skysight-inc/HackerNews huggingface dataset:
My guess is the plaque and "professional photos" are a way of demonstrating that adequate and appropriate levels of attention have been paid to detail - and also politely but firmly making the statement "now be nice and just fix this."

So yes and no.

It will probably depend on a given recipient/vendor/repairer/whatever values making a fuss of the customer over plain technical competency or not.

For want of a better want to articulate this, I've just realized that it probably happens all the time for people with tons of money to like "helping" with things, and cause irritating damage in the process.

(And that's not including every-day micro-manglement in some large proportion of work environments everywhere in the world... or the client horror stories everyone has...)
Would I be willing to pay the pennies a day that free services get from advertisers on my behalf? Yes.

Would I be willing to pay 10x-1000x times that for a half dozen $10/mo subscription? No.

The problem is is that (lack of) apathy is a strong signal, ripe for price-grading, and boy do they price grade!
No. Just No. This is no different than the bank bailouts that inspired the creation of cryptocurrency. Is Parity too big to fail? If the answer is 'yes', then It's ime to convert all your ETH to ETC.
I look forward to people doing this and putting the photos and (presumably) video online!
This is absolutely the right way to think about this. However if you have options the situation is different. There may also be tax considerations.

Another variable is whether your personal effort materially affects the outcome for the company. If you think your work will dramatically increase the value of the company you may want to own more stock ... presumably though if this is the case it's already reflected in your compensation (and maybe part of that is stocks/options as well).

The way I tend to think about this is that if you're working for the company you're already invested in it to some degree so from a diversification perspective I'd tend to want to own less stock of the company I work for.
Why would one use ReactOS over Wine? I read this page: https://www.reactos.org/wiki/WINE, but it didn't really provide an answer.

I understand that ReactOS doesn't require Linux as a dependency, but is that a significant win?
https://blog.wealthfront.com/sell-employee-stock/
That's a problem with at-will employment law though, not government jobs. Government job security should not be considered compensation.
I guess my only followup would be are these "techniques" more akin (in broadness) to ResNet, or to Dropout? (to use an area that I believe we're both familiar with)

In other words, techniques that are broadly applicable to the field, or techniques that maybe spawn a family of related techniques, but appear to be useful only in a specific subdomain.
The (Data Science) Notebook: A Love Story
> A prime example is the American public's irrational fear of terrorism, which translates to pouring unfathomable amounts of tax dollars into the unending "war on terror". Meanwhile heart disease/cancer silently kills 1.1 million Americans every year.

The same thing could be said for the gun control narrative being pushed by the media and politicians. If gun deaths are classified as homicides and using CDC numbers, they account for less than 1% of deaths.

However, looking at the same data on the site for the Guardian and NYT, it looks like the wild west out there and homicides are the leading cause of death next to cancer.
Wine and ReactOS are practically sister-projects at this point that share a ton of code.

ReactOS does replicate the NT Kernel, so in theory (if it ever gets there), ReactOS would be able to run Windows Drivers. IE: the "real" NVidia and AMD Drivers or any other kernel-level drivers that exist in Windows land.

These days, AMD (and even NVidia) have decent Linux drivers. And WiFi drivers have Windows->Linux translators as well. But full compatibility to any Windows binary (including device drivers) is certainly a noble goal. There are a lot of little hardware devices that are written for Windows only (ie: specialized medical equipment, CAM / CNC Mill programs, etc. etc.) ReactOS would allow a smooth transition to Open Source if they achieve their goals.

------------
EDIT:
It should be noted that there are a ton of Windows OS-level details that Microsoft does much better than Linux too. IE: I'd argue that Microsoft's security model (SIDs + ACLs) is superior to Unix-style Users + Groups. A large group of open-source developers who strongly understand the low-level internals of Windows is certainly a good thing in any case.
Statistically parachuting is not all that dangerous. You're about as likely to die from running a marathon. https://en.wikipedia.org/wiki/Micromort
Also, the article does state what Hadley's take on the question is:
"As Wickham defines data science as “the process by which data becomes understanding, knowledge, and insight”, he advocates using data science tools where value is gained from iteration, surprise, reproducibility, and scalability. In particular, he argues that being a data scientist and being programmer are not mutually exclusive and that using a programming language helps data scientists towards understanding the real signal within their data. "
A Space Engine That Could Make Flying into Oribt Commonplace
This is misguided. The social graph isn't owned by any singular person in it. It is a 3-way agreement between the 2 parties and the intermediary. It is certainly possible that people wouldn't consent to their connection to the individual to be shared outside the network where the agreement was struck. This kind of thinking is what caused the Cambridge Analytics scandal. Obviously startups would like it to be shared since it is so valuable but the privacy implications are too onerous. Even the author covers up members of his social graph as he knows they may not like him to share it.

https://www.dropbox.com/s/rde26cxcwaan311/Screenshot%202018-...
Ask HN: Best resources for side-project security?
Good day HN,

I'm sure everyone's been there with their side-projects, and I'm wondering what good resources are available/highly recommended:

I'm looking at a potential side-project, that would necessarily involve collection of private and potentially sensitive data from people who use it.

There are lots of articles available on how to (basically) secure a web server, XSS, password storing, encryption at rest, etc, and I have some idea of what to look out for. It is, however, very broad, and you generally need to know the issue exists, before being able to search for it. Ideally, I'd like to cover as many bases as possible before launching, to make sure everything is as secure as I can make it.

Are there books/courses/websites/etc available that takes a top-down approach to website/service security, that:

1] At least points out areas of concern

2] Provides an indication of current best practices and tools

3] Lists technologies/services/providers that are inherently more secure than others for projects like this

4] Provides links to further resources

5] Anything else that I may have left out here.

Thank you!
To me it's obvious that centralisation benefits from having a simpler master-slave architecture. This makes centralised systems easier to control, update, etc. As only one part of the system controls the rest.

Conversely, decentralised systems have no master, so decisions are relatively harder to make in the system.

However, in reality centralisation is harder to scale, due to the bottle necks on the central parts of the system. Decentralisation can be theoretical easier to scale, as bottlenecks don't occur as easily.
How will Apple's move to Arm change web development?
How do you think Apple's move to arm will change web today's standard web development workflow?
Simply wonderful! ReactOS is really needed...
"Introduction to Cybernetics" is technical and very much in the spirit of CS. A lot of what gets called "cybernetics" tends to be kind of "fluffy" and I personally avoid that stuff. I'd recommend Norbert Wiener's "Cybernetics: Or Control and Communication in the Animal and the Machine".

https://en.wikipedia.org/wiki/Norbert_Wiener

https://en.wikipedia.org/wiki/Cybernetics:_Or_Control_and_Co...

And "Behavior, Purpose and Teleology" by Rosenblueth, Wiener and Bigelow:

http://pespmc1.vub.ac.be/books/Wiener-teleology.pdf
That was the joke. But in reality it would probably be a piece of cake if it was a new car and you had access to all of the custom tools. An older car with frozen bolts, charred head gaskets, etc. is a different story.
That's a good comparison. In general, closer to Dropout.
I think op means micro-g

Soo on Android many non basic features are enabled through Play Services.
It is basically a huge library from Google that auto updates itself.

Chromecast is a good example of a feature delivered entirely through play services.

Google login also works that way.

Many apps leverage Play Services in some way. It is common to check your play services version at startup and ask the user to update them if they are out of date compared to what your app targets.

Micro-g reproduces the Play Services API and tries to deliver an open source equivalent to some of its features.

I don't really buy the argument that Play Services nullifies AOSP in any way but it is interesting to see another alternative (amazon also has a similar project) that is open source.
Zero config Wordpress Gutenberg blocks
Why Leading Crypto Devs Don't Work in Silicon Valley?
That seems probable but also misleading.

Play Services is choke full of features, so it tends to be very high in the battery useage list.

Replacing it with MiniG that uses the same API with way less features can only decrease battery consumption.
Quick answer: China does have a romanization system called pinyin for the Mandarin dialect which is quite accurate as long as you know the tones. Problems:

* Pinyin can't be used for other dialects, meaning someone in Guangzhou won't understand written pinyin.

* There are only something like 400 sounds in Mandarin, which means there are a lot of homonyms which makes pinyin not suitable in certain contexts.

* Switching a highly literate society with more than a billion people to a different writing system would be a massive undertaking.

The Vietnamese made such a switch from Chinese characters to a Romanization system based on Portuguese, but at a time when literacy in Chinese characters was relatively low and a colonial power (France) dominated the country and its bureaucracy.
Where are things getting worse besides China?
I think one of the reasons decentralisation makes better decisions, is that every node has equal say in the decision.

Whereas a centralised system may not ignore a lot of the nodes when making a decision.
“In Theory There Is No Difference Between Theory and Practice”
https://countercomplex.blogspot.com/2011/10/algorithmic-symp...

http://4klang.untergrund.net/
It probably can’t hurt the value more than the price of the engine itself. It’s not like a kit car, where you have to worry about the entire body and drivetrain, it’s one (very critical) component which can be yanked and replaced or rebuilt. I suppose if someone really borked it, it might hurt the value of the transmission as well?
Neural Style Transfer: A Review
With the US Court of Appeals for the Federal Circuit ruling that API's are copyrightable I wonder what type of impact it could have on open source projects, such as ReactOS, if the copyright holder ever decided to take action.
Hydration is key. Staying hydrated has the side benefit of forcing you to get up to use the facilities, and in turn force you to move. During layovers I try to walk as much as possible.

I like to try and sleep as much as possible.

One thing I’ve learned recently is the business class lounges are really nice for long layovers. Consider paying for a lounge pass even if you are not flying business class is you have a long layover.
>on GNU/Linux

that sounds so strange to me.

Why target the desktop instead of web/Android/iOS ?
The submitted article was https://blog.dominodatalab.com/data-scientist-programmer-mut... with the title "Data Scientist? Programmer? Are They Mutually Exclusive?"

Since it summarizes a talk, we changed the URL to that of the talk, in keeping with the HN guidelines' request for original sources (https://news.ycombinator.com/newsguidelines.html).
What I’ve learned from full-time remote pair programming for a month
Such a great article, during college I made a simple simulation connecting 40000 Izhikevich neurons in a squared layout, which generated some neat behaviors [1] - your article helped me understand better what was happening there. However I still find myself curious about the visible patters that emerge, would be great to have an article covering the dynamics of multiple neurons.

[1] - https://vimeo.com/25477585
How does a hack like this work? Is the device somehow connected to the Internet, the attackers take over the device, then since that device has access to the casino network, the attackers could then see anything that wasn't secured on the network?(basically anything that relied on the network being secure for their security?)
I think for any system with user generated content, abusive usage will be an enormous (possibly intractable) problem for completely decentralized systems. It is an enormous problem for centralized systems as well, but it is a bit more tractable because there is a controlling entity that can set and enforce policies. Advocates of decentralization largely seem to see this as a feature rather than a bug. I think that's short-sighted.
I am just curious what led him to his conclusions. He made a very nasty comment about a group of people and gives no justification for why. I cannot seem to find out why when Googling either. Is it not okay to ask someone how they came to their conclusions?
That's a shame; but perhaps I can understand why? The get-rich-quick, or how-I-got-rich stories that bubble up to the top nigh daily are intimidating as hell, as is the discussion similar to such that abounds around here.

I'm not a fan, and I apologize for contributing to it. I'll try to be more thoughtful in the future.
This exactly.

I work at Google and it astonishes me how surprised people are when I tell them I use autosale, the company program where your stocks are sold immediately as they vest.

They always ask "Don't you think Google stock is going to go up?" And I always reply that yes I do think it will go up but

1) that's not the right question to ask, you should ask whether it will go up more/less than anything else you could invest in with that money

2) My future compensation, both in terms of stock and salary, is already heavily tied to Google's future performance, so I have even more incentive to diversify compared with someone who doesn't work there.
The Bitcoin Standard – a critical review
And this is sort of the problem. In order to overcome freeriders subscription prices are always exorbitant compared to the ad revenue. I can't afford even 1 dollar a month for every site I visit, I could however almost certainly beat the cpm price those sites earn from ads... But we have no way to ensure every one pays and we have no way to distribute even if we did.
It was already a thing in Windows Vista - at least in Enterprise, you could download a "windows xp " compatibility package, right click on any application and start it in windows XP - it would silently start XP in the background and render the app the same way as a native Vista app, while running on the XP kernel in the background. I have no idea if it exists in newer versions of Windows however.
They must've meant AROS http://www.aros.org/
What's the point in doing this for MS? There's no money in it and they'd need a serious team backing it. And by no money, I mean at scale - there are going to be small companies needing something like that and there are going to be huge companies. Huge ones already got a public offer of "pay an increasing tax for XP support" and likely a private "this corporate deal is possible" if they're important enough. The small ones put together, I don't think could collectively fund ongoing xp support.

If anything ReactOS picking up those small companies is beneficial to MS by keeping them in the MS ecosystem.
Things like uber pool & friends is something that is hard to do efficiently as a dude with a few weeks. While airbnb is a fancy ecommerce website ;).

"Airbnb is just a fancy ebay CRUD app for rooms, anybody can code that!"
It’d be interesting to see this updated 20 years on. Microsoft giving away OS’s. Apple making money. Linux powering 90% of the cloud. Unix/Linux in nearly every phone on the planet. The command line and batch processing re-ascendant.
Ah, thank you for that info.
Don't waste your time.

I completed the challenge last month and didn't even hear back from these guys.
Japanese does use it, but it's rare: 吃（ども）る to stutter
Just thinking out loud here, but is it acceptable to think that neural networks resemble UDP and not TCP?
Visualising irrationality with triangular squares
Ok but that's just the definition of fear. There's no reasoning behind those feelings.
Thanks for your response! It sounds somewhat similar to the mechanism I use albeit mine has a bit of a weird twist to it .

It sounds strange but my goto method is visualising my negative sate in my head as an "alter ego" of me but more messed up (think hobo + zombie-ish) and trying to either talk rationally to this person. Sometimes I get a good discussion out of it or sometimes it results in a fist fight. Either way, the outcome for me is I get closure out of it.

I did say it was strange. :)
How long did it take for Windows 95 to be developed? It would be an interesting contrasts between Enterprise and Charitable development.
Life gets a lot better when you start running Win10 security.

IE: Win10 can run the password manager service on a separate VM now automatically. Hell, you can start new version of Microsoft Edge in a clean and isolated VM, requiring the attacker to use a hypervisor zero-day to pwn your box. And since the Microsoft Hyper-V hypervisor is often running through UEFI secure boot with assistance of the TPM modules on the motherboard, and because the Hypervisor has very few services running (really: any service is in its own VM), its a much, much harder attack surface to go through.

https://blogs.windows.com/msedgedev/2016/09/27/application-g...

Security features that add convenience (ie: group policy allows admins to automatically open websites in "Application Guard" mode) helps a lot. When the user literally only has to wait ~5 to ~10 seconds to boot up a clean version of IE isolated inside of a VM (separated in a RDP session), its much easier to have widespread security throughout a network.

I mean really: think about the security model needed to pwn AppGuard + IE. You either need to pwn the RDP session (unlikely, but hey its possible). Or, you figure out how to escape an isolated VM, when said VM has virtually all applications locked out. I saw a security demo of AppGuard recently. You can't run cmd.exe, you can't run powershell, you have zero permissions inside of your VM. If you somehow escape the sandbox, you STILL have to break through a hypervisor to get to the user.

Its way, way WAY easier to do "proper security" with Win10 + all of the virtualization tricks (AppGuard, Credential Guard, Device Guard). The modern Win10 security model is beginning to be immune to even kernel-mode exploits.

-----------------------

With that being said: WinXP has security problems with modern Win Vista+ because that's the edition where Microsoft decided that direct-hardware access is a BAD IDEA for standard usermode applications.

WinXP allows any user-mode application to directly talk with the hardware. Win Vista+ does NOT allow it. And that broke a ton of programs (old controller hardware, printer drivers, etc. etc.)

Fixing security issues causes compatibility problems.
I run a business that helps digital agencies and web pros get more leads through highly targeted email campaigns. Email is in my profile if you are curious how it works.

www.rncld.com
Now we are grown men, we don’t run like Usain Bolt, so subterfuge and collusion have become our weapons. Eleven months of the year are spent planning. Collaborating with a friend is where the fun is — we can spend hours discussing approaches.

I love that, and unrelated to tag it brings to mind my experience or multiplayer games. When I was a a late teen I was terrifyingly good at shooters, my reflexes were very quick and I got into a some that was hard to beat. As I got older that reflexive edge, while not gone, isn’t a match for today’s teens. What I have however is a kind sense of game flow, likely patterns of behavior, and how maps work. I’ve become old and sneakh and mean in other words. Where I sort of brute-forced wins before, now I finesse them.

Getting older isn’t all fun, but the ability to be conniving with more experience is a real pleasure. Strategy takes the place of force, and it can often be more effective.
That was my guess as someone who has worked places where database access is restricted to a whitelisted set of ips that includes the internal network.

Take over the thermometer and you can send requests to the database as a whitelisted ip.
What the article doesn't mention: IoT devices are harmful not only because they are vulnerable. They can be used to collect data on users. Every enterprise aims to get as much profit as possible; collecting users' data and selling them later obviously gets you more profit than not collecting.

Why would a thermometer need to connect to the Internet in the first place? It is absolutely unnecessary. The software could be installed on a server in a local network or even inside the thermometer itself.

I think the reason why these devices require an Internet connection is that vendors just want to lock user to their servers and collect "anonymous statistics" from them.
I hope this makes sense:

It's not so much for people wanting to make new 'instances' of a visualisation. It's more for people wanting to make new 'classes' of visualisations.
Remember, however, that's there's nothing about "real" money that intrinsically bestows upon its users some set of legal rights. Traditional currency users have legal rights because the legal system has had enough time to evolve to handle them properly. A lot of current crypto systems don't specifically include mechanisms for recovery of funds (and, as you point out, many of them claim this shouldn't happen) but that doesn't mean it's not technically possible somehow.
I'm sorry.. What is clm? A mutual fund? Is that their dividends?
How to solve the slow discharging problems of round sieve? – AAREAL
The rationality of irrationality in the Monty Hall problem
Right, it's persuasion in both cases, but what people are being persuaded to do, and the degree of effectiveness, appears to be different enough now that it might be worthy of a public discussion and perhaps some policy changes. That's my interpretation anyways.
Ask HN: Will Tim Cook step up now that China is banning LGBT content?
Or will he simply be silent and bow down to Apple's shareholders?

Reference: https://mobile.nytimes.com/2018/04/15/world/asia/china-gay-ban-sina-weibo-.html
NEO will not be fully decentralized. First of all, it is transitioning to Delegated Proof of Stake, which by design relies on a set of trusted third parties to establish consensus. For reference, the entire purpose of the original Bitcoin blockchain design was to obviate the need to rely on trusted third parties.

Second, its implementation of DPOS will have a centralized gatekeeper which approves who can run for the position of delegate, after verifying their identity and that they are a legal entity.
Vista and 7 had a well known bug where a contextual window would stay on screen forever, until you changed the resolution or logged out - I think Microsoft commented on this officially, saying that fixing it would need to be done somewhere low at the kernel level and it's simply too much work. I think it was resolved fully in 10.