skysight-inc/HackerNews huggingface dataset:
Compiling to machine code is not a panacea for optimization. A optimized JIT compiler is going to blow an AOT compiler out of the water. Being smart about the machine code generated is significantly more important than generating machine code. In particular, PyPy makes several optimizations over python code that a more direct implementation of CPython at the machine level probably wouldn't. For example, PyPy erases dictionary lookups for object member access if the object shape is statically known. Given how prevalent this kind of lookup is in Python code, it's possible that even an interpreter that made this optimization would be faster than a machine code version that used an actual hash table.

I think this compiler also makes this particular optimization, but this is just one of many many optimizations PyPy does. I imagine that with sufficient work, this compiler could be brought up to speed with PyPy, but as it stands right now, PyPy simply benefits from having years of optimization work that a new project doesn't.
Can someone explain to me, what exactly is wrong with the UK? Where did it all go so wrong?
Unless it is running the "coreboot BIOS" (which very few things are), then it has a binary "non-free" blob booting it up.
> With OpenSSH, it's options "-L" and "-R". Those options take host:port arguments, and do proper TCP-level forwarding, encrypted and compressed like any other SSH stream, layered over any transport your SSH happens to be using. Which typically is also TCP, thus creating a TCP-in-TCP scenario.

I don't believe this is right - the thing tunneled over SSH is the data flowing within the TCP connection, not the TCP connection itself. If I do `ssh -L8080:foo:8080 bar.example.com` and then connect to http://localhost:8080/, then my browser's TCP connection terminates at my local SSH process, which decapsulates the TCP stream and sends it over SSH. Then the SSH server on bar creates a new TCP connection to foo.

Therefore there isn't TCP inside TCP. There are three TCP connections connected in series: my browser to ssh on localhost (HTTP inside TCP, ssh to foo (HTTP inside SSH inside TCP), and sshd on foo to web server on bar (HTTP inside TCP).

Therefore the "TCP-in-TCP" problem, where a delayed/dropped packet creates backoff in both the inner and outer TCP connections, doesn't apply. When my browser sends a packet, it is immediately and reliably ACKed by the ssh process running on my local machine. That ssh process might fail to get the resulting encrypted packet to foo, but that only affects a single TCP connection, the one from my laptop to foo:22. The browser sees a slow connection, but it sees it being slow at the application layer, not at the TCP layer.

So I think 'sneak is mostly right with the exception of ssh -w, which is a relatively new feature (and not what I was asking about at the top of the thread, in any case).
Windows 1803 Update Turns on SSH
1,150 Free Movies Online: Great Classics, Indies, Noir, Westerns
Just checked it in Google Translate, for English, Spanish and German:

col passo del contadino (IT)

with the pace of the farmer (EN)
con el ritmo del granjero (ES)
mit dem Tempo des Bauern (DE)

Nice.
Ondřej Surý’s PPA for Ubuntu 18.04 for LAMP/LEMP
Making a video is action. It is not implementation, but it is definitely action.
Ask HN: How much time do you spend “thinking” about a hard problem each day?
I'm really curious to learn about how others allocate (or find time) in their schedule each day to reflect on a problem they're attempting to solve (personal or professional).

My personal anecdote:

I find that I tend to solve "hard" problems during periods of unconscious processing (times where I'm NOT actively thinking about the problem). However, I also know I need to spend a lot of active time thinking about the problem first, before my brain can "take over". I'm usually able to structure in the unconscious processing time with things like exercise, in particular long distance hiking (5+ hours ideally) on weekends.

Finding time to reflect on problems in the middle of the week, in an active sense, has been my hardest challenge. As someone who codes all day for my startup, I can easily get into a groove for 10+ hours and not take any meaningful reflection breaks.
That's a shame, I liked the previous .home
I'm on a team using Wireguard as a primitive in a complex system: http://altheamesh.com

We use Wireguard as an all-purpose tunnel to encrypt bulk traffic in two places in the system. OpenVPN's performance is unacceptable, and IPSec is impossible to work with. Wireguard is very fast, elegant, easy to understand, and well encapsulated. The zealotry is warranted and it's uses go far beyond your basic desktop VPN use case.
Add noacl to /etc/fstab and you will be happy everafter ;)
JITs get to analyze both code and data and optimize for each machine deployed to. A static compiler can only analyze code and the machine used for compilation. If dependencies were pre-compiled, the static compiler won't be able to optimize their relationship with the project. If the machine is changed for deployment.

More information means better optimizations. JITs FTW.
That's super interesting. Would you be willing to share some of your background on this? I'm quite curious about this route.
I'm no expert but based on these photos [1] it looks like they're only transporting the engine core. What we normally call an "engine" on an airliner is really a relatively small engine core with a huge fan on the front. The white donut-like object is probably blocking airflow through the core to minimize drag.

[1]: https://www.flightradar24.com/blog/how-qantas-ferried-an-eng...
Thanks for the compliments.
My list shouldnt be seen as exhaustive. You're right that the project has even more traits with benefits.

"But the general sense I am getting is WireGuard is strongly opinionated and limited...and one way of spinning that is less vulnerable to user error. Personally, I have trouble equating that to meaning WireGuard is more secure."

The principles behind which systems are going to be more secure have been consistent from people like Paul Karger doing 1970's designs/pentests to folks like Bernstein later on. The number of vulnerabilities go up with complexity: handling state, potential interactions that are visible, covert/side channels that might not be, and too many options for users increasing odds of bad configs. We've seen these all happen to complex VPN's, too.

So, this isn't mere zealous recommendations: many of us have watched decades worth of software broken ignoring proven principles, WireGuard is one of few of any software following them, empirical evidence says it will be more secure in most (if not all) cases, and so we're promoting it.

A better metaphor would be security engineers and researchers promoting a security product since it has strong evidence of actually being secure. Which is exactly what you're seeing for at least four of us here. ;)
Mathematicians Disprove Conjecture Made to Save Black Holes
You know what else is a huge waste of energy? Video games. They produce negative value. Should we regulate them? Should you even be allowed to play them?
Serverless and PHP: introducing Bref
I was incorrect about this, and I apologize.
With those sorts of requirements, it seems like firms would find value in using a different layer-3 protocol (perhaps even custom) to reduce that overhead further.
I have a (dumb) friend who fell for this. It was a good scam - the eth scambot used the same profile photo and had a very similar @ username to elon's (minus the "Verified" icon of course), and it looked like "real" people were replying with affirmations.
Interesting project... Why python, out of curiosity?
I think we both agree that American public education isn’t in a good state of affairs - but through personal experience I know just how much work it is to do a proper job at teaching. It’s at least 70 hours a week of work just to tread water.

So yes, teachers are underpaid and overworked, and I believe that’s partially causing our system to be so mediocre - it’s hard to hire talented teachers who have time and energy to do a good job when the job is so exhausting and financially unrewarding.
Nice work Jon! The cannoli logo is great!

Spun up a quick dashboard of the project here: https://chart.ly/github-dashboard/joncatanio/cannoli

Not tons of revelations there, but cool to see your longest streak was 7 days straight committing to the repo. Also cool to know this is part of your thesis.

What are your plans after Cal Poly?
The biggest problem here is not that the green lock is being eliminated, but rather that HTTP pages will show a low-contrast grey message unless and until you type into an input.

By default, if you're not typing in a form, Chrome will show no major eye-catching colour-differentiation between HTTP and HTTPS. That's a major regression in user security.
College is an option generator if you complete. All people trying college should take completion probability into account. One very good point of the article is that college not completed is not an option generator. This should be more widely known and should be repeated often.
I don't know the details of Linotype GmbH's licensing agreements, but my point was that this route is surely less expensive than commissioning a new font.
It's illegal to require an IQ test/score for a job unless you can reasonably prove that a particular iq score is required. If you say that 130 is required, you have to explain why 129 is not capable of doing the work. As you might imagine, this is a high risk endeavor which is why most places don't ask for it. The SAT, however, is largely an IQ test in disguise and allows employers/universities to skirt the legal problem.
If the student loan default rate is high, they are accepting too many. That's a metric that would work today.

A metric that might work in the future is to look at employment and job satisfaction.

> You just need to trust people to act vaguely in their own interest, and society's interest, most of the time and to trust that things will work out.

Sure. And I want free college, and progressive taxation.

I also advise that we do a far better job of publishing and thinking about career opportunities and satisfaction. Maybe even to the extent that schools should seriously consider whether it's responsible to accept X majors.
Those kind of platitudes are nice, but they provide cold comfort to someone who can't feed their family.
http://www.legislation.gov.uk/ukpga/Geo5/10-11/43/contents

Free speech and ownership of self and property follows.
What was your first job (or first job on which most candidates had a degree)? How did you demonstrate domain specific abilities? Why did you leave?
So do we now look forward to teenagers hanging around newsagents asking people to get them a porn pass along with the beer and fags?
I agree with this. Did embedded for years. Actually started out doing device drivers—as far as I know my name is still on a little driver .c file in the Linux kernel, my one meager claim to fame in life LOL. I eventually left the field partially because of the nonexistent career growth curve. Kind of sad that you can make 2-3X what a typical embedded programmer makes by barely holding some front end JS together, but that’s the reality of supply and demand.
Saying that VPN is an incomplete control is not the same thing as saying VPNs are pointless. And the real argument (VPNs used as an excuse to not secure hosts) is even weaker. It’s often true! But that doesn’t mean a VPN isn’t an entirely reasonable control.
It's not eliminating it per se, it's just flipping the logic: Instead of HTTPS sites having a green lock, now HTTP sites will show a "Not Secure" message. It's a different visual cue, but the same idea.
Emscripten means that's not a distinguishing feature from C or C++.
Go to cheap state school and work reasonably diligently. Worth it every time. Private school isn't worth it unless someone other than you (rich parents or scholarship) is paying.

I got a full tuition scholarship at state school, and I'm reaping huge benefits now.
>If companies do start charging different amounts based on smart device data

Companies already do: https://www.progressive.com/auto/discounts/snapshot/

In this case, Progressive gives you a discount in exchange for monitoring you.

But I've seen articles where other insurance companies (often in the UK for some reason) raise rates for things as seemingly innocuous as posting the wrong thing, or being "friends" with the wrong people on social media.
With that schedule, were you able to do much in the way of networking? That's part of the 'college experience', and is often cited as one of the greatest benefits of going to college.
Updated Linode Plans / New Larger Linodes
Edited my question above for clarity. Any info on performance, key management, and managing peer address assignment in larger deployments?
I don't doubt there's plenty of illegal stuff but it's not illegal to sell whiskey like that, as long as you don't call it bourbon. Calling it whiskey is fine (though I don't know if there's a law on "Tennessee whiskey"). Legitimate craft distillers make all sorts of weird whiskeys.
Definitely the Apple example I used. For example, when Apple acquired the Google AI Chief, Google definitely takes a dip.

There's also one with a headline "Tesla stops Model 3 production" or something, and Ford, GM and Chrysler go up
And yet the resulting intergenerational trauma lives on.

The echoes of these abuses continue long after the abuse itself ends.

Lots of similarities, actually. Both systems were designed to destroy a culture seen as backwards by the powers that be.
Just wait until this starts impacting the parents' social credit rating.
There is actually appeal to having no indicator: the absense of an indicator doesn’t inadvertently suggest anything about the site’s overall security. The padlock icon we’re so accustomed to can create a false sense of security, as every other aspect except the connection to all servers may actually be insecure.

You may, for instance, be transmitting credentials that may be stored in plain text, be easily accessible to third-parties or may even be handed directly to black markets. The padlock itself says nothing about any of those details.

A better approach to no icon at all, I think, is simply “secure connection” wording. Trying to distill a lot of complexity and nuance into a single icon is what’s ultimately problematic. It works somewhat well, but not quite well enough.
Given that she's the CTO of the company, lead developer of the project, the most senior engineer on the team, literally one of the top JavaScript developers on all of Github - https://github.com/erisds... what do you think the answer to that question is? :)
Clearly, I didn't test on Firefox :( thanks for bringing that to my attention.
There are frequencies we can't hear -- impossible with the physical equipment nature has provided in our ears. But science and engineering have a means for both proving to us they really exist, and mangling them (with a kind of fidelity) into some sort of analogous experience. Similarly there are frequencies in the electromagnetic spectrum we cannot see. And microscopes, and telescopes and MRI's, and all the other wonders of our day take, which take a world that is impossible for use to sense directly and transform it into an analog we can sense.

So why do we cavalierly assume that our brains are physically capable of understanding all true things? What does a machine which transforms ideas which are literally inconceivable to our physical brains look like? What do the crude analogs of these inconceivable thoughts look like?

(I realize I've drifted far afield from the OP -- I don't mean to say that psychedelics are a window into true mysteries. But these discussions always seem to lead me down this path...)
So much outrage for bitcoin energy consumption from people on their computers, in well-lit, air-conditioned rooms.
That's the best comment I've read in this thread so far. Great attitude! Wish there were more employers like you.
joker: true, and TFA points out they launched on April 1, at price point of $666.66.

flaky: "Told him we'd like to see what they've got — we'd estimate — then decide. Sounds flaky. Watch it!" Reasonable to me.

Really he was reacting with reasonable skepticism to a true garage startup with no revenue and a tiny budget. He was concerned about getting paid.
Yes, thank you for typing that out so that I don’t have to.

Also, -w is some new nonsense that nobody should really be using except in some super dumb and hacky situations where there is no other option.
Management techniques come and go, but at the core of management is an understanding of systems/process and of human behavior. A really good book on management is Andy Grove's "High Output Management" [1], which to me strikes a good balance. It's a fairly popular book in SV and probably a known quantity to most HN readers. It's also notable in that it wasn't written by some management guru or business prof who's never managed anyone in their lives (i.e. Drucker), but instead drawn from the experiences of a CEO of a significant company (Intel). The blue-collar equivalent is Plain Talk by F. Ken Iverson, former CEO of NuCor Steel. [2] (not the author of APL -- that's Ken E. Iverson :)

[1] TLDR https://medium.com/@iantien/top-takeaways-from-andy-grove-s-...

[2] https://www.goodreads.com/book/show/1450374.Plain_Talk
No, it isn't. There might be funding limitations, but if the demand to become a doctor is too high for the number of positions offered, then they can stretch the funding over more slots by passing more of the burden onto the resident in the form of lower pay.

To the extent that they can't legally lower pay, that is the factor, not the funding.

The argument that medicare funding slots is the limiting factor is like saying that Hamilton can't come to LA because the NEA won't cover airfare.
In a way it is Microsoft recognizing that they should have never dropped the UNIX personality from NT, rather improved it and keep it on pair with Win32.

I bet Linux/BSD would never have grown as much if they had taken that route instead, because what most people care as proven by OS X is to be able to drop down into a POSIX like CLI experience, regardless of the kernel.
Oh, and wasn't the verification supposed to be free? So now are we supposed to either risk our credentials being stolen or pay to view free website content?
I still sometimes see .arpa in my server logs. I don't know if it's a spoof, or a misconfiguration, or just cruft, but it's there.

(I still miss Australia being .oz, instead of .au.)
But, here's the thing: They weren't wrong. The sheer number of people who have had their resumes ignored simply because they don't have a degree of some sort attests to that.
It's this scene (around the 3:55 mark in this clip):

https://youtu.be/_IrCgt-Bt1I?t=3m55s
Every post by a prominent figure such as Elon Musk, Pavel Durov and many others are immediately spammed to hell by copycat accounts pushing these scams. I've spent a good amount of time reporting them to no avail. Twitter just doesn't care.
Scurvy "was a thing" because for centuries they didn't know why it happened in the first place.

A Scottish surgeon in the Royal Navy, James Lind, is generally credited with proving that scurvy can be successfully treated with citrus fruit in 1753.
I don't think most college grads know what it's like to be born to parents who aren't well off.

I'm leaning heavily on "most" here.

I don't think $100k in S&P 500 at 18 provides you with enough income at 22 and on. If you $100k in S&P 500 at birth or sooner, maybe.

Also, yes, if everyone in the country owned enough S&P 500 to get by, then... No, that wouldn't really work, would it? :)
Also the ethereum ICO get-rich-quick “investors” are easy marks.
Actually the target position is that https _won't_ be marked as "secure", but rather than http will be marked as "not secure". Can't really argue with that.
I assume the book is supposed to tell me what matters, because based the blog sounds like the idea is to decide what matters and measure that. Well, maybe you have the wrong idea on what matters, and even if you do have the right idea, you may have the wrong idea on how to measure it. And even if you do have the right idea on how to measure it, you need to interpret it, put it into context. So many turns at which this can go wrong.

If the book doesn't give some really good explanations for these things, it is akin to telling someone to eat healthy: I don't need to be told to eat less sugar, saturated fats, and more leafy greens. Actually implementing that diet in a way that I can keep up permanently is trickier than one might suspect, intuitions tend to be way off. Good advice would actually help me with that.
Likely next step: mark only pages that are present in Chrome's preloaded HSTS lists as secure (including their new premium .app domain).
The user is being downvoted because he brought up an unrelated argument that contributes little to the discussion. The original complaint was being forced to stand up and pay respects to the late king. Not whether people liked/disliked the memorial.

It's akin to a debate about whether Apple was right to push copies of U2's albums onto all iTunes users [0], and someone chiming in with, "But I don't mind U2!"

[0] https://www.theguardian.com/music/2014/oct/15/u2-bono-issues...
The ASVAB is what you say it is. I took it back in the mid 80s, scored just shy of perfect, yet I chose a combat MOS because of my interests and desire for going the "hard route". Looking back, I regret not going into a technical role in the Air Force rather than going Marines, but I've now been in IT for 20 years, and Uncle Sam paid for my degree when I left the service. All in all, a good gig.
http://asvabmilitarytest.com/asvab-compared-other-iq-tests

>The ASVAB measures cognitive ability like other common IQ test, but it dependent upon the individual’s previous education for successful scores. It removes the individual attention received in common IQ test, but gathers much of the same information.
Mindfulness. This way you can meditate without any god beliefs
"university is fairly easy if you seize the learning opportunities that courses give you"

It might be "fairly easy" if you're lucky enough to have had a decent K-12 education, which is what prepares you to do what you say and do it effectively.

Far too many students graduate high school barely literate, without knowing how to learn, without sufficient direction or motivation. That's not to mention various emotional and psychological issues students might struggle with that keep them from applying themselves and making the most of their university education. It's also not to mention the fact that way too many students look at university as primarily a place to party, or to cheat their way to a degree.
Has anyone actually read this and liked it? Its a recommendation I'd normally follow but sounds like just another MBA class.
I love the Walmart checkout machines. They suffered initially from poor software. The update made in the last 4 months or so is 100x better.

I see two frequent problems.

The first is people with a full cart of items. Without the lazy susan of bags, scanning and bagging takes a long time. Not to mention checkers presumably have some training regarding grouping like items and other tricks of the trade Walmart has gleaned over the billions of transactions in their history.

The second is people that are not confident using the software - I hate to generalize, but usually it's older people. Someone unfamiliar or inefficient with the software can slow down the customer flow significantly, even if their cart size is small.

I love it not only because as a millennial that works in software, using the self check and adapting to unfamiliar situations comes easier to me, but also I rarely check out with more than 5-10 items because I go shopping 3-5 times per week rather than once per week.