skysight-inc/HackerNews huggingface dataset:
Some folks are curious and have learned about deep internals, but after 10 years of actually producing production code and never using them, expecting them to pull it out in a 35 minute "technical" interview is the problem.

If your company hires based on a technical interview that everyone says is not representative of the work that is done, you are not hiring right.
For ultimate protection, add HTTP Public Key Pinning (HPKP) as well.

Warning: this is only to be used by experts. Otherwise, your site is going to become permanently/long-term inaccessible by the browser if you screw up just once.
You should grab a high quality compact camera - something like a Sony RX100.
"In the PATH."
Reverse that a bit more: self-inflicted acute pain overrides/inhibits hunger.
Started looking a couple of weeks ago and it's hard to not get some emotional investment (if that's the right phrase) after putting some effort into a cover letter. That's even with the knowledge that one is likely to be rejected for most applications - so it feels like I'm draining some capital for each of them.
But why would we spend precious time personally tutoring our children when we could use the earnings we would forfeit to bid up real estate in neighborhoods with good schools, where our children can compete for 1/30th of the attention of somebody who probably doesn’t care about them all that much?
I would be wary of using this service in a place like SF where smash and grab is so prevalent.

Basically thieves will follow Amazon delivery trucks and watch where the packages get delivered.

http://www.sfweekly.com/news/authorities-hustle-to-curb-s-f-...
On the other hand, pushing people to choose fish over beef/pork/corn starch would cause healthier populations, and might be easier than convincing people to become vegetarians (especially people in food deserts that subsist primarily on fast food).

Then again I'm probably just contributing to first world decision locking here lol
The service was being used for exactly what the government was presumably paying Confluent to deliver -- the ability for EBT beneficiaries to see their balance. If Confluent can't deliver on serving customer data to customers, they have no business holding that contract.
This was a really interesting article. I've worked with researchers who try to defend a small but statistically significant finding that just doesn't seem likely to be real, and this provides a statistical explanation for my skepticism. The p-value mentality is deeply entrained in a lot of researchers, though

The challenge for journal editors seems very real. There's another group that deals with this challenge of interpreting the validity of significant findings for a living, though: biotech VCs. A lot of times trying to reproduce the work is their best way of addressing this, and often the first work done by startups is to try to replicate the academic work. For some other heuristics VCs use to assess "reproducibility risk", see here;

https://lifescivc.com/2012/09/scientific-reproducibility-beg...
The problem is I would never use Uber, but I use Lyft all the time. Other people probably have other limitiations and that's why a generic smartphone works better for the general use case.
I've never understood this semantic point of statistics.

When used in English, the word "accept" literally means "fail to reject", and has no more implication than that. Do people making this point use a different definition of "accept"?
> If we follow your explanation, then the probability of having the disease is indeed 99%.

This is not correct; the probability of having the disease is unknown. He didn't say what he meant by the test being "99% accurate", but that doesn't mean you can just make your own assumption.

Note that in your more precisely specified scenario, when the test has 99% reliability, it is perfectly true that "99% of the time the test gives a correct result", which immediately disproves the claim that, if we follow that definition, the probability of having the disease given a positive test result is 99%.
Why does it sound dangerous? (Genuinely curious, it looks like it could be a very useful tool in certain situations)

I've never used it, but it appears to operate in read-only mode by default[0]:

> -w

> Specifies that the file system should be opened in read-write mode. Without this option, the file system is opened in read-only mode.

[0] https://linux.die.net/man/8/debugfs
I like the self assessed property tax idea, although presumably if someone wants to buy your property and you are not ready to sell, you should be able to "correct" the assessment and pay the back taxes (for the year only) in order to discover the true price.
Looks like that just calls make-comint-in-buffer eventually[1] with some fancy stuff to make sure it connects to the same jupyter server as being used for ein. Not sure I see a lot of utility there if I'm just wanting to run a jupyter REPL next to a regular code buffer or e.g. org-mode.

[1] https://github.com/millejoh/emacs-ipython-notebook/blob/cfd0...
> This is only true if the undefined behavior is guaranteed to be reachable.

Nope. It's true if the UB is possibly reachable.

See: https://blogs.msdn.microsoft.com/oldnewthing/20140627-00/?p=...
The recent piece I saw on HN estimated that fishing lines and nets made up ~45% of the waste in the Pacific.

Edit: link - https://news.ycombinator.com/item?id=16654524
The idea seems exactly like Electroneum.
> Many times a candidate regardless of age is stuck in one tech

Because companies themselves don't understand that the full stack developer, from kernel work to UI is a real thing, ie. you can easily transfer competence from one tech to the other.
It isn't so much that there is no "truthful link", it is that everything is linked to everything else to some degree and the mathematical models they use for the null hypothesis are just "defaults". These assumptions are almost always violated. The statistical tests detect that, and are providing "true positives".
I don’t have to imagine that society since they already exist and are called social scientists.

More seriously you do make a good point which is all scientists lie on a spectrum from always generating true hypotheses, to always generating false hypotheses. Scientists in different fields tend to lie more to one or the other of the extremes. My experience is the observational sciences are more shifted to the always false end than the experimental sciences.
I never understood why people took p-values seriously. They never seemed to mean anything of use.

Whenever I brought it up around other academics, no one seemed to want to comment on it. Maybe they were afraid to admit they didn't understand a topic that's apparently important to publishing? Anyone can follow the formula to make a p-value, but there's no requirement to understand its meaning.

I'd love to find their use, but I still haven't found it.
Get an iPhone, use Safari, and turn on automatic "reader" mode . You'll get everything you actually want.
What website? I only saw a white page. (I have Javascript disabled)
DNSSEC plus CAA today would let you tell Let's Encrypt "No thanks, automation is too dangerous for my high-value names". If the hijacker fakes the answer, DNSSEC fails, Let's Encrypt says "DNSSEC failed, no issuance". If the hijacker allows the real answer, Let's Encrypt says "CAA says forbidden, no issuance".

I posted in response to pfg's comment above a mechanism that high value targets could choose, which is modelled on how Facebook behave today but (since we're proving a point here) more extreme. Make a deal with a CA, forbid all other CAs from issuing.

The other thing about Let's Encrypt is that they wouldn't be a good target for such an attacker because they are seeing the world from more than one place. You specify particularly a global BGP hijack, but those are hard, which is why this wasn't global. Tricking just, say, the original San Francisco office of Let's Encrypt doesn't get the job done.
I think the most productive way to look at it that for NAT/NAPT/cone NAT to work, a necessary prerequisite is a default-deny inbound firewall policy and stateful connection tracking.

Once you have that, layering on NAT is possible. But the security implications were already addressed before you get to that point.
>> He had an ability to arrange things in his mind exactly as he wanted. To me, that made him easy to work with.

This was nice to read.
If the DNS servers providing that message are hijacked due to BGP, the hijacker can simply not serve that notice and the registrar doing the lookup would never see it.
This is my approach as well. Ask really easy questions and get more complicated as they do well. I also try to increase difficulty in line with the strengths espoused on their resumes. If they are fantastic with databases, I might make sure the problem can be solved well with a database oriented solution.
Fun stuff. I've got a key chain with an 80186 die, and a couple of the binders from Microprocessor Forum when they had dies on the cover. The features on those chips are "huge" compared to these things. I suspect a die using one of these processes that was big enough (say 100 sq mm) would just look like a mirror with chromatic interference lines running across it.

This announcement also bookends nicely with the first home made IC one (https://hackaday.com/2018/04/24/first-lithographically-produ...)
It wasn't intended as a swipe.
The problem is the same as it's always been. C made no guarantees about a specific behavior in some cases, but people learned that a specific compiler and platform combination exhibited specific behavior in those cases, so took advantage of that to write code that used that exhibited behavior. Then the chickens came home to roost as the platforms added new capabilities and the compilers changed, in completely spec compliant ways, mind you, to take advantage of those capabilities.

There seems to be a lot of C code written not to spec, but to empirically observed behavior in the wild. People writing "incorrect" programs that function by happenstance isn't new, and the assumptions made when they were written were never true, they just happened to conform to (wrong) expectations for a while.
Bare mysteries.

Bare as in raw, foundational, etc.
Care to share what claims you were skeptical about?
I went through the same thing. I was taught the same half-assed BS statistics with all the wrong interpretations and was surrounded by people just following along with that.

Still, it was a point of duty/honor for me to figure out what these statistical results meant. How is interpreting results not a key part of a scientists job? I guess if you don't want to bother learning to interpret results then you can do science by either being a lab tech or theorist.
Pardon my ignorance, what is "modern ssh access management" ... Is there a toggle on an OS to enforce this lease-mode mode ssh, like say on Ubuntu 18.04 LTS.

... Or are you speaking about some niche ssh key usage paradigm such as a apart of a custom keyring authorization access system for short term client usage to a service.

thanks.
> Motives are mostly irrelevant

They are relevant enough that the prior poster felt the need to smear them.

> if the effect is the same

The claimed effect is, at this point, purely hypothetical and indeed runs contrary to my experience.

> An easy switch would be to convert take homes to onsite work.

Generally speaking, an onsite task like you describe seems like a reasonable choice for a company to make. However, this strikes me as worse for the affected groups that reaperducer was concerned about:

- It requires scheduling an even larger fixed block of time outside one's normal job/life responsibilities. A take-home assignment at least allows for flexibility for when you work on it. It strikes me that time-poor candidates would appreciate the flexibility.

- It would no longer be a "blind audition". When I've reviewed take-home assignments, I don't know anything about the candidate except that the code. It strikes me as a good way to resist unconscious bias from seeping in.
Start with mashvisor.com to get a good feel for what areas with fit the stragetgy(ies) you have.
Actually, a compiled Linux kernel is on the order of ~5 MB. A minimal root filesystem adds another ~50 MB to that. It starts to get bloated once you add kernel modules, drivers, etc.
It is very confusingly worded. People nowadays often use it the same as "upside".
I've been confused by this word before and this is what I found when I looked it up (http://grammarist.com/usage/upshot/). The dictionaries still seem to only have the older definition but I've personally run into the newer definition more often in the wild.
> there's no requirement to understand its meaning.

This is a feature, not a bug. The fact that the p-value has nothing to do with whether or not the hypothesis is correct is intended to force people to think for themselves rather than using math as a substitute for logic.
If you see it as a sacrifice, yes.

This can help a lot of people for a long time.
Yahoo fined $35M for failing to disclose cyber breach
It's well known what p-values show. But they are, in practice, used as a gatekeeping mechanism in academic journals in many fields (including mine). Worse, getting p<0.05 is informally seen as a measure of practical significance, rather than simply as one statistical test amongst many passed.

So yes, it is something you learn in introductory quantitative methods classes. But I don't think most researchers understand just how much it matters.

Also, a key R package for producing regression tables of coefficients for journal articles is called 'stargazer'. Given the unwarranted focus of many readers on those indicia of 'significant' results, I think it's well named.

I currently have the opposite problem. Given that I work with very large online datasets (N=1M or so) everything, including the random noise, is statistically significant to p<0.05. It really is effect sizes or busy at that point.
Is the barrier for you species difference?

For example, medical insights provided by Nazi scientists, and to a lesser extent Japanese ones, were provided by tests on human subjects with often fatal results.
Welcome to the club...
Those are at least a little fun, though.
U.S. environment agency proposes limits to science used in rulemaking
I don't know why people keep submitting these Reddit-tier stories to Hacker News. They aren't thought-provoking and don't lead to quality discourse. Go to r/news or r/politics if you want to talk about stories like this. As long as you (collective you) keep submitting stories like this, we (the ones that want to maintain Hacker News' unique culture) will continue to flag them into oblivion.
The population curve disagrees with you.
Sure, but I'm not assuming such weird scenarios.

You're supposed to have your emergency fund completely built up before you save for retirement.
But hadn’t the pingers started to develop adaptations to ocean life? And both the diggers and the pingers would have a hard time generating novel adaptations because they were severely population constrained (smaller population = lower total generation of mutations). And anyway, 5000 years is enough time for subpopulations to diverge, but it’s not enough time for subspecies to emerge.
If your margin is 35, you are going to go out of business unless you can find a way to create additional revenue streams. Your customer lifetime value is likely going to be less than 100, if that. If you sell a million customers (which I think is a very difficult number to reach with this semi-niche phone,) you are going to still be struggling over the long term. A 10% margin is not enough. One misstep wipes out your margin. Also with each phone you sell, there will be additional support and warranty expenses that likely haven’t been added to your unit cost.

If wish you good luck of course, but just be aware that building the phone — that’s the easy part: sales, support and the software — that’s a lot of “stuff” that costs significant money — an expense that continues past the shipping of the actual device.

There are two ways to win in the phone business- market share/volume or profit per unit. You are also competing against established manufacturers with essentially a barely-deferentiated product and, given your margins, customer acquisition is going to be very, very tough.

If it were me, I’d work on a completely new OS — I’d build an entirely new thing rather than just something marginally different — and ostensibly, marginally better. A generic phone with a different flavor of Android — do you really want to go up against the Samsung’s and Huawei’s?

No disrespect intended — I hope you succeed!
"based on ... (mumble) ...builds on ... learner's existing knowledge " (https://proto-knowledge.blogspot.com/2011/11/building-young-...) is a key part of any such system. A hard part, since it requires building a map of the student's 'database'. Quizzing without being too intrusive. And secured.

(Easier than in a classroom. Typically faced with 2-dozen or more students, the teacher has little idea what curriculum each student has been exposed to. Assessing the group wrongly means having to go back and start all over. And the only possible solution still has to be general, not tailored.)

This has been and remains a wonderful dream application. If it's for all, not just for the privileged, bravo.
How Fasting Turned into Silicon Valley’s Latest Obsession
I think the op is asking more than just about bookkeeping. Sure outsource the tasks, but the OP still needs basic understanding of the problem.
The REPL opened with org-babel-switch-to-session has been really buggy for me. Has it worked for you? Could just be because I'm using it with non-python kernels, which isn't well supported yet in general as far as I can tell.
Use cloudflare. Unlike Amazon, their DNS is free and it is supposed to be among the fastest.

Then again, DNSSEC is useless against a BGP hijack where the nameservers for the domain are replaced with malicious ones.
Seems to be the author's awakening to that reality. I think that makes sense. Money provides you guardrails akin to the guardrails institutions like school provide.
The post is about a confusion between the question that p-values address ("how likely is this data to have come from the null hypothesis?") and another very different question ("given several findings that were unlikely to have come from various different hypotheses, how many are likely to be spurious?").
Amy Fleming looks at the scientific evidence for restricted eating (2015)
ICs have just looked like mirrors for a while now.

See this shot of a 14nm Vega die on the left and 28nm Fury die on the right: https://www.techpowerup.com/reviews/AMD/Radeon_RX_Vega_Previ...
Because NAT is an abominable hack with significant technical and administrative overhead.

My home is not intended to be a public space. But, it has a unique address, just like any other bar or restaurant in the area. Being able to locate it with a unique identifier is valuable, even if I don't intend for my living room to be publicly accessible.
No, and for numerous reasons. Capacitors are relatively large and bulky. The specifications for SSD size doesn't leave a lot of room, and the type of surface mount electrostatic capacitors which would be needed are both expensive and take up a lot of space.

Even in the enterprise market, M2 form factor SSDs rarely have these capacitors, because they don't really help. They are more common on PCIE-card devices.

The on-disk/flash format that these drives use has a journaling system much like modern filesystems do, so they know if blocks were not fully written. This feature alone almost completely negates any need for

I have committed patches and code to UBIFS and I am very familiar with how modern flash filesystems work at the hardware level. Backup caps are just not really needed.

PS: The double exclamation point and whiney-blamey statement really added to your immature hyperbolicity.
Consider a program that reads two numbers input by the user, divides them, and prints the result. Can it really be that because it's POSSIBLE for the user to enter zero for the second number, that the compiler is allowed to replace this program by one that removes all your files (even when the user DIDN'T enter zero)?

The C standard writers may have been unwise to specify undefined behaviour the way they did, but they weren't THAT crazy!
The Google search you want to do is "SSH certificate authority". There's no one thing; it's just a trend in high-end SSH management.
EPA chief signs proposal limiting science used in decisions
> If the compiler can prove that you perform undefined behavior, isn't it legal for it to move it to the start of the program and literally produce no output?

Yes, it can! (Or worse, like making it erase all your files.) But that's only if it can prove that the program will always reach the undefined behavior. The path a program takes can depend on its input, command line parameters, contents of the filesystem, or even the phase of the moon (literally: the program can ask the operating system for the current date and time, and branch on a value derived from them). If a program will only reach undefined behavior once in a blue moon, the compiler is not allowed to output an executable which will fail when ran on dates which are not considered a blue moon.
+1 this is what will keep the doors open. Don’t spend money you don’t have. Don’t expect to have it when you want it.

The company can be profitable even if the customers never pay up. So at the end of the day cash is king.
Indeed that's the party line. Surprisingly Verizon who traditionally hasn't locked them will being doing so for a limited they say to combat fraud. See:

https://www.theverge.com/2018/2/12/17003690/verizon-phones-l...
>“how safe is it to conclude that H_0 is not true”

I would just take "very safe" as a principle, there is even the truism "all models are wrong".

>"the difference between two groups is less than a certain amount or greater than a certain amount"

You are ignoring a lot of the model being tested here (eg, normality, independence of the measurements, etc) and only considering one parameter.
Proposed Legislation:  Social Media Privacy Protection and Consumer Rights Act
Unbelievable travesty of justice.
>That's true, but what about the software engineers who do build world-changing stuff?

Yeah I can get behind that. I work in biotech/cancer diagnostics/prognostics and we could definitely afford a higher standard, especially around the core stuff (e.g. the CV/algorithms people, but also the typical IT end of things.)
My fear is that in 10 years time, we will have learned to hack Bayesian factors.
Blind audition is BS, because you're never ever comparing apples to apples, and frequently because the problem set is little like how you actually work. If the end goal is to find someone who can do the work well, be a pleasure to work with, and contribute to your organization or company in a meaningful way, we have not optimized for that. We've optimized to hire kids out of college who are experienced taking tests, or for people who have worked on the exact same stack you've worked on.

You will never be unbiased in a hiring process, because the bar you set is not universal, and always be biased in some way. Being "as blind as possible" isn't the right metric, and we shouldn't hire based on it.
> The proper role of data is to update our existing beliefs about the world. It is not to specify what our beliefs should be.

Create the schema beforehand, I get that. But feature extraction does work, providing models from data. Sometimes takes much time to analyze and understand the models.
But we would probably be more concerned with 5k years ago if humanity were highly developed enough to have left us an extensive collection of writing. Heck, Hindus and Jews still care about writings (orally transmitted before the alphabet) that originated 3-4K years ago.