skysight-inc/HackerNews huggingface dataset:
It probably bakes in the dependencies.

I do that on CI as well, since building dependencies often takes longer than just downloading a full VM.
I read the blog post, it shows that if you give up your devices passcode then you give up access to essentially everything on that device. It would be nice to have additional layers of security, but do you think this was done as an anti-user move to support law enforcement? I can't quite see that as being the case.
I tried to change into a morning person several times and failed each time. Eventually, I gave up.
A few months ago I moved out of the city into a small village surrounded by lake and woods. Without even knowing, let alone trying or even wanting, I turned into a morning person. I tend to wake up a few minutes before 6am every morning. No alarm needed. Awake and clear in a minute.
Must be the countrylife or what.
For us (http://fairpixels.pro) it’s actually the off-work connectivity. Slack, email, todo lists and all of the other tools make us pretty effecient and productive. But I’d love to see how I can boost social connectivity outside of ‘work’.

PS. We are hiring
Thanks. This was a superuseful suggestion. I can now Google a lot of stuff on my own.
I think it's articles like this that disprove the "insane markup" comments. There is a differentiator that justifies the increased cost. Increase privacy is not more expensive, decreased privacy is just cheaper.
> 3. What benefit does RDF in any format provide to the average web developer?

Probably (almost) none, otherwise in its 20 years of existence it would have been used somewhere. Heck, even Semantic Web scholars actually don't use it for their own personal websites...
I know that it exists but have never seen it in the wild. It's probably used by closed enterprises. If I was in charge there I'd use ejabberd, and Prosody if having less than 50 users.
I assume it's a number they chose to strike a balance between security and eventualities that create support burdens.

It could probably be user-defined, but when it comes to setting a one-size-fits-all default and offering users an option, Apple usually selects the former.
Good point, though I feel like their customer service has slipped too - e.g. allowing counterfeits to mix into supply of products is not customer friendly.
Chinese brands aren't known from protecting your data. Usually the opposite.

Android handset makers just manufacture the handset. Google provides the OS, and the underlying services for the Android ecosystem.

Apple bears both the cost of handset manufacturing, and the entirety of costs for the smartphone's ecosystem. That cost is reflected in the price, making the markup less "insane."

The Chinese handset makers in question may provide their own software, but it's typically considered "bloatware" and no where near the quality of software that Google provides.
I'd rather have this playing out in courts proceedings which are part of public record, than entirely within the US's notoriously unaccountable police systems.
I'm talking about pseudocounts (add one success and one failure) [1] or maybe Agresti-Coull estimator (add two successes and two failures) [2].

[1] https://en.wikipedia.org/wiki/Rule_of_succession

[2] http://users.stat.ufl.edu/~aa/articles/agresti_coull_1998.pd...
Everywhere in large/old enterprises. I swear they multiply when nobody's looking, and they tend to cause massive headaches when they're plugged in by the unaware.

Hence: Kill on sight.
And/or spoof a cell tower.

If they are careful with their implementation, they could protect against it. The naive way is to store the time of last unlock and simply compare that against the current time, but there are other ways:

(1) Once 7 days elapses, set a flag that can only be cleared by unlocking the device, and check that flag in addition to the time.

(2) If there is an internal hardware clock that isn't synced to real time, just count relative to that clock. You don't need to know absolute time to check how long it has been since last unlock.
Does anyone know if there are any sip, webrtc, xmpp library for flutter? i was scrounging around for one and couldnt find one a year back ago dont know whats the landscape like right now
How does mapbox compare to carto.com ?
It's off topic, mildly tedious, and yet it's somehow stuck to the top of the thread while more interesting posts are buried below it.
I would assume DFU mode would still work to reinstall the OS.
12 Graphs That Show Just How Early the Cryptocurrency Market Is
There are strict regulations regarding bank accounts.
Here's a case in Canada: https://www.ctvnews.ca/mobile/business/merchants-may-soon-as...

Badically, credit card processing agreements prohibited fees. But as a matter of public interest a lawsuit was brought and fees were allowed. This is still quite recent so we haven't seen any effects.

"Just a cost of doing business" is the point. Europe saves 2% annually compared to our system. A 2% private tax is very large.
Exactly right - it's all about your portfolio. We spend a lot of time throughout the course talking about ways to build that portfolio, and folks on the forums support each other with feedback and help on these projects.

Completing a MOOC isn't going to help you land an interview for a job, generally speaking (although if it's any good, it should certainly help you once you do get an interview!) However if you use your study time to, for example, create useful projects that you make available on github, web apps that you host on heroku, deep technical blog posts you post on medium, etc then you should definitely get plenty of interview opportunities.

I've seen many many students go through this process, so I know it works. That includes students that hadn't been getting interviews or job offers - until I convinced them to spend time building a portfolio, and then they got multiple offers from top companies.

(There are some companies - not too many thankfully - that strictly require a PhD for DL applicants. I've noticed that such companies, that focus on credentials over actual work output, seem to overlap a lot with companies that turn out to have toxic cultures. So I'm not sure you should worry too much about them...)
Some thoughts:

- This implementation is a good example of why Kubernetes ingress has been in beta for 2 years ;-). Ingress doesn't do very much, so the Kong team has had to implement a custom set of extensions to Ingress ("KongIngress") so you get functionality such as rate limiting, etc. This blog post https://blog.getambassador.io/kubernetes-ingress-nodeport-lo... covers some of the nuances of this.

- I wonder how the REST APIs of Kong are reconciled with the declarative config. Seems like this could be complicated.

- IIRC, all of the NGINX ingress controllers take the route of custom annotations on the ingress object vs the KongIngress approach. I wonder what people will prefer.

- The post alludes to intelligent connection draining with Kong but doesn't give any details. I'm particularly curious because I thought Kong was based on NGINX so wondering how Kong does it given the underlying engine.
Magic Leap Live – Ep. 001: Designing for Spatial Computing
Who is building the engine?
Young founders with zero or near-zero management experience in person, never mind remote. To a lesser degree - and strictly for small team, early stage startups - part of the journey is living it together. The whole vibe loses something when you're staying late and eating ramen together over Skype.
After $10M yesterday for Tesla shares, Musk’s stake approaching 20%
Heh, you say so. I am perennially pissed off by term 'Grab n Go' at places where one actually purchase food item.
Credit reports are not frozen by default, per gp's suggestion. That would prevent those who want to inquire about an individual's credit from finding anything out without the individual taking concrete action to unfreeze the account.
One would hope they would have a better solution than DateTime.Now - dateOfLastUnlock.
Uber expands partnership with NASA on flying taxi project 1
Yep, I did stress analysis on the nacelle. Glad you like it!
Will Google also be banning ads for health insurance companies, doctors, mortgage companies, and law firms? After all, these are crucial services, the choice of which can have major consequences! You make a convincing argument[1] that advertising rewards the most exploitative providers, so perhaps Google should ban their advertisements as well.

Obviously this won't happen. I would argue that this is because bail bond services are demonized as exploiting the poor, while services white collar professionals typically use don't get the same treatment--precisely because it's easy to demonize something you will never need as predatory and useless.

[1] Though I would dispute it: higher margin doesn't equal "more exploitative," which is why we make purchasing decisions by thinking about consumer surplus instead of about how high the producer's margins were. I might purchase a new flagship phone instead of a $150 knockoff even if the former has higher margins. Or I might purchase a cheaper, better laptop from a company with high margins (and a dialed-in supply chain) rather than a one-off build from someone who is barely covering their (much higher) costs.
No. Fuck transhumanists.
I guess because now you have no way of exploiting any bugs that might've been exploitable. Within 7 days the phone will still try to talk to others connected to its port, after 7 days it'll just charge. I assume that "power off" will also disable data over the port until the phone gets unlocked?
OCaml All the Way Down
Graybox should have anyone security conscious ensure that they and all people they care about are using custom alphanumeric passwords for their iOS devices.

Even "999999!" would be hard to guess if the domain space is unbounded.
As opposed to using the notoriously lightweight mineral we call gold...
There is no scenario which allows re-flashing a device from DFU while retaining user data. This only appears to work in typical user scenarios because iCloud or iTunes creates a backup from the unencrypted device as a first step before flashing it.
I believe you about Zoom. Unfortunately that's the only kind of information I'm ever able to get on the topic: anecdotal.

I suspect the reality is that, amongst the best-performing services, which one works best depends on network QoS details, network topology, particular client hardware / OS, etc.

For example: some conferencing software seems to have a real problem with echo cancelation, so either (a) everyone needs mic/speaker hardware that sidesteps the issue, or (b) you accept that everyone will go insane.

Similarly, difference conferencing software has different solutions to people talking over each other accidentally due to latency. One product (Cisco's maybe?) has an icon for metaphorically raising one's hand to request a turn speaking.
I would love to know their strategy. I can barely remove lint from the lightning port without damaging the electronics!
Mendix – Opinions?
I am being asked to Evaluate the Mendix platform (https://www.mendix.com) to build a new product for my company. We might use consultants to get us started with Mendix. What are people's experience? Short term vs long term?

The product is similar to a professional consulting network where you can see experts online and ask them questions live (exchanging images and chat etc..)
We[1] are a fully distributed team and also ran into this problem when we hired our first team member outside the US. There are lots of players[2][3] in the "Global PEO" market that have corporate entities in multiple countries and will handle payroll and benefits for you, but caveat emptor, these solutions are shockingly expensive. The average cost was 18% of the remote worker's salary (!), which I personally considered insane.

We ultimately went with a company[4] that had a different model where they connect you with a local PEO in each market and present a common UI on top of all the disparate local PEOs so that you get a company that specializes in just that country, but a common UX no matter how many countries you work with.

I liked the model, and more importantly, it was a fixed fee and much less expensive, and they published pricing. Disclosure: We made the decision to go with them, but haven't started working with them yet.

[1] https://gruntwork.io

[2] https://www.globalization-partners.com

[3] http://globalpeoservices.com

[4] https://papayaglobal.com
And segwit and schnorr signatures would be "hard won technical innovations"?

Segwit is an overengineered solution forced into a soft fork unnecessarily. Schnorr is another overengineered solution which only helps the segwit transactions to a very small degree. It's a great disservice to call these scaling solutions since their purpose are different and they are so very bad at them.

> a block size increase is still a tool kept in reserve.

Until we see +$20 fees? That sure didn't stop some of the Core developers from celebrating the success (yes you read that right!).
Might I suggest a little research, e.g., reading http://cs.unc.edu/~fabian/course_papers/PtacekNewsham98.pdf

This points out how WAF/NIDS is just a speed bump for a serious attacker.

You may conclude that they don't really 1) remove attack surface 2) Unclear if they really do this, and if they do what value there is 3) See the papers for detail on the differences 4) Zero cost to purchase, but what cost to maintain, run, keep up? 5) see #4 6) even if you have a large web farm?

This paper was writen 20 years ago.
Do you really just need one number to initiate transfers in Europe?

US banks do have IBANs, but you still need an account number in order to finish up the process.
As in, Amazon says it's a Prime item, and Amazon says the seller is the manufacturer, but when you receive the item they've sent you a counterfeit item.
A personal library of 390,000 books? That's quite the collection. I wonder how much that person paid for those books?
We tend to deal in small amounts of gold, not human-sized statues of it. These stones are enormous.
What Astronomers Are Learning from Gaia’s New Milky Way Map
"Well, call me a rebel, but I don't stretch my strings and I will go one stage 30 minutes after putting on new strings"

Which would probably work.

Back in the day I would break strings on stage. Yes, stretching strings helps a lot in that case.

Of course you can only do so much of it before the rest of the band has milked the specially rehearsed for just this occasion "intermission music”, but it really does help.
Agreed. Long back my office used to have 'canteen' for food. But nowadays it is considered downtrodden and 'Cafe' is used in place.
It's never helped anyone understand the technical material and it's caused at least one instance of confusion (https://stackoverflow.com/questions/48445031/why-would-it-be...), that's reason enough. Jokes in documentation are good, but only if they serve the documentation.
We're certainly looking for ways to help develop the community. Obviously http://forums.fast.ai is a good starting point, and is a very active and supportive community nowadays. But I'm interested in finding ways to support face-to-face communities too. Some students are already doing that - for instance AI Saturdays (https://nurture.ai/ai-saturdays) has study groups in 50 cities now, and I'm told ~5000 people have been involved in them.

I'm always open for ideas in other ways we can help people get involved and stay up to date. And I'm very interested in supporting students who are trying to build these things in their local community.
5. Managing people

Personally, I find the toughest part to be actually managing the people. You really need to trust your team to be self-motivating which can be tough for a manager to do, especially new ones, because you need to give up some control.

But even though you trust them you need to have a way to measure results. That means being more disciplined and mature in your project planning than you might be if everyone is co-located.

For a startup that is key. Startups often skimp on disciplined project management.

I also find it tougher to do things like say, identify when someone is having a rough time (personal or professional) and take steps to correct or accommodate for that. If a co-located employee starts underperforming but I can see they are clearly checked out (like their head is somewhere else) I might suspect there is something going on at home and adjust my management style with that person. If they are remote it is harder to tell those things. Communication becomes extremely important when body language / behavioral clues are lacking.

So to pile on a lot of the other answers here... communication, communication, communication.
But how will you influence that said software if there's no way for you to talk to the device? This closes one exploitable avenue after 7 days - now attackers need to find something else.
They actually had a couple yesterday, including https://finance.yahoo.com/news/microsoft-launches-project-br...
You also need to maintain the culture. A phenomenon I just went through is a company that started remote-first, then someone had the brilliant idea to get an office for this or that geographical cluster of people, and slowly but inexorably remote workers were marginalized.

Some people feel really insecure without an office, deep inside they think it isn't a "serious business" unless you own real estate in a "serious" postcode. I don't know if it's just an European thing but it's definitely an attitude I've encountered.
"/mute" works for me. Having too many teams is more of a problem...
I posted this elsewhere in the thread. To be convinced, read this frightening paper: http://cs.unc.edu/~fabian/course_papers/PtacekNewsham98.pdf
Blitz Esports | https://blitzesports.com/desktop | Full time | Berkeley, CA | Onsite only, relocation offered

We're hiring frontend (React) engineers to help build dope products for gamers.

Blitz Esports is a 11 person esports tech & media startup (backed by YC, Greylock, KPCB) based in both Los Angeles and in Berkeley. We're looking specifically for 1-2 more engineers to join our engineering team in Berkeley, where we're developing a desktop companion app that uses computer vision, data-driven insights, and expert-crafted content to help gamers make better in-game decisions. Think of it like an "automated friend" that sits next to you that tells you what you need to do to win/get better. The games we're currently focus on are League of Legends, Overwatch, and CS:GO. On a weekly basis, over 500k games are played on the Blitz companion app already.

More details on the position here: https://bltz.gg/hiring-frontend

If interested, please email jobs@blitzesports.com.
Because it takes two days to get to me, then I have to contact support and get a refund and send the item back, then wait another two days to get the item and hope it's real. Or wait two days to get the item, then still have to drive to the store to get the real thing.

And in the meantime, I already used the cable and it burned my house down and now half my family is dead. But yeah, I can get a quick refund no problem.

Why do I care? What kind of ridiculous question is that?
This is a good question. I will try to align the main differences (in my opinion):

1. Stripe invoice is part of the recurring billing process and isn’t intended for one-time charges.
2. Like other services, Stripe provides a payable invoice, instead, Wirize is a pre-integrated payment checkout.
3. Stripe invoice is available in the US only at the moment, instead, Wirize supports 20+ countries.

Please let me know if you've more questions.
google does this ALL the time. you just don’t read about it in the press. for example, they encrypt the inter-data center links. for which they own the fiber. they do all kinds of stuff like that and are always doing new things. of course they don’t go 100% and encrypt email or docs but still they go to quite far lengths as long as it is within scope of their business model. (same as apple)

other companies do this kind of thing also. again, they just aren’t in the news cycle.

then there’s yahoo.
> There's really no insanity here.

No the insanity is 100% the legal status of fonts and typefaces in copyright law. They contradict each other.

> pay for them. Otherwise, use free fonts

I did state I have paid for some fonts. I wasn't mad about the idea of paying money BUT the prices are extravagant.

TLDR for bellow: Things for creative people shouldn't be so expensive they are then reserved for only the elite or corporate world.

I am an opinionated person and my career has been varied and one of my favorite roles is being the "tech guy" who is also the "creative person" of the company. So I take the official photos for my company and I also produce videos. I use to do it with my own personal equipment but now I have much better gear that the company has purchased for my job.

I have also owned my own recording studio and had a small record label. My bands ended up touring the world, getting on MTV (When they use to still play music videos) and move on to bigger Indie Labels. (Side note: the most these guys made was $7,000 per person a year after touring cost).

I own expensive gear and I have thousands of dollars in plugins and programs I personally own. Many audio plugins are $300+ and the software I have paid over $1,000 for one program.

These plugins shouldn't cost more than $50. Applications should be free with option of paying in for certain extra non-essential features. (Resolve was a $3,000 video editor 4 years ago and now it is available for commercial use for free and $299 for the professional features which I rarely use).

I want everyone to have the ability to fulfill their creative outlets and if they have the ability to make a living awesome. People who make the tools should also be able to make a living, but not so expensive and overpriced that they cater to only those who have expendable income or corporate money to spend.

Right now in music production the way these instruments are used by many is through piracy. Heck Kanye West used a pirated instrument created by Deadmou5. https://www.billboard.com/articles/news/dance/6897291/deadma...

The instrument Kanye pirated is a synthesizer called Serum. It's $190. So one way that has changed is they have a rent to own model. You pay $10 a month and you use it right away, but it also takes $10 off the price. You stop using it and stopped paying for a few months no problem just start right back from where you ended.

Another thing in music is now the plugin package I paid $1500 for in 1999 is now $400 and on sale you can grab it for $180 and you have access to the same plugins that Grammy Award winning artist use.

Why should it not come to fonts where people can pay $5 per font or say $50 for a complex font. Many of these $200+ fonts are initiative changes of a dozen other fonts.

I believe fonts are awesome and well worth it BUT they shouldn't price the vast majority of people from using them legally.
This both takes care of that and any other similar attacks that haven't been publicized or discovered yet.
Another comment about consulting services: Client executives might really benefit from a clear (and accurate) presentation of the different levels of remote-team-collaboration quality that are available at different per-employee price points.

For example: At ($10k initially + $3k/year) per employee, you're likely to avoid problems A, B, and C, but still run into D and E occasionally, depending on team size, using recipe $FOO.

At ($20k initially + $10k/year) per employee, you avoid problems A-D, using recipe $BAR.
I don't know what MP means, but if you publish an article I'd be interested in checking it out.
This is great. I currently do the samething but not rely on Ingress but rely on label and annotation of service.

Plugin config is also annotation.

It's a bit complex to make plugin concept work because Kong doesn't support some kind of idempotent request so lots of code is require to check for exist and set.

Such as when a service is updated, have to check/unset plugin and reupdate plugin config etc.

Great to see Kong made this step.