skysight-inc/HackerNews huggingface dataset:
Bayesian optimization is often applied on problems where the cost of function evaluation greatly exceeds the cost of any posterior updates etc. In this case sample efficiency is the real benchmark, and you should be looking at realistic problems with d>>2.
Who not under their control already could possibly wield the power to do this? Maybe Europe, as he says, but it’s unlikely they will be allowed to by the US government.
Mote accurate than than training: r/combatfootage
Doesn't ctrl-c clear the whole line (maybe SIGINT related?) in vi-mode?
I wonder what the multiplier of real money to crypto money was. They say $400M was lost but if $10M of fiat was put in and the price goes 40x (because one guy who threw in $50 cashed out at the high price) was there really $400M lost, or just the original $10M?
s/now/not/
Like everything in life, its all about costs. Cost of a company fighting a lawsuit vs. giving you more money.
There are certainly people I’d avoid because I don’t like them much socially, but no, I can’t identify anyone who “isn’t pulling their weight.”
Of course, then you have to trust your own infosec. I don't, personally. Too many ways to fuck it up, and the bad guys only need to get it right once.
Python's argparse is wrong and no one's doing anything about it
Are any exchanges actually built on robust decentralised infrastructure yet?
Money being taken from a bank generally does not get taken from the customers of that bank, unless the bank fails.

Money being taken from an exchange generally leads to customers losing it, so one could split the loss among them, the same way you split the loss among banks above
Sure, but that's the JS version. wasm is meant to produce smaller, less resource-intensive versions (and there is a wasm version of sqlite I believe [1]). I'd much rather see CDN and caching tech improve along with other low-level tools such as wasm and CSS Houdini to let us build whatever we'd like. I can see that being better for devs than waiting for vendors to standardize a watered-down spec for each feature we might want like SQL (and there's a lot of them).

[1] https://github.com/mandel59/sqlite-wasm
This is why a technology like AirSwap [1,2] is the future of exchanges. You hold your own coins because the exchanges are just waiting to rob you.

[1] https://swap.tech/whitepaper/

[2] https://medium.com/@jon.doe.ethereum/airswap-a-centralized-e...
If it were pure xenophobia or "irrational dislike or fear of people from other countries" the Hungarians would be worried about the Austrians and Swedes as much. However for some strange reason they treat the religion of peace types differently.
Would it be possible to implement ssh:// ?

I know it's theoretically possible to make some browsers respect ssh:// urls. But to actually do so requires a lot of work.

Presumably this is to avoid some security problem that I'm not immediately aware of. Or maybe just plain caution?
In the US you're overpaying by not making your purchases with a credit card that you pay off every month. There are so many rewards programs and vendors typically are required to have the same price for credit and cash purchases.
This is spectacular.
Does anyone know if such tools exist?
Thanks for both your answers. Though I was also thinking perhaps you could just suspend the particles in mid-air, and use the movable prism in a laser projector to actually "render" the projection (thus not needing to move them at at a high frame rate or at all). However I guess, you probably do need to move the particles as well to be able to make it a 3D volumetric shape in space (seen from all angles etc).
No, this just shows that future wallets and exchanges ought to be more secure. All the flaws that enable these crypto thefts are solvable on a practical level: multi-signatures, time-locked transactions, hardware wallets, offline wallets, etc (unsurprisingly, none of these technologies were used by Coincheck to protect their XEM tokens.)
an interesting point you raise. I read recently that practically 100% of the principal for Madoff ponzi schema was recovered. 0% of the fictitious gains, mind you, but 100% of the original money invested.
If you're going to blame a cyberattack on North Korea, you better show your work
Dedicated hardware and encrypted backups go a long way.
The World's Best Share Buttons
It is illegal as far as I know, and I've never heard of Tesla remotely disabling a car unless it's been stolen.

The only thing I've read about is them not doing in-warranty repairs and/or recalls on salvage vehicles, but that's normal. They'll apparently recertify a salvage car for $3k-$6k though, if an owner really wants support.
Postfix, dovecot, fail2ban, spamassassin. I don't have a secondary; I just keep up to date image snapshots and regularly backup the disks. It's only for my personal communications so I try to keep things as simple as I can.
> I still know the e-stop function of that code by heart 30 years later

I'd be very interested in hearing more about this! I've recently re-designed the safety system for my company's product, and I chose to keep it purely hardware based (using safety relays) rather than involving any software, purely because it's so much harder to guarantee that software will be failsafe.
Hundreds of dollars of damage and possibly thousands of dollars in theft is now minor property crime.

Top shelf.
Video of the process: https://www.youtube.com/watch?v=2T5FrZl04JY
Lenovo's craptastic fingerprint scanner has a hardcoded password
Actually it seems possible. The demand for their service won't disappear, but with their unpopularity and poor security practices someone who can might just decide to burn them to the ground. Their only assets are data. I'm sure they have offline backups, but a patient enough attack would bork the backups too. They'd probably try to continue doing business, because YOLO, but eventually enough erstwhile 850s would get their Audi leases rejected that the lawsuits would really pile up. About that time some pissed-off employees would start talking to reporters, and that would end the whole thing.
Ask HN: Any Open Source ICO Contract Generator?
Yes, that works out of the box with every KDE application. I recommend Super as modifier key rather than Meta because most keyboards on the market have a physical Super key or two.

https://encrypted.google.com/search?tbm=isch&q=kde+rebind+ke...
The homeless in California have it so awful...they can sleep on the fuckin beach almost every night. Sounds better than what I've got cooking.
Why aren’t GPS signals digitally signed? It would be simple to prevent this kind of attack.
Mitsubishi is trying to break in, with a 90 passenger regional jet. They did work on the wings of the 787. I think they have a shot, but they seem to be having problems with execution.
And about half of our hobbies have health or injury risks.
Yep, exactly that. Maybe a smaller chunk, to be competitive, but ultimately to profit by helping people rather than perpetuating a cycle of debt.
Yes, you would. Ctrl/alt are within finger range. The arrow keys aren't.
That can be said of any product, not just ML.
From what I have seen a lot of companies in the US give 10 days, 15 is very and 20 or more is pretty rare. Maybe after a few years at the company.
> do you use c-f/c-b for going forward/backward or the usual cursor keys?

I do. With emacs, you usually have a finger near the Ctrl key at all times anyway, so hitting f or b is much more convenient than moving my right hand over to the arrow keys.
No kidding! I've found my new avatar...
https://blogs.securiteam.com/index.php/archives/3649

"The vulnerabilities found in the core graphics framework (VBVA subcomponent) and affect all host operating systems."
In Germany a lot of people get 30 days plus(!) more public holidays than the US so it's probably closer to double.
That the available protections don't cover the entire history of every possible financial scam or system risk doesn't change the fact that regulations have effectively kept a lot pump-and-dump scams and securities fraud at bay.
What does that have to do with anything? The claim is that arrow keys are more intuitive keybindings. If you're remapping keys, then the familiarity of keys is irrelevant.
> when your minimums are usually either 4 or 5 weeks, and the average isn’t much higher

But that means that the average IS higher than what the comment I replied to stated as high (at least in comparison to working for tesla). Perhaps I shouldn’t have mentioned that I’m European[1], sure, but I was not generalising to all of America, only that the person I replied to seemed to consider 4 weeks a plus and I found that boggling given that its the minimum here (meaning that something that would be considered high would have to be higher still). Yes, yes, I probably should have been clearer, but it sounds like you have gears to grind.

[1] Although, I do think its relevant because up until recently I worked for a US company and everyone in the office here was getting quite a few more holidays than the people in the US office. A friend of mine recently said the same thing: the people in the US office in the company he works for were getting approx. half of the holidays people here were getting.
The title should really say that they've been patched.

Edit: The first sentence:

> Oracle has released patches for ten vulnerabilities in VirtualBox which allow attackers to break out of guest operating systems and attack the host operating system that VirtualBox runs on.

And at http://www.oracle.com/technetwork/security-advisory/cpujan20...

> Supported Versions Affected ... Prior to 5.1.32, Prior to 5.2.6

The current version being 5.2.6

https://www.virtualbox.org/wiki/Downloads
I’ll take a look. Thanks! I am looking for something step by step and really easy to understand.
Why would the US military create a system it couldn't manipulate itself?

GPS is operated and maintained by the USAF. https://www.gps.gov
Where is the risk to the real economy? No fiat was destroyed.
You can turn off some of the excess animation in the accessibility settings. They get replaced with a sort of weird fade in/out, but so far I've preferred it to things flying all over the place, and my phone feels more responsive. (iPhone 6+)
You just buy a local sim card in airport.
International student founders – how did you solve the issue with visas?
Will need to incorporate soon, so I'm looking for advice on how to go on about eventual issues that will arise as an international student in the US. I'm currently on an F1 visa.

As far as I understand, there's two options I can use immediately (until I find enough resources to move off the F1 visa): 1) CPT, 2) pre-OPT.

Can I even use CPT to work on my startup? Would incorporating in my home country and then working on that company be any better?

I'm trying to speak to an immigration lawyer about this but I'd like to hear from people who have done it in the past themselves too
I get random idiots trying to login to my facebook all the time. Maybe they think they have my email address (I doubt that) or maybe they're just trying to hack and see if your password is weak

Facebook authentication is pretty big so owning a FB account can be a bonana
I talked to start up with unlimited PTO and told them I will for sure take at least 6 weeks. That was pretty much the end of discussion. Unlimited PTO mainly means that they don't have to pay out unused vacation when you leave.
I wonder, will the GPS jamming cause any disruption to (or, worse, deviation of) GPS time signals? If yes, that could cause some interesting effects to NTP servers and appliances that use GPS as their stratum-zero source of time.
I have a 6 (for work) and a 6S (for me). Both batteries are still in good (and very good for the 6S) condition. I run pretty much stock phones; I don't install many apps and the ones I do are generally well behaved (nothing like Facebook, Snapchat, etc). iOS 11 on the 6S was (is?) a complete sh%$show. Very unstable. Tried normal releases, betas, dev betas, DFU after DFU after DFU. Nothing helped. I finally went back to 10.3.3 and could not be happier. The 6 is running fine on ios 11. It lags when opening iMessage or email, but that's probably more due to the 1GB RAM than anything else.
Unless you're willing to live without credit, legitimate interests will override. Section 6f. This is, in fact, called out as an example in the ICO guidance. That bit doesn't (imo) seem to have materially changed wrt the DPA / Data Protection Directive 95.

Breach notifications are new and interesting though. Equifax definitely would have been required by the gdpr to promptly disclose.

I don't specifically know if EU credit agencies are in the practice of widespread selling of credit data besides when a person has asked for credit. The gdpr will definitely allow opt-out of that (by default even!), but I think previous privacy laws may cover that. I'm not sure.

My personal opinion is the gdpr is probably the end of Acxiom style businesses, plus all the ancillary businesses the CRAs in the United States get up to besides plain credit reports. Eg marketing, wage tracking, outcomes estimation for colleges, etc.
They are. https://en.wikipedia.org/wiki/GPS_signals#Precision_code
Google should be banned from doing this.

My god, it’s not enough to try to have everyone’s thoughts monetized and leveraging that to spam their consistently shitty products let’s take over local news too!
David Foster Wallace was average looking, at best.
U.S. economic growth slowed in 2017’s fourth quarter
So interestingly that shows the Venus was IFF ILBM, which matches its origin as a demo image for Deluxe Paint rather than GraphiCraft.

The format for most of the others is described as "PLBM", which makes sense as P(L)BM is basically a cruder variation that'd allow dumping the screen/window content to the disc in planar format directly (native for all Amiga on-screen display prior to AGA or graphics cards) with minimal framing, while ILBM interleaves the bitplanes row by row (and can optionally use run-length encoding too), and so needs a bit more finesse.

It's kinda funny how they play up that the person who found this out "specializes in and is world-renowned for hacking and reverse engineering" - if you're remotely familiar with image file formats, it takes about 5 seconds of looking at these files in a hex editor to see that they're an IFF related format, and the chunk names are plain ASCII. I'm sure the person in smart - I'm not disputing that; but they're overplaying how much expertise is required for this.

Both ILBM and P(L)BM are formats you can write a basic decoder for in an hour or two - IFF contains chunk headers and length markers to let you extract each chunk, and you need the palette information and the bitplanes. ILBM also allows for basic run-length encoding. There's no complicated compression or anything else to make it hard.
There are a bunch of companies doing exactly this, usually with some value-added service on top (e.g. categorisation).
Where did I state that in my comment?

The comment I replied to implied that 4 was high, I only said that it boggles my mind that this would be considered high. Where I am, its the legal minimum, so I wouldn’t consider it high, but I also never said[1] that its too few. You made that up.

[1] In the comment you’re replying to. I did say elsewhere that I would happily trade a pay cut for more holidays, but that’s a choice I would personally make. Having said that, with the state of mental health here and in the US (according to stuff that’s been posted to HN over the past year or two) and personal anecdotes with friends, family and coworkers, I do think that most people need to work less.
It certainly makes sense, and if someone has the programming skills, I suggest that they do it.

There is a problem on the hiring end of the software market though where I get flooded with resumes from engineers and data scientists and interviewing them for a software job seems to be a complete crapshoot. Literally the best and worst candidates that we get through. We get some folks with serious traditional engineering chops who can't code (as in solve a problem with software) their way out of a paper bag.

The self-taught developer and CS grad pools seem to be far more consistent, in my experience. I get through less of the very worst people and those are easier to filter in this pool.
Consider me 'meh'. Boeing and Airbus got to do some grandstanding, and the nice lucrative pile of corruption that goes on behind the scenes of the whole industry keeps on turning. I don't consider it a win or a loss for anyone.
Hurry up and wait aside, we do some pretty incredible things, briefly, when the waiting stops.
> I do have a question: Is expecting $130-140k too much for a Mechanical Engineer running one of the most critical areas in their manufacturing line?

If you don't have a degree, you're not formally a mechanical engineer. That's probably why they thought they could lowball you.

It sounds like BS but software engineering is pretty much the only field in the US where people get to call themselves engineers without passing a PE exam, which means getting a degree. (There's a PE exam in most states for software engineering but it's still a bit of a joke.)
I suspect it is because they transitioned away from 32 bit. Maybe they had to rewrite some older, debugged, 32bit libraries.
>Could Swift be the reason why Apple software post 2010ish has been so buggy? I'm just trying to put 2 and 2 together here because Swift was released with iOS7 circa 2010.

That makes a lot of sense to me. Swift is a great language, but it did a lot to turn iOS development into more like Javascript development. I fear that with the addition of garbage collection rather than reference counting, programmers have become lazy and forgotten they are still working within the constraints of what’s essentially an embedded device. In the Objective-C days, devs were more exposed to that side of things on a regular basis, and I think that experience deeply affects the way one thinks about resource usage and optimization. I have no doubt that a bulk of Apple’s application teams writing Swift today are former web devs, not systems or embedded developers as was the case when mobile software first came about from ‘07-‘12ish
HomePod can't play locally acquired Music
A Summary of Analytics Tools
Use a good static site generator. I stopped using Wordpress years ago. Life has been better. I don't get rando's trying to leave spammy, weird comments on my site trying to sell drugs. Nobody is constantly trying to hijack my Wordpress install. I'm not constantly being nagged to upgrade it.

I just write locally in markdown and a script picks up the changes and re-publishes. I preview it on a locally running web server. When I'm happy I just run a small rsync script and boom.

Statically served sites are super fast.

Try GatsbyJS, Jekyll, Mynt; take your pick.

It's funny... when I first started writing online I wrote some perl scripts that hacked together text files into an HTML template. Then when people started calling it blogging and sticking a database behind everything became the norm I eventually ceded to wordpress... but after a bunch of years doing that it's back to scripts hacking text files into HTML.

Don't forget to check out the indieweb movement and start building links.
That was a really big one at a company that has a lot of valuable start on almost every citizen. I can't think of many worse possible breaches. Maybe the IRS or Visa?
If every large aircraft manufacturer weren't corrupt as hell you might have a point.

But, well, every large aircraft manufacturer is corrupt as hell. All that happened here was one of the industry spats over just how openly corrupt it's OK to be spilled out into major media.
Unfortunately, restoring state after quitting on MacOS is not trivial. Specifically, restoring all your windows to the right spaces. No browser on MacOS (not even Safari) manages to do this...
This is demonstrably false, since it can be said of the problems addressed by any new product, and new products succeed all the time.
As indicated by your definition, the 3d-effect of a hologram arises from interference of a coherent light source. In the display that is shown in the video, the 3d-effect arises from light-emission (scattering) of a point source that moves around. The light from the point source need not be coherent for this display to work! Therefore, the term "hologram" seems inappropriate.

I have never seen a hologram that is also a volumetric display. To me, this would be the holy grail of hologramming, since you could use interference for occlusion effects.
What makes it relevant is that GH does readily identify other religious figures such as Muhammad and Buddha. Whether or not one believes in any or all in a religious context, each is an important historical figure.
"Waiter, my bagel has black magic marker all over it. I think I'll just have the omelette instead."
For this, the attack is from the operator of the GPS signals. There is no defense; the attacker could digitally sign the signals or even shut off the satellite.

For an attack in a foreign country, digital signatures only prevent false information. A digital signature does you no good if the interfering signal is far stronger than the desired signal. The desired signal may even go missing if the enemy attacks the satellite.

Military users can choose to use encrypted GPS signals. This at least lets them know to ignore an attacker, but doesn't help with hearing the legit signal. Military users sometimes use highly directional antennas to avoid picking up jammers near the ground, but that is no help against an enemy that can put a jammer in their own satellite.
It works when you have a local hard drive that can hold your entire photo album. Otherwise, it doesn't.

Honestly, I don't understand iCloud for photos. I understand iCloud drive, it's a server. iPhoto's interaction with iCloud feels suspiciously like sync, so I actually have no confidence in it.
The version of GraphiCraft used for the demo was not a finished version, and was known to be buggy. Recollections of people involved includes claims that they were terrified when Warhol used the flood fill, for example, because there was a known bug in flood fill that would cause it to fill memory outside the screen bitmap. So it's quite likely that there other bugs too.

As a wild guess, one possible source of problems might be that GraphiCraft might have taken shortcuts in saving that might have e.g. assumed a certain offset into some data structure to copy the palette information from the file to that changed before release, as some of these early programs were known to basically pretty much dump memory straight to file and load it back in straight into some data structure with minimal parsing and validation.
New population of one of world's rarest fish found off Tasmania
I definitely have gears to grind.

It’s impossible to have a discussion online about parental leave, vacation time, or universal healthcare without a parade of Europeans rolling through and expressing (mock) horror and shock at the hellscape that Americans have to live in.

I’ve lived in Europe, and hope to again. I LOVE Europe and agree that quality of life is much better in many areas. But it’s not perfect, and the constant drumbeat of condescension about these few topics is neither helpful nor an accurate picture of the total differences between the countries.

Imagine if every time you had a discussion about salary, or employment levels, or whatever, you had 13 Americans dropping by just to say: “wow, I had no idea you have it so bad!!!”

So yeah, gears to grind :)
I got it! We'll solve it with blockchain/crypto....