skysight-inc/HackerNews huggingface dataset:
Training on the 'art' of sales – body language, listening, and being authentic
They used to offer 3200x1800 which was nice. 2x @ 135ppi iirc
Well, shit.
Yeah, if you looked into it deeper you’d find that this is entirely to make the system more secure, not less. When this thing boots, every stage of the boot is cryptographically verified. Camera, microphone, payments, etc are all routed through the ARM chip and can’t be accessed through the CPU at all. Compiling Linux and not getting any of these features just so you can theoretically “know what’s going on” (as if you’re going to read the source anyway) does not really make much sense.
I am not an expert but I think you are right and I misread it myself. After reading it again Gaussian elimination seems to be somewhat worse than O(n³) but other algorithms are as fast as fast matrix multiplication.
Yeah. https://blog.mozilla.org/security/2018/01/03/mitigations-lan...
> However, while these features matter, most decent implementations of the same algorithm tend to get quite close in efficiency to each other (probably <3x if everyone is using a performant enough programming language or constructs).

No, I don't think this is even close for most problems. Neural networks, maybe, but they're an unusually simple case where everyone uses similar, largely GPU accelerated code.
They are not irrevocable - just harder to revoke.

If you want something that avoids storing all tokens, you can use a blacklist. You don't even have to check for revocation on any call - you could perfectly use short-lived (say 10 minute) access tokens and force frequent refresh using a refresh token and then only check the refresh token calls.

Whether you want to use it or not is a matter of making the right trade-offs. Stateful tokens are simpler to implement on the surface, but you have to keep in mind that the database lookup itself could be vulnerable to timing attacks.

Unfortunately, most database-based token implementations I've seen perform lookup based on the token string, instead of looking up the user and then checking all of the user's tokens, one by one.

And if you're not a small startup and actually have to handle loads north of 10,000 QPS (some of us do), these stateful tokens become quite expensive.
Yes. I doubt this will be what actually happens, but perhaps the safest fix is to remove speculative execution in its entirety, increasing clock frequency and/or core count to mitigate the resulting performance loss by as much as possible.
> The developer (aka, the best party to judge flows of money and profitability) wants housing, the nimby residents say no.

The developer is the best party to judge the flow of money into their pockets from initial sale of the property, but not the long-term flow of costs and benefits of development, which they give fuck-all about since it doesn't effect them. Cities are concerned with balancing tax revenue vs. ongoing service costs (and, yes, with political concerns of voters like NIMBYism, but those thingd aren't entirely unrelated to each other.)
I'm reading "The Brain That Changes Itself." Thus far, very interesting.
Who, other than you, said anything about winning? I think ever one wins when there is a climate where good code is appreciated. I always welcome improvements by others to things I make. You shouldn't waste time on people/projects who don't.
This appears to be people acting like responsible adults.

I heartily approve.
Alright then, it's a 16,425-day vulnerability. That's an even more impressive thing, call up Guinness.
If you are interested about this sort of thing, I suggest reading "Computer Architecture: A quantitative approach" by Hennessy and Patterson.
I too have an 9550, but enjoy the 4k screen a lot, it really helps with my workflow.
Aadhaar number on sale for rs.500 linked details of 1B indians leaked
Its not just widely considered a failure, they publicly admitted it was a failure.

https://techcrunch.com/2017/04/06/transcript-phil-schiller-c...

Craig Federighi: I think it’s fair to say, part of why we’re talking today, is that the Mac Pro — the current vintage that we introduced — we wanted to do something bold and different. In retrospect, it didn’t well suit some of the people we were trying to reach. It’s good for some; it’s an amazingly quiet machine, it’s a beautiful machine. But it does not address the full range of customers we wanna reach with Mac Pro.

But I think we designed ourselves into a bit of a thermal corner, if you will. We designed a system that we thought with the kind of GPUs that at the time we thought we needed, and that we thought we could well serve with a two GPU architecture… that that was the thermal limit we needed, or the thermal capacity we needed. But workloads didn’t materialize to fit that as broadly as we hoped.
Interesting competitive profile. I'd guess the most direct comparison for people who want a really small machine running a non-windows OS would be the i5/8/256/non-touch/$1175 xps13 vs the m3/8/256/$1300 macbook. That's not bad at all---I'd consider trading a half pound or so in weight and some display resolution for a faster processor, bigger screen, and a hundred bucks, so long as battery life and reliability hold.
No, the product named Google Wifi is different from the box that comes with Google Fiber. https://store.google.com/product/google_wifi
The FCC passed a certification rule a couple of years ago, not sure about it's final status:

https://hn.algolia.com/?utm_source=opensearch&utm_medium=sea...
I learn towards C, but just like the dotcom bubble which was entirely rational in retrospect a lot of people are going to lose a lot of money.
full history of Symantec CA issues: https://wiki.mozilla.org/CA:Symantec_Issues
SF Tsunami warning systems ripe for disruption.
“My ten hour white noise video now has five copyright claims”
I love the fact that every now and again Blit gets mentioned on HN.

https://hn.algolia.com/?query=blit%20infinityplus&sort=byPop...
"Every year I take on a personal challenge to learn something new. I've visited every US state, run 365 miles, built an AI for my home, read 25 books, and learned Mandarin.

I started doing these challenges in 2009. That first year the economy was in a deep recession and Facebook was not yet profitable. We needed to get serious about making sure Facebook had a sustainable business model. It was a serious year, and I wore a tie every day as a reminder.

Today feels a lot like that first year. The world feels anxious and divided, and Facebook has a lot of work to do -- whether it's protecting our community from abuse and hate, defending against interference by nation states, or making sure that time spent on Facebook is time well spent.

My personal challenge for 2018 is to focus on fixing these important issues. We won't prevent all mistakes or abuse, but we currently make too many errors enforcing our policies and preventing misuse of our tools. If we're successful this year then we'll end 2018 on a much better trajectory.

This may not seem like a personal challenge on its face, but I think I'll learn more by focusing intensely on these issues than I would by doing something completely separate. These issues touch on questions of history, civics, political philosophy, media, government, and of course technology. I'm looking forward to bringing groups of experts together to discuss and help work through these topics.

For example, one of the most interesting questions in technology right now is about centralization vs decentralization. A lot of us got into technology because we believe it can be a decentralizing force that puts more power in people's hands. (The first four words of Facebook's mission have always been "give people the power".) Back in the 1990s and 2000s, most people believed technology would be a decentralizing force.

But today, many people have lost faith in that promise. With the rise of a small number of big tech companies — and governments using technology to watch their citizens — many people now believe technology only centralizes power rather than decentralizes it.

There are important counter-trends to this --like encryption and cryptocurrency -- that take power from centralized systems and put it back into people's hands. But they come with the risk of being harder to control. I'm interested to go deeper and study the positive and negative aspects of these technologies, and how best to use them in our services.

This will be a serious year of self-improvement and I'm looking forward to learning from working to fix our issues together."

--- Mark Zuckerberg

Are there any viable platforms that people would rather use?
Grandfather seems to be cutting it off a bit early. Even 10 generations ago you have a maximum of 1024 ancestors. Assuming 30 years per generation and that all of your ancestors were already in the US, you would be descended from at most about one out of every 400 people in the US at that point. In reality it's probably an even lower portion because there are probably people who show up multiple places in your family tree and the bulk of the US's immigration happened after that.
The first paragraph kinda threw me off with the mentioning of BDS.

While the criminalization of BDS activism as they put it might be a problem, BDS is entrenched in the “regressive” left.

They push no platforming to a whole new level, blocking, rioiting and outright assaulting pro-Israeli speakers and groups, heck you don’t even have to be “pro-Israel” if you don’t agree with what BDS stands for (especially if you are a Jewish group) or their actions it’s enough for you to be an enemy which is the core problem with much of the left today if you don’t agree 100% with both the ideology and the execution you are part of the problem.
Time Machine has been a reasonably good option since 10.4, and hopefully anyone on this site has an online backup service by now…
I think you are seeing played out in practice why the US is right and Germany is wrong about this.

An important argument for free speech is that while it does little harm for people to merely say say bad stuff, restricting it does a lot of harm because of snowball effects. If speech act looks just barely be illegal, then it is much easier and safer to just condemn it than to figure out if it really meets the standard.

That is if you dispose of free speech as a principle, then you should expect suppression of even speech you think is tolerable. And if you believe that is pie-in-the-sky theory, then you are seeing evidence to the contrary here.
Backing up your iPhone to iCloud is turned on by default.
As others have said, the groundwork was already in place and it was an active topic of research. On top of that, responsible disclosure practices mean that other teams don't know when the first team makes their breakthrough, since nothing is published at that stage, so they have the opportunity to independently make the discovery.
http://www.pewforum.org/2013/04/30/the-worlds-muslims-religi... , it's around a thousand Muslims each in 20+ countries.

I wouldn't hesitate to 'Nazism is bad' or 'Communism is bad' or 'Fascism is bad' - and saying 'I don't like X about fascism' doesn't really make the same point.
How are GNU Hurd, Minix, and other microkernel systems affected by these issues? I would expect that they would have less sensitive information in kernel memory, and so exploits to read kernel memory would not be as dangerous as on systems with a monolithic kernel.
If you go with the precision line from small business it's the same hardware, but with much more customization
You might not have missed as much as you think, as I tried this with my grandmother. She actually insisted on telling us the family history. Unfortunately, the moment I started asking deeper questions like "And where was he during the war?" she didn't know, even for close relatives. I basically got her story.

My father made her sit down and tell us who the people in the photographs she had were, writing in the names on the pages they were glued to. She got about 50% of them, but given the bias toward more photos close family members, I think she could only identify about 25-30% of the people.
> High density creates the critical mass to support better, faster, and more frequent transit.

High density that, as some have suggested in this thread, displaces parking access to the transit, prevents people not in the new high-density development who previously used the mass transit from accessing it; it might (or might not) induce, with the long lead time that major capital improvements have, projects which provide new infrastructure and access to replace what is lost, but that's likely a decade or longer delay after the negative impact to, maybe, get back to status quo ante for those adversely affected.

Of course, that optimisticallty, assumes that there isn't an active political move to prevent transit access to those not in high-density developments, an agenda which some in this thread supporting the new bill have endorsed.
My one worry about this is that it will intensify opposition to new transit projects and transit improvements. Otherwise, great job Senator Wiener. Please call your Assembly member and State Senator and support. Find them here:

https://whoaremyrepresentatives.org/
This type of comment doesn't belong on Hacker News. Could you please re-read the guidelines and post civilly and substantively instead?

https://news.ycombinator.com/newsguidelines.html
I've always used custom firmware (openwrt on Asus 500gP/Linksys WRT54g, Tomato and then LEDE on Netgear WNR3500L) and I've been happier with them than stock stuff. For a long time the stock firmware (still true for the cheaper stuff) was really crappy in features compared to custom firmware missing basic stuff. These days the more premium stuff seems to have somewhat feature parity (I care about USB, IPv6, OpenVPN) so that's better especially since some of them seem to be forked from the open source projects (ex. AsusWRT).

One of the benefits of the stock firmware is taking advantage of hardware accelerated NAT and Wifi encryption (WPA) but when I installed LEDE a few months ago on the old Netgear WNR3500L it did give me the option to install a Wifi server that does use hardware acceleration so I can still get that nice high performance.

Note that all of those routers listed above are generally well supported by custom firmware because that's how I made my buying decision. My current main router (Asus AC66U) I left it with stock firmware as it has all the features I want and it's still getting updates often enough.
The point is that in theory when you buy a stock, it doesn't matter if everybody else in the world thinks the stock is worthless. You can hold the stock, collect the dividend and get your value back if you were correct. Even if the stock goes down, if you were right that the time adjusted returns from the stock exceed the price you paid, you made money.

In bitcoin, litterally the only way to get a return is for more people to come in and push the price up more. If bitcoin goes to 1c you cannot get that value back even if you were correct that the "fair value" was above your buy in price.
I’m pretty sure Waze never had their own maps, so that wouldn’t have helped Apple at all. And it would have only been a small aquihire since the Waze UI is too opinionated and non-Appley to be the default maps app anyway.
What you're looking for isn't legal AFAIK, so you're probably not going to find any real business that would agree to it.

If a business treats someone like an employee, then they are an employee, regardless of what labels you each use or what agreements you may make. If you want to be treated like any other dev in the company, have tasks assigned to you, etc, then you are an employee. Unpaid interns, for example, can't have tasks that primarily benefit the employer assigned to them; they can't do employee work or they will be treated as an employee in the eyes of the law.

Employees have to be put on a regular payroll schedule, paid at least minimum wage, have payroll taxes filed and paid, be provided with health insurance if they're not exempt, etc. Failing to do so would be a violation of federal and state labor laws, regardless of whether you're OK with it or not.

In NYC specifically, if someone agreed to have you work at their business as a developer, and collected your "tuition" without putting you on payroll, they would end up owing at least $10,000 in fines plus 2x minimum wage for every hour you worked (actual plus liquidated damages), plus back taxes and interest, should anyone tip off the state or IRS about it.
I would happily do away with v1 completely. In my unfortunate experience you're still giving developers enough rope to hang themselves with by choosing older ciphers just because they are well-known.
> If getting downvoted here bothers you - and God alone knows why it would

We can't all be carefree souls who have definitely not hung on to a throwaway for two years because of the massive amount of upvotes it received.

While I'm sure there must be an absolutely infinite number of reasons why a post about Apollo 8 in a thread about Apollo 8 is immediately downvoted, while the top post is about farts in a spacesuit, and even a Moon hoax reference is ultimately considered more legit by top minds here, I complain when downvotes seem like auto/bot votes.

> complaining about downvotes is a habit worth avoiding.

If complaints about downvoting bother some people - and God alone knows why they would - then maybe giving someone more reason to complain about downvotes is a habit worth avoiding.
About speculative execution vulnerabilities in ARM-based and Intel CPUs
But my code can just ignore the alg passed by the user and use whatever one I want to use.
It's also a thing you own. Stock in Apple is a stake in a company that sells computers. What is the thing bitcoin produces?
How does one effectively identify different activities' impact on one's energy levels? Relying on feelings and memory, I found, is hard and inefficient. Life logging/quantified self?

How did you realize you actually enjoyed listening to music uninterrupted rather than driving?
I think the difference between OpenWRT and pfSense is that pfSense only runs on PC class hardware, while the kind of device that usually runs OpenWRT is far less powerful.

I used to run OpenWrt on my router ... years ago, and I remember that router had 16 MiB RAM, and a 125 MHz MIPS CPU. If you set up such a machine, say, as an OpenVPN server, this would seriously limit the amount of data I could push through the VPN connection. (Not really, because my Internet connection is not very fast, but that is beside the point.)

Even a Raspberry Pi is far more powerful than the typical OpenWrt router (at least the ones I have handled).

At work, we set up a wifi network using OpenWrt routers, using separate wifi networks as well as different VLANs for employees and guests. To get a vendor-supported solution that can do this, you have to have spend a lot of money.[1]

So in my experience, OpenWrt is a lot better than what most commodity routers/wifi-access points offer. With the exception, maybe, of the Fritz!Box family.

[1] Okay, it depends on your definition of "a lot". In our case, the requirement was to make it as cheap as possible, because strictly speaking we had no budget at all for the wifi.
What I do not get is that 1) Apple has the same panel suppliers but offers the 16/10, 2) even the premium pc laptops targeting the pro segment (X1 carbon, etc) use a "mainstream" 16/9 instead of a pro 16/10. This is a real mystery for me...
I have been planning for a while to put in a OpenWRT router as replacement for my generic ADSL from BT, and then add in things like netflow so I can responsibly monitor home internet usage as the kids get older and discuss whatever pops out. also probably do some ad blocking or something.

I am assuming projects like this exist already - focused on the dad segment, but if not it's on my 2018 list. Anyone know of any?
> They purport to show the progressive refinement of the output over a series of days. But the figure changes dramatically from image to image, all the way to the end of the run.

What they are probably doing is showing snapshots of the same noise vector (==random seed) for various epoches. Since the mapping of noise vector ~> face is totally arbitrary, the ProGAN is free to vary it as it pleases; thus, some but not perfect stability. I saw the same thing in messing around with anime GANs: a fixed set of noise vectors would show the anime faces change eye or hair color etc.

> At the very least it seems the output is not stable: a human has to decide when to stop the Wheel of Fortune.

Yeah, you can't do principled early stopping with GANs, really, because there's no held-out set and the loss is changing. I always ran until it diverged or I became impatient, and similarly with ProGAN: they ran as long as they could (takes like a week on big GPUs). To some extent, if you're using Wasserstein losses, the discriminator loss is supposed to be meaningful as a kind of absolute distance between the true image distribution and the generator distribution so you can do early stopping like 'stop if no improvement for 3 epochs'. (This is just in the pure generative approach; if you're using GANs for a semi-supervised application, presumably you can do early stopping as usual based on whatever you have held-out.)
If you're curious about the mentioned path of happy accidents, you can glean most of it from the author's LinkedIn: https://www.linkedin.com/in/meg-adams-644b4451/

TL;DR: Arts degree with a CS minor (?) -> Digital content producer -> front-end dev -> now engineering manager at Conde Nast (not coincidentally, the publisher of Glamour).
arbtt on Linux: http://arbtt.nomeata.de/. Highly configurable. Data collection decoupled from data analysis. Very much recommended!
Please stop posting this or we'll ban the account.

https://news.ycombinator.com/newsguidelines.html
https://en.wikipedia.org/wiki/British_Agricultural_Revolutio... is the primary cause of this change. Until food productivity started growing dramatically, populations were generally kept in check by the threat of famine. And famine was more a problem for peasants than nobles.

The change happened earlier in the Americas for the simple reason that due to recent settlement, population density did not yet match what the land could sustain.
I still don't understand how or why, but I am able to pay for marijuana from a local medical dispensary in CA with a credit card.

Anyone know what is up with that?
As I understand it, if you visit a seemingly innocuous web page, a Javascript program from that page can read any part of memory.

This means the hacker doesn't need to know exactly what to look for, but only how to tell the JS program how to find what it's looking for.

We've seen just how clever people are at being able to use buffer overruns and other programming errors in order to execute arbitrary code.

Looking for in-memory data structures is much easier.

As an example, look for the text between "-----BEGIN RSA PRIVATE KEY-----" and "-----END RSA PRIVATE KEY-----" and send it back to the server. Poof! You've now got someone's private key even without knowing at the start where that data was.
Awesome work. Don't forget https://flow.org/ (is it "flow" or "flowtype" ?) on the JS depth track.
Oh, I didn’t know they had their own stand alone AP.

Thanks for the link.
I don't care about incompetent corporate IT departments listening to tweets. But "regular people" will read articles quoting the 30% figure and disable Windows update because they don't want their computer to get 30% slower. I saw this happen on /r/pcgaming
The title is focused on the author's point is that it's a viable career path even for people who didn't think it would be one, including herself.
Open source toolkits for making a new startup