skysight-inc/HackerNews huggingface dataset:
My honest opinion is that this is vacuous. I dislike being that critical but this is important. First, I don’t think it’s meaningful to segregate this list into divisions by funding milestones, and I don’t think it’s productive to have so many bullet points crowding one page for attention. Second, and more specifically, I think this list leaves a lot of the heavy lifting out of the problems to the detriment of solving them. For example:

> Encrypt all employee laptops and phones

You have two sub-problems here. Either you take endpoint security very seriously (which becomes its own much more important bullet point), or you trust employees to encrypt their devices on their own. This process should be entirely automated. My concrete criticism: mention this problem alongside endpoint security.

Accustom your team to locking their computers

This is another endpoint security problem. You should automate this enforcement across all employee computers. Even if people are fully on board with it conceptually, they will err because no one can have Constant Vigilance.

Centralize and archive your logs

Yes, but how? Provide examples. You linked to Elastic, but why not talk about tradeoffs between the Elastic stack and others? How about the tradeoff of paid infrastructure versus full open source? A build versus buy discussion is very useful here.

Evaluate your website’s basic security

There’s a messaging problem here. Your checklist doesn’t recommend bug bounties until post-Series A (!!!), partly because you have no qualified staff to review reports. Precisely how are your engineers reviewing “basic” security without basic qualifications? What defines “basic?” If they have the time and initiative to learn how to do this step, why can’t they do other steps you reserve for Series A or beyond?

Frankly, most of this list could be meaningfully reduced to prioritizing automation, endpoint security, formal processes and finding the right people to tell you your unknown unknowns very early on.
I remember a friend's grown adult brother was learning Python and just entering into programming and I was commending him and encouraging him and what not as a professional software developer. I did a mental dump of resources to use that could help him out in his first months of struggle and what not. At one point I told him to post questions to SO and I literally watched his body language become perturbed and he cringed with a tinge of fear at being brutalized over there. He immediately said something along the lines of "no thanks those guys seem pretty brutal over there", something like that. I thought he may have been a bit too sensitive but over time I've seen some harsh things on the site and could see where he was coming from.
I'm glad to hear that big companies other than Samsung are in the running to develop MicroLED displays. MicroLED promises a huge improvement over all other emmissive display technologies in terms of quality and capabilities, if manufacturing can be figured out.
But it may be what the grandparent recalls receiving
Suppose someone has divergent interests. Maybe they are interested in computing and hunting. If they want to discuss things and cultivate a following in each of these communities, should they be required to tweet both from the same account?

What if there isn't a lot demographic overlap? Twitter doesn't provide any kind of tooling that would allow one to follow only the relevant tweets in a given account. This is especially relevant if the interests/communities at issue not only don't have a lot in common, but actually spend a lot of time at odds, which is the case for many interests. It'd be impossible to have some followers from such groups who wanted to hear about the one thing without simultaneously alienating them by talking about the other thing. Computing and hunting are good examples because your average cypherpunk's opinion and worldview is much different from your average hunter's opinion and worldview.

I have personally started a handful of different Twitter accounts intended to engage with different communities. None of these perform any automatic activity at all and I basically use them for a couple of days and then give up because it's too much effort (recently, more because Twitter blocks the accounts almost-immediately).

More accounts than people is absolutely not a reliable indicator that "you have robots registering" (especially when businesses etc. are expected to register). That may be a better metric if Twitter provided useful filtration tools, but even then it'd be shoddy.
I think that only applies to middle class chinese with formal resident permits. Migrant workers from the villages, which make up much of that 12 million, still have to leave their kids at home. Anyways, shanghai is a bad example of equitable education.
Seems like the initial deployment of the microLED's into a smartwatch makes some sense.. But unclear how this would make any sense for a large size phone display. The sheer quantity of LED's that must be placed properly on a glass substrate would be quite high.

However, the promise of microLED is pretty impressive if the manufacturing can be pulled off.

Basic idea is small high performance LED's of Red, Green, Blue, that are of the inorganic variety -- so much higher performance than OLED. They can be larger fill factor since they are diced from a wafer and can be basically any size -- vs. OLED where each color is limited in size due to the manufacturing process -- basically due to the size of pin-holes put in a mask that hovers above the substrate surface (called a fine metal mask).

The power, brightness, lifetime, and stability all likely would be quite high with the inorganic microLED's.. However, the cost is the challenge for sure. Its essentially equivalent to buying a bare wafer with millions of red, blue, and green LED's -- per each display. So say you want a 4kx2k display, well, that is 8 million LED's. If each one costs say $0.001 (a tenth of a cent), well, you have 3 * 8000 USD, so $24,000... so... clearly they need the LED's to be really, really, really, cheap -- say 10,000 per dollar.. which in the world of LED's would be super crazy crazy crazy cheap.
Don't forget deforestation, which severely amplifies the effects of climate change and the water table, for obvious reasons.

In Australia this is a serious environmental issue and often the cattle industry is fighting to remove or stop land clearing laws being reinstated [1]. It's a disgusting industry on so many levels IMO.

[1] https://www.theguardian.com/environment/2018/mar/05/global-d...
The comment about meltdown is wrong.

> You had to patch your containers and your instances/servers, but you didn’t have to patch Lambda functions.

This was right after talking about Fargate. Let's compare what you do and don't have to patch in Fargate / Lambda:

Kernel / host OS: Lambda and Fargate patch that for you without any work. This is the more important patch.

Container bins/libraries: some programs, like Chrome, which had JIT, could be exploited to read memory of that same process. In the case of lambda and fargate, you only needed to patch containers/zips that contained such programs.

If you were using something like 'serverless-chrome'[0] in lambda, you would have to update your zip file to get Chrome's workaround for meltdown. If you had a fargate container with headless chrome, same deal. It's practically identical in the cited case of meltdown.

There are many cases (like glibc or openssl vulnerabilities) where containers need to be patched, but lambda can patch it for you ... but in the case of kernel exploits, fargate and lambda can patch equally well.

[0]: https://github.com/adieuadieu/serverless-chrome
Dissenting opinion: I think the blocky version looks better when not zoomed in. The sample on the left is less smoothed, and doesn't look as airbrushed. It looks better when zoomed in, but not when are regular zoom.
DevOps, Deming, and Pulling the Andon Cord
I know very few startups that have or had a CSO/CISO. I would assume that most startups that have one, are in one of the following fields security/fintech/healthcare/education. Typically it falls on the CTO at early stage startups to ensure that appropriate security measures have been taken
Apple has the money to build everything thmeselves. And something like screens that can give competitive advantage they are likely to produce themselves
> It’s big enough to get through the engineering builds [and] lets us keep everything in-house during the development stages.

A tertiary benefit might be that controlling manufacturing of screens might reduce leaks as well.
If you want to argue like people do on stock shorting forums, please keep it there. I literally only wanted to provide an additional datapoint about measured sales.
They use real data to create artificial data. So, real data is still more useful.
good incentives analysis, pretty interesting, I'll have to meditate on this one.
"When I told a group of kids my eyes were naturally blue (they thought I wore colored contacts), they backed away and whispered, “Scary.” The first time I went to the grocery store, my appearance alone caused a small child to burst into tears."
What are "optional network layers"? Do you have any examples? Thanks!
I really doubt the US population is any more or less gullible than any other population and the ability of social media to be destabilizing is not uniquely American either. There is no mob of critical thinkers, it's always just a mob.

https://www.nytimes.com/2018/01/14/technology/facebook-news-...
https://www.theguardian.com/world/2017/nov/14/how-400-russia...
> Reducing operating costs at pure profit is already at walmarts disposable: what they could do is reduce the quality of products (worse chain of supply, worse produce, worse items) which is in practical terms also a tax in consumers.

What you're missing is that the tax itself may give them leverage. If there is suddenly a 20% tax on retail goods then the cost of commercial properties may go down, because the retailers need to cut costs to cover the tax and the property owners will have no customers if the retailers go out of business, so it could be the property owners who end up eating some of the tax. They may have to lower rents enough to make retailing out of their space profitable. And the same for any other operating costs the retailers have. They may be able to pay lower wages because all retailers would have to do that in order to be profitable, so wages for retail employees go down across the board and the employees eat part of the tax.

And the same applies to offering crappier service so that the customer eats some of the tax. It's possible for customers to prefer that to higher prices. And when the tax causes that to happen across the board, the customers may have no alternatives so the store may lose no business. Customers still need bread, now all the bread in every store either costs more or tastes worse, so the customer picks their poison and the store stays in business one way or the other.

> They really are distorting.

Oh, a tax really will affect two different businesses differently. But the distinguishing factor isn't the size of their margins. Profits are just a different type of cost -- the cost of raising investment capital. You may be able to get the investors to eat the tax, but they may also walk away, just like a customer or supplier might, and then you're just as out of business.

The true distinguishing factor how easy it is to get some combination of involved parties to eat the total amount of the tax and still be willing to do business. In other words, whether the total surplus is more than the amount of the tax.
If I may make a suggestion, and I'm not sure what your use-case plans are for it -- maybe this isn't feasible for you, but if you absolutely MUST use Twitter, do not install it on your phone. Keep it to just the desktop website version. My reasons for suggesting this are three-fold: 1) Twitter at it's core is, IMO, nothing but a distraction. You will be less productive and less interactive with real people in real life. 2) The Internet Fuckwad Theory is in full effect in the Twitter-verse at all times. Depending on your personality, it may very well make you more depressed/mad/whatever -- it's not going to change your daily life for the better at any rate. 3) Twitter tracks you & harvests your data, and if you install it on your phone they will have much more data about/from you -- and we (as in, everyone on the planet) do not need any more tracking/spying/snooping/etc.
You only have to pay taxes if you realize a gain for the year. Or you traded the same asset over and over within a 30 day period, called a wash sale. In a wash sale, you can't deduct the losses.

So unless they were really reckless they will only pay on the gains they made. No, I won't shed a tear because they have to pay taxes on gains.

Now to the techies that ended up with a large tax bill after the dot com collapse, they got the bill because they exercise their options to buy shares in their respective companies. Those were gains because they got to buy the stock at a highly discounted price. But later the shares lost all their value, but they still had the recorded gains to deal with. In many cases, they really got shafted because they got the stock but at no time were they able to sell any of the stock that they got and was recorded as a gain. So the gains were all paper gains. I suspect that the IRS had to make some concessions in that situation. But that's only a guess on my part.

Another part of their pain was that many borrowed money to buy the stock. When the share price collapsed, they had the taxes plus the cost of the loan and worthless stock they could not use to cover either. Ouch!
Because they learn from mistakes and can make it better the next time! That happens everywhere; except JS world (at least with npm) is very, very new (relatively speaking). Also now there are many more devs than when the older languages came out, so the experimentation is a lot wider.
C-LSTM: Enabling Efficient LSTM Using Structured Compression Techniques on FPGAs
Curious how this affects visual quality indexes like SSIM.

(Also, come on, it’s 2018, we need to retire Lena)
Your decision not to reproduce on Malthusian grounds amounts to nothing more than a selection effect against people who care against overpopulation. If you're happier without kids, by all means, enjoy it, but don't imagine you're saving anyone.
US-CERT: Russian Government Cyber Activity Targeting Critical Infrastructure
When trust and finance are not issues, not even considerations.
Funny video – Situations hurmor
That is misleading because they are counting their hospital’s revenue in the pie. That only matters if the hospitals are generating profits the rest of the university can use. Otherwise, the hospital is revenue coming in and costs being spent with no relation to the education arm of the system.
Alpha NT didn't become popular because of price and compatibility. DEC wanted to sell Alpha in serious workstations and servers and only made some half-hearted attempts to target the consumer market. Meanwhile the consumer marker coalesced around Wintel and Intel could leverage that larger volume to reduce costs, while consumers were locked in to x86 for compatibility.

Dunno much about the history of MIPS but I imagine it was a similar story. Once Windows on x86 hit critical mass it steamrolled the rest. PowerPC was the exception with Apple, but even they didn't really start biting into bigger market shares until they switched. The dominance wasn't technically motivated (I know at least Alpha and SPARC had superior performance in many areas), it was economics and compatibility (and some shady dealings).
Memory Slices: A Modular Building Block for Scalable, Intelligent Memory Systems
No, that would be the CC system - Cal States are 4 years schools.
Everything Ryan McGeehan writes is amazing. All of it belongs with the very best startup security content on HN.
It's actually written in C++! wren is the scripting language on the high level, and as the site links to - later any language can be used :) I've updated the language part in the about section to clarify that.
Does one have to be outside the USA to qualify for the Entrepreneur Visa?
Does one have to be outside the USA to qualify for the International Entrepreneur Rule (IER) status?
How would IER work for someone inside the USA, like an F1 student? Would the student be able to -
1. register the company?
2. Build the product with a co-founder or alone without making any income for himself?
3. Raise funding from US investors?
4. Hire US citizens and pay through equity (but not paying himself)?
Let me clarify what I meant in my original post. The aims of conservatism and liberalism differ, clearly. Extreme forms of these dogmas still have divergent aims.

But extreme liberalism/conservatism is by definition forced upon a society, because it is extremism. In asserting their beliefs, the extremists mirror one another in means and action even if their ends differ.

As we have seen, both Fascists and Communists are capable of delivering up human suffering. In the midst of this suffering, the two groups use similar means to achieve their ends.
Is your wrapper code open source? If so, mind sharing a link?

EDIT: I'm actually less curious about the code, and more curious about how you're sharing code between different Lambda functions. Did you publish an npm package? Are you just repeating the code? Symlinks?
We (Foxpass, https://www.foxpass.com/) are a YCS15 company offering a SaaS (or on-prem) service to handle SSH key management & rotation, plus user and group management.

With our API, some customers are creating dynamic access rules (for example, an on-caller might have 'sudo' during their on-call week, but not at other times).

Like a hosted FreeIPA, but more powerful.
I remember first getting a question marked duplicate and me plugging in differentiating factors. After time I've come to not view duplicate answer as a pejorative thing but rather as a good catchall structure to bring a locus of related content close together to effectively play the role of "here's an alternate way of asking the same question". This basically expands the keywords and tags that could successfully land a questioner to the answer they seek. After all people oftentimes think of things differently, and to have multiple slightly different means of asking the same question lumped together in some coherent scope, that's a good thing.
Previous discussion on Joy Milne's ability to smell Parkinson's: https://news.ycombinator.com/item?id=10434974
The dev logs typically go into detail on the decisions I make, for the decision on wren see https://luxeengine.com/dev-log-5/ .
I use them every once in a while. The company is really an advertising vehicle. Companies use it as a way to bring attention to their product or service. They have a use so I suspect they'll be around for a while longer.
Could a DNN be thought of a continuous decompression dictionary?
Is it ever going to be possible for a screen to be a camera, so you feel like you are making eye contact while video-chatting?
Show HN: LabNotebook, a tool to monitor and record Deep Learning experiments
See also https://github.com/victorvde/jpeg2png , which tries to maximize smoothness everywhere instead of just at block boundaries.
The main features list includes “On disk persistence”. Is that what you were looking for?
There have been occasions while trying to filter results from reverse image searches where excluding both Pinterest strings and domains had no effect in my experience. (There's also the problem of Google not searching for a specific string when even double quoted but that's a different one of the search engine's annoying quirks of late).
This has actually expired now and is not available, at least through that link.
Hello, you may like to try out what we've been working on at Holistics (www.holistics.io)! We make it easy for you to retrieve and share your SQL data.

We help in 2 use-cases to address the "duplicative" overhead of writing the same SQL query.

1. Where you just need to adjust specific parameters/values in your query
With Holistics, You can insert custom variables in your SQL query to make them dynamic to address the subtle differences without repeating yourself. See an example here: https://docs.holistics.io/guides/adding-filters/

2. Where you have chunks of text that are reused across multiple questions
This can be long chunks of `CASE-IFs` or CTE/sub-queries that you use across multiple reports. You can insert a template snippet (chunks of SQL syntax for example) that can be reused across multiple questions. You can find more information here: https://docs.holistics.io/query-templates/
Once you get enough karma you can downvote comments.
Ghana teacher drawing MS word on blackboard gets real computers
interesting anecdote
What do you do when the response to a bug bounty is "yeah, we already knew about that, and we're not planning to fix it soon because the consequences aren't high"? In my experience that's a pretty common scenario for early to medium stage startups.
I think your ideal exists in backend/SRE roles.
Asthma Inhalers Fail Minority Children Due to a Lack of Diversity in Research
The most infuriating case is the reverse-image search. When I use reverse search for an image I'm trying to find a source or a complete version or context for an image flying about on social media.

And what I get is often a solid wall of Pinterest hits providing zero info.
I keep hearing responses like this about various aspects of serverless, but it makes no sense. If a lot of these serverless operations are "not any different" than various Docker operations, why should I be spending time and money to couple my application to AWS Lambda versus simply running the container myself? Why shouldn't I just deploy a container (pod) for my code if I'm already running kubernetes?

The more I hear people defending serverless, the more it feels like they're asking people to voluntarily increase their time and money costs, learn hyperspecialized and nontransferable skills, and make their application far less adaptable. All of this while accruing tons of technical debt for a pittance of some convenience.
Who remembers Digital River?
Yes, like what scapecast mentioned, the key to writing and executing SQL well is to organize and transform your data. You won't want to be running queries across large events records.

We've just published a blog post last week on some tips for analysts starting their first data warehouse project.

https://blog.holistics.io/the-analyst-guide-to-designing-a-m...