skysight-inc/HackerNews huggingface dataset:
The again, when they don't trust the doctor, they are called stupid and all kind of things.
What you describe is exactly how I learn. My parents intentionally kept me from taking meds for it. I nearly failed high school, and I dropped out of college.

I often wonder how horrible my life would have been if I had done well in school and not pursued my dreams through entrepreneurship.

I’m greatful every day that I get to live life riding the roller coaster of startup life.

My personality is well suited to the insanity and chaos often brought to this kind of life.

Had I been tempered by medication so the words stopped moving and I didn’t have to re-read I might never have learned how to learn.
Maybe it's been too long since I read this, but I feel like it wasn't adequately explained how the aliens understood the initial message. All of the sudden communication was taking place...
There are a few benefits of using something like OAuth even if you don't plan to open your API to third parties.

1. You may decide you want to have multiple first-party clients to your API. Examples would be a web site, a native client, a command-line app. OAuth lets all of these different applications call the same API once they get a token.

2. There could be security value in segmenting the user authentication into an entirely separate app with its own database - it greatly reduces the attack surface which could be leveraged to get your user credentials to attacks against your user authentication (and likely registration) app, vs your entire website and all your APIs.

3. If you decide to open up your API in the future, you have already done a significant amount of the architectural legwork.

4. If you decide to support social logins (Facebook or Google for instance) in the future, you can do so just at your personal OAuth authorization service. Your apps don't care how they get an access token, and your APIs are still getting a local access token that they understand (rather than trying to understand Google or Facebook tokens).
It only shows that the Pythagorean theorem holds for that one particular set of side lengths. A mathematical proof requires that you show it is true for all possible side lengths.

An analogy would be that I take two equal-length sticks and say "given any two sticks they will be the same length". I have an example (the two sticks I'm holding) but this does not amount to a proof of my statement (and the statement is obviously incorrect).
I remember watching a documentary once, and it kind of made the case that Einstein wasn't an isolated genius, but more like Mark Zuckerberg. Basically organizing and putting together other scientists work,then unfairly getting all the credit. Anyone seen this documentary before? Its been years since I watched it, so memory is vague.
Or Sacramento, as my dad and stepmom did when I was growing up, and as many of my friends and family continue to do.

Yeah, the length of the commute sucks, but taking AmTrak+BART gives you some downtime instead of sitting in traffic.
Is this true though?

Sure, for a casual observer, these new methods for generating videos appear convincing, but is that the right bar to judge "ability to fake evidence"?

As far as I know, there have always been more sophisticated techniques and forensics to determine if an image is doctored, and likewise for video. I've not seen any research tackling fooling those methods yet, and I would bet that naive implementations of neural networks for generating videos would leave very obvious "neural network" artifacts. Of course, this is still new technology, so it will obviously get better at fooling our other tools over time too, but as of right now, I don't think the clamoring for "all evidence can now be faked" is all that justified.
Nice to see Sokal's name come up, he's the first person I thought of when the article outlined the obvious bullshit use of advanced maths in a psychology paper. It's amazing how far stuff like this can get within a field before someone gets round to calling it out.
OneNote works pretty well as a glorified wiki in small groups.

Naturally, these days, if that's what you need why not get a proper wiki going? I do know for some MS shops the pre-paid OneNote licenses make it a tempting substitute.
That’s what makes it unknown
I don't like the fact that `var` breaks class hierarchy. I can write `List l = getList()` and then variable `l` will have only methods from `List`. If I'll decide to change `getList()` return type, it'll be easier to migrate the code. With `var` variable `l` probably will have something like `ArrayList` type and I can accidentally use methods from `ArrayList`, even if I don't really need them, tying this code to concrete class.

It's obvious that everyone will use `var` everywhere, so using `var` in one place and explicit type declaration in another probably would be even worse.
probably about the same number of basketball players, and boxers, and CEO's.

The point is, it is uncommon to reach that level in those given fields because the average person gets average pay.
25 more real-world examples of VR
Agreed, the essential piece is finding a reference to understand the security issues.

Technology choices don't replace the need to understand that (although some choices may affect the urgency through unsafe defaults).
Need money to do what? We may be able to offer workarounds if you are more specific
> malicious party

Which one? Google, Twitter, Facebook, Microsoft, Yahoo, Crazy Egg, Criteo or NSA listening on the wire?

My apologies if you disagree, but I feel that the article is borderline alarmist and I believe is written in the worst possible tone to communicate the problem.

Yup, there is a shitton of analytics products. Yes, PII is leaked and this needs to be fixed. But, no, it's not like listed parties (BTW, of which ek.aero is Emirates' own domain) are immediate threats. However, yes, this is quite severe as there are many scenarios when the data would eventually land in the wrong hands. E.g. if it would not considered sensitive PII anymore but treated as "just some analytics/statistics".

Basically, he should have patiently communicated that despite the trust in big analytic companies, private personal information still gets sent to them (mostly indirectly - in form of session links), and this may lead to accidental security leaks. Like, for example, some subcontractor having access to "only" analytics would technically have access to much more data than they are expected to have.

The article fails to do this and instead screams what's essentially boils down to "Google Analytics sees a link to the page with my passport details!". Color me surprised the support reply was not helpful at all.
Even if thousands of businesses across Europe depend on tracking users, I do not think it's enough of a reason not to fight against it, and i would be very happy if those businesses go belly up tomorrow if tracking is outlawed. A business so dependent on completely immoral, outright evil intrusive surveillance does not deserve to be kept alive by exploitation of our rights.
I think it's about values, not about physique. You can be big and nerdy and while being big can stop the most physical manifestations of social ostracization, my observation is that isn't the most painful part.

I mean, I think the other part you are missing is that a lot of us who grew up as "nerds" are socially... wrong in ways that are less socially accepted than violence. I don't think being on a sports team would solve that problem.
I don't believe a signing solution is feasible. It's currently too complicated for even a lot of IT experts, and the amount of actors involved is too large to even move to a single unified solution.

Given that as of now authenticity can still be verified by experts, it's back to trusting journalistic outlets to properly verify news and sources.
China finds ecommerce a solution for its poverty problems, but challenges loom
you can do it quite effectively outside the browser using a host block[1] list or pi-hole. my uBlock now only fires sporadically for cases I don't catch with the /etc/hosts approach (e.g. disallowing e.g. remote fonts)

[1] https://github.com/StevenBlack/hosts
No, this is an opportunity for new technology that adds additional data stream(s) to audio/video to ensure authenticity. Perhaps something like a one way hash of physical properties related to time/position and the rasterized data, in a way that cannot be faked.. or maybe a move away from rasterized data. Idk. Just brainstorming.

I’m confident there will be an innovation in this space since there is clearly a very urgent need. In fact, this could be a start-up opportunity. Maybe there is relevant academic research already on which a startup idea could be built.
Another advantage self-driving cars have is reliable range rate. Humans are terrible at judging the speed of approaching objects. But radars are great at that.
This is the reason regulation and fair competition should exist.
Further, it doesn't prove exact mathematical equality. Depending on the scale of the demonstration and the accuracy of the observations, it demonstrates approximate equality up to a certain precision. (You could also demonstrate π=3.14.)
Attention Deficit Hyperactivity Disorder. No adult there.
For what it's worth, organizing other scientists work from a new perspective and having a unified framework is the highest form of genius a scientist can achieve. That is why for example Einstein is credited with relativity rather than Poincare.
Ask HN: Where can I learn about Docker in-depth
I'm having trouble finding a good resource for learning about Docker (& Kubernetes eventually).
Most things I found are either very basic or outdated. I already know the basics (running simple containers with Dockerfiles etc.), and I want to learn about "strategies" involving containers too. I eventually want to be able to build a full dev environment, push containers (containing certain git branches) to staging etc.

Essentially, I'm looking for a good way to learn about how to use Docker in a real world-scenario.

Thanks!
If a design pattern is new, then it isn't a design pattern -- by definition :-). I neglected to say it outright, but a design pattern is a solution to a problem that already exists in code bases within different domains. The recommended number of different domains is 3 (which is why I used that in my example). The pattern is there to document the situation where the solution applies, where it doesn't apply (very important!), and to give a name to it. Some of the common names for design patterns are arguable pretty poor, although I've never actually seen dependency injected written up as a design pattern (it definitely could be).

I could go on for quite a while about specifics of design patterns (and particularly "generative design patterns" and "pattern languages"), but I think I would be accused of writing an article about design patterns ;-). I think the biggest problem I've seen with articles on design patterns is that there are a lot of articles that are written by people who don't understand them, and haven't read the original literature about them. This isn't confined to design patterns, though. I could say the same thing about pretty much everything in our industry. If you find an article saying x-famous-thing-is-crap, you can almost be positive that if you go back to the origins of x-famous-thing that it's not actually crap at all -- it's just been badly misunderstood by successive generations of anti-evangelists.
You should probably add extra bio about how you currently learn well, as the story you submitted makes it seem like you never really learned how to learn. More that you learned how to live with not being able to.
> do the same thing for things like "hippie", "biker", "nerd"

while race is not the correct term to use there, breeding two nerds or two biker isn't likely to produce another nerd or biker, while the result of breeding two people of a common ancestry has a likely outcome.

> exactly, its a made up category, i.e. not a real thing.

race is a made up category, but you can't just hand wave all of it:

> what is it about those categories that makes it necessary for you to speak in probabilities [..] you would be able to rigorously tell me a relationship between gene(s) and features.

only because something hasn't been explored in its entirety doesn't make it less convincing of an argument. beside, genetic is rooted in statistics, because of recessive/dominant expressions of traits, so you have to talk in probabilities.
Base jumping is viable from even a few hundred feet... A highly mobile aerial approach platform that could let troops parachute down at sub-radar heights before auto-piloting off wouldn't necessarily need much range to make sense as a special ops tool.

I'm thinking about mountain ranges in Afghanistan and military installations with too-obvious ground approaches. This unit looks like it could be smuggled in an SUV.
Or, there is a serious case of over-diagnoses/prescription. Much like how antibiotics were being over-prescribed in Britain.
Posted in a sibling thread already, but what about supplemental data streams related to environmental data (to verify time and position) that cannot be faked, somehow combined with the rasterized/sampled a/v in an irreversible way, or a new technology that doesn’t use traditional pixelized video or sampled audio that can’t be faked?

Surely there will be an innovation since there clearly is a need for this.
Does it make sense to back the product with a crypto token? You can sell those to raise funds
> The era of verifiability-- when photographic and video evidence could plausibly be trusted-- is over.

If ease of producing convincing fakes of X means that the era of X as convincing proof is over, then why are signatures and written documents still taken as proof?

I think it just means that things will be scrutinized more carefully from now on, and that there will need to be a stronger document trail.

> We are back to a pre-industrial age of discourse, where rumor and hearsay and anecdote dominate again.

And I definitely don't think it's as grim as this.
We will probably need AI based fake news detection.
JWT's are just special signed formatted strings with a couple of dots in the middle. I only use them for API tokens, and I don't use them statelessly, I just use them so the client knows the format and can check expiration inside it. Sure many use them to pass around signed state, but that's a choice. They're just a container for a stateful session ID for me.
This post made me appreciate being a graduate student a lot. I have many weeks like this!
Well, the General Data Protection Regulation (GDPR) will become enforceable in May (for all people in the EU).

As far as I understand, Emirates is risking big fines if they they don't fix this by May 25.
You might like http://worrydream.com/KillMath/
Or a DRM chip implanted in every human.

“Warning: the person in picture doesn’t have Widevine chip installed”.
> Food is cheaper, more plentiful and comes in more variety now.

There is more variety, with more of a spread of quality over price points. Lower quality food is cheaper, higher quality food is less accessible.

> Healthcare is much better and more people have access to more treatments than ever before.

Healthcare is better if you can get it. Yes, there are more treatments available, for some, but there are more without access.
I read to the end of the article hoping to find out what exactly the error in the math and/or reasoning was. Apart from some vague mentions of how the "tipping point" might be influenced by other factors, there was no detail. This article is largely content-free.
Reminds me of tango and cash. Is this really true? Any sources for such verification techniques?

One might think that, given low enough resolution, any form of rasterized video or sampled audio can be convincingly faked even to experts, particularly once those with the faking technology fully assimilate such verification techniques so as to work around them.
Sure, but is there a popular, modern C compiler out there that doesn't compile C++ as well? Clang, GCC, Intel, MSVC... all of them compile C++ as well as C. I don't think it's possible to have first-hand support for C and not C++ any more unless you ship your own compiler. It sounds like the issue here is that OpenBSD is shipping older versions of LLVM/Clang and GCC.
Let me assure you, this was possible in spite of, not thanks to this API. Words fail to describe how horrible and unusable it is.
Wouldn’t that end up just like what SEO turned Google and web into?
It's possible given his technical depth he was using more obscure C++ constructs which aren't as well supported.

[1] http://madebyevan.com/obscure-cpp-features/
What about just having videos be watermarked and signed by their authors as well as the equipment used?

Then you could trust their authenticity, no?
69 CSS Music Players
That won't work. It's like saying to beat AlphaGo we just need AlphaGo.

It would already be factored in. The arms race would just make the videos MORE indistinguishable from the real thing.
>If I had to guess right now, I'd say that it is more likely that the human brain has clever ways to exploit signal timings and randomness

Then why do you think it's a hypercomputer? These are all classical physical effects. What math problems do you think the human brain can solve that a Turing machine with sufficient time can't?
That's IF you all pay extra for in-flight WiFi, and assuming the plane's network link is working. (Many planes' WiFi use a cellular-based network link that has occasional dead spots. Satellite linking is only available on newer planes.)

Whereas seat-to-seat chat is free and relatively reliable.
I have made a stylish stylesheet with a similar purpose:

https://userstyles.org/styles/150108/medium-custom

But it is more focused on the writing experience.

I really love medium's editor, but I wanted a dark theme (more comfortable for the eyes), and to remove all the clutter so I could focus on no-distractions writing.

I hope you'll find it useful =)
“It’s an art form, like any other art form… I would spend time rewriting whole sections of code to make them more cleanly organized, more clear. I’m a firm believer that the best way to prevent bugs is to make it so that you can read through the code and understand exactly what it’s doing… And maybe that was a little bit counter to what I ran into when I first came to Apple… If you want to get it smooth, you’ve got to rewrite it from scratch at least five times.”
I think his passion is and always will be total immersive VR. I truly believe we are where are today completely on the back of Carmack's recognition of Occulus potential. He was just trying to be friendly and gave palmer assistance. Glad it all worked out though.
> I marvel at the creative genius that can come up with a, with any plausible alternative explanation, to be honest.

"We didn't deem it as high priority as 600 other things we think we should do in this free browser."
A short-lived opportunity for sure. This is the very definition of an arms race, amd I can't see "real" winning out over fake. Anything that can be checked can be preempted, so "real" is always one step behind, as far as the present is concerned.
There's always state. Stateless is a misnomer, in much the way that serverless is a misnomer. It typically indicates the state information is passed inlined with the request.

When you inline the state in a cookie for "stateless" operation, you are essentially operating on a (hopefully cryptographically secured) cache.

Revocation is thus a cache invalidation, and requires its own state. When revoking from a database or memory, you can simply delete or mark the record. When revoking cookies, you are going to build that state mechanism as a blacklist.

This is why OAuth lets you have both access and refresh tokens. Your access tokens can have inlined state with a short duration, such that an API can service a request without having to be bottlenecked in a database or API call against an authoritative source.

However, when that access token expires (say, after 10 minutes), the API will stop accepting it. That is when you have to use the refresh token, which goes back against the authoritative source.

You lose the immediacy of a blacklist, but you don't have to have that state distributed across your infrastructure. You instead wind up pushing the effort to keep up-to-date tokens onto the OAuth clients.
Pulse audio is OK for routing audio around. It even supports LADSPA filters through a module. So I’ve used it when playing Dungeons & Dragons over Mumble, to filter my voice when role-playing monsters (nothing beats a little reverb and pitch tuning to make the monster boss more frightening to the players) and putting music into the channel. I would not know how to do that with ALSA. But Pulse Audio uses ALSA, so...

That said, JACK is much better for routing audio through applications. And jack-rack actually lets you change the parameters of LADSPA filters without reloading. And it is easy to get a graphical mixer up controlling individually the volume from all the sources.
Or https://fable-elmish.github.io/elmish/ on Fable.io. F# and Elm are very similar.
May be it's because one of those organizations has monopoly on violence and other doesn't.
I can only speak about how my company uses Skype (which may differ since I don't know the ins-and-outs) but my conversations end up in my exchange inbox in a folder titled "Conversation History".

So at least, for me, Skype for business has this functionality.

Personal skype stores your chat history local to the device- I found that out recently when I was looking at my non-existent conversation history on my new phone.
I don't know about those studies in particular but the general replication crisis https://en.m.wikipedia.org/wiki/Replication_crisis which is most widely discussed in psychology is also a concern in economics https://theconversation.com/the-replication-crisis-has-engul...

Behavioral economics research in some respects has more in common with psychology research than other areas of economics. It is also associated with a particular ideological bent that seeks to undermine the traditional assumption in economics that people can be approximated as rational actors. While there is value in recognizing where that assumption can break down, behavioral economics is often used to justify policies or interventions that traditional economics would not recommend on the basis that people can't be trusted to act in their own best interests so their preferences should be ignored or overridden by benevolent experts who somehow are miraculously immune from the same failures of rationality that the rest of us proles are prone to.
Learning the Language of Functional Programming
I use it frequently both to talk to folks in my party who got seated elsewhere, other friends who are coincidentally on the same flight (common when traveling for conventions/conferences).

I also know folks who have arranged large group bookings (30+ passengers going to the same event) and found it useful to talk to each other.
Especially when such company is pushing legions of developers reduce their "time to market".

"You have 20 seconds to comply" says the robocop :-)
Sorry, but this seems like cartoon logic to me.
What power would knowing the word PANDA give me in this case? None. What knowledge does it give me? That the US does signals intelligence, and that someone on wikipedia/HN claims that such SI includes programs X,Y,Z, without any actual evidence.

For all I know, SJG picked a cool sounding word a 16 year old would like, e.g. SHARK, and it just happened to be an actual code word.
>why are signatures and written documents still taken as proof

I always thought this was tradition / theatre at this point.