skysight-inc/HackerNews huggingface dataset:
Get a heart rate monitor. Read up on heart rate zones and calculate yours. Biking is easier to maintain than running so if you have a bike use that.
I don't see why they could not implement a pricing strategy to pay for the RAM used by keeping the lambda hot.

After all this is just keeping it "loaded in memory".
Author of the repo here. I'm training a capsule network right now, will report back on results in the README in 24-48 hours. My hypothesis is that capsule networks are vulnerable as well, but we'll see by how much.
Does debian support USB installs yet? ;-)
Islamabad United vs. Peshawar Zalmi 4th Match Live Streaming PTV Sports Live
Hi Patrick.

You write interesting things, but I think that your language is too passive / indirect and full of big words. It'll be easier to understand if it was more simple and direct. Just my two cents.
There's been Tahoe-LAFS (https://tahoe-lafs.org/trac/tahoe-lafs) for a while, but I found it a bit too difficult to install and maintain.

If I'm not mistaken all but your last points are addressed by it.
Yes. That's incompatible with my workflow. Projects are generated on the fly, each new project is automatically connected even if I don't want it to be. Having to manually disconnect each project is a pain. I just want a big "disable this plugin" button.
but do students actually "learn to learn"?

is there any strong evidence that higher education improves some general ability to learn new concepts and skills?

you do get more efficient at preparing for academic assessments but does this carry over to other areas? Probably not.

Is it a justification for four years of education? definitely not!
Given that DNN are deep, what a one pixel attack means is that one pixel change propagates through the map of features: one pixel => 0-level-feature change -> one 1-level feature change. So this attack relies in weak features that can easily propagate to next level of features. Hence, to defend against this attack the model should put a threshold on the ratio (sensitivity of features)/(number of pixels) and avoid features with high sensivity to easily propagate to the next level of the DNN. If features are not linearly related to input set, then correlation is not a measure of feature sensitivity and has nothing to say about the full DNN effect of such change in a pixel.
>I'm curious if the attack adds doubt, in that the prediction algorithm is _close_ to truth but gets confused (likelihood of horse slightly less than dog), versus incorrect certitude (the horse is definitely a dog).

While I can't speak for this attack in particular, there exist algorithms that can fool a neural network into generating high-confidence incorrect predictions for images that are visually indistinguishable from ones on which the network performs just fine. That's the biggest issue with these adversarial images.
Being a software engineer should be about what you do, not which degree you have. In the (French) company I work in, one of the lead devs doesn’t even have his baccalauréat; that doesn’t make him any less 1- talented and 2- a software engineer.
I get it from my home all the time, but it works from the office, or mobile phone....
The bottleneck is automation.

Tesla is still producing cars completely manually.

This is why Musk bought the automation company Grohmann. But after he demanded they work 100h weeks (instead of their previous 35h weeks), and said unions would be unnecessary, almost the entire company quit and left.

That's the current bottleneck, automation of assembly.
That is the whole premises of language OSes, type safety over MMU.

But it is as you say, given enough memory to manage or the usual performance tricks for GC/JIT, and the MMU will be needed.
This is a community project, useful for UBports project's convergence goal.

Popescu Sorin is collaborating a lot with https://ubports.com/
It did since Sarge https://www.debian.org/releases/sarge/i386/ch04s04.html.en
Yes I have done that most of the time. I have thought a bit about this and feel that it should be true for most of us for software industry to scale. If you are in a solid tech company this will always be the case. Anything which can be used generally will be made into a framework and then most engineers will be expected to use that. This helps the company immensely as it can now hire top 1-2% who are extremely good at making these frameworks or guard-rails and the rest can be lesser quality devs who will do the plumbing. An example: writing multi-threaded programs and reasoning about them is hard so why not make a framework which takes care that developers only write business logic and integrate with various APIs.

This is now true in most companies now as Open source projects are doing the same thing. Look at Apache Spark for example which makes writing distributed programs for Machine Learning, ETL and Analytics much easier for developers.
Not true in Finland.
Finding Out About Cash Back Credit Cards: Good or Bad Idea?
Yep this is mainly part of UBports project.
That's a good point, but won't do anything for adoption.

Bitcoin will be supported by stores and websites only if enough people use it, and people will use what is most convenient, not what is most secure or most private.

As long as people don't care about privacy, Bitcoin won't succeed. And if people ever care about it, half the users of HN will be without a job, considering they're almost all working at Google/Facebook/Amazon/startups selling private data
Even simpler than your description, just plain reference counting, which is why it is usually the first GC algorithm many reach to.

Eventually coupled with a basic tracing GC like you describe for collecting cycles.

It won't win any performance awards, but does the job.
Yep this is mainly part of a community project called UBports.
4chan doesn’t have natural defenses against “normie” invaders that other sites have (moderation, identity), so it developed a potent meta-defense. Anyone who takes the site literally will find themselves extremely confused and upset like your parent post. In the old days it used to be gore posting to make newbies flee. It’s defenses are constantly evolving as paid online agitators try to control the message there (as they have successfully done on other more straightforward platforms that limit free speech yet supposedly have far more resources to prevent shilling). Turns out free speech is very powerful indeed.
Now I know all the buzzwords for how it's run, but still not what it actually does.
On the flip side of this, many of the most capable and intelligent people I have worked with had no degree (or a non-CS one, e.g. fine art is particularly common), and when I try to think of times my algorithms, OS, networking, maths, or even data structures courses have been directly beneficial to my daily work, I have little to show.

Those all had knock-on effects and have indirectly made me more capable and confident in my analyses of performance or occasionally in troubleshooting, but it is very rare that I spend a day doing something deeply theoretical, and it is conversely very common to spend days hitting my head against walls with configuration, integration, or versioning of build/deploy/test components and dependencies. My CS theory is no good there, only methodical troubleshooting and asking for help in IRC are effective, and anyone can learn that by doing.
Well, at a certain point, if this rate continues, people will pull their money out, fulfilling your prophecy.
What would you be inclined to do if you were making something truly unique, something that required amazing attention to detail and custom effort?

Make two.
They buy the chip from Nvidia directly.
"My friends will want to hear all about it."

you sure about that?
The Ethereum wiki is wrong on this point in my opinion.

Even disregarding grinding attacks, the value diverted to coin purchases ultimately has a cost in goods and services. It diverts economic activity to non-economically productive activity in cycling capital into and out of deposits.

I think Proof of Stake could potentially be better than Proof of Work, but the point about cost being equal across validation methods is correct in general in my opinion. There are specific circumstances where it is not true, like if producing the mining resource creates negative externalities.

Where I think the article is wrong is in neglecting other aspects of consensus algorithm efficacy, like the potential security benefits from Proof of Stake totally aligning the incentives of owners of mining capital (which in the case of PoS is the network coins) with the success of the network.
The one-pixel attack works for pretty much any machine learning model, not just one single neural network.
It gets blocked if you have tracking protection enabled on Firefox.

The resource at “https://platform.twitter.com/widgets.js” was blocked because tracking protection is enabled.
Is not just showing off Unity 8 as an alternative, this is part of a community effort to port Ubuntu to mobile devices.

See ubports.com
> You may want to stop arguing about your fantasies and try talking about something that has basis in actual history.

You may want to start taking your own advice. Try here first:

https://www.google.com/search?q=operation+barbarossa

> It is very much uncertain if the numbers would be much different.

No, it's extremely certain the numbers would be very different, since we know what the Nazis had planned for Eastern and Central Europe. So when you've finished with the above link, move on to this one:

https://www.google.com/search?q=generalplan+ost

> arguments are only about by how much exactly

Each author, by pulling a different number out of thin air, is saying the other author of the same book is wrong. Which would be laughable if some people didn't pretend take such nonsense seriously.

I say "pretend" because I don't believe for one second anyone using those numbers sincerely believes them, any more than they sincerely care about any of the actual, genuine victims beyond using them to score political points.

> Are you going to play the well-tired card of "but Stalin (Mao, etc. etc.) were not real, proper communists?

No, I'm going to say, again, that if someone wasn't killed by Communism they should not be counted as being killed by Communism.

What's interesting is that most of the victims of Stalin's purges were "proper Communists", a fact that right-wingers who cry crocodile tears over them always forget to mention for some reason.

> Taking the last grain, including seed grain, from, peasants (e.g. Prodrazverstka [...] is exactly that -- forced famine.

Prodrazverstka is not at all that:

Bolsheviks borrowed the idea from the grain razvyorstka
introduced in the Russian Empire during World War I, in 1916.

[In 1918] the reserves of grain ran low, causing hunger among
the urban population [...] In order to satisfy minimal food
needs, the Soviet government introduced strict control over the
food surpluses of the prosperous rural households.

Lenin believed that prodrazvyorstka was the only possible way
to procure sufficient amounts of grain and other agricultural
products for the population of the cities during the civil war.

Prodrazvyorstka allowed the Soviet government to solve the
important problem of supplying the [...] urban population

https://en.wikipedia.org/wiki/Prodrazvyorstka

> No, should I?

Then why accept any of the different numbers, that the authors themselves can't even agree are accurate, in the Black Book of Communism?

> (sigh)

If you're Jewish then just say so; don't imply it, whether it's true or not, to try and score points in an argument.
Yes, and has for ages.
The graphs show a clearly exponential grow rate. No idea how long it will keep growing and when it'll start to plateau, but it does not seem to be going to suddenly, exactly this month stop growing. If they keep it like this apparent 10-20% increased production/week in 12 months they will be producing 3000-9000 cars/week.

So yeah, IF (big if) they can keep it growing at the same exponential rate it'd take around 65-34 weeks [0][1] to deliver 500k cars from now with 10% and 20% growth rates respectively:

[0] https://www.wolframalpha.com/input/?i=(1+%2B+1.2+%5E+x)+*+10...

[1] https://www.wolframalpha.com/input/?i=(1+%2B+1.2+%5E+x)+*+10...
If they are talking about AWS Lambda-like stuff or just using 3rd party API services.. there are very obvious advantages to doing things that way over managing containers or VMs. Of course lots of people will still be using containers and regular VMs for quite some time just because it will be more practical for awhile for their use case or just out of familiarity.

But anyway I think that eventually the real 'serverless' will be peer-to-peer systems like Ethereum smart contracts, IPFS, dat, etc.
This is cool, but doesn't seem to work properly.

I tried it with the passwords "password", "test", "123", "12345" and it didn't report any of them as compromised, which they surely are.

EDIT: It's because it's including a trailing endline before hashing every password. This is a serious bug.

EDIT2: Latest version in the repo does work.
While you may be right, I think this could just be a classic example of Hanlon's razor.
That is what gets old about arguing against GC languages on micro-controllers.

Of course there are use cases using 8KB PIC micro-controllers and such.

On the other hand something like ESP32, has a dual core with 512KB, way better than the Amstrad PCW 512 used to be.
Watch the video it's a 101-style how/what/why etc.
How to document a Python API
It's true that a lot of places rate a degree highly, and some won't look at you without one, but it's perfectly possible to get a job as a software engineer in Europe without a degree. I started as a developer 15 years ago, without a degree. I'm an architect now, and only did my degree a few years ago (did it for myself, not because it was a requirement for my job).

I imagine getting a visa to work in the US without a degree is all but impossible; for work immigrants, most countries require you to have a degree, unless you have some incredible, sought after skills.
Show HN: Mitmproxy 3.0 released, an open-source console-based proxy
You used the word PV a lot but never said what it means. For anyone wondering, PV means photovoltaic.

https://en.wikipedia.org/wiki/Photovoltaics
Also the Lisp implementations in the 60 and 70's were even more constrained on IBM mainframes.
What Happens When Your Town Lands on the Hate Map
If I remember correctly, in the "Mastering Chess etc" paper the structure of the neural net was mapped onto the chess board itself. The movement range of different pieces was also hard-coded into the network architecture -for example, there was a vector encoding "queen moves" and another for "knight moves" which taken together cover all possible chess piece moves. The encoding of the moves was not used to generate moves, per se- I don't remember the details very well but that was a separate module that I believe fed moves to the MCTS algorithm. The move range was encoded as a kind of constraint, to keep the network from exploring unproductive moves.

So the network didn't have to learn anything about the rules of chess, shogi or go and indeed, it did not. That knowledge was given to it directly. As far as I know, this is the done thing with most game-playing systems, especially ones for classic board games that have usually very simple rules that are easy to hand-code (so that there's no real need to learn them from scratch).

It would be interesting to see if it's possible to machine-learn the _rules_ of a game (i.e. given a move, recognise it as legal or not). A quick scan of internet search results confirms my recollection that most published work in game-playing agents focuses on learning how to play well, rather than how to play in the first place (indeed "learning to play chess" is used to mean "learning to win" in many publications).
AI Saturdays – Empowering Anyone to Be Kickass in AI
I have not tried it but I imagine this would work fine.

Project
Project/venv
Project/src

And then have the whole project as a volume. Then your editor can see the same files as you have in the container.
Summary of The Case for Learned Index Structures Paper
I’d think that inheritance makes oo closer to Aristotle’s categories.
I think this is a totally fair point of view. It is the flip side of optimism. Forgive me for bashing the obvious in the head here, but this point of view is entirely necessary and right within its purview. You can't have optimism without pessimism, no matter how hard you try.

These two points of view provide balance. You have to decide where you stand relative to this pendulum. Humanity will protect what it finds valuable. Valuable in what way will be the decision. We can make moral judgements now, based on where we stand in this moment, but the future will make its own decisions.
I am a happy syncthing user too.

I use Restic https://github.com/restic/restic to cover the encrypted backup use case
I would think around 60.000 dkr. pr. month is a good salary for a senior developer in Copenhagen. Look at Prosa or Jobindex for statistics on this.

The wages in Copenhagen are lower than in Silicon Valley. I was talking about the general shape of the graph.
Can't argue if many of them are inside jobs for early retirement.

"Hacked" is such a convenient word to cover the story of any losses.

That crappy vulnerability could just have been placed to make people convinced how it was "hacked".
It stood stuck at 0 for a while for me as well, before eventually updating. It's pretty crazy to see the amount of resources needed to load what is effectively a static page. I guess I shouldn't be too hard on a joke website but it's a bit symptomatic of the current state of the web these days.
Keep in mind the data is adjusted for inflation, I'm not sure why the OP chose to do that.
Hi there, a sector in which web scraping is quite important is real estate. I have written an open source scraper for that sector (using Nokogiri and Ruby on Rails):

https://github.com/RealEstateWebTools/property_web_scraper

Take a look and let me know what you think. I have a few ideas about how to monetize. Get in touch if this is something you would like to work with me on ( ed at propertywebbuilder.com )
I thought so too until I actually used one. The experience is worse than I ever imagined possible (sure there is room for improvement). Additionally the two you mentioned only support ERC20 tokens.
hummm this is no really true in my experience. Many people are takers and not real givers.
This kind of attack relies on a low margin DNN, see (1), a low spectral norm of the input-output jacobian matrix guarantees good generalization error. So a one pixel attack exploits a weak eigenvalue (small absolute value) of the jacobian matrix.

So to create a one pixel attack, compute:
1)the eigenvalues of the jacobian of input-ouput matrix,
2) takes the the smaller eigenvalue lambda_1
3) compute or approximate the function lambda_1 = f(input)
4) compute j = argmax_{i=1..n} d(lambda_1)/d(input_i) at the point in which the spectral norm is maximum.

So to create the attack change the j-pixel in the points of the training set that has maximum (or high) jacobian matrix.

(1) https://arxiv.org/pdf/1605.08254.pdf
Typically a student must maintain good academic standing and apply specifically to a co-op program to attend, and then an administrative department within the school will run a class on interviewing skills and resumé-building, before helping to coordinate a matching process between students and participating companies for work terms.

In many cases, large companies have special days where they'll come onto campuses to do interviews, and they may take a significant cohort of students each semester. There are often rules like, "you have 24 hours to respond to an offer and may only reject one offer" to ensure good faith been parties and high match percentages when some companies may be more prestigious or slow in their process.

Students then spend 3-16 months (this depends on the school's academic timing and the company's own structure -- 4 months in summer is most common) at a company and if it's a good company, they'll be given real work, strong mentorship, and deep integration into a team, and often students near graduation will get offers of employment directly at the end of their term.

There are also usually very tedious written work-term reports to fill out as a bureaucratically useful artifact of the process. They're typically expository essays of topics like "what I learned at $company", and everyone hates them.

Students will have 1-4 (usually 3) terms out in the real world over the course of their time in school, and graduate with meaningful practical skills and usually a taste of what's available to help assess opportunities.

It's on the whole a great system for a lot of people, particularly those who are using university to increase their employability.
"absurd amount"?

Huh.

FYI Trader Frank's has the Pound Plus Bar for IIRC about $5.

Probably less fancy than the 85% one, but cheaper.
Oh wow. Can't believe I missed that. Thank you so much! Will fix right away.
What it felt like to visit the most tech-centric Olympics ever
> 2. For most users, the domain name already leaks in the DNS request, does it not? That is, SNI provides no less security.

It does but, in many cases, that DNS request/response is not traversing the Internet. At $work (ISP), ~95% of our customer's DNS requests (and the associated responses) originate and terminate within our network [0]. They would not be visible to a passive attacker listening to, say, our upstream network links.

> 4. For any IP address that doesn't require SNI, even if the certificate didn't give away the site: the IP address is sent in the clear at the IP layer; it should be pretty easy for an adversary to build up a mapping from IP->DNS for the vast majority of popular domain names.

This is mitigated by the fact that most (public) web servers host more than one web site. While you may have hundreds of A RRs pointing towards a single IP address, there's usually only a single PTR RR for a given IP address (and the PTR often resolves to something like "www14.example.com", giving away no additional information about the sites it hosts).

Just by listening passively, you could obviously determine that a user visited a web site hosted on 198.51.100.42. If there are 100 web sites hosted on that IP address, however, you know that the user visited one of them but not necessarily which one.

> Alternatively, the attacker could just form a connection to that IP and see what site responds.

I'm not sure if it still is but it used to be common practice (on servers hosting multiple sites) to configure a "default virtual host" that simply served up a blank page. This site would only be served up when connecting directly to the IP address (i.e., with a missing Host: header in the HTTP request) and would provide no useful information.

In my experience, though, a web server hosting a single site is often configured to respond with that site whether the correct Host: header is sent or not.

[0]: This is for customers who use our caching, recursive DNS servers. It obviously does not apply to those who use, e.g., Google's public DNS servers, or other DNS servers outside of our network.
The Internet Doesn’t Have to Be Bad for Democracy
Inside the fight over the sugar conspiracy
Recent GNU* C Library Improvements – Clear Linux* Project
I've sent a pull request.

EDIT: Which you've now merged :)
Term for people born in the early 80's who don't feel like millennial or Gen Xer