skysight-inc/HackerNews huggingface dataset:
I'm not sure who or what you're arguing against. It's a good thing when fuckup companies are replaced by better ones; that doesn't mean it's a good thing that companies keep fucking up.

Tangentially, publicly-traded companies are strongly incentivized to keep growing at all costs until they collapse under their own weight, rather than just finding a market and serving it well year after year. I dunno if capitalism is to blame specifically, but it certainly seems perverse.
You mean like, turn Appalachia into the Silicon Valley of the East?

This is an old idea, and implementations of it almost never work. It's usually because there's some other facet of "the fish" that is difficult to replicate somewhere else, and people do the replicating in some cargo-cult fashion.
Yes and no. For safety of narrow AI systems, yeah, there's a lot of scope for research, and that's what your first link gets at.

But for AGI (which is what Tegmark talks about), there's no good way to get a handle on safety yet (other than working towards figuring out AGI).

As for MIRI's agenda, I don't buy that it will help with AGI safety at all. There are a variety of reasons for that, some of which are discussed in the piece I linked above.
Construction South Africa
Seems like it would be hard to get Haskell to run 8/9 as fast as C. Haskell is much harder to reason about performance than Go or C, and it's pretty easy to make a seemingly innocuous change that slows your program dramatically.
Someone started a fictional podcast about Mark Zuckerberg
Funnily enough, I found it rather paradoxical (if you are developing in-house).

You choose a base, and that one is shared across your projects, so the size doesn't matter much within reason.
Say, you go for Debian, then you count 50MB download and 100MB space over all your containers / apps, thanks to sharing. So, your stuff goes on top, potentially unshared (say multiple applications).

Which comes to the next contradiction: You then go then for a go-binary, which weighs in by itself easily over a 100MB of binary code. Unshared. Any advantage of self-containment of a go-binary (being statically linked) becomes more a liability, as it is the functionality you gain from docker-images (self-containment), without the sharing of the layers.

If you are focusing on delivering it to some random people, which would maybe care about having to install 100MB on top of whatever you are delivering, then I could see your point, but then you could just go for distributing the go-binaries themselves.
Thank you. That has been mentioned, previously, and I believe there is also a corresponding query string value that can be appended to a search URL to enable it.

At least that would amend itself to e.g. being incorporated into a bookmarklet for one-click access.
The AIDS epidemic started under the apartheid regime (not directly their fault of course),and was the reason for the drop in life expectancy. It is also moving up again with the provision of ARVs. Furthermore, infant mortality is dropping.

I suspect that your "dust mote" analogy holds, but in the opposite direction to the one you assume: the quality of life has gotten materially better for the vast majority of people (coming off a low base), but worse, or stagnated for those of us SA'ns well-off enough to frequent HN.
The video explains why. The goal isn't small, it's minimal.

By pursuing small at the expense of compatibility we got things like musl libc (which has tons of compat issues).

If all we wanted was small we could have started from musl libc and unpacked alpine packages the way we unpack debs.
I'm not sure why this is on Hacker News, but while it is here, I'd highly recommend reading some of Coates works. Regardless of if you end up agreeing with him, he does a spectacular job of making you see things from a new point of view.
I'm sorry, I completely misread that. It replaced the electron with a muon, not a proton with a muon.

Thank you for your correction.
1Password doesn't have to be "cloud managed" the way LastPass (ick) is. You can do pretty much everything in 1Password native clientside, and that's what you should do. 1Password is basically the gold standard for commercial password managers, and I think probably the only commercial password manager you should consider.
This idea you had, interestingly, has nasty traps.

1. You need to specify an “origin” which is (0,0).

This is hard because there is more than one good choice (base or top of a brick?), the structure base may be more than a single brick wide, and you still need an orientation for the base bricks relative to the table, since if they’re at an angle, it isn’t the same.

2. This fails, or at least complicates, on structures that are not fully connected, like 2 towers next to each other. XYZ doesn’t have tools for two towers, rotated, at an angle not parallel to the table.

3. You’re fucked on units if there are any “small” half bricks in the structure, which are common in lego sets.

4. It’s not human optimized. If you forget the origin (easy in a big structure, you fail.

It’s not a bad idea, for some forms of the problem, but this underconsideration is why explaining things is hard.
Komodo: Using verification to disentangle secure-enclave hardware from software
Seems to be fixed?
Ok Goggle, call someone who uses the dial pad ever.
Right, "nothing else" = "FROM scratch".

In the talk, I call this "FROM scratch -- for the rest of us."

That a half-truth because this also tries to set up a minimal compatible environment for common cases, e.g. it sets up ca-certs, a /tmp directory, and an /etc/passwd file.
No problem!

As I mentioned in my other comment, the only gotcha is to make sure you set up your syncthing ignore file to ignore the KeePass database lockfile.
All these leaks are making me feel anxious to go around deleting anything I no longer use and be more careful about signing up for anything without FB/Google login. It seems like only giant companies have the competence to maintain security BUT even then, Yahoo proves me wrong on that one.

That said, I'm sort of happy 1password switched to subscription billing - hopefully this lets them pay top dollar for the best security experts.
When do you even need to type a phone number anymore? For me it's only in cases when I'm reading it from a website or such, where my phone should be able to read the number from the camera. So maybe the most important ux aspect would be adding some OCR.
Yeah, that's exactly why we chose to start from debs.
This whole subthread is about states being heavyhanded and our options in responding.

Also, terrorism is kind of illegal already.
Even just hearing the name Trillian makes me angry all over again. It had the worst UX on the planet. Its refusal to abide by any coherent set of OS/Window management standards made it miserable to use.
Best e-commerce platforms in 2018
This is pretty much correct. It doesn't much matter what cryptographic hash you use to store secrets, and all of the general-purpose cryptographic hashes are bad password hashes. Salted SHA-3 would not be materially better than salted SHA-2 here.
Coincidentally I just saw this video by Eric Seidel (the lead of the Flutter team) talking about the stack of Flutter:

https://www.youtube.com/watch?v=VUiVkDpikDI
This is a chart of general-purpose hashes, not password hash constructions. All the hashes on Valerie's chart are bad password hashes.
a lot of doctors and especially surgeons are closet smokers.

bad habits picked up during residency and ER/on-call work die hard.
Trial Without Error: Towards Safe RL with Human Intervention
Wow, just logged into my 6 digit ICQ for the first time in years. I can’t believe I remembered my password.
Couldn’t the device simply have a setting for left handed vs right handed for the new layout type?

Assuming the hearmap is the mirror image for left handed folks.
That may be true, but I don't see how it's relevant to OJ. He wasn't lynched or set up; he committed a crime and went to prison for it. I don't see how that's mob justice even if some people were happy about it.
Where to post an article?
You can legally own an arsenal of machine guns and ammo
We don’t have D-notices, and most of the restrictions you listed exist in a more abusive sense in the UK (plus stronger defamation laws and hate speech).
you must of missed my lol. I just didn't understand your joke so I made my own.
Automatically connect your iOS-Device to a VPN when joining an unknown WiFi
... and the muon that "spends more time inside the nucleus", according to the article.

(You direct your sarcasm at an easy target; it is also too easy to turn a blind eye to all the glaring omissions and gross misrepresentations - i.e., effectively, lies - purposefully made in popular texts for the sake of making the material more "accessible" for the general reader.)
>> You can mess up your serotonin levels for an extended period of time through MDMA abuse.

You can do that with SSRIs too. You can also kill yourself with opioids. The problem is that MDMA isn't even available by prescription. The first I heard of it was on a TV special covering its use in therapy sessions - that was in the 1980s prior to the whole ecstasy fad. Why is this useful substance totally illegal, while much more harmful and addictive things are legal, available, and causing problems?
your guess is a good as mine. Sorry if it sounded like I had an answer.
Freelancers: Never miss a mention in any of your client's tools again
I thought the point of Roko's basilisk was a paradox to use to test different decision theories and to explore the nature of identity (Should the decision theory allow your choices to be influenced on possible outcomes to possible future copies of yourself?), and maybe a little about whether dangerous thoughts could exist in theory. Not an actual prediction or argument for or against AI research, any more than say the twin paradox is an argument for or against splitting up twins to send one on a rocket.
If you ever decide to publish the code, please tag me! I have my email in my profile here.

What you describe is of big interest to me but I've never done it due to never having to work with it commercially, which is a huge regret of mine.

In any case, any additional practical material and, ideally, your code, will be of immense educational value for me!
Agree MDMA has incredible potential for therapy. However I think your therapist should be comfortable/trained with it - just showing up isn’t ideal.
Kinda surprised to see Erlang and Smalltalk in two different columns.
Come to Chile. It's stable and safe, people are warm, and nature is gorgeous. I moved here 3 years ago instead of Canada and can't be happier.

The government barely cares about any kind of surveillance and there's no cultural trait to obsessively control everything. Chile also was the first country to sign a net neutrality law.
I wonder how many ico investors are really just bitcoin millionaires?
If you blame the less fortunate for their misfortune, you can lie to yourself that it can never happen to you. Welfare? You would never need it because it is only the lazy stupid people who would rather mooch off others than do anything to better their lives would ever become so poor to need welfare.

Accepting that people can fall into poverty through no fault of their own is a crushing reality, as one would also have to accept that it can happen to them at any moment. Many choose to believe the comfortable lie rather than the uncomfortable truth.
Well, it's not so far off. Every time you "look", the wavefunction of the lepton collapses to a point. For the muon, that point is more often inside.
Honestly, as an Android user, I'd be happy with a Dialer app that doesn't crash, isn't slow to start up, and that, while in a call, actually generates DTMF signals of a useful minimum length instead of only during the instant my finger strikes the buttons. Hard-to-reach buttons is the least of my problems with Dialer.
Hazelcast has officially responded to the Jepsen Analysis here. https://blog.hazelcast.com/jepsen-analysis-hazelcast-3-8-3/
Safari on Mac already has a strong built-in password manager, it syncs with Safari on iOS
If they could do better, why aren't they?
> bad habits picked up during residency and ER/on-call work die hard.

I initially found it surprising how many residency program directors tell interviewees that their programs don't allow illicit drug use. But yeah, extreme stress can lead to some bad habits, and it's apparently common enough to feel the need to remind candidates.
>In my life, I have only reported two different vulnerabilities to two different vendors.

Interesting. I don't think this is for you.

Ever have the task of needing to report a security issue to 10k sites and wish you could have any hope of automating it?

I certainly haven't. More like 100k!

Don't be so negative when people try to do good.
I don't want to be too much of a jerk about this because I get that this is an expert subject but if the best among you were recommending salted SHA-anything in 2012, the best among you were committing professional malpractice.

Honestly, I feel like when we wrote that dumb bcrypt post in 2007, it was already a bit negligent to be using unstretched general purpose hashes for password storage. The BSD's used better hashes in the 1990s.
Why would the error be linear in the mass of the electron or muon? I mean, maybe it is... but it’s not at all obvious to me why that would be so.
I did something very similar and got my first contract this week from this process.

Though I did start out with an idea that I flushed out by talking to people in the industry.

Would love to hear more about your experience, let me know if you have time to compare notes.
https://asmjs.org/

It's a statically typed subset of JS that uses typed arrays for machine-typed memory and JS's bitwise operators for int32 and uint32 casts, and + for to-IEEE754-double, etc.

It is as fast as memory-safe C-like variants already, see

https://arewefastyet.com/#machine=29&view=breakdown&suite=as...

https://arewefastyet.com/#machine=29&view=breakdown&suite=as...

I'm not sure why the native C++ (clang) gray line stops over a year ago. Perhaps @azakai can say.
True or false doesn't matter.

The tyranny is the problem.

I have a taste for darker ales. I have a choice of two, out of at least 30 beers total, at one venue I frequent, in San Diego. The others there are either the usual advertisers like Stella, or IPAs.
Culture: Preface
R.I.P. AIM, 1997-2017
I generate unique passwords using command-line tools like apg and pwgen and store them in an encrypted Emacs org-mode file [1]. Emacs can open files transparently via SSH [2], so I have easy remote access to my password store without having to rely on any external service.

[1] http://orgmode.org/worg/org-tutorials/encrypting-files.html

[2] https://www.emacswiki.org/emacs/TrampMode
Don't forget the part where those graduate students do some 80% of the work and make <20% of the income of their their supervisor (and, in many cases, <10% or none at all in several), and the university hosting the lab absorbs some 50% of all grants "off the top." A half-million dollar grant pays a single graduate student less than 20k/year for maybe 5 years, which, in the context of other companies that get these grants, is absurd. Independent research firms working from the same grants pay their employees competitive wages and still accomplish research. If these companies could issue Ph.D.s, academia would shrivel and die: imagine working at a company for 4 years, getting a salary 3-4x what a graduate school would offer, doing real work in a professional setting, doing enough research to write a dissertation, and receiving a degree. The entire incentive to attend a university would melt away.
689 days since writing the “Fuck you YC” comment on HN
The Life of I/O in the linux kernel
Some people climb mountains without professional guides.

Beginners usually need a trainer and a guide to at least get started and to not end up in a life risking situation.

In medical science those professionals are often called doctors and nurses.
Because I can seamlessly call ObjC from Clozure Common Lisp through the ObjC Bridge/FFI.
/.well-known/ is defined in RFC5785 and paths under this prefix can be registered with IETF. For example, /.well-known/acme-challenge/ is used by ACME, the domain verification protocol used by Let's Encrypt.

https://www.ietf.org/rfc/rfc5785.txt

It should not be too hard to make an exception for this path in your web server configuration. Also note that URLs do not have to match the local filesystem, so you could as well use an alias to a different local path.
What I meant by citizenship being artificial is that I, a citizen, do not owe a greater allegiance to other citizens above non-citizens. Of course citizenship has its implications in the ability to vote, work legally and such. But its membership does not create an "us" that's in opposition to the non-citizen "them." If we're going to get tribal, I'm far more aligned with foreigners who share my worldview than I am with most Americans. I don't feel a greater tug on my heartstrings when reading the article we're discussing than I do when I read about the refugee crisis in Syria. I know more Syrians than I know people from West Virginia.

It's like the difference between coworkers and friends. Coworkers are people you're grouped with for convenience sake. But you don't need to share any close bond with them. Friends are people you choose to associate with and for whom you care deeply. Coworkers can also be friends, but they don't have to be. My fellow citizens are like my coworkers. Many illegal aliens are like my friends. If I were to suggest to you that you should prioritize your coworkers above your friends, you'd react in much the same way that I'm reacting here when you tell me I should prioritize citizens over non-citizens.
SHA1..... That's bad

Current gpus can hash tens of millions of passwords per second with SHA-1.
Abuse also causes be neurological damage from oxidative stress, in the raver scene sufferers of these effects are referred to as e-tards.

But abuse of anything can be harmful, that's kind of a defining qualification of the whole concept of abuse, isn't it?
No one said the future would be painless to adopt. What's obvious is that Swift most definitely is the future. Apple has made their commitments clear. There's no stopping that train so might as well get on-board.

That's my view.
Legacy code. That's the primary reason some people haven't jumped the Swift bandwagon.

Newness (which includes rapid, breaking changes in language and still-to-be-improved tooling) would be number two.
I used to work at HP Labs. Outsourcing really isn't a factor at all. The main problem is that the mothership's core business has suffered, and budgets and timelines have been cut.

In addition, newer companies seem to just license/use the research that comes out of universities (which has the aforementioned labor model) than take on the responsibilities themselves. (at least that has been my impression, but happy to be shown the err in my beliefs)
I think the bigger spook will be if the entire market for on-demand drivers suffers a big decline in demand. Izabella Kaminska of the Financial Times has written several articles arguing that the Uber / Lyft model is fundamentally uneconomic. Without arguing for or against her, if that turns out to be true you are going to terrify a large number of investors. Nothing else has really looked as much like a sure-thing disruption opportunity as the taxi market. Anecdotally, my most recent Lyft driver recently told me that Lyft has started playing a lot of the same games to shaft drivers that she left Uber to get away from. It does make me start to wonder if the entire thing is largely subsidized by a market flooded with cheap money.
Ooh, interesting thought! I think I might have used a hex image to make a game at some point, but other than that I have little experience with them. Do you think the overall benefits of hexels would make it worth trying to standardize the pipeline?

I'd guess that the need for error diffusion and half-toning might wane in the future. (Not sure about that, but that's what I'd guess.) Are there other benefits you get with hex images?
Malpractice? Someone using SHA-1 for password storage wouldn't even be a medium severity issue on a modern pentest.

I agree with you, but it was very strange to discover that password storage is basically ignored in pentests. Especially after years of you drumming it up as a big deal.
To avoid bypassing we have a iOS app on the way their APIs allow for parental controls.

For Android you have to use a device that has support for restricted profiles.

We don't do anything undocumented to prevent bypassing and we have actually taken some bypass protection features out while we fine tune our UI and onboarding experience.
Wow, that was quite a whining article. I mean, I doubt I'll ever forget Obj-C but Swift is now my goto language for iOS projects. Reminds me of when I was reluctant to abandon assembler for C. Get over it.
For me, this started with some broad knowledge about a few industries. E.g. I have experience building connected devices and visualizing / analyzing data from those devices. I tried to meet as many senior managers as I could (think execs or experts) in my network. I knew I was interested in life sciences, energy management and robotics, so I sought out people in those industries.

I described what I was working on, what research I did on those industries and that I was looking to better understand the existing problems that might fit what I was interested in.

Some conversations did not lead anywhere, other times I got excellent, tactical, advice. That gave me more information and ideas, until I landed on my current project.

The reason this approach worked for me this time (as opposed to the other times I've tried this) is that I had a direction I was presenting and I did a bunch of research to get educated about some of these industries. I don't mean I studied it for some long time, but reading related subreddits, searching for conferences and looking up sponsor companies from that, learning some terms specific to those industries, etc. helped to have a better conversation.

While YMMV, getting warm intros to smart and successful people for a 15-20 minute phone conversation will expose you to what you don't know yet. This will result in you asking better questions, which can lead to more ideas.
I just use my browser's password manager. (It's not deterministic though; other responses cover that angle well.)

Everyone seems to treat password managers as an arcane mysterious tool and acts temporarily amnesiac to the fact that every browser that anyone has used asks if you want to save your password. Both Firefox and Chrome let you sync your passwords between multiple computers, and I believe both do it in an end-to-end encrypted way.