skysight-inc/HackerNews huggingface dataset:
I'm going to sound a bit negative, but the site is not very nice. It's not 'sexy' enough to sell the service. Not that it shows much of it to anyway. I'll write an unordered list of thoughts about it.

- Focus. meet. goals. Is it an introduction like "Peter, meet Claire" or is it a misspelling of "focus meets goal". Nitpicking but the more I thought about it the less clear it became and now I want answers :)

- The huge image is kinda low res.

- Why is there a bird? This bird could be the logo, could be slick.

- I don't understand the logo, is it a bullseye or a signal? Why is the Ooo becoming smaller into the dot?

- The headers and text, size and color is all over the place. Like:

1. "Agile in the essence" is white and large like the header, "Vision" but it's not a header, it's inspirational .. stuff

2. I count like 100 colors, backgrounds and font sizes.

3. Too much green text

4. Spelling errors, like "..in intuitive way" should be "..ways" right?

- Misaligned icons and texts (like "[icon] look ahead") etc.

- Horribly bad cropped screenshots of the product itself (and the tags in the product looks misaligned in their boxes)..

- There's a section of text, again green, with green .. stuff between them, the diamond things.

- Spacing is off, Like the "[icon] focus on now" and the screenshot below it.

- The product itself screenshot of the kanban, the shadows are really strong.

- Contact only through twitter or FB?

- Way too much buzzwords, just show me the tool. Anyone interested is likely aware of what it is.

I'd have a proper designer take a look at everything, I feel most of these are at least fixable by even just making sure it is more consistent than currently.
1. Nice bindings already exist for numerical libraries in python. It is more accurate in some ways to say that scientists are using a domain specific language based on numpy than they are using python.

2. The choice is either "fastest possible" or "I just don't care how long it takes" - for either development or run time. There is usually no middle ground.

3. Tooling - the scientist is most likely using a text editor not an IDE (especially when they start working). Fortran and python are both low enough on boilerplate to not need IDE support.

4. Abstraction level. Scientists in general don't bother care about abstraction level at all. Procedural programing's abstractions are usually more than enough for them (and may actually be the correct level for some numerical work - think cache misses vs. hits).

5. Some areas of science do use Java (check out imagej for example).
Forced? Not really. They made a good battery-powered car and a lot of governments heavily subsidized fully electric cars.
Pray for a vendor patch. The fix landed today in the hostap repository:

https://w1.fi/cgit/hostap/commit/?id=a00e946c1c9a1f9cc65c729...
Why Progressive Web Apps Are Important for Businesses?
DuckDuckGo, the book
> To get to page 9, you start on first page. Then "next page" 8 times.

Are you sure it will be faster than just using offset/limit on the server side?
>If the democratic society decides against your conception of the proper weighing of rights, you have the right to continue to try to convince your peers while complying with the law

Society is always right, by definition.

When your democratic society decides it's OK to kill all of Subgroup X, I guess that's totally fine morally and ethically (and if you're a member of Subgroup X, it's unethical to defend yourself).
After all, the majority has investigated itself and found that it has done nothing wrong.
First, that already occurs to the tune of of about 2% annually. The Fed aims for about 1-2% inflation annually to encourage investment.

But to answer your other question, in order to verify this you would need a complete-ish picture of the entire economic output of the country: how much it grew (Growth Rate), and how much currency was destroyed (Destruction Rate). With those metrics you can determine how much currency you need to print.
Hmmmmm. If I were a short seller, this might help me make my game plan.

Or not. Markets aren't rational, it could be costly.
Work in process is extremely expensive and large batches are more expensive than just in time production. This is the core of TPS and its not disputed.
Having A/B tested both on-site and Paypal payments, customer opinion appears to be divided on this (almost 50/50 according to my tests). Some prefer going directly to Paypal, others seem to like checking out on-site.

I know from a UX perspective I prefer checking out on-site as it feels more seamless. Privacy and security are definite concerns which the Paypal brand does alleviate, however checking out with Paypal was a clunky process (it has improved in recent years, especially on mobile).

My reason for not choosing Paypal (as a vendor) is that their API doesn't feel as well thought out as stripe's and I've had my Paypal funds frozen without any clear explanation as to why!
Android 8.0 Oreo arrives to the OnePlus 3 and 3T with the new betas of OxygenOS
Only against an incompetent fool.
Of course.

From my understanding of research at public institutions there is a long period of time and steps between finding something interesting and submitting a paper for review.

Why not disclose the vulnerability first to concerned parties and then write up a fancy research paper? Why the other way round?

Only two explanations I could come up with: Either there must be a very short time frame between identification of the vulnerability and writing of the paper or there was further research needed. Or....I don't know
School:
FORTRAN
COBOL
Snobol
Lisp

Commercially:
Assembler: 8008 (8080/80286), 8080, 6502, 6800(68000), Z80(8000)
Basic (various)
Pascal
C
Objective-C
C++
SQL
Perl
Python
JavaScript

Learning:
ELM
Elixir
3 months is more of a joke than a reasonable time, but one can argue about that if he wants...

> even users of non-proprietary projects

Actually many FOSS projects get only notified on the disclosure date.

Hiding the vulnerability for such a long time makes more harm good. The vulnerability can potentially be exploited by security agencies that necessarily know about them and could also be leaked to a bad actor by an employee of one the vendors.

Hopefully WPA2 isn't that important, but potentially security sensitive users trusted something that was known by some to be vulnerable for 3 months! Bad actors could have used it against them.

The embargo resulted in potentially bad actors knowing about the issue, but not vulnerable users.
That's probably said just to keep you from panicking to give you something to attempt/think about while snow is crushing you. How can a mass of (often wet or frozen in blocks) snow tearing down trees and hurling rocks allow you to swim? Wishful thinking, survival is a question of luck. Maybe in very small avalanches. Many people get their skulls crushed, the forces there are immense... Best way is to avoid avalanche terrain completely. If you walk on a snowfield hearing strange noises a few feet under your legs, run for you life! Abort immediately even if it is your last chance for a climb/ride and would cost you a lot of money.
Dealing with discrete variables is trivial, you can just map them into a continuous space and proceed as normal.

Trying to learn discrete rules is harder because the learning procedure uses gradients to adjust parameters, and the gradients will be zero in a lot more places with discrete "rules".

Gradient Boosted Trees are probably the main thing that comes to mind, but they're not really deep learning.

People have tried to learn hard vs soft attention mechanisms, and while hard attention is faster, it results in worse accuracy and is harder to train.

The inference I draw is that most of the things we want to learn are not described well by discrete rules.
In the words of Patrick McKenzie's tweet linking to this pdf‏, "Hey look, someone took the time to explain to cryptocurrency enthusiasts why the rest of us perceive money as working".

For those singing the praises of cryptocurrency I pose this question:

Say the United States decides to allow decentralized cryptocurrencies to become the dominant medium of exchange in the US; say it even gets rid of the $USD. What problem do you think this would solve? (assuming the US gov desires to continue all other operations in exactly the same manner as it does currently).
Maybe it's like the internet. There used to be a lot of different websites, and a lot of them were scams. Now there's just a handful of websites, so it's easier for people to understand what to do... And of course there's still a long tail of weird niche sites with new experiments.

The UN recognizes 180 different currencies, by the way. That's 180 different units of accounts, but the amount of forms of money is much larger, and then you have to consider the derivative forms of money, and the various credit systems. It's already an immense, staggering, crazy cornucopia.

I don't think it's realistic that world governments will just eradicate cryptocurrency through legislation. Banking, insurance, finance, the internet itself, all of those things were really chaotic in the beginning, but businesspeople recognized them as useful and transformative, so states didn't want to ban them, even though they were dangerous.

The IMF director is already saying that cryptocurrency will be massively disruptive and that they expect to play a part in regulating the ecosystem and that it's conceivable that the IMF would issue their own cryptocurrency.

https://www.cnbc.com/2017/10/13/bitcoin-get-serious-about-di...

That makes me think it's really unlikely to just go away.
Bosch: mid-air #haptics tech increases safety in their concept car of the future
do you not know how to fork , update, and submit a PR? if not, now you do
You're right, I have no idea when the top is going to be. My point is that bear markets have a very different feel and can be emotionally devastating if you're in the middle of one and bitcoin has not been through that and made it to the other side. Are the bitcoin boys ready for that? Because it's coming, sooner or later.
As an Honda element owner I would disagree. Except that its discontinued and nothing out there now matches its practicality. Stylish it is not however.
I have seen and participated in this disclosure debate for 10 years now. I have come to the conclusion that, in the long run, the least harm approach is full disclosure. There isn't any wiggle room. There are no shades of grey. The whole coordinated response movement is misguided. There are some limited circumstances where it can make sense to delay disclosure, such as creating an imminent threat to human life, but generally full and nearly real time disclosure results in safer software sooner for end users without putting them at some unknown, but high risk level.
I've finished watching the talk, and I'm not sure if this is serious, or is Guy Steele just trolling people in a sophisticated way. The TL;DR as I understand is:

- Computer science papers have this ad-hoc, ever evolving notation that started out in mathematics, that is not well defined (every paper ends up using a different flavour, sometimes even a bunch of mutually contradicting flavours at the same time), and that is subject to weird evolutionary pressures (like page limit of CS papers leading to extreme conciseness).

- Particularly interesting is the evolution of overline notation, and the ubiquitous but never defined use of ellipsis.

- Guy thinks this is a mess and should be cleaned up. His first contribution is solving overline notation abuse by introducing underlines, which cancel out overlines, thus implementing quasiquoting in mathematical notation. His second contribution is formalizing the meaning of ellipsis by defining a transformation from ellipsis form into over/underline form.

Maybe it's because of the way he presented it, or maybe because of my unfamiliarity with the space, but overall this talk really felt like a one-hour long practical joke aimed at CS academics.
You either have it backwards or you have a very Marxist view of capital. Value and utility are measured in dollars.
> I think some people may have the idea that we can observe whole genomes easily

I think a lot of people do. Certainly I did, before I spent a year working in a genomics institute and had the opportunity for close observation of the massive uncertainty produced by short reads, and the concomitant complexity of the methods required to develop useful information from them.

At that time, long reads were just beginning to look reasonably attainable with new approached from Pacific Biosciences and other challengers to Illumina's market share; I'd be curious to know whether there's been any major movement in the half decade or so since I returned to industry.
That's not a bad idea on the online dating. Though it would probably mean Facebook becoming much more transparent regarding what data they collect on you, at least to the unknowing majority.

That's something I really don't see happening.
Some people don't want read all the articles and tend to panic. It's why if there's any security issue we need a list about action to reduce risk, when, how, etc. otherwise people still we dispute about it's feasible or not and then finally the journalist will explain how to fix the risk. I like to read the whole article but then sometimes it's very hard to check if it's truly feasible or it's just a panic mode, for example when wannacry come out the information was a mess.
Right click on the video → Stats for nerds

"Volume / Normalized: 100% / 53% (content loudness 5.5dB)"
the post https://www.theregister.co.uk/2017/10/16/wpa2_inscure_kracka... mentions:

> As Hudson notes, the attacker would have to be on the same base station as the victim, which restricts any attack's impact somewhat.

If I understand it correctly then there has to be a connection already present for the attack to work?
Using Dell Dock with Ubuntu
iPhone 8 vs. iPhone X
Weak RSA keys – from bitlocker to Estonian ID cards
I can answer you #2:

requestAnimationFrame schedules the rendering to when the
screen refreshes, which kinda makes sense in this case. (Which is a great thing when you're doing animations or games, since no frames are being dropped)
It also doesn't fire while the tab is not active, so that's a plus too.

I've nothing to do with this project though, so I might be wrong on the details.
> For ordinary home users, your priority should be updating clients such as laptops and smartphones.

So even if you patch all the devices in your house/company/whetever you can't be safe... Then yours aunt's un-patched android connects into your wifi and put all your network in risk. Or maybe that not-so-old security camera or SmartTV that will never be patched.

Time to move all those guys to an isolated vlan...
QC means you don't sell duds, you test them, if they fail you don't send them for sale.

QA means you make sure that products aren't duds, you do that by finding what causes the failed products to be made and fixing it.

Meta: The focus on QC instead of QA brings to mind the UK government approach to education, adding more tests instead of using the time/resources devoted to tests to educate the children.
Currently the only mitigation is to constrain your browsing to properly configured https (SSL) web sites.
How the attacked device can talk to the AP after its keys / nonces have been altered? Does not it lose it's connection, manifesting to the user that something shady is going on?
If you had checked the repository, you would have seen that I had already done that. I posted here the link to add your list.
Why Basil.chat?
Either you or I have it back to front.
I don't know either specifically, but the sequence is "device repaired worked just fine"/"stopped working after update"/"worked again after fix".

This should imply that the (temporarily) affecting update was narrowly targeted to "original" and that the "fix" had "widened" recognition of hardware.

The point is that the "narrowing" (which possibly happened by accident) is somehow technically possible and thus can in theory replicated intentionally, at Apple's whim.
And yet, it doesn't taste like chicken. :)
One thing to clarify, does the attack require the attacker to be already connected to the AP?
https://github.com/fasouto/awesome-dataviz/pull/40
Binvis.io: visual analysis of binary files
You fired your top talent. I hope you’re happy
That's equivalent to following a link on the email, and it's a well known recommendation that you should never follow links from spam emails.

That said, gmail does offer to follow the unsubscribe link for you when you mark an email as junk.
I took a look at the gpio code, just to see what Rust for embedded would look like.

I did't like the noise due obrigatory use of unwrap() after calling a function with constants (such as constructing a regex). Such setup obviously must panic when it fails.

Also, Rust seems to be missing a way to "clean out the parent scope", by saying something like:

let Some(a) = check(param0) && let Some(b) = check(param1)
else {
return Err("Illegal arguments");
}

Here 'a' and 'b' would be created in the parent scope, not in the body as in the 'if let' statement.

Note that both criticisms revolve around introducing a concept of failure in the type system. Maybe the last member of a type could correspond to "failure" by default (ie None or Err() in typical cases).

I have been recently learning Rust and like its super powers. The above observations worry me in the sense that error handling is quite central to clean and readable code, and because Rust seems to promote the nesting of the main path, which, at least to me, is an anti-pattern.

Please correct me if I'm wrong.
Tricky to make plausible, since most space debris is barely recognizable once it reaches the surface - metals would be deformed and have highly questionable metallurgical characteristics due to the extreme heat of reentry, essentially being of no value beyond raw material for reprocessing, and you'd have an easier time scavenging such things from the ruins of an industrial society - and a much easier time finding scrap in condition to be reused without so much rework.

I could see it as a subplot focused around high-value, highly durable items such as RTGs, though. A device that generates even a low level of electrical power without requiring fuel or favorable environmental conditions could easily have a broad range of uses in a post-apocalyptic story, and they are designed to survive reentry intact so as to avoid dispersing radioactive isotopes into the atmosphere or across the ground.
> Tesla’s vertical integration of service centers has an interesting side effect - recalls and repairs are pretty cheap

This is assuming that Tesla's centrally managed monolithic dealer/service network will be run more efficiently than the distributed and competitive dealer networks typical of other car companies.

That assumption runs counter to typical economic thinking that competitive market based solutions will be more efficient.
Can one install their own web rendering engine on iOS?
Biggest problem with F.lux used to be that it was tied to geo-location. As a Finnish person (with sometimes only a few hours of sunlight per day), you had to fake your location to something that would approximate the desired circadian rhythm. I hope this has been addressed by now.

(E.g. on macOS and iPhone you can simply just set the daily time when Night Shift activates.)
"Build one to throw away. You will, anyway."
I've experienced this, metaphorically
My point is that:

- Assume that drivers who engage in the "more impatient behaviours" are increasing the amount of accidents compared to what would happen if they stick to the rules.

- Note that introduction of self-driving cars is a perfect opportunity to use them as a forcing function on the road, to make those impatient drivers stick to the rules.

- If both of the above is true, we can save more lives right now by having the self-driving cars stick to the rules than by having them emulate the impatient drivers - a task which the machines will handle fine, but which would keep such behaviour legitimized for humans.

Now I'm least sure about the first assumption; it intuitively seems true, but beyond occasional articles pointing out speeding and careless driving as primary sources of traffic accidents, I haven't spend time evaluating the data on that.

The second point seems intuitively true from experience of how drivers adapt to other drivers around them. Self-driving cars can be made stubborn by default, so everyone else would have no choice but to adapt to them.
The WPA key is not recovered so it should only affect the unpatched client.
First mistakes I found are on page 4.

"the compiler "promotes" the smaller type to be the same size as the larger type before combining the values." Values smaller than int are always promoted to int.

"Promotions do not lose information -- they always convert from a type to compatible, larger type to avoid losing information." This isn't true when a signed type is promoted to unsigned.

It seems that the author didn't read the C language specification.
It's actually the reverse.
The Greatest Myth About Web Search Leaked Out
See "the fat villain" variant in the trolley problem wiki page above.

Kill the villain by pushing him onto the track in front of the train to save the innocents, or not.

It is explicitly asking if you would harm the villain (evil action, evil effect produces good effect).
> Inspired by apps like Shazam that recognize the voices of pop stars, they figured how to distinguish the sonic signature of sand from other sounds, like flowing oil.

It is interesting that the Music industry and Oil industry have a few connections through signal processing now. Andy Hildebrand, the inventor of autotune, developed it using ideas and methods imported from the oil industry[0]

> What “clicked” for Hildebrand was that he could utilize some of the very same processing methods he’d used in the oil industry to build a pitch correction tool.

[0]: https://priceonomics.com/the-inventor-of-auto-tune/
Yes, a good example of why obscurity may harm security.

In my recent dalliances with putting together secure systems I have done them in public and invited as much scrutiny as possible. That has risks too, but on balance better ones I hope.
What playing music in small towns has taught Dar Williams about America
Why is that? AFAIK, the data is encrypted.
Linux patches are out https://twitter.com/vanhoefm/status/919853110700531712
In principle yes (if it is not against the app store guidelines). But if submitted as an app, it cannot use JIT compiling for security reasons. This will make the speed of JavaScript execution very non-competitive to WebKit.
They made a first quality electric car that both solved the range problem and was sexy enough to attract a wide enough audience, thus for the first time making electric cars a viable and desirable alternative to ICE cars. The subsidies followed.
Also an embargo lasting months seems excessive.

You also can not guarantee me that no one who gets this information early is not working for a bad actor.
I have a HTC 10, a flagship device that's barely a year old the fact that I now have to wait a couple a months for a patch to what is clearly a critical vulnerability is just ridiculous. The fact that anyone without a flagship device should now throw that phone away because it will probably never be patched is despicable.

I totally agree with your hope that this will kick both the manufacturers and Google in the butt enough to get something done about this. I don't like our chances though!
The article lists another reason for not storing parts locally. It allows for rapid adjustment requests to the part supplier when Tesla realizes a part needs a slight adjustment to its design.

Very similar concept to agile software development — setup everything for rapid iteration.