skysight-inc/HackerNews huggingface dataset:
Never would have occurred to me that this could be used to intercept password reset emails. Very scary.
If you are buying and selling real estate you are de facto wealthy. Money in the hands of the rich is substantially less stimulative to the economy than money in the hands of the poor, because a dollar in a poor mans pocket goes towards real tangible demand for goods and services they want to spend it on, while money in the hands of the rich goes into investment accounts (stocks / loans) and money sinks (like real estate or futures) that are only meant to make more money.

This is the fundamental mechanism of why wealth inequality is bad for everyone. It slows the economy down if you are moving money from consumption into investment and never seeing it come back out (and income trends in the last 30 years / average wealth / income mean vs median all demonstrate that wealth goes to the top and stays there). Loaning that money back out just deflates the wealth of the poor even more, which increases debt, lowers net wealth, and the general availability of credit for small business creation is pretty damn low compared to decades ago, and the success rate of new businesses is awful. This means the money never goes back down the ladder - it gets swallowed up into money markets that move money around to make money while all the profits are just the productivity of the working class siphoned off.

So when working class people are giving larger and larger portions of their income back to the bankers that loaned them the money to buy a house from a real estate baron, that money is dramatically less stimulative going into the bankers investment accounts (be they stocks or <rarely> further loans) than if it were being put into raw consumption by the homeowner.
Introduction to Algorithms (CLRS). With the caveat that I'm not sure I've ever "read" a textbook, but I've referred to a lot of them.
Or, they were holding out hope for a workaround that didn't make the entire Cloud 20% slower and they couldn't make it work.
>I even explained the theory behind the movie, Dave ending up in an environment he couldn't understand, like an animal in a zoo.

"A theory", not "the theory". There's quite a lot of theories about this movie.

Example:

The Monolith is the movie screen

http://www.collativelearning.com/2001%20chapter%202.html

Also

https://en.wikipedia.org/wiki/Interpretations_of_2001:_A_Spa...

---

>effects and sound

No, no, no!

The sound design in 2001 is perfect. 2001 is usually cited as the top or one of the top movies WRT realism in space ever. If it ain't broke, don't fix it?!
Yes this is exactly what you need to do. And yes it takes some careful design to eliminate power supply noise.

NeuG has some low quality sources of entropy, and also provides analog input for the user to supply with whatever they wish. It does not address the design of a good white noise generator, unfortunately.
It's an interesting attack, but as I mentioned, it requires an attacker to know every input to the hash function, which in many ways is strong argument for including as many sources of entropy as possible. It is certainly a much stronger argument than the other argument he refutes farther down.

There is also another more pressing issue, which is that if an attacker can see all of your RNG inputs, than they can predict your RNG output anyway, and they can predict your keys anyway. This renders Dan Bernstein's attack against DSA/ECDSA mute.
Oh wow, I'm getting Amstrad craving all over again.
The case against GDP: time to change the way we measure the wealth of nations
In 2015, someone from USDS left to establish a similar team at DHS [0]:

> Last week, Eric Hysen announced that he’s leaving the White House’s U.S. Digital Service (USDS) to establish a similar team within DHS, as the agency’s digital service lead

According to his Twitter and LinkedIn info, Hysen has apparently left DHS and now works at the Chan Zuckerberg Initiative.

According to the 2016 USDS report to Congress [1], USCIS (Citizenship and Immigration), an agency within DHS, did collaborate with USDS and 18F to launch a modernization of its immigration requests system. Given the size of DHS, I seriously doubt that this effort alone would have significantly impacted or involved other agencies in DHS.

The USDS 2017 report [2] mentions DHS as one of 7 federal agencies at which they have "active teams", but no other details are given.

[0] https://fedtechmagazine.com/article/2015/10/dhs-creates-digi...

[1] https://www.usds.gov/report-to-congress/2016/projects/

[2] https://www.usds.gov/report-to-congress/2017/07/
That, in itself, is an interpretation, of course.
Hahaha. Look it up, having a blood relative or longtime friend of a member in your house pledge another house is a pretty common tactic. You can find out if they haze, how much money and members they have, their secret rituals. You can even snipe other pledges from their incoming class sometimes.

The activity fee thing is true too. Many universities have a student government of sorts, and some of them allow the student government to decide what happens with a significant amount of the school's budget. At my school it was 5% ish. At the school with 20k students that's a ton of money for 40 elected students to slosh around.

The Greek system would commonly ally as voting blocks to make sure their candidates were elected, so student government is frequently run by Greeks.

Watching other houses parties was really important too. You need to see how far other houses go in breaking the inevitably unenforcable rules for parties. If you stray from the pack the school will shut you down. Finding out how many people went to social events at other houses was probably the most accurate gauge of a house popularity and reputation.

I came from a school with a very competitive Greek system, so I'm sure a lot of this doesn't apply everywhere
That doesn't make sense. It's not like the person who killed them would get a copyright monopoly on the work. Literally anyone could publish it. Do you see anyone getting rich publishing works in the public domain? If that's the case, I need to get myself some of that red-hot Project Gutenberg money.
Computability and Complexity by Neil Jones: http://www.diku.dk/~neil/comp2book2007/book-whole.pdf

It is extremely readable and presents very theoretical concepts in a pragmatic way. Love it.
The closest thing to feeling like I had a genuine superpower came after I studied a bunch of pure mathematics – the (richly interconnected, actually conceptually easier to manipulate after you've grown accustomed to them) building blocks of applied mathematics – and was then able to dazzle people who had only been exposed to applied mathematics with genuinely new, and often beautiful, perspectives on things they thought they already understood the whole story of. Pure mathematics, like analysis and algebra, makes it all immensely more rich and personal.
1) As someone who does NLP and AI for Evidence Based medicine [1] I can only agree. I build natural language processing tools, together with the team, for EBM. I have /no/ idea what to do next. Please. Help me.

2) Rant: here's the thing, we have SVMs, LSTM, BiLSTM-CRF, Knowledge Graphs, 28M articles, deploy infrastructure, tests, you know all the cool stuff. We can't sell it. It's PubMed this, PubMed that. There's no breaking that spell. So instead of building a better search engine, we focused on better analytics. Is it cool, sure. Is it as good as all the KoL stuff from LexusNexis, nope. Medicine is /hard/, if you think your app is hard: medicine is /harder/. Am I trying to cover my ass, sure. But seriously, deal with everything being non-standard and proprietary for long enough and you'll feel the same way. 80% of my job is saying "no" to people who aren't going to pay in the first place (Sanofi, Novartis, etc). They don't care. I'm just going to ride this out, throw some blockchain in somewhere where it makes absolutely 0% sense, call it a day. Seriously, NLP/AI for medicine: it's crap 100%.
And, I'm a "senior developer" with publications behind my ass on this. I don't know what to do instead of riding the hype train. Seriously: anyone out there that knows what to do with 100M+ medical publications in a 100M+ knowledge graph, be my guest: I'd hire you in a heart beat. But it's hard and there is nothing to be gained AFAIK.

[1]: http://growthevidence.com/joel-kuiper/
Technical details aside, I find it quite amusing that the hardware in my pi zero is more secure than my desktop that is two orders of magnitude more expensive
I gave up on Xamarin Forms (2017)
At least it leaves a trail..

Many services state in the password reset emails that "if this was not initiated by you, ignore it", but it really should be the exact opposite - click the link below to report it!
Excellent sleuthing.
A corollary of the general principle that you should never say anything more predictive than "hey, watch this!"
This seems complicated, but my impression is it would mean:

a) a super-smart compiler that can anticipate lots of flaws and fence them or turn on restrictive modes (maybe V8 is this smart?)

b) you have to turn off more speculation than you wanted to, and it hits performance

SMAP looks cool, seems like same origin policy for pages, but this is more Meltdown than Spectre right?
The cheapest way is to use good old soundcard, an opamp and passives. You could fit in $1 easily.
If you want to go deep on stochastic processes / probability theory - useful in finance - then you'll need it for sure. Otherwise probably not. Whether "needing" to know it is a good reason for not learning it is another question. If you're asking the question then you should probably just learn at least a little for general interest.
The cores in (all versions of?) Raspberry Pi do speculatively execute. It's just that the window of opportunity is tiny - just a few cycles (and maybe up to twice that many instructions) - and there's (probably) no way to get an indirected side-effect.

I wouldn't write off the ability to get a useful side-effect signal. The variants widely documented are not the only possible methods of inducing speculative side-effects.
Weird how they specifically point out "free as in freedom", but then the real brain of this entire thing is a proprietary STM32F103 MCU.
Controversial opinion: Hardware Random Number Generators don't solve any real problem.

The problems they're supposed to solve are entirely fictional and usually stem from a poor understanding of the real problems there are with random numbers (which can mostly be traced back to a few issues: boot time entropy, userspace RNGs and use of insecure RNGs by mistake).
Maybe that's what you do, but that's not what I do, and that's certainly not the hacker way.

So instead of saying "this is false", you should be saying "well, this is just, like, my opinion, man."
and older Raspberry Pi devices

https://www.raspberrypi.org/products/raspberry-pi-2-model-b/

But it looks like I confused the Cortex-A7 with the Cortex-R7, which is not listed.
EEG can do real time imaging because the sampling rate is much better. EEG also requires fairly intensive data processing, but usually it can be done faster than fMRI because:
1. There is often less/different information in EEG. If you have 64 nodes, you will have less information to process than the >100000 voxels in fMRI.
2. There have been more reasons to look at EEG in real time. fMRI analyses are generally done with group level statistics, so usually you have to run many participants which takes weeks-months anyways.

>There isn't any existing tech to take surface data and "map" it to internal states

Eh, sort of. Algorithms like LORETA which do source reconstruction have been around for a while, and do an OK job of finding the general area of the source of a signal.
Honestly, I doubt they did it for _financial_ reasons. Likely an old division that is being closed or downsized, like they specifically mentioned last time (the old cable tv divsion was being downsized in favor of the online streaming divsion). Most companies do layoff rounds at the turn of the year. Honestly, I think firing people can be a good thing. How many people do you work with that are total dead weight and you wish they were fired? It's normal business practice to do this, and 500 people out of 153,000 is 0.0032 or less than half of a percent of employees.
Great question.

Your intuitions are mostly right, in that the document blocking logic is related to CORS protection. In fact, when the document blocker sees a valid access-control-allow-origin header in a response, that's sufficient to allow it through.

However, there are a couple reasons though why CORS alone is not enough. First, the CORS checks (the ones that generate console warnings when they fail) are done inside the renderer process -- meaning some of the response data has already arrived in the process, and may be available for exfiltration by an agent able to read that process's memory.

Secondly, CORS only applies to cors-enabled requests (e.g. XHR and fetch). Our goal is to prevent, say, the HTML of your bank account details page or a similarly sensitive JSON-based API from arriving in any renderer process other than one dedicated to rendering pages for your bank's site. An attacker could point a script tag at the target resource -- script tags by default aren't required to go through the CORS dance (as an aside, <script crossorigin> exists, but I'm not entirely sure why). Since the attackers goal is just to cause the response to wind up in its renderer process memory, the attack still succeeds even if the JSON or HTML doesn't successfully execute as valid javascript.

So we need something stronger, which runs outside the renderer process. The idea is to look for responses that would necessarily result in an error in the context of any legitimate cross-origin use case (other than fetch/xhr, where CORS dictates what's legal). We need to block HTML, but allow stylesheets, images, and scripts. The blocking logic is really based on the substance of the http response, rather than what the renderer says it's to be used for, since the renderer is untrusted in this scenario.

JSON is a particular headache, since a subset of JSON is also valid javascript (dicts are syntax errors, but lists are we aren't), and as a result, JSON in the wild is often prefixed, and thus doesn't sniff as JSON. JSON also is often served with a JavaScript mime type.

An important takeaway for website authors is to serve any JSON or HTML with the appropriate mime type and the nosniff header.
How to Set Up a Stylish Under Construction Page in WordPress
I would just like a guide to Buffy with references and annotations.
Well, the vulnerabilities are directly connected to performance-enhancing architectural features, so...
No, that's why MRI has an undeniable advantage if it's what's important. What I was hoping, was that if the brain is somehow "opening" the various valves to bring more juice to certain area then that would be useful info (regardless of whether or not there is O2 in the blood, and where this O2 is consumed).
in every thread there is a tulips idiot, tulips didn't happened, is just propaganda of those times, was no crash, meltdown, whatever, there are landlords that will take bitcoin, especially younger ones, hell, I could even find escorts that will take bitcoin and give me a discount, bitcoin is fungible, why would not take bitcoin, with all the quantitative erasing.
Bitcoin competes with Visa. It's in Visa's interest to cut it off, while giving only vague "reasons" why, so that we all assume that it's because Bitcoin users have high fraud.
This is because Mailgun is in the practice of spam. The number of spam campaigns I've seen with Mailgun as the conduit is high, second only to Mailchimp.
My pet phrasing is more like: each bit of domain knowledge I have lets me cut the problem space in half.
In related news, Global Savings hits record $233 Trillion?
'if people agreed it had value' - That is a big if, don't trivialize it. The value of a currency is dependent on a ton of the properties I listed above.
The State of Vacuum in Postgres
Million Short allows users to remove up to the top 1M sites from a search set
You are right in your assessment. This is how it will go down. The vendors simply need Intel. There is now way they will make enemies with them. The problems are simply passed on to the customers who have no other option but accept the reduced performance.
Subspaces, Point-Set Topology, Compactness, Matrix Spaces, Limits, Linear Dual Spaces, Hilbert Spaces, Banach Spaces, Subgradients, Gâteaux derivative, Connected Sets, Path Connected Sets, Cauchy Sequences, Power Series, Taylor's Theorem, Properties of Monotonic Functions, Linearity, Hessians, Jacobians, Stone-Weirstrass, Heine-Borel, Fixed Point Theorems, Contraction Principle, Lebesgue Measure, Measurable Functions, L2, Fourier Series....

As an applied mathematician with additional degrees in CS and Engineering, I have used them all. More importantly, the knowledge of those topics helped me understand many algorithms and they lead to a deeper understanding of probability (Lebesgue Measure).
I honestly wondered if you were a poe. I was laughing until I realized you are being serious.

Since 1996 programming has been about 50% frat bros? Really? The quintessential "nerd" job? I couldn't disagree with you more. While I haven't been in the industry that long, how I got into programming was through online forums, where I found incredibly helpful and nice people who didn't know anything about me. Even when they did find out I was pretty young (13ish), they didn't treat me much differently. While I didn't usually get explicit encouragement, I did get help, for no other reason than I wanted to learn and showed that by asking as little as possible to be able to get by.

That's a beautiful thing about the internet, the anonymity allows anyone to be anything and to cut through other people's (potential) biases.

I'll be honest, I have had a good life. I have good parents and friends. I'm immensely grateful for them giving me as good of a start as one could ask for. However, as I said in another post, I was swimming against the stream. My parents thought I was wasting my time, my friends would (and still do) poke fun at me for being a "nerd". So yes, I was lucky that I was born into a stable home with parents who cared about me. It wasn't "all me", I had strangers help me learn, I happened to stumble across the right communities. We all stand on the shoulders of giants.

What do you do with the hand you were given? Do you think "Oh well, all is lost, I was born black and gay. I can only do something with my life if people encourage me"? Utterly ridiculous, a toxic and disgusting worldview. The soft bigotry of low expectations. You cannot control anyone other than yourself. There are plenty of genuinely unfortunate/discriminated against people, the question becomes, how do you respond? Do you give up? Or do you persevere?
Those cars were sold over the Internet; buying a car from another state is regulated by federal law.

I agree that not every law is just, but some are less just than others.
The author is reflecting on opportunity costs and the dysphoria generated by an anxiety-inducing rewards system which pays out randomly huge amounts to people who don't seem to deserve it, while inflicting a lack of control and ownership on others. The title reference to the "uncanny valley" points out that working for a Silicon Valley startup is marketed as a fulfilled lifestyle, providing a sense of accomplishment in solving real problems and just about everything you could imagine if you work hard enough. But it turns out to be an illusion, eerily close to the real thing yet ultimately unsatisfying and false.

https://en.wikipedia.org/wiki/Uncanny_valley

To make things worse, the startup life is so seductive and demanding that it excludes a lot of other potentially rewarding life choices which the author's peers enjoy. The author feels that startup workers are victims of operant conditioning and lack real independent agency in their lives.

https://en.wikipedia.org/wiki/Operant_conditioning

It's been pointed out that unpredictable rewards really screw up brains, causing them to obsess over the payout despite the overall returns being low. The author feels that startups and gambling have a lot in common.

https://en.wikipedia.org/wiki/Compulsion_loop

In the author's case, the conditioning is so strong that, when she thinks back on her experience with the startup, she's still seeing herself as part of it even three years later and she still feels the same compulsion.
I don't see where I said it was worth any particular amount.

I was just answering the question about why universities don't just self publish everything.

If Elsevier is overcharging for their services (hint: they are), some startup should go disrupt them or something (hint: the problem will be convincing prestigious authors to publish in your journal rather than Elsevier's).
Is this as pronnounced in Germany?
Here's hoping your infrastructure scaling plan has more than 30% CPU headroom...
Well, seems like a difference of opinion, then. :-)

Sure! That'd be nice.
Yeah, I don't understand the parent post. We have ASICs all over the computer - network offload, sound, IPC, etc.
A lot of people in the z80 community don't understand

Don't be so patronizing. Of course they understand it, but what they want is something different from what you want: status in the demo scene. If they open source it they're likely to end up as a footnote in their own projects rather than basking on difficult-to-scale peaks among their peers.

It's not like open-sourcing it is going to enrich them in some more concrete fashion than social currency; in fact, authors of very popular open-source projects regularly find themselves in the humiliating position of having to beg for money.
It’s always great to have informed responses here so thank you for contributing.

I gotta say though regarding the other comments on data quality, if a lay person read through the wiki pages on common brain imaging techniques (as I did) including fMRI, it seems easy to come away, rightly or wrongly, thinking, that’s all we have? That’s the state of the art spatial/temporal resolution? No wonder we can’t model the brain from first principles.

The amount of innovation, effort, and complexity that was needed to get imaging where it is today seems amazing to me, just glossing over the major achievements, it’s nobel prize level stuff. Yet you guys seem to have to still work in so much darkness with so little light. It seems rather than imaging one day simply revealing fundamental secrets, it’s just providing clues that will continue to require great insights and experiments to change the world.

But again, full admission of popcorn eating ignorance in these assumptions.
> 3. This happening is from my perspective just a quick look behind the curtain of the Digital Currency infrastructure problem as it exists today. There is no good way in, or out of digital currency at the moment, and the ones that exist are tenuous at best.

What country do you live in? This has not been true in US or EU for years as Coinbase and Kraken are two excellent options to get in and out. Bitcoin debit cards are a bit of novelty, not some central infrastructure.
None of the RISC-V chips are either:

https://riscv.org/2018/01/more-secure-world-risc-v-isa/