skysight-inc/HackerNews huggingface dataset:
Yes, like PCI-DSS requirement 5. (required if you handle credit card numbers).

Requirement 5: Protect all systems against malware and regularly update anti-virus software or programs
Malicious software, commonly referred to as “malware”—including viruses, worms, and Trojans—enters the network during many business approved
activities including employee e-mail and use of the Internet, mobile computers, and storage devices, resulting in the exploitation of
system vulnerabilities. Anti-virus software must be used on all systems commonly affected by malware to protect systems from current and
evolving malicious software threats. Additional anti-malware solutions may be considered as a supplement to the anti-virus software; however,
such additional solutions do not replace the need for anti-virus software to be in place.

5.1 Deploy anti-virus software on all
systems commonly affected by malicious
software (particularly personal computers
and servers).

5.1.1 Ensure that anti-virus programs
are capable of detecting, removing,
and protecting against all known types
of malicious software.

5.1.2 For systems considered to be not
commonly affected by malicious
software, perform periodic evaluations
to identify and evaluate evolving
malware threats in order to confirm
whether such systems continue to not
require anti-virus software.

5.2 Ensure that all anti-virus mechanisms
are maintained as follows:
 Are kept current,
 Perform periodic scans
 Generate audit logs which are
retained per PCI DSS Requirement
10.7.

5.3 Ensure that anti-virus mechanisms
are actively running and cannot be
disabled or altered by users, unless
specifically authorized by management
on a case-by-case basis for a limited
time period.
Note: Anti-virus solutions may be
temporarily disabled only if there is
legitimate technical need, as authorized
by management on a case-by-case
basis. If anti-virus protection needs to be
disabled for a specific purpose, it must
be formally authorized. Additional
security measures may also need to be
implemented for the period of time during
which anti-virus protection is not active.

5.4 Ensure that security policies and
operational procedures for protecting
systems against malware are
documented, in use, and known to all
affected parties.
Because someone else less scrupulous might. At our current juncture it's impossible to trust that the patent review system will effectively capture prior art events.
The green amateur bands are in no way "available". Those are the Amateur (Ham) Radio bands.

N9NAY
> ... with their own specific algebra

Nevertheless, for simple computations this specific algebra indeed boils down to "applying the chain rule to the AST" (as well as the diff rules for all primitive functions). In forward mode, the only difference to symbolic differentiation is that common terms are reused (items in the AST, treating the AST as DAG), so the expression terms do not explode in size, and the computation is very efficient.

In reverse mode (and all other, more complicated modes), the chain rule still plays a central role, but is applied in a different way. Here, saying the "chain rule is applied to the AST" might still be technically correct, but would be very misleading, as the whole control flow is different, not to mention memory usage.
This is one of the two things I miss about my more religious days as a younger man.

I would pray a lot and it was a great way to run through things I was both thankful for and the people in my (pray for) list who I needed to reach out to and make sure they were OK. I cut it because I stopped thinking it had an affect on the external world, but should have kept it because of how it affected me internally.

I also miss the community, but you can get that elsewhere it's just harder for me personally.
Possibly more important is why logically you're not wise to gamble, work out odds and compare them to every day occurrences.
Somehow my Honda Odyssey buffers bluetooth audio for ~3 seconds. I had thought that the designers/developers were just inept because none of my other bt audio devices work this way. It never occurred to me that this could be considered a feature.

... no, I still think it's a bug.
I don't think the title is positive.

I assumed it to mean that Jarek Duda had joined Google, but it is Jarek speaking in the thread.

I follow the data compression sphere a bit. It really seems like Google is making a mistake here. From a patent perspective, since ANS is already "prior art", it seems like it doesn't deserve a patent.

Presumably Google wants to avoid receiving a misinformed lawsuit about ANS that they would then have to fight to prove that an ANS patent shouldn't be valid. Still, not putting Jarek in the loop (and like he mentions, not engaging with his university more) is wrong.

The best takeaway:

if anybody is also afraid of Google having a very general patent for using ANS (both tANS and rANS) in image and video compression and can explain why the above claims are just a natural mix of known methods:

go to: https://efs.uspto.gov/efile/portal/efs-unregistered

select "Existing application/patent" and then "Third-Party Preissuance Submission under 37 CFR 1.290"

as "Application number" enter: 15/370840

"Confirmation number": 5111
Multitasking is a myth
probably related to this:

"Political discourse is off-limits on Hacker News *
*Except when Sam Altman feels like talking about it"
> It's like buying a burning tyre fire, where's the upside ?

I see it as buying the customer stock with the opportunity of a "fresh start". Rebrand, ensure the that the new organization follows compliance.
Dutch app gives elderly pedestrians extra crossing time at traffic lights
Bigg job
Ask HN: Middleground between arduino and raspberry pi?
I was asked by my father who is a doctor, to build a prototype medical device for some idea he had.

I did a lot of toy projects using either the arduino or the raspberry pi.

For this project, I need something low power (will run on battery) that will receive data from a few sensor (so it need GPIO) and display this data on an OLED display (I need to plot a graph and display a few metrics).

I feel like the arduino is a bit too low level, the goal of the project is to focus on the idea my father had, not writing a plot engine in C.

The raspberry pi on the other hand seems way overkill (and uses too much power).

So many boards and solutions have flourished lately, I'm a bit lost. The arduino drama didn't help and I lost trust in everything arduino.

I need:

- As low power as possible

- A few GPIO, 5 are enough

- An easy way to drive something like 2x10cm OLED display

- About 1mb of writable internal storage

- A way to prototype and debug that is easier than having to load the program on the arduino. For this the PI is good because I can just run pi programs on linux.
Say you have a VLAN-capable switch and a spare PC with a couple NICs to use as a router. I use the Sophos XG Home Edition for example but other router setups (like the mentioned pfsense) should be similar.

Say ports 1-4 on the switch are your trusted devices, 5-8 are your untrusted, and 9-10 are the LAN side of the router. There are other ways to do it but this is probably simplest and easiest to mentally map. Set ports 1-4 and 9 as access ports for VLAN 100. Set ports 5-8 and 10 as access ports for VLAN 200. Now you have two virtual networks hooked into one physical, partitioned by the router.

You then set up eth0 (port 9) as trusted LAN and eth1 (port 10) as untrusted LAN in the router, and give each an IP range (Separate subnets at a minimum). Now all trusted can talk to each other and all untrusted can talk to each other, but nothing together yet.

You then set routes and rules (port filtering, SNAT, DNAT, etc) for port access from either network to the other to finely control what ports are available to what. You do the same thing with eth2 which would be the connection from the router to the modem for internet access.

Not a full tutorial but hopefully that points you in the right direction.
Yes, the track record is often negative if you want to make action games on not-Windows because of GC pauses caused by Mono's inferior garbage collector.

As for Java, Notch managed to do it for Minecraft, except for the mobile port which I think I remember reading was re-written from scratch on iOS because the performance was terrible.
I would probably not list it on the CV but in an interview be forthright about it. If it is not the right fit be prepared to say that and why. As an employer I would be impressed with someone who knows what they want and can tell me why their present situation is a bad fit. Explain it framed with what you are looking for rather than what they do that you don't like. That being said, if I found out an applicant had a job and never mentioned it I would have to wonder what else has been misrepresented and would wonder if I could expect honesty and transparency should I hire that individual. It is never a good idea to start what you hope will be a long term relationship with secrets or worse with lies. Even if you don't consider an omission a lie many people do so think carefully on what to say when it is brought up or how you bring it up if they do not, should you choose to disclose that information. It is truly a personal choice.
Nuclear fission powered CO2 scrubbers could be built with today's technology. Not to mention getting rid of current CO2 emissions from coal and natural gas electricity production. Unfortunately the Greens have been making that politically impossible for the last 50 years. Tax carbon and reduce acceptable man-made radiation exposure from power generation to something reasonable in the same bill. This would be a compromise position. Even ExxonMobil supports a carbon tax. Let's do it already.
I refuse to use C/C++. If that's what I have to use to make games, I just won't make games. Fortunately, there are other languages available with a C FFI.

I don't think forced memory management teaches anyone much of anything besides how to manage memory manually. It doesn't make programs better. I'm very grateful for garbage collection so that I can spend my cycles thinking about the problem I'm actually trying to solve.

edit: I think this came off a bit too dismissive, but I guess what I was after is that what technology you choose depends on what you value. Personally, I value using programming languages that are pleasant to work with, and I don't personally find C/C++ to be pleasant. I enjoy dabbling in game development, but it's not so important to me that I would use tools that I don't like to do it.
Many hosting companies already give out free LetsEncrypt certificates with the ease of a checkbox. And those that don't will have plenty initiative to do so because their customers will spam their support saying that their website is not save anymore (and many will switch if the price for the certificate is unreasonable).
> We need a system that doesn't require people to follow what their president, senator, congressman, governor, state senator, mayor, and city councilman, along with dozens of other elected officials, are doing while in office.

... so you don't want a representative government? Couldn't disagree more. Sure it's tough to keep up with everything they're doing. But I like being able to look into it at my leisure, and I trust my community to bring important issues to my attention. Just because I don't know exactly how my representative has voted doesn't mean I'm unaware of how government is changing things that impact my life.

Really unclear to me how you would accomplish your goals without eliminating democracy as we know it.
I use ScreenFlow for screen recording and they added export as animated gif recently. It's so easy - highly recommend it.

https://www.telestream.net/screenflow/overview.htm
Messaging is implicit in everything Erlang & Elixir do. Bolting on a message queue to software written in another language isn't really comparable (not a value judgement, it's just not really useful to compare them).
Have you seen this infographic on Game of Thrones?
Doodling is scientifically proven to boost brain activity
Something that is not mentioned often is the combined effect of losing net neutrality and the recent decision to let the ISPs sell your advertising data.

It's a two pronged attack on the internet.
The ISPs data collection is going to be more valuable than Facebook or Google simply because they have everything and most importantly the ISPs can verify physical identities.

So internet ad revenue is being attacked from one angle and then they are extorting money for packet delivery on the other.
I haven't set up an entire office.

Fluorescent are right out. LEDs are great if you like the color temps they come in, but it's generally believed the blues can disrupt the body clock.

I personally favor area lighting that can be turned off and/or filtered along with a fairly low-wattage incandescent at each desk (some people prefer two, like me) and leave it at that.
How do you know whether something is a hyperbole? When the author claims something is not a hyperbole.
JunoCam Raw Images from Jupiter Great Red Spot Flyby
What are you doing for Net Neutrality Day?
Have you done something clever or creative for Net Neutrality Day? Let's share those here.

Personally I've re-compressed the jpegs on my site at quality level 1 and threw a banner on. It looks terrible!

Hopefully this won't become too much of a self-promotional circle jerk.
Not trusting intranet CAs is irrational.

1) Every employee of every company needs to have some level of trust in their company. They trust their company to make payroll, and they trust their company at a reasonably high level to follow local laws and regulations, including reporting threats and violations against their physical safety. That doesn't mean that employees should trust their employers with their deepest darkest secrets and life savings, or that there aren't different types of trust, just that trust is a spectrum, and arguing that you should fully trust every one of the shadowy public CAs pre-installed in your OS and browser, that you know absolutely nothing about and have not personally vetted nor have personal relationships with, but not the intranet CA your employer operates, is rather clearly an irrational assertion.

2) If you decide not to trust your employer's CA, and your employer has provided you with a machine to access intranet sites, then you clearly cannot trust accessing Internet sites for personal reasons on your employer-provided device, not because the CA cannot be trusted but because it's irrational to distrust the CA but also trust the employer-provided device, which may have a keylogger and other tracking software installed.

3) If you decide not to trust your employer's CA and your employer operates a BYOD environment, then you are free to bring a separate device for work purposes, on which you trust your employer's CA but refrain from accessing personal accounts, instead only accessing personal accounts on devices which your employer doesn't know about.
I wish the Facebook API allowed for unfriending - I've always wanted to build a tinder swipe app for it.
This mad dash is a great secondary tourist must see.

The island's population doubles (1) each workday.

This view of everyday life for many is worthwhile to observe.

As well as "dont talk on the train" rule - but you have to ride at commuter times

(1) nyt 6/3/13 commuters from the other boroughs and outside the city nearly double Manhattan’s population, from 1.6 million to 3.1 million.
Even if the sampling was rigorously random and no projects were dropped after starting, there would still likely be a bias towards small, "long tail", projects. It seems plausible that these types of projects would have more errors (or vice versa).
I've been doing the same. Unfortunately, it seems that if I want to update my cert I have to remove the domain and then add it back in.

Are you aware of a workaround? Otherwise, I agree with the ease now that LE supports DNS verification. I just wish we could edit existing domains in Gitlab.
This blog post and the comments here are amazing. In no other software field but indie game dev does spending a year trying to build your own toolset instead of $ACTUAL_PRODUCT_THAT_MAKES_MONEY draw praise.
> LANs should be included. It's just as bad as using most websites without TLS.

Why? What's the threat model, that your employer/colleagues can see your traffic?
> Us: Starts publishing core dev meetings so people can see what the decision-making process looks like. Spoiler: no, it's not centralized.

Transparency is orthogonal to centralization. I didn't watch the video -- do they do some sort of in-person distributed consensus of the Ethereum network during the meetings?
https://en.wikipedia.org/wiki/Processor_affinity

In my experience we used affinity with older CPUs to improve single thread performance. Recently it doesn't make much difference.
That would mean that the USPTO tacitly admits the fact that the patent system is broken and they need hacks to work around it. I think that would be strange coming from them.

If the patent system was working correctly there would be no need such a thing, either something is patented or it isn't. If it isn't it shouldn't be possible for a third party to patent it post-facto since there's already prior art. At least, that's the spirit of it as far as I'm aware.
Here are two of my blog post in regards to using OCR to bypass some security mechanisms:

In short: It's a python code where you press one button and it will take a screen shot, crop the image, decode it, and type in at over 900+ rpm.

https://anthonys.io/ocr-engine-playground/

To see how it is in action without the OCR functions:

https://anthonys.io/keybr-com-multiplayer-cheater/
Is it the same as automatic differentiation?

Is this native support (as opposed to there being a library for it)?
1Password irks security experts in push toward cloud-based vaults
that's not how NFC works.
Build a fullstack admin app with Voyager in 5 minutes
>While pretty much any device today will do 1080p H.264 with hardware acceleration.

And yet Netflix won't give me even that.

>Have you ever tried explaining these nuances to customers who says their movie playback is terrible, if so, I think you would reach the same conclusion as those providers.

If that was the issue the help line should be able to enable this for me once I've specifically asked for it. They don't and I very seriously doubt that's even 10% of the reasoning.

> wouldn't mind that somebody looked at how content licensing works, but me being able to access Wikipedia or any number of other websites, a lot of which might be discussing my ISP in negative terms is IMHO much more important than i get to see the entertainment i like.

My point isn't that net neutrality isn't extremely important. My point is that having Amazon and Netflix fighting for net neutrality while being so blatently anti-consumer is hypocrisy.
I really don't think the issue was with "creating x from scratch", but from the purpose it was built for.

Game engines like Unity are general-purpose engines, they are not made for a specific type of game, and can be used for basically anything. The trade-off is flexibility and performance.

What they tried to do was to basically create a "clone" of Unity, that is, they tried to create a general purpose engine, and that does not make any sense at all for an indie developer.

If you're going to create a game engine + editor, then do it for a specific genre of games (e.g. FPS), and do it only if you're planning to create a series of games that belong to that genre only.

Unless you want to create a business out of selling game engines, then have a specific game in mind before creating a game engine, and tweak it for that purpose only.
Looks like:

graph [rankdir = "LR"]

I often skim the Gallery looking for an example that roughly like something I want and then click to view its source. In this case this one seems left to right:

http://graphviz.org/content/psg
I started a DirectX (so, HLSL, basically identical from my understanding) and C++ project about a year ago. I hadn't worked with either, but managed to get a little window up and running within a weekend. That was mostly thanks to some templates out on the web.

The reason I think it deserves to be called "arcane" is that, to even reach an RGB triangle (the shader equivalent of "Hello World"), you have to have dozen different things working all at once:

- Writing / compiling the shaders (vertex and pixel/fragment, at least)
- Loading the shaders
- Describing the vertex data
- Creating vertex data
- Describing constant buffers
- Creating constant buffers for vertex + world/view/perspective
- Filling all the buffers with data
- Giving the right data for view / perspective matrices (the camera, basically)
- Calling the rendering of a mesh
- Getting the output to draw on the screen
- + a ton of other drawing descriptions I don't even remember, like raster descriptions

For all of those tasks there is an insane amount of boilerplate that needs to be written. This is okay in itself, since it's all stuff that's worth tweaking for various use cases, but it creates a pretty insane barrier to entry. Not everyone needs to learn all the quirks of setting up vertex buffer descriptions right up front. I personally wasn't going to read a huge DirectX bible just to see how to get started.

It's a problem very much deserving of a copy+paste solution, with some clear instructions on how to tweak for individual needs, but most tutorials (MSDN or otherwise) concentrated on specific features or were in a series building on an already opinionated codebase / pipeline. And if any part of it doesn't work, and you'll be second guessing yourself and asking a ton of questions with every line of code, you have no real way of knowing what went wrong.

However, once I had a pipeline set up (and then started organizing it in a way that it managed itself and could host various shader types) I started having a lot of fun. I'm working on a 3D NES emulator [http://n3s.io] and felt super inventive when I found a way to get the models to render using the NES palette.
We built one of these in the UK, it was abandoned due to poor take up and Just Eat's current market domination

Good luck selling it
When you write "less code" I see "less readable" and therefore "less maintainable" and more that can go wrong. Less code should not be the goal.
Microsoft creates an AI research lab to challenge Google and DeepMind
fair... the video on the site show's game play, and there's a video/screencast on our app store page as well: https://itunes.apple.com/us/app/fake-news-the-game/id1249442... (it's also 100% anonymous/private fwiw)
No sorry - I didn't mean to imply you had. I read a study on hackernews the other day. Unfortunately I cannot remember teh link as always. Single occupancy vehicles see, much better to have everyone in one clean bus instead - bikes are bad apparently.
Depends in the text is in a static location, it can be done easily.