skysight-inc/HackerNews huggingface dataset:
"Less than a day earlier, they had absolutely no idea what was coming yet they managed to pull all this together in record time."

How is he sure that they had no knowledge?

What if they knew but were just waiting for someone with a blog or a Twitter account to make the "discovery"?

In any event, none of this would have happened if email addresses had not been collected.

There is no need to collect email addresses in order to allow internet users to post comments. Requiring email addresses serves no benefit to the user. It is just more gratuitous data collection. Data which eventually becomes the subject of yet another "data breach blog" entry.
Social Copy – Chatroom for simulated copies of real people
2^80 is not very weak. That's the level of brute forcing a SHA-1 collision. It's low for a new system, but not very weak.

I agree with your 20%/10% comments, but I do not know why you call ZCash an investment. Zcash should discourage people from investing, like Monero does. Be a privacy coin, do not try to get in on the moon and lambo hypetrains if you want to be taken seriously.

There is no good justification for 20% right now. ZEC market cap is half a billion today. Do they really need that extra 50 mln now versus over time? Feels greedy.

But with so much taken by them that way, does that not reduce their desire to get a backdoor?

At any rate, all of this ceremony and your measures seem, as you say, hocus pocus if you're not building from known source! Forget hardware attacks! How can they not have the basics of a secure toolchain?!?

Did some participants at least publish the source they used and hashes of the toolchain and environment?

At my startup (details in profile) we will end up depending on crypto (among other things) to stay out of prison. Monero is hard to use, privacy wise - EABE and EWE attacks are our concerns. At least with ZCash the model is fairly easy to understand with shielded transactions. Much easier than figuring out ringsize and traceability there. But the Monero community seems better with no 20% take, no central company, none of this trusted nonsense. And no odd comments by both founders that require lots of mental gymnastics to make sense of. Not that any of this should matter. ZCash should be trusted on its own merits regardless of the inventors. Monero has anonymous inventors which could be the NSA for all we know.

Alas I am in no position to analyze ZCash math vs RingCT but my feeling is the latter is more understandable and thus might be more secure even if it has much weaker safety promises.
Thanks! Will do. We applied to YC Winter 2018 batch - waiting to hear if we got an interview.

WSJ profiled us last month if you're interested in reading more: https://www.wsj.com/articles/for-struggling-consumers-a-chea...
The non techies I associate with are intelligent enough to understand that they can buy a dumbphone like a Jitterbug if they don't like the downsides of the complexity of a smartphone, and that they get substantially more value out of the upsides than losses from the downsides. This shakes out to them being a lot more excited and optimistic and rosy about technology and technology companies.

Especially when I worked at Google: every non tech person I met would gush over how much they loved their products, how amazing the company must be, etc etc. This was true across a large gamut of people, from "coastal elites" to the rest of the country to people I met across the world once I quit Google and went backpacking for almost a year.

The _only_ place I've seen the level of cynicism you find on this forum is from people _in_ tech, too bitter and concerned with looking cool to even entertain the notion that there could be anything valuable about what these products do for people's lives.
ok, but those 19 investments didn't have to take VC money. if they produced great and useful products, then why couldn't they grow organically, borrow from a bank, etc.? I mean it's just complete nonsense to complain about the fact that you failed using someone else's money.
SPIFFE's lucky to have Docker, Google, and others helping drive forward the idea of consumable service authentication frameworks like SPIRE. OSS was just launched a little more than one week ago (https://blog.scytale.io/say-hello-to-spire-7e133fad72ca).
Ask HN: Should we block non-gzip HTTP bots to reduce bandwidth costs?
I run web servers on EC2 (behind ELB) and dealing with high bandwidth charges.

The bulk of the bandwidth charges are due to bots scraping/crawling/pinging without any form of compression.

Is it safe to block requests made without the accept-encoding header? (and what HTTP status code should be used? 400?) Naively it seems it would only be inconveniencing poorly written and uninvited bots (SEO spam, bots trying to find exploits etc.)

Or respond with gzip compression, no matter what?

Or just stop using AWS since the bandwidth is too expensive because of situations like this?
Where can I watch other Starcraft Bots play each other?

Anyone have links to the matches?
Put Humans at the Center of AI – MIT Technology Review
I am ambivalent about using HSMs to protect password databases, because if you're going to do that, you might as well simply introduce a minimalized authentication server (ie: something with an <AUTHENTICATE(user, password) bool> interface). It'll have approximately the same attack surface, it actually helps your architecture in other ways, and it precludes attackers from getting hashes in the first place (at least, the same way an HSM does with the HMAC key).

A Go, Rust, or (minimal, non-framework) Java authentication server speaking HTTPS to solely that AuthN interface and sharing no database with anything else is extremely unlikely to be part of any realistic "kill chain"; it'll be among the last things on your network compromised.

Meanwhile: you get to stick with technology you fully understand and can manage (simple HTTP application servers and a decent password hash) and monitor.

HSMs have a lot of uses elsewhere in secure architectures, but the password storage use case is overblown.
(author here)

It's a tough call. In my experience, sort and dist keys only really work out in < 50% of queries, and it's the other 50% where you judge the performance of your warehouse.

If we had chosen to use sort and dist keys in Redshift, then we would have also used clustering keys in Snowflake, and it probably would have been somewhat of a wash. BigQuery doesn't really have an equivalent feature yet---they have date partitioning, but that's a very narrow special case that won't work for most queries.
F* it! We'll do it live!
Note to non-commenting down-voters: Down-votes are just bits in a database. Down-voting doesn't actually have the power to alter reality.

Carry on.
Alternatively why not build a transpiler for android apps? Java -> C# would be quite doable, and then just style the APIs and UI layouts similiar but too similar to end up in court. Then what dev wouldn't have a go if the process could be 90% automated? Instead they stayed in their own bubble of custom tech that didn't bring anything particularly revolutionary to the table, and failed to attract attention as a result.
Disclosure: I work on Google Cloud (but not BigQuery specifically).

Cool! First, thanks for doing this.

You allude to it a little in your text, but I think your cost model:

(cost_per_hour / 3600) * query_in_seconds / expected_utilization

doesn't (often) work out. Your benchmarks only run one query at a time, so BigQuery will look pretty expensive compared to the smallest Redshift/Snowflake cluster.

Have you tried simulating say a team of 10 analysts by sending concurrent queries? (You will see the average runtime go up as you fill the box). Alternatively, even 18% utilization is probably way too much for a single person/analyst!

P.S.: You seem to have checked in export PGPASSWORD=...
There are no tents, but you definitely see plenty of homeless people on the street or sleeping in trains in NYC. It does feel less dystopian somehow than SF though.
As I said, in the context of targeting both iOS and Android it makes sense, but OP meant targeting only Android.

And despite my advocacy, when targeting both mobile OSes, customers at enterprise level tend to pick Ionic or pure Web approaches, despite the lower UX.
> It only does that if a recipient decides to do nothing but sit on their ass. Otherwise, it provides the opportunity to explore things that one wouldn't have the time to do if they were spending most of their day laboring to afford food and housing.

Regardless of wether I do nothing or go out and explore, it would mean I'm not essential. Working is not only about the money; is about finding a place in a community and having some sense of identity and purpose.

> Would they? Or would robots be doing most of that work?

Could be either, as necessary.

> Work how?

Work on the projects he listed
Though I should have done this before starting development, I need to figure out the positioning of this product. Like you suggested, maybe I should be talking to smaller bloggers to start with.

Based on the initial feedback, there's serious demand for a free tier and people don't need much convincing to switch so I think it makes sense to have one for non-commercial personal blogs and websites. Once I have at least a few paying customers I plan to rollout the free tier with a focus on tech blogs. The idea is to avoid a situation where I'm supporting free tier users and footing non-trivial server bills without having any revenue.
Why does NTVDM create empty IO.SYS and MSDOS.SYS files?
Dear Sir/Madam, we at Onk NeoL Patent Tech take much pride in our inventions and patents. We recently came across one of your products, BLUNT ARROWHEAD, which we think violates our patent #5, registered with Neolithic Patent Office. Please send one goat to license our patent, else we will send our grizzly bear.
Best Regards, Onk - CEO Onk NeoL Patent Tech.
Thank you, but I did read that summary in their press release.

For example, what features does it have that would let me buy and sell securities?
What CIOs Should Know About Data Science
Yes.. that's a good starting point but the hardware used for each platform varies a lot.

Clickhouse on a single i5 compared to redshift on a 6-node ds2.8xlarge cluster

I've been throwing everything I can at clickhouse on a little VM, and the performance is amazing.
One problem here would probably be turbopumps [1] running dry. These things run very close to their limits when fully stressed and would presumably run higher still if they no longer needed to pressurize anything.

The fuel is also used as a coolant [2] so you would not want to run out of fuel in the plumbing before you run out of propellants in the combustion chamber.

[1] https://en.wikipedia.org/wiki/Turbopump

[2] https://en.wikipedia.org/wiki/Merlin_(rocket_engine_family) (search "regeneratively cooled")
Poland just legalized medical Cannabis thanks to one 'rebel' doctor(Marek Bachański) going against hospital management to treat drug resistant epilepsy in children. It started with him getting fired in 2015, then parents of the children riling up, whole thing going public and sparking conversations, lawsuit lost by the hospital, reinstation and finally passing a law.

http://herb.co/2017/07/26/poland-medical-cannabis/
Oh the humanities!

...the open-minded and critical among that crowd–and I do know that they are plentiful–know that this idea of economists dealing exclusively in abstract models, and denying "soft" factors like emotions or differences in preferences was never true. It's a straw man, as exemplified by the recipient of today's Nobel.
OK, now you're making me feel old. I knew those things through personal experience.

I suppose you didn't know that HP made calculators either?
But they already fixed it https://news.ycombinator.com/item?id=15434931
It was Bill O'Reilly, not a news anchor.
But if you have your authentication server, that server becomes a target. And unless you're using an HSM under the hood, you're still exposed to hashes being stolen.

I think the idea of the author is to protect the operation with hardware.
Travis actually has this[1], too, if you ask their support to have the feature beta enabled for your repo. A while back, I was having a CI only test failure that was a massive pain to try and debug, and this helped enormously as I could explore the build state and try alternatives without waiting on the typical build time.

[1]https://docs.travis-ci.com/user/running-build-in-debug-mode/
I don't think it will not lower the cost of food. In my opinion, the savings won't go towards pricing, they will go towards the owners' bank accounts (or shareholders).
See Foxconn and the whole fleet of robots in their factories.
>They don't want handouts. They want jobs. They want to contribute. They don't want to leave their homes.

Well, they can't have everything. A big part of why America has historically had social and economic mobility is because it also had literal mobility; people willing to go where the work is.

What I hear when I read this is, "they want someone to come along and hand them a stable well-paying job." And who doesn't? But we live in the real world.
Instead of paying per app, would make more sense to let devs keep 90% of store revenue, which would incentivize the development of apps that are actually popular and make money.
Working dropshipping with my online store , i am earning 4 figure income
Was trying not to name him. And didn't know what exactly he was supposed to be when he was yelling on screen.
I always had a really tough time configuring this in a way that worked for me when I tried it. It's hard to see what it's doing. But, useful if you can set it up to work for you.
I was a student who had won a Lumia 800 around May of 2012. There was a promotion where anyone who submitted 4 apps to the appstore would get a phone - no 'win' involved, a guaranteed phone. It was one of the best promotions I'd ever seen, and I promptly churned out 4 soundboard apps in a week.
Twitch is where I would be digging around. https://twitch.tv/sscait is one such with commentary.
That one rings true: https://www.homesciencetools.com/vitamin-c-test-experiment-k...

Though the time frame is probably greater than casually sipping
Thanks. Those will keep me busy for a while.

It's just curiosity, I'm not expecting to enter the field of AI research. It's still fun to learn. Again, thanks.
Ask HN: Who could use an API that provides answers to science questions?
Hi all

We're building an API that provides answers to science questions. Currently focusing on Biology, Chemistry, and Physics. The idea is that it should allow for follow-up questions, too.

To test it ourselves, we launched a Facebook Messenger bot and currently are answering questions manually. We want our ML model to get to a certain level of performance before we unleash to our users directly.

Our goal is to provide the API to companies that build conversational software or to EdTech companies. Do you work at such a company and think this could be useful for you? If yes, in what form? I'd love to talk.

You can see a short demo an https://humbot.io or try it out yourself on FB Messenger (search for Humbot or go through this direct link: https://m.me/humbot.io)

Thanks for your help!
Don't disagree; I think what I actually tried to argue for was doing both: segregate data access to a new, minimal, service that also requires a key in an HSM to operate.
> You want a really nihilistic show?

Game of Thrones is way more nihilist than Rick and Morty or Seinfeld. At least when it comes to morality, ethics, and humanity in general.

Rick and Seinfeld do some scummy things out of pure self interest (or disinterest), but Game of Thrones is 100% about taking the training wheels off and letting characters rape and murder each other. Rick doesn't take slaves. Jerry doesn't have his rivals killed.

What's more, fans of Game of Thrones often root against the non-nihilist characters for not being "smarter". "Dumb" characters are often guilty of loyalty or romance or honor.

I say this as someone who enjoys the show. But I enjoy it as a thought experiment of a different society with different rules and culture.
Intel introduces IoT provisioning solution to help install devices automatically
The idea behind BI is that you can still work, but if you don't work you still get to live. If you want more than the concrete block - fine. Go do something and earn money, but if not just STFU and live with what you get.
Delegating security-sensitive operation to a dedicated service (e.g. an authentication service) is security 101. It's just an application of the principle of least privilege.

Giving it a fancy name makes it look like it's a new idea.
Housing projects and government cheese aren't terrible because they're inexpensive. The government spends a ridiculous amount of money on them. They're terrible because the buyer is the bureaucracy instead of the consumer. Which is a thing the UBI fixes.

If you have a UBI then you don't have to buy cheese. You can buy beans, pasta, carrots, potatoes, rice, bananas, it's your choice.
I've read (rumor alert) that this is kind of what they originally had in mind with the WSL (Windows Subsystem for Linux).

This would allow windows phones to run android apps from within Windows (though several obstacles remains, since the play store and other google services are proprietary)

Rumored this worked so well that Microsoft canned it in favor of UWP, because if windows could run android apps there would basically not be any need for UWP. As a result Microsoft changed focus and gave us WSL on the desktop instead.

The above could very well / likely be made up but I like that explanation.
It is our own volition to care about finishing the game, and also to not care about inflicting imaginary suffering on imaginary ragdolls.
This. So much this.

Companies love to think that people "love them" but truth is people like to use their products. I'd say people often dislike the company, but will buy the product anyway because that's what they care about.

Everyone has heard about Apple's douchey tax business, Google and Facebook's extreme data-collection, Amazon's aggressive business practices, etc. I'm not in "love" with any of these brands by a long shot. But we keep using them because we need their products to some degree.
We used VitalSource while working at an university. They offer two eBook formats: Reflowable eTextbook and Fixed Page eTextbook

https://support.vitalsource.com/hc/en-us/articles/1150039655...
You don't actually have to replicate the interaction though, you just need to identify the particular range of smells that people accept, and have the machine capable of detecting it.

Generating a brand new style of good coffee might need the interaction though
Origami Rabbit Easy Instructions – SUPER Easy Origami Rabbit
Most of my actual 'work' I need a laptop for (remote stuff over SSH, testing web apps in a browser) is still handled just fine by my x41.
A dedicated AuthN server presenting only a trivial interface built on a minimal-runtime memory-safe language with no shared database is an extremely hard target. Not that either outcome is likely, but a reasonable person can argue that you are more likely to make a mistake implementing HSM-augmented password hashing on a general-purpose app server than you are to screw up a dedicated Java AuthN server.

"Hardware" isn't magic. The magic power of an HSM isn't the hardware; it's the minimalized attack surface of the software.
The G5 is dirt cheap at Costco. It's a great phone except for the camera.

If Moto could put a decent camera in there (go ahead and charge me an extra $50), it very well could be my ideal phone.
Live Upgrading from Red Hat to 10 Year Newer Debian (2013)
As long as they name them consistently really, you would just need to provide custom transform/pattern rules if they could not be detected.

I might work out a prototype of this once I get my framework off the ground.
To spend that kind of money on marketing and then not dedicate resources to the actual product seems foolish.

Sounds like a Hollywood strategy to me. Overadvertise a stinker to try to recoup your investment.
I saw Bill Gates recommending the book in his twitter. The overall Goodreads review is also good. Gonna read it.
Indirect data loss is still a data loss.

MongoDB gets a lot of bad rep because of it, MySQL supposed to be on a higher standard.
> Dan Harmon, the show’s co-creator, is a genius

Give me a break, the show is pop-culture and fart jokes, this subculture likes to throw around "genius" (at themselves) too easily.
4 figure income
The walk of shame.
The same way you determine anything is bad, the smell of bacteria farts.
Yes, but apps don't HAVE to use the Play store.

Amazon, for example, has all its apps in a separate store because it doesn't like to play Google's games (the Amazon shopping app is not in the Play store because they don't want Google getting a slice of their profits).

A similar strategy could theoretically work for MS.
Rick and Morty is a prime example of things that have been destroyed by its own fans. Arrow (Olicity...) or Undertale is also a really good example.
Given a servlet-only Java AuthN server with no interface other than "Authenticate", what is the likely attack that the AuthN server falls to but the HSM doesn't? From what I can tell, both the HSM and the Java servlet app have really just one major weak point, and it's shared: the management interface.
And why didn't RIM!? I'd love to have a phone with a hard keyboard like the old crackberry. That device was awesome.
>In the US, there are people who can't access healthcare at all - not because there's not enough providers, but simply because they don't have enough money.

That's not true. We have public hospitals, and we also have Medicaid.
The main way the AI bots have problems is with timing. The neutral networks used have no way of encoding time dependent actions in a reasonable way. (As opposed to say a fuzzy decision tree with explicit time input.)
And if you try to explicitly include it, curse of dimensionality strikes back hard.

Both absolute and relative timing have to be handled. And relative since specific salient action...

Plus the real reward is very sparse. Say, crippling mineral production early may or may not snowball. Likewise being a unit or two up...
I think the idea that app developers are all loaded is highly suspect.
ASP.NET Core 2.0 – Repository Overview: Action Results
Well you always have Layer 1/2 data. DSL modems, cable, LTE ... will show diagnostic information on which you can estimate some bandwidth, more or less.
You're confusing "the media" with a selection of news organizations that exist in their own echo chambers (a discussion for another time). "The media" is a lot broader than cable TV talking heads.
Wikipedia is not really ad-free, they advertise for themselves. I know that many people don't consider self-advertising and appeal to donation "true" ads, but I do. Here are my arguments.

- Appeal to donation banners are not content, they are a purposely made distraction with a money-making goal. Just like real ads.

- Most people agree that when Windows 10 gives you a popup to buy another Microsoft product, it's an ad. So the "self-advertising" rule is not absolute.

- Charities sometimes purchase advertising space on Google, Facebook, etc... They obviously count as ads, and are blocked by ad-blockers. So nonprofits can post ads too.

- When I looked at Wikipedia fundraising reports ( https://wikimediafoundation.org/wiki/Fundraising_reports ), I found it striking how similar it feels to regular ad campaigns. They use A/B testing, talk about conversion rate and all the usual tricks to incite you to pay more.

So I think that while it is safe to call Wikipedia independent, I wouldn't call it ad-free. Whether these aggressive campaigns are justified is another debate.
curious how they did a shutdown of the db. are they saying in all scenarios this causes an the issue ?