't figure out what you actually offer.

Is it just a way to organize a team of freelancers? Or do you also provide client leads?
I won't pretend to be a world expert on market failures, but I can take you through how we come to the conclusion pollution is a result of market failure: It all comes down to negative externalities.

In general, an externality is something which happens to an unrelated third party due to some activity. An example of a positive externality is if someone waters their grass using a sprinkler, and there's enough excess spray from that sprinkler to keep your flowers sufficiently watered as well. A negative externality is, well, pollution: A truck drives by, belching toxic gasses, and you get to breathe them.

The problem with externalities is that they're not priced into the activity, because the cost is not borne by the person doing the thing which causes the externality. The owner of the truck which belched fumes near you isn't going to pay for your next asthma attack. Therefore, there's no incentive to stop doing those externality-causing activities, so they continue to happen.

The other half of the market failure at the heart of pollution is game theory, in this case a Prisoners' Dilemma: Say a company wants to stop polluting, but it can't be the only one, because not polluting is more expensive than polluting, so if it's the only one to stop, it gets out-competed. Thus we have the cooperate-defect choice: Cooperation means agreeing to not pollute as much, and then taking the steps to reduce pollution, and defection means agreeing with your fingers crossed, and then not reducing pollution at all. The best strategy for any individual actor in this system is to defect while everyone else cooperates, so you get to be the big economic winner in a cleaner environment because all the other suckers cooperated and reduced their pollution.

So. What's the solution? We need an entity which can make the polluters internalize the costs of pollution, so they're more likely to want to stop polluting for real, and can punish defectors who say they want to stop polluting and then don't. That entity, something which can levy and enforce punishments to pursue a policy, is a government, no matter what else it's called, and it can do those things because it's not bound to the same incentive structures which caused the market failure.
No, it's merely a work-around for two very distinct and self-inflicted problems:

- The pain of exposing language-native compiler/language AST and indexing APIs to a JavaScript IDE.

- RMS' inability to accept that GCC might need to expose an AST to external consumers, and his paranoia regarding how that might undermine his GPL-everywhere ideals.

Using JSON for local IPC -- and requiring IDE language support to funnel itself across that high-overhead IPC connection -- is fey.
While you may not get validation, you will get a critical analysis of your idea from multiple perspectives. I've already seen some responses with amazing insights that would've taken an inordinate amount of time to gather.
Soundcloud lays off New York engineering team
I'm a fan of the Thinkpads, especially for Linux. Lenovo maintains a certification list of models that are certified under Ubuntu and RedHat. Note, though, that not all Thinkpads have the same chassis materials. Here is a list of the materials for various 2017 models: https://www.reddit.com/r/thinkpad/comments/6bvlb9/2017_think...

Note that the T470 line is built with magnesium, and the X1 Carbon / Yoga have a lot of carbon fiber parts. Both make for a high quality feel.
It's kind of not important because nobody measures the kinds of things that require the level of precision applied to the kilogram definition using pounds.
There is no technical solution to that problem.
Very good point. Ditto with hot reloading components. React-Hot-Loader tries to retain component state via complex use of code transformation and "proxy" components, but it's very finicky and has lots of edge cases. Using the "plain" HMR API to just swap out the entire component tree on any component change is much simpler and more reliable, but doesn't preserve component state. Choosing to keep something in Redux so that it gets retained during that situation is a valid choice.
>What's a lot of processing? Speech recognition can be done on a phone.

AFAIK speech recognition is non-trivial processing (though not an expert on it at all). Just a few points: I've read somewhat recently that the reason why Google's speech recognition is good is because it does a lot of the processing on their servers, also because it has a huge volume of data to work with (from worldwide users). All I know is that there are various factors at play (even though I'm aware phones are very powerful nowadays). It was an exploratory question, not meant to suggest that it cannot be done or will necessarily be too slow. And I did say "marginally to somewhat", etc.

>Are you sitting with your hands on your keyboard at all times while programming?

Obviously not. As a programmer, I'm well aware that there is a lot of think time involved.

>Do you need to move the cursor to a variable, function, etc to refactor? You are assuming that we can only say commands that are bound to a key?
"Set breakpoint on line 20" -- You had to reach for the mouse in your world?

Nope, no assumptions. It was an open-ended question.
Show HN: Planetary CFD on a Phone
After a trek in Nepal this year, I had a month to relax, and an idea from my trek to work on, but no computer in reach. I had been experimenting with phone IDEs though and decided to see what could be accomplished.

The end result of a month at a few hours a day using AIDE is DreamPearl (source on Github), a planetary formation simulator that does all of the plate mechanics using computational fluid dynamics (CFD). Currently working on volumetric air/water cycle.

Quick (6s) video to demonstrate.
https://youtu.be/5Nv9Klqlc2M

Github link
https://github.com/Araesmojo/DreamPearl

Things I like:
Plate mechanics as CFD "dirt" particles - plates are defined as surface regions based on target size and then dirt flows across them like a conveyor. Models pressure, drag, and frictional acc. in non-z-locking sphere built from a split D20.

3D as 2D - CFD calculations are performed on a 3D surface with no artficial wrapping or edges, but particles are tricked into believing they are 2D by performing all operations in a tile localized frame of reference.

Shaders by parts - while the move to vertex/frag shaders opened a lot of flexibilty, they also add much complexity. My approach decouples shaders into subsegments that can be superimposed to create a full shader using lines like shaderProgram = BuildShaderFromParts( "based3d", "tex", "light" ) where each call out references only the relevant portions in a file such as "light.gg" or "tex.gg". They can be mixed and matched so that swapping "point" for "base3d" in the above example would create a floating 2d sprite instead.

Barnes-Hutt tree decomposed space and lookup in a non z-locking spherical space w multiple options for level of detail (LoD)

Useful for: using opengl on a phone, implementing a CFD code, strategy/adventure games that need a random world, examples of procedural creation that diverge from the standard perlin / voronoi noise.
Crypto Assets Fund
OP's post was amazing but can someone explain how this was probably made?
In the case of a brain implant, shielding would mean more or less a tinfoil hat, however.
Right, only wanting to hire 7/10 means the company thinks they're better at evaluating team members in a single interview than the team is at evaluating its members after working together. Or they just can't afford a team that large, and it's not the right one for them.
Thank you :) We currently don't offer any early incentives, since we're going to be a free service.

If you are selected for our closed beta, you will receive recognition within our platform as early user. Details coming soon!
Speaking from personal experience (dating an employee) I can tell you it is not necessarily north of 100K. Most I have spoken with from NSA make less thank 100k and that's with 5+ years at the agency, non-management.
It’s surprisingly hard to find the acqui-hire candidates. Teams strive to present a healthy face until they’re dead.

Maybe we need an anonymous matchmaking platform, no reputational risk to the team for signaling ‘pivoting’ to getting aquihired before they run out of runway.
China's Elevated Bus Project Seemed Too Good to Be True – And It Was
This has really put me in real problem: https://news.ycombinator.com/item?id=14711385
Am I equal as compared to my friend?
I live in Calgary. This thread is spot on.

I used to visit Edmonton often, and for the warm half of the year, it's just a more livable city than Calgary. Edmonton has actually walkable communities, a sense of genuine hospitality and a constant barrage of festivals. The Folk Music festival is a world class music festival (for the best experience, get on a volunteer crew, they treat you super well). There's plenty of other good music festivals though, like interstellar rodeo (not at all a Country Music festival), and Up+Downdown. Fringe is fantastic. Fort Edmonton is a fun outing if you dig history.

If you do locate up here though, get a group together and learn a couple of winter sports. Once I started snowboarding and snowshoeing, I really started to look forward to winter.
This doesn't support your point at all. It's only tangentially related.
What is the attack vector on KASLR that KARL prevents?

My best guess: A leaked kernel pointer could be used to find an offset for the KASLR kernel, and that offset could produce a working payload for some other unrelated kernel shell code exploit.

If that's correct, KARL seems like a pretty fringe improvement over KASLR. Can anyone educate me?
This is maybe the most important question for mankind that has ever been asked, so let me ask it: Would it also be possible to use this method to generate new images of attractive, half-naked female humans on the basis of an existing database of such images?
I have not followed these features - are they proposed in any way for adoption in FreeBSD ?
Each FQDN is treated separately, so generally speaking, if you can demonstrate control for a FQDN under an ICANN TLD, you can obtain a certificate.

Something you have to keep in mind are rate limits. Unless the (parent) domain owner has registered the domain in question as a public suffix[1], you, together with all other users who have subdomains under the parent domain, will be limited to 20 certificates per week.

Some domains, like for example the hostnames EC2 instances get that resolve to their public IP, have also been explicitly blacklisted because they are generally not assigned to anyone for longer periods of time, and it would be easy to mint certificates for a large number of those hostnames by just spawning tons of EC2 instances, which would make those certificates largely useless.

Finally, domain owners may decide to prevent issuance using a CAA DNS record, which are supported by Let's Encrypt.

[1]: https://publicsuffix.org/
17 Google Chrome Extensions to Boost Your Productivity
"Sounds like a really, really over-engineered solution"

In my country a pizza made by hand cost US $ 3, an it is so big, delicious, cheap and fast.

Maybe big brands like Domino's, Pizza Hut, etc. will win reduce their cost, but as you say: "over-engineered solution".
I've only been on HN a few years but yeah, the recent threads - whilst still largely cesspools - have had encouraging signs.
I was being serious even if it came off flippant.

There is no way to be 100% certain of your security with a system as complex as a computer so if you need 100% certainty then you have to assume you are compromised, even if that is a very low probability.
New method to design digital learning
GRIDINSOFT ANTI-MALWARE 3.1.2 FINAL DOWNLOAD FREE WITH SERIAL KEY 2017
Also, this link may help give you some background. You also have to consider that salary is adjusted based on location. https://www.federalpay.org/employees
To use a classic example, who's going to go to bat for you when they get a demand from a government agency - the EFF or the Hong Kong Post Office? I know where I'll place my bets.

Go pull up your certificate authority list and ask yourself for each one of them if you trust that company more or less than let's encrypt.

Let's encrypt publishes auditable logs of all issued certificates, they're backed by some of the biggest names in online privacy and I trust them much more than other CAs.

I for one would be happy if I could delete all other providers from my browser.

CAs ultimately are centralized and too trusting, giving that same level of trust to less trustworthy companies just damages the overall security of TLS. There's no distributed trust model for CAs, it's pretty much all or nothing, so in the case of CAs, distribution is not a security benefit like it is in say Tor or Bitcoin, but a problem as it means the attack surface has widened.

Short of going to a new, completely decentralized solution like the proposed DNSSEC extensions or Namecoin, a single, very secure CA is probably better than a lot of not secure, often government influenced CAs.
> GS-14 slots and above are reserved for management and spend much less time doing the real work.

This is normally true but there are organizations that have technical roles up to GS-15.
It is faster and costs less to evaluate one person on one narrow task than to evaluate a team on a large task.

The resulting work can be incorporated into the main by the existing staff faster.

And a startup has this pattern more often than the large project pattern that needs a team.

Once you grow, it's a different game.
fortunately, this change should help diversify the number of certificate authorities for people to use. In the explanation of the wilcard support they link to another post that explains it is enabled by their rollout of ACME v2.

Wildcard support is one advantage of ACME v2, but another advantage they list is "ACME v2 was designed with additional input from other CAs besides Let’s Encrypt, so it should be easier for other CAs to use" - https://letsencrypt.org/2017/06/14/acme-v2-api.html

So, in addition to this functional improvement to Lets Encrypt, the change should enable more automated CA options in the future.
How does it compare with racer-mode? Does it have roughly the same functionality or is one a subset of the other?
Those items - stuff like price, charging time, range - have seen large improvements and can reasonably be expected to continue to improve.
I noticed that too, their defense against a sexually discriminatory environment was to admit to discriminating in a different way?

Also, their defense is bordering on the edge of defamatory if it's untrue. It wouldn't be hard for a reasonable jury to see the situation as malicious intent. IANAL.
I think the idea is to use retrocausality to replace entanglement. No spooky action at a distance- it's just that when you observe one of the pair, it retroactively "picks" the state it always was, which retroactively sets the state of its partner back when they were first entangled.
I mean, it's not unimaginable that supermarket, factory-made pizza also involves Jira and Kanban. Why not involve the best manufacturing practices when making something?
HN is not a typical aggregator.

HN historical is not a marketing site, it's a forum where technologist share things they find interesting. So any form of self promotion is usually viewed with a bit more critical lens than if it was submitted by a third party. Rightly or wrongly the bar is set higher.

People liked your article (it made it to the front page) but your comment above feel like it is extra "sales" oriented even if the article itself if not about a product.

If you must comment on your own story you should do it as if you were commenting on another user's post, in first person. For example, you could rewrite your comment as:

"I wrote this article because I was frustrated with the poor reading experience when content is delivered in PDF. What do you all think?"
Yep, this is a current area of research for content generation.

I think most current approaches build some transform to a latent space and then compare generated images with their nearest neighbors in the training set. If they're identical then your network just learned to reproduce the dataset.
"This is surely true, but at least on Windows the central security holes do not lie in Windows itself"

They don't ? IIRC, stuxnet was an autorun exploit of some kind and the recent unpleasantness was all based on built-in SMB functionality ... right ?