skysight-inc/HackerNews huggingface dataset:
Automobile companies select tangle upon blockchain Volkswagen leads the way
> And then the Bulgarians also have approximately reversed vs Western Europe head movements for yes and no, to maximise confusion :)

This is strangely the most shocking fact that I know. It's one of those facts that remind you that just because something is universal doesn't mean that it's not cultural.
While probably scary and a non-starter for some have often wanted a key stretched hash of a voters id number/vote/salt as a public record (possibly also stamped into a blockchain) and able to be checked by the voter holding the salt and no one else.

Once you put a ballot paper in a box you have no idea whether it was properly counted or lost.

There's the inevitable issue of cryprographic advances and forward secrecy, which wouldn't sit well with some people for fair reason, anonymous voting is a cornerstone of democracy. Personally wouldnt mind my vote being public a few decades after the fact but not before then.

Electronic voting has a bad reputation here but there's certainly room for improvement on paper only.
> so that consumers will have something to buy

So that they can price-discriminate by raising prices for mining and machine learning.
Broadcast.com had $100m in revenue for fiscal 1999. Maybe that's what you were thinking of.

Cuban's position was worth more on paper at its peak before the Yahoo acquisition. Broadcast.com was acquired for $130 per share, the high that year before the acquisition, was $144 per share.

Prior to the acquisition, the stock was trading at $118. Yahoo only paid a 10% premium. Cuban was worth over a billion dollars before the acquisition.

https://www.cnet.com/news/yahoo-broadcast-com-sizzle-after-d...
More than 50% of the websites found through HN at present do not require SNI. Do you think this is also true of the https-enabled www as a whole?

SNI was introduced to address the problem of shared hosting with respect to SSL/TLS. In the not-too-distant past, SSL/TLS required a dedicated IP address for each HTTPS-enabled website. One certificate per IP address.

There are still many, many websites that satisfy that requirement.FN1 I know this because I use unpopular customised HTTPS clients and have SNI disabled by default. I only enable it when necessary; I have automated this to happen automatically if I receive an SNI error.FN2 Most of the time, I get no such errors.

FN1. I am tired of articles which ignore this fact. If one assumes that all HTTPS-enabled websites require SNI, then one is making an incorrect assumption. For users, the current SNI implementation (sending hostname in plain text) is a problem; people are trying to fix it, as the blog mentions. For website owners and hosting providers, current SNI implementation may not be a problem. I am viewing SNI from the user perspective. I respect other perspectives.

FN2. Most of the sites requiring SNI are Cloudflare sites. As the blog mentions, unless the customer pays additional fees to use their own certificate, Cloudflare acts as a MITM and the user only sees Cloudlfares certificates, not the target websites. This is HTTPS as between the user and Cloudflare, and then (hopefully) between Cloudflare and the target website. It is not HTTPS between the user and the target website.

Edit: Note, FWIW, I do not use third party DNS and in fact do not use recursive DNS at all. I retrieve, store and update DNS data and serve it from localhost bound authoritative nameservers. (I also encrypt DNS packets with CurveDNS in the home lab and with the few remote servers on the intenret that support DNSCurve.) I wrote a custom "non-recursive" stub resolver (for speed not privacy) that outperforms a cold recursive cache. It does not query root servers and minimizes queries to TLD servers and remote authoritative nameservers as it learns from previous answers and updates constant databases and zone files accordingly. Over time, it sends less queries than a recursive cache.
Business owners form all sort cahoots and lobby for themselves so it's not a free market. Its just sold to us that ways.
> Everybody's up in arms over the fact that the FCC reverted the Internet to the same level of governance that it operated under from its inception up until 2015.

No, this is simply factually false. The FCC has enforced neutrality since adopting the Open Internet policy statement in 2005, through a series of different mechanisms (the ones prior to the 2015 Title II approach cannot be reverted to because they have since been foreclosed by the federal courts, who, in the most recent case, specifically pointed to Title II classification as the legally-viable basis for the kind of rules that had been adopted under the prior Title I regime.)

(And, IIRC, neutrality liked principles applied to many non-dialup ISPs prior to that, not due to general policy targeting ISPs but specific rules governing the particular infrastructure by which those services were provided.)
What if the "useful work" is to work against a collective action problem or similar, where the existing problem is that everybody wants something to happen but coordination is too expensive or there are "tragedy of the commons" type incentives in play?
Undocumented 8086 Opcodes, Part I
> it's sound money

Can you explain what you mean by that?

> and uncensorable

With all the hacks, that is literally the last place people want to hold their money
Just pay more for the card and you can have one whenever you want. Isn't that what HN thinks employers should "just" do with tech talent because "there is no real shortage"?
Because its too computationally expensive. Attacks like these are found when you have access to the model, take an inout image and change its pixel values and see when an anomoly occurs. It’s much faster scoring N images vs. building N models.

How do you combat it? Well that’s an open research question. IMO the most promising techniques make the system harder to attack (ensemble models, more complex models, randomizing the input slightly and dropping outliers) but its not a guarantee. Like in security, it would be great to verify a model is safe to 200 years of brute force search for attack, or whatever it may be.
Immediate isn’t always so true, it depends on the transaction amount with my bank (Wells Fargo). Something like $200 a day can be sent instantly, everything else is next day which still isn’t terrible.

I actually pay my landlady with Zelle (have since it was clearxchange with every bank using different branding), it’s not half bad - the biggest downside really is that your bank has to participate unlike SEPA where it’s expected to be there.
1) Segwit does improve transaction throughput, but it does so by improving the efficiency of transaction storage on the blockchain.

2) The Lightning Network improves transaction throughput by moving transactions off the blockchain, and requires segwit to be active for reasons apart from its transaction efficiency, specifically that it fixes the transaction malleability problem.
> the main argument for project-based learning is ability to make learning interesting

James already addresses this assertion in the very first sentence of the blog post. And the second sentence.
I think whatever learning method depends on your goals, are you trying to get immediate deep experience that a general (still quick-feedback) but intense brushover of all the fundamentals can not provide, then project-based learning is good for you, but if you're looking to not only master the fundamentals but also advance in terms of being able to offer more on the fundamentals, then traditional course-based learning is good for you.

I don't think there is a real good or bad but rather depends on your goal and motivations. Depending on the goal, some people might learn more from projects than course content and vice versa.
Dropbox mentions their real competition in S1 filing: Microsoft, Google, Amazon, Apple, and Box. None of them seem to offer E2E. The competitors you cited aren't worth mentioning due to their small market share relative to the big players.

E2E might be feature customers start demanding in the future, but it sure doesn't seem like that now.

(though I wonder how many folks are using the big players on top of other encryption solutions like truecrypt/veracrypt/safe, etc)
While I agree that it's sort of self congratulatory, I have a similar anecdote where I chose poorly. I'd been offered an internship with a CS prof when I was an undergrad, after doing what I thought was trivial extra credit on an assignment. I never took him up on job because he was offering was only paying minimum wage, and I was already making more than that. It was extremely short sighted of me at the time. It would have opened way more doors and even way more salary if that was actually all I cared about. It was a decision that probably set me back a decade in my career alone, never mind the chance to work with an amazing researcher. I just couldn't see it at the time, because I wasn't thinking in terms of future potential. Which is sort of just saying I was young and foolish.
Okay, he does know how to program. But he still doesn't know fuck-all about AI.
A legal (statutory, for instance) mandate is such exactly because it is law.
Periodic release is the problem; I'm tempted to suggest that what's needed is a currency consisting of a set number of coins all released at one moment by a government or large corporation or institution but not thereafter controlled by said entity.

A minor variation would have that entity retain ownership of most coins - which are released and in its wallet - to spend over time. Let's say, a United Way issued coin 10% of which was spent (auctioned for contributions in dollars) each year for ten years. After which point, the coin would be free of any connection to the United Way.

But there has to be a small charge, in work, to keep your coins valid in order to maintain the blockchain/shared ledger. Weirdly, this has sorta been tried with a real currency, Alberta (Canada)'s "Velocity Dollar." It was ruled illegal before being fully put to the test, but since it could be used to pay taxes to the government, it would likely have worked, at least as a supplementary currency.
JavaCard is also one of the few areas where high-assurance security use commercially. Names that come to mind are Kesterel Institute and Gemalto with EAL7-style VM's with formal verification. Examples:

https://www.commoncriteriaportal.org/iccc/9iccc/pdf/B2404.pd...

http://www.kestrel.edu/home/projects/jcapplets/
Nvidia's gross margin is north of 60%. They want to sell GPUs. It seems more likely that they're trying to segment the market so that they can charge miners, gamers, and deep learning customers different prices; the per-customer limits are a way of accomplishing this, since gamers don't need to buy in bulk like the other two.
Honest question: is this useful?
Comparing and contrasting how computers think and learn compared to us certainly is an interesting idea. I tend to think of myself as epistemologically agnostic, but not for lack of trying. I haven't kept up to speed on neural net development, do there could be some fascinating insights there.

Thanks for the links. I'll definitely check this out.
It was kind of a half baked idea. At best, it could lower the small overhead of the interpreter loop for a subset of Java bytecodes. At some point you’d need a JIT to get better performance, and that JIT would want to target real ARM code (so you can do things like register allocation)

One cool thing about Java on little processors is that you can get memory safety without an MMU. But again at some point you’re going to want an MMU anyway...
Game Studio Threatens Employees' Jobs If They Don't Write Positive Steam Reviews
With all the crypto hacks which can cause you to lose everything, cryptocurrencies are the last place I would want to redistribute any of my current assets.
I’m not sure capsules will change the security much. We’re talking about pixel level attacks while capsules are trying to generalize at larger length scales (rotational/translational invariance).
Bitcoin (well, its descendants now) makes my international money transfers dirt cheap while DRM prevents me from using media that I paid for on my favorite devices.
There's a lot of psychology at work here which is not being given due credit.

People who are theorists at their core typically believe that the learning is interesting by itself, usually because they are focused on developing their own models for how things work. It's a subjective-creative process that's exciting: You get to play detective! They are getting creative outcomes _while_ learning about theory. They do not need to wait for a project outcome in order to feel accomplished. Their only other answer, like OP's, to learning things that aren't interesting by themselves but still need to be learned is rote learning, or drills. What other method could possibly educate the student and yet not introduce other rabbit holes that distract from the topic?

Project-motivated people find this approach boring, and they are ready to go down the various rabbit holes involved in the project, if necessary to achieve their envisioned outcome. They are focused on _applying existing theory_ to effect their concrete outcomes, which is an interest that straddles the theoretical and real-world-application zones. They get happy brain chemicals by e.g. watching people use a project they've built. These types use a referential thought process for higher leverage and shorter timelines. So rather than developing their own model from scratch (NIH, the theorist's pet method) which will take them a long time and might not be that effective, they borrow someone else's model ("hey, let's use Framework X, it has tons of features!") and make it serve their subjective outcome-vision. Seeing the vision brought to life is where their creative fulfillment is activated.

CS departments are stuffed full of the former case. Engineering departments are stuffed full of the latter case.

It can be absolutely maddening to be either one, and then find yourself being asked to accommodate the other's learning / executing style.
Google starts taking payments for apps via Kenya's M-Pesa service
If you start your own company you can distribute equity as you see fit
Thanks for pointing that out. I've updated my comment.

Zelle will improve as more banks participate and the ACH network is modernized; I expect them to compliment each other until the US reaches their version of SEPA. A shim's a shim.
I don't think I've disparaged anyone here. Being skeptical is one of the oldest traditions in philosophy. If one can't handle skepticism, they are in the wrong field.
> I hadn’t heard update for so long I had stopped checking their website.

I hope I'm not the only one who appreciates the irony of this sentence.
> Given that the Supreme Court has previously upheld both of the FCC’s classifications of broadband under the Telecommunications Act of 1996, first as an “information service” and then as a “telecommunications service” (when Wheeler reclassified it to impose net neutrality), there is no way that they will strike down a return to the “information service” classification.

That's inadequately reasoned. The fact that the Supreme Court found an application of the legal definition reasonable on the set of facts presented at one point in time and a different result of applying the same law reasonable on a different set of facts presented at a later time does not mean that a reversion to the older application at a yet later time will necessarily be upheld as consistent with the law based on the facts presented at that time.

> By a legal doctrine known as “Chevron deference”, the courts defer to regulatory agencies in choosing between plausible interpretations of the law, instead of choosing an interpretation themselves.

Chevron deference is not unlimited deference.
That's factually wrong.

The S&P 500 was 1300 when he sold to Yahoo. He received $1.4 billion of Yahoo (14.6m shares at $95/each). He had to pay taxes on clearing out that position as well, so you can safely assume his after tax position was more like ~$1.1 billion. He very solidly beat the S&P 500.

He's worth $4.08 billion today according to Bloomberg (ranked #500 on their global rich list). He has increased his net worth by nearly 4x.

The S&P 500 is at 2747. It has just over doubled since April 1999. He'd be missing a billion dollars if he had gone with the S&P 500, including any dividends.

He was better off with what he did, he beat the S&P 500 index fund. Not only did he make more money his way, he got to do what he wanted to with his money, such as buying the Mavericks.
If You Can't Beat Purveyors of Unauthorized Copies, Join Them
> the current SNI implementation (sending hostname in plain text) is a problem

1. Even if you don't do SNI, the hostname is on the certificate that the server sends.

2. For most users, the domain name already leaks in the DNS request, does it not? That is, SNI provides no less security.

3. I have no idea what the status of WPAD is these days, but if you can convince a client to use a WPAD file, IIRC, you can leak all the domains they connect to, include HTTP(S) sites.

4. For any IP address that doesn't require SNI, even if the certificate didn't give away the site: the IP address is sent in the clear at the IP layer; it should be pretty easy for an adversary to build up a mapping from IP->DNS for the vast majority of popular domain names. Alternatively, the attacker could just form a connection to that IP and see what site responds.

While it's certainly a privacy leak, it doesn't appear to me that the solution is as simple as turning off SNI.
>If someone were to design a programming language with a learning curve as gentle as Qbasic, and wrap a simple IDE and graphics library around it, all while modernising some of its more dubious qualities...you'd have a real shot at recapturing the magic for a new generation of young programmers.

I first learned QB maybe in 2001, during high school days. Then I learned Python.

Writing graphical programs in QB was pretty easy. There were PSET(), LINE(), CIRCLE() that were straightforward. But with Python, I had to learn this thing called "Tkinter". What the hell these "root", "unpack", "mainloop" mean?

:D
It's also false:

https://www.engadget.com/2017/11/08/apple-fbi-unlock-texas-s...
My undergrad math department had a class on mathematical logic (set theory, Peano arithmetic) that was required to take higher level math classes. Wrote down some basic statements (conjunction, modus ponens, etc) and said if this didn’t seem fairly obvious you should reconsider your math major.
patio11's salary negotiation blog post is our Das Kapital.
You assume the tinder devs have the freedom to work on what they want to. As frustrating as it is, in big corporate engineering shops, you are paid to do what the execs want to be done, not what you know needs doing.
> If you are referring to DACA - it's not arbitrary and capricious considering this was a hot button election issue and a large number of Americans support this change.

The legal standard of "arbitrary and capricious" has to do with adherence to the substantive and procedural requirements of the Administrative Procedure Act, not to the degree of popular support.
I do quite a bit of strength training and have near-baby hands. Rippetoe has videos on how to hold the bar. You should never be cinching skin against skin.
I’m not sure adding noise to the inputs of an equally complex model will change the information load of the NN. Because of the compression of the NN I think there will still exists new input pertubations which generate attacks.
So, I assume Videri does small batches, it's all about quality, and doesn't put the usual industrial crap in its products.

If that's so, I would love to buy chocolate from them. I only suggest to price the 3-pack lower than $20 (if a single is $7, a 3 pack should be closer to $16-$17).
`The second big argument for project-based learning is that it more closely resembles what students will actually do on the job`
I never understood this argument as this is so far from the truth. Most of the time working in professional environment you have to deal with legacy code, you are a lucky bastard if you can start a project from scratch.
> Eh, I disagree...

The reason transmute is (particularly) unsafe is because it can be quite difficult to tell whether a variable is bound to a value, a (possibly implicitly-dereferenced) reference or a slice, and so, given transmute's implicit type inference, it's very easy to quietly get either the source or destination type very wrong.

The size-checking is also I would argue useless bordering on worse than useless (false sense of security) since any two references or two slices are the same size, but are unlikely to actually be interconvertible, and it also fails to check alignment.

C and C++ (particularly the latter) make it much more difficult to inadvertently cast between values and pointers, and the strict aliasing rules (aliasing almost always illegal except through `char`) are draconian enough to discourage the practice of type-punning-through-indirection (and ensuing alignment bugs) altogether.

`memcpy` (and unions-as-implemented) is nice because it's explicit and it just works.

> I'm curious if you've got a defect report link or similar

I'm having a hard time finding the detailed original paper pointing it out, but see http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2017/p059...
This only supports a small subset of ops. It is pretty much corresponds to the first option that I mentioned - train with Tensorflow, extract the parameters and provide implemenations of ops in your native language.
Poignantly appropriate, perhaps piquant - but not ironic (contrary or inappropriate in a poignant way.) "As you might logically expect" is not what we usually want to point to with the word "ironic" which derives from the taste of blood in the mouth (iron), I believe. Irony is always poignant, but what is poignant is not always ironic - it can be poignant and suitable(appropriate/consistent). Poignant and surprising and nonetheless consistent with what one might expect; not contrary to expectations.

Of course, 100 years from now I'll probably be wrong, the word irony is so thoroughly misused, that by then the dictionary will have dropped the word poignant entirely, substituted "irony" and we'll need a whole new phrase to say what one word, "irony", means now.
not if the modified code also modified the boot loader.
It's weird though that people who actually cause their investors to lose money go Scott free because of connections and to my understanding shkrelis investors all made huge profits, one going so far as to say it was the best investment of his life.law is law but clearly there is something wrong here.
Doesn’t homomorphic encryption allow for this?

http://ieeexplore.ieee.org/document/7255226/
Visa may well spend only $0.10 on a $1000 transaction but given that the total cost to me is $30 (either directly, in the case of a foreign ATM withdrawal, or indirectly through merchant fees), there are many use cases where crypto is currently more economical from the consumer's point of view.

If banks and payment processors were more competent (like maybe processing transactions on Sunday) and less greedy, crypto would be a lot more useless.
The attack is that you force Apple to update the OS for a person’s device w/ evil firmware. Then you crack the device by guessing the pin in a brute force manner. Then you unlock the data from the HSM with that guessed pin.