skysight-inc/HackerNews huggingface dataset:
How to Convert Images to Base64 and Use Them in Your Website
That sounds counterproductive, sort of like taxis striking against Uber. People look for other options.
In case anyone was curious, I have collected some context from McDonald's 10-K filing on March 1, 2017 available at http://corporate.mcdonalds.com/mcd/investors/financial-infor... :

At year-end 2016, McDonald's had ~37k restaurants, of which ~15% were company-operated and 85% were franchised. (The filing expresses a long-term goal to be ~95% franchised.) Of the franchised restaurants, ~70% were "conventional franchisees". Under both the company-operated and conventionally franchised models, McDonald's "generally owns the land and building or secures long-term leases".

I believe it is this real estate-focused setup that drives the comparison between WeWork and McDonald's in various comments.
Why do we think that AI will be an epidemic in 2018?
Weekly Machine Learning Opensource Roundup – Dec. 28, 2017
Show HN: Themer – a CLI for generating themes for all your tools
There are still plenty of H1Bs in tech in the US. It is true though that applications from India are very hard now, but that’s mostly because there was a lot of fraud and corruption in that space with Indian outsourcing firms up to no good. When you consider that the excess scrutiny is more than justified.

As for higher end work being done in India, I don’t think anyone doubts there are highly skilled people in India or that there are examples of successful startups, but that’s not where the Indian economy is in regards to tech (hence why the jobs are shrinking). The question is if the Indian tech economy can shift its export product away from low value-add work and that’s a very hard move to make—both because, today, the momentum is in the wrong direction and western firms have had very bad experiences with Indian outsourcing and thus even if they do outsource higher-end work it will likely go to other more up and coming countries in tech.
Building a Distributed Log from Scratch: Data Replication
Where did you find your stats on distribution (“mostly”)?

The article mentions other professions without the supply limiting that physicians and attorneys enjoy.

“Typical firms owned by the top 1-0.1 percent are single-establishment firms in professional services (e.g., consultants, lawyers, specialty tradespeople) or health services (e.g., physicians, dentists),” Smith et al. write. “A typical firm owned by the top 0.1 percent might be a regional business with $30M in sales and 150 employees, such as an auto dealer, beverage distributor, or a large law firm.”

Engineering-services firms also fit this description. Specialty tradespeople include plumbers, electricians, and lawn care and to belong to this cohort, they are running more substantial operations than solo self-employed: at least $3-10M top line and twenty or more employees.
A while back I posted about the GUI version (https://news.ycombinator.com/item?id=15087244) but I’m realizing the CLI tool is probably more appropriate for the HN crowd.

Themer is a set of npm packages that allow for generating custom, matching themes for many of your development tools (editors, terminal emulators, desktop/device wallpaper, Slack sidebar, Chrome theme, Alfred, etc.). A custom color palette can be used, or there are a number of pre-built palettes to choose from.
Anyone else questioning this, “The integrated circuit was commercialized in the 1960s yet 25 years later computers still represented just 5% of the value of all business equipment”? ICs are everywhere around us (in our phones, cars, refrigerators, coffee makers, weight scales, HVAC, etc.) and are rightfully invisible to us. Let alone all the major business equipment. Or, am I missing something?
Can you expand on what you see as the y-intercept for those cost functions? I think you’re assuming zero for attacker and defender. I can imagine arguments that the defender has a small positive y-intercept, and that makes all the difference.
I worked in QA on some AAA titles and I remember being told that the hours the team was putting in testing the game (nearly 300 people over several months of over time) would be matched by the players in the first 6 to 8 hours from the release. That and when the team is filling hundreds if not thousands of defects daily, how can the dev team keep up and "fix" everything?
An excavation of the history of mathematics, from deep learning down
Your position seems to be based in an assumption that the issue is competitiveness alone. Another factor is Indian companies like wipro and reliance are buying operations outright in North America.

The ship and kidnapping reference to slavery is in poor taste, It might be easier to get your point across and help people be more open to exploring your perspective if you weren't so easy and loose with colloquialisms that are rooted in something that likely doesn't represent you.
How does everything go into a bubble? The cash or production of wealth has to come from somewhere.
But can't we adobt some habits now? That is, for example, is electricity is cheaper in the evening only do wash after 7pm.

I understand that's not as easy as automatic. But manual also forces us to embrace "the din of awareness" such that green-thinking is who we are, and not something we "outsource" so we have more time and energy to consume.
A sexual harassment survey of 600 men
Epyc amd for datacenter, titan v
25 years later was in the late 1980s
Epyc amd, titan v
What does a website really do if it does nothing? What money does it consume? What else can you do with the machine it's on? Wouldn't moving VMs around accomplish the same goal?

Sidenote: some customers might use monitoring :)
Send Best New Year Gift Hampers with Same Day Delivery Service
"Hey bro, let's get dirty bro and shotgun some beers bro."

That is such a weird way for people to think about masculinity.

If masculinity is something that should resist manipulation, then it cannot be defined behaviorally. Such a definition would mean that you must adhere to certain behaviors in order to be described as masculine.

Masculinity for me is attitudinal. Resistance to anxiety. Physical strength. Intelligence. Mastery over emotions. Perseverence. A willingness to fight to the death if necessary to preserve something held inviolable. Circumspectness. The ability to smile and keep moving even when in pain and under pressure. Respect for those who are not strong enough to demand it. Hard work. A desire to improve one's station in life, or that of his children.

I feel that this paints a more dynamic, more useful picture of masculinity than "football, dirt, beer." And I should be explicit: I recognize that some people do see those activities as masculine. I'm not disagreeing at all with your assessment there. I just don't think they capture the essence of masculinity, nor have those things historically been the definition of masculinity throughout human history.
The main advantage of this fusion reaction is that it is aneutronic, i.e. it doesn't produce any neutrons, so it is relatively safe.

Petawatt class lasers are nowadays possible and several examples exists (Los Alamos, Oxford central laser facility, ELI Prague, South Korea). The technology used to compress photons energy in short length pulses is called "Chirped Pulse Amplification". This opened the way to femtosecond laser pulses.
I'm a bit confused about the point that you're stating. I've never seen anybody not group GANs under machine learning.

Machine learning is typically split into supervised learning, unsupervised learning, and reinforcement learning, and GANs are usually considered part of unsupervised learning. I guess the part I don't understand is what you mean by "their concerns are valid"? What are their concerns about? Whether GANs are a promising path of research? And if GANs aren't part of machine learning what are they?
They are nervous, I'd say. Especially moving your weight from left to right (in and out of the frame) does not help the presentation at all.

But sure, if you do it on purpose because you think it helps, by all means, move however you want. We will do our best to track you.

I'm mainly thinking of unconscious moving. But sure, if you are nervous due to the huge audience, you will think of other things and not that - which is why we don't approach speakers about this before their talk.
There is also a lot of competition around the world for IT out sourcing besides India. I have had really good luck using some remote developers in Uruguay for example. A couple friends out source all of their work to Vietnam and the Philippines.
I think the bubbles have moved to blockchain, AI, and big data. Apps and dot com have solved many of the low hanging problems, but there are plenty more to solve or improve on.

Interestingly, people are solving these problems in the form of "side projects". Perhaps this means that the remaining problems don't work with the 'unicorn' VC model, but can make some solo founder a millionaire on their own.
Even if we had a general ai, fully indistinguishable from a human, people would dismiss it as a collection of ugly hacks, tricks and math, while completely ignoring that our own consciousness is as well.
Loosely related : I thought he distanciated himself from his older writings by now ?
[video] Superhuman AI for heads-up no-limit poker: Libratus beats top pros
Is this from off -> on or a reboot? I think I've noticed huge difference between the two on my Samsung in the past.
Yep, from the paper:

> It is worth noting the parallels to Generative Adversarial Networks (GANs [7]), with the student
playing the role of generator, and the teacher playing the role of discriminator. As opposed to GANs,
however, the student is not attempting to fool the teacher in an adversarial manner; rather it cooperates
by attempting to match the teacher’s probabilities. Furthermore the teacher is held constant,
rather than being trained in tandem with the student, and both models yield tractable normalised
distributions.

WaveNet2's main resemblance to a GAN is that it uses another neural network for the loss function.
My main encounters with SO are top google results that point to questions they closed or complained about as somehow inadequate.

I love that the questions are not "good enough" for the community, but still good enough to milk for search placement.

It's a useful place, but I have to wonder if its main purpose was to suck up all the available SEO oxygen and concentrate it. I think they even still nofollow the highly relevant links to other sites, because not doing so would dilute their position as the relevant result for virtually any programming query.

EDIT: After a few seconds of googling, it looks like there has been effort on the nofollow front since I last checked. That's cool. I can see that it's nuanced. Still, my current experience with arriving at a "bad" question with great SEO is super frequent
If insulted doesn't begin to explain it, entitled might.

I think the tests are annoying too. Still is ultimately called work for a reason, we show up to get things done that are challenging, sometimes unpleasant and often necessary.

As a developer who hires other developers, I don't place the value in testing on what a developer can code, but how quickly they can learn and how well they can solve problems and communicate - testing can help shed a light on non technical strengths or shortcomings.

A good test focuses as much on higher level analysis as coding. The majority of new developers with a few years of skills may not have developed quickly enough in this regards yet.
I’ve worked as a software developer for 20+ years and have hired others many times. People lie on their resumes to an extent that is difficult to believe until you see it. Sometimes they can talk intelligently about coding in a way that can get them through a “talk about your history” interview (a good interviewer can usually pierce the lies, but a mediocre or inexperienced interviewer might come out thinking they can code).

It’s very hard to guarantee that every first-round interview includes a seasoned lie-detector. A coding exercise is an imperfect, flawed, sometimes insulting approach that’s better than the alternatives.

When done right, it can be a nice conversation about coding, algorithms, and how to collaborate. And prove that the candidate can code.

Personally, I don’t mind being interviewed with a coding exercise even though I could be many of my interviewers’ parent. I love programming and talking about programming with programmers! And it gives me a chance to interview my potential future collaborators in a setting that’s less structured than a sit-across-the-table Q&A.

In my experience, someone who refuses or takes offense at a well-framed coding exercise is probably not going to be someone you want on your team. By well-framed, I mean introduced in a way that’s not insulting on the face of it, like a multi-hour takehome exercise before even meeting the candidate and talking about the job and why you are interested in them as a candidate. That’s just lazy interviewing and I wouldn’t want to do that either.
The problem is that the US has capita available that other countries simply don't. If we follow this trend to it's extreme conclusion we end with a world where one country has all the capital and imports every smart, skilled, or otherwise top percentage person in terms of economic value, to the detriment of the entire rest of the world.

Other countries can obviously incentivize people and startups like the US does, and that may slowly close the culture gap, but the US is already way ahead in capital. It's also hard to justify incentivizing an industry which already makes more than most of a country does via capital injection. When half the country is food insecure, the 2-10th percentile of the country getting handed government money doesn't go over well, anywhere.
How would this compare to mirageos? It sounds similar to a project called Jitsu.

http://www.skjegstad.com/blog/2015/03/25/mirageos-vm-per-url...
And they're happy to leave the duplicate up for the inbound google benefits it provides.
I subscribed at https://acloud.guru/ for the solution architect course.

Price is quite low (I think 20-30 euro) for which you get 20 hours of excellent video material. After each section there is a practice where you build something (using your own AWS account billed against your own credit card).
Reminds me of the OpenGL 2.0 version issue. So many games and programs just checked the minor version number, as OpenGL had been stuck in 1.x land for over a decade.

So when drivers suddenly started reporting 2.0 rather than 1.3 or 1.4 the flawed version check failed and reported you didn't have a modern enough OpenGL implementation.
Except it doesn't give a single reason for banks to use ripple ( or any other crypto) at all.
HSTS only says connections must be encrypted, not with which cert... you're thinking of a CAA record. Although a CAA record doesn't mean much if your adversary controls the DNS server.
Since this is around 18 months old, does anyone know what's the current state of the art?
> but it was my impression that the commercial version of Wine (codeweavers) could handle most things?

I recently tried it with a couple Windows only apps (after having not tried it in 4-5years) and sadly was still essentially unusable. Admittedly the apps I was trying were silver or bronze category, but still doesn’t change the fact it was one small step above unfunctional.
I think developers and really anyone dealing with Amazon needs to understand that there are no 'win-win' business relationships with Amazon. If you win, Amazon will try to take it away from you eventually.
Just wanted to say this,

'Market is the best process we have for determining relative value, just like science is the best process we have for determining truth.'

I cant upvote this enough. People have been saying the price is what the market is willing to pay. This never stuck is as an answer, but both word relative AND value perfectly describe pricing. Thank You
> The only domain requiring unique productive skills is doctors... The rest is all market manipulation.

The difference between you and I is that I trust experts to be experts.

I'm also aware, because I studied law, that "oh it's a supply-side cartel" is basically a myth. Anyone who can rub two braincells together to singe their fingers can find a lawschool that will take them in (after all, that's what I did). There are more grads than openings, year after year.

Lawyers are expensive because the stakes for fucking up are potentially very high and the good ones are in high demand. Same with medicine.
Show HN: Online cannabis community – Growing database of knowledge
The localization bit made me crack up.
Here are some ideas from the top of my head:

* Many trains are old (at least in the UK), and tend to be very slowly upgraded, so the trains on the network were built before it was considered practical to automate them.

* Signalling systems are old, UK example: the warning system (AWS) is built on electromagnets, clever and cheap, but not enough for automation.

* While it's possible to design a system that works well for a normal journey if nothing goes wrong, when things do go wrong you'd need a person (for example, I once was on a train and a door was stuck, the driver got out and fixed it so we could get off), also what about level crossings?

* Once you're paying someone as a failsafe, then they already know how to drive the train, then the extra automation is just extra cost, except when the railway is busy (so London Underground has partial automation, as cost of driver + automation is worth it to run all the extra trains).

* Places with automated systems tend to be isolated (see the DLR, it's isolated from mainline trains, and also has no level crossings).

* Maybe a way to keep people to blame if things go wrong, if an automated train goes wrong, who is to blame?

* Who in their right mind would want to lose their job? From what I understand people enjoy it, and it pays well, and it's not exactly a skill that can be transferred (while in an ideal world someone could get another decent job, the fact is we're not in an ideal world, so if someone loses their job they're going to have a hard time and not have a way to magically get something new, unless they're lucky).
> a metaphor that doesn’t actually mean anything. As usual.

It is no longer a metaphor. Like the save icon, It is an idiom or symbol: a metaphor that has kicked the bucket. You can argue[1] that we shouldn't use idioms if we've forgotten what they originally refer to. In the case of "kick the bucket", you'd be right. It would be clearer and more accessible to just say "died". Few people have the sort of visceral memory of an animal being tied up in a bucket[2] and thrashing around that gives the phrase its extra punch. In the case of the save icon, we have no real widely-understood alternative. In the case of the cloud, the same is true. The danger is reinforcing a sense of understanding where there is none--but I'm not sure there is a misunderstanding here.

[1] http://www.orwell.ru/library/essays/politics/english/e_polit...

[2] a type of butchers frame
At any time, one runway is used for take offs and the other for landings. It is a really busy airport operating at near capacity.
Password hashing functions are very useful, but can cause operational issues.

A common advice is to allocate as much memory as possible, and as much CPU as possible, to make bruteforce attacks as long as possible.

Unfortunately, it only makes sense if a each user is assigned a dedicated server. Which is almost never the case in APIs and web applications.

Doing all the stretching work on a server scales poorly. And predicting how many users will try to log in is impossible, unless you set up drastic limits. One way or the other, this makes the whole service vulnerable to very cheap denial of service attacks.

There are a lot of discussions about password hashing functions and their parameters, but almost none about server relief, which is far more important IMHO.

The idea is to delegate most of the work to the client. The server just provides the salt. It's acceptable to use as much resources as possible for a short time on the client, since it's unlikely to do anything else important at the same time.

The stretched password is sent to the server instead of the actual password, so that it's acceptable for the server to keep the stretching work down to a minimum before storing the password. This also has the advantage that the server doesn't see the actual password.

This solves scalability issues, and drastically reduces to ability to perform cheap resources exhaustion attacks on the servers.

In a webapp, this can be efficiently achieved using WebAssembly, or with WebCrypto's PBKDF2 implementation. Obviously not an issue in native apps either.

Legacy protocols such as FTP and IMAP don't have that luxury, though. There's no way to run a password stretching function on the client.
So, while it's nice to see software like Dovecot adopt functions like Argon2 to store passwords, this can actually do more harm than good.

Finally, while password hashing functions are typically described as suitable for storing passwords, they have other usages as well.

Password-authenticated key exchange mechanisms such as SPAKE2 don't get the attention they deserve. They can be extremely useful to add a strong security layer on top of another authentication mechanism, using a simple password. And they also usually leverage password stretching functions.
feeling sympathy for another != feeling first-person experience

feeling sympathy != taking responsibility

The difference between the terms’ meanings is beyond mere emphasis, but it still falls short of occupying the subject’s bodily consciousness.

Look at the spectrum of bonds between family members for reference. Caring for one another to varying degrees is not so strange for most people. It is just becoming less common in public and business relationships.
It's almost 2018, use libhydrogen: https://github.com/jedisct1/libhydrogen/wiki/Password-hashin...
This is why we need estate tax. It should also apply to trusts and the like.

If you're in the 1%, most likely you did nothing to earn it.

This is one of the reasons people left for America from the UK. You couldn't own land.
I'm much more concerned with direct physical attacks in real life than remote harassment - I was bikejacked and had my motorcycle taken from me, pulled to the ground and kicked in the head a few months ago in London - and I think societal breakdown and inequality is what ultimately created the level of alienation that made that kind of attack ok for its perpetrators.
At some point math becomes more about ideas and less about lower level details. Like you I don't write down my reasoning either and try to do exercises in my head or verbally. So long as I get the idea behind the proof correctly, I am not worried about the lower level implementations.
Trying Out Asian Snacks – Japanese, Korean and Chinese Challenge
Could you briefly overview what a solutions architect is?
That's very interesting and I really appreciate your interest and support, you've done more than anybody has since I got myself into this situation on the 20th of November.

I have two SSDs each with an individual (encrypted) APFS volume. One (labelled Radix) is the boot volume and ends up mounted on /. The other one (labelled Usor) is meant to mount on /Users, but on account of being encrypted, gets ignored by automount (despite having a valid /etc/fstab entry) and just lingers, until I log in into a utility account, allow it to decrypt and mount, log out, and log back in as my user. My user has the home folder set to /Volumes/Usor/User/james and then it all works. But as lament, half the stuff is broken.

As soon as I get back to the office I'll have a look at whether the ignore-permissions flag is set or not (I reckon it isn't, but it is worth checking). I've faced more path-blocking absurdities in this enterprise than I have in the past ten-plus years of Mac usership.