skysight-inc/HackerNews huggingface dataset:
I also posted this on the new HackerForums but thought it might also be good to post it here (this is the link on the forum https://hackerforums.co/ask-hf-f6/ask-hf-how-do-i-correctly-... )
I first heard Yanny and now I can only hear Laurel.

This one is even more interesting for me:
https://www.youtube.com/watch?v=5pRY3wlKwm8

If I think "Brainstorm" I hear that, but if I think "Green Needle" I hear that.
Wouldn’t this be super easy to filter out with some kind of ML scheme?
18 मई विनायक चतुर्थी को पर्स में रख ले चावल के 4 दाने, महालक्ष्मी दोनों हाथों से
OpenSDLC
Looks like the m.facebook.com link is a bit less annoying, though it also has the Login/Join popover. On a desktop browser, reading public posts (and pages) is very painful, with nearly one third of the screen always occupied by the Login/Join popover that also makes navigation difficult.

[This is easier to understand through direct experience.]
Because the discution is already a flame war. I feel like everybody has a solution. Try not to get burn because JS is bad! a sorry electron is terrible! No innerhtml is a sin!
If I don't want flair, I use vi. Otherwise I want more optional features that I can use to potentially improve my workflows. Context switches between vim hotkeys and tmux hotkeys involve some mental energy I could be using somewhere else.
Neither the fact that Weev is a gigantic asshole, or your conjecture about what he might have been convicted of since, retroactively erases the injustice of the DOJ's absurd prosecution of him for the AT&T 'hack' - which was imo more about AT&T's wounded pride, and unwillingness to admit that they had effectively given that customer data away.

The AT&T hack is a perfectly good example, probably the most relevant one we have, of someone doing exactly what the GP suggested. Which undoubtedly would face much the same kind of overzealous prosecution, if not much worse given the current climate.

I do agree with GP though, and wish more researchers would be a lot less polite and well-behaved with their disclosures, sow a little more chaos even. This really was a golden opportunity to have a real national impact, and to give a huge number of non-tech people an unprecedentedly effective wake-up call.
> The Signal devs thought $.html() does some kind of escaping: https://github.com/signalapp/Signal-Desktop/commit/9d41b8616.... (this commit made something that was easy to exploit into something that was even easier to exploit).

This is an absolutely egregious rookie error. I wouldn't touch the Signal desktop app with a 10 foot pole after seeing that commit.
I used to get severe migraines from flickering lights and most computer screens starting on September 5th or 6th 2011. I was born with optic nerve hypoplasia (and nystagmus in my right eye) but don't recall EVER having any problem prior to this.

For years I went through the roundabout of doctors offering treatments that didn't really help (Botox) or give unhelpful advice ("just avoid triggers"). It wasn't a problem before this, dammit. I eventually dropped out of school, stopped using computers for days at a time and spent over 95% of my time for over 5 years sleeping being very depressed and suicidal.

It got to the point where my eyesight was degenerative and my doctor suggested I try topiramate (risk of optic nerve damage and my eyesight was already bad and getting worse by the day). I tried valproic acid and it made my vision blurry for a week, but I recovered upon stopping the drug.

In early 2017 I got a medical cannabis prescription from a doctor who acknowledged that other treatments didn't work for me and it made an immediate difference. I don't really get migraines anymore and I'm a much happier person in general whose started going to university and I've made some hilarious stoner friends as a result, so that's funny too. What's odd is my eyesight has improved to the point where I don't need as strong as a glasses prescription. The glasses I got last December are now too strong for me so I am happy about that. I'm still not 100% yet, but
even a year and a half in I'm still "recovering" from everyday migraines for over half a decade.

I'm blessed to live in Canada and not a place where medical cannabis is illegal. Even in legal US states (Washington, Colorado, et al) there is still the hypocrisy of the federal government
acknowledging that cannabis has medical benefits, while still causing vexing legal problems for users.

Be well everyone. Feel free to ask any questions.
i wouldn't be inclined to say that my choice of verbiage is to have any intent of masking the action or the nature of it. that's just how I generally talk about things. i feel like it leaves less up to interpretation and sort of solidifies the message I'm trying to communicate. which it did as your summary of what I had to say confirms.

also: i can't confirm if it was or wasn't actually ketamine. but i know that I experienced something, just nothing significant. I believe many dissociatives present a cross tolerance with each other and I was heavily tolerant to dxm at the time from heavy usage, so that may possibly have contributed to my tolerance, along with a certain level of inherent tolerance that my mind and physiology express when it comes to mind altering substances. which, and forgive me for sort of changing the topic, but that just sucks
As a migrainer, I too am offended.

My migraines have robbed me of pretty much any really stellar life I could have achieved. Undergrad was very tough because of the preventative meds I took. I straight up couldn’t finish grad school and in large part due to the migraines. Yes, I know I could probably have put up some academic fight. But this is also at a point where I had essentially no healthcare and no income. It’s done similar destruction to any social networking desires I may have. I could go on.

As for frequency, without meds I’m basically getting one every day. With meds, I get some days free of pain per week.
It's a deflection tactic by people who are emotionally invested into GDPR. Note the extreme emotionalism that GDPR draws out of its supporters. That makes it difficult for some of the supporters to have a rational discussion when it comes to the flaws of GDPR. They don't have a legitimate response to the context in question, so the easy approach is to attack the credibility of the person stating that they've struggled with compliance, rather than engaging in substantive discussion about the problems that GDPR generates for small businesses. The fear for the supporters is that if they admit to there being any flaws in GDPR, that will then act as a threat to GDPR (which they view as a monumental victory for privacy). They don't want to give an inch of ground, no matter the issue, because they're afraid of having GDPR diluted, taken away, and or not spread to the rest of the planet.

This is also why in all cases you'll see the GDPR supporters go after the character of the site/service owner (including always questioning their motives to muddy the waters). It's an attempt to short-circuit any reasoned debate, to destroy the credibility of the opponent. This has happened numerous times on HN in the last month or two.
There exists people who work or learn without having attended college.

However, to include college time in the opportunity cost, it would need to be 'for all', not 'there exists'.
I imagine in your scenario, my landlord could refuse to pay the reward, and I would probably lose in court if I tried to force them. That's not the same as it being "against the rules" to send people to them in hopes of a reward.

You just don't use a real estate agent for renting an apartment, regardless. I don't see how you just brush the difference between buying and renting aside.
physical limit is probably to narrow to effectively argue my original position. there are many limiting factors including physical boundaries of geography. consider the political climate, economic environment, accumulated technical debt of past construction practices, artificial boundaries development by cities to bolster real estate values, not to mention investments made by individual home owners and businesses. there are a lot of forces at play to gain consensus especially when you have significant momentum moving along a trajectory started easily 30 years ago that led us to where we are today. and not to mention the accumulated debt of a city like san francisco which the last i read was at $10B. these forces are like concrete or better yet non-newtonian in nature, the more you stir the pot the more rigid it becomes.

i agree there are a lot benefits to density, i'm not down playing those benefits. but i do think we have a lot of great technology in play and coming down the pipe that allows us to have many of the same benefits across large geographic areas.

also i feel large cities are captive to it's wealthy benefactors whether it's a company, an individual, or a politician who wields influence.

more importantly, it's far easier to create incentives to entice companies with high economic value and high paying jobs to an area with few competitive forces.
No. It is quite definitely not true that you must comply with the laws of countries you are not in.

The EU is primarily leveraging the fact that most everyone wants to travel to the EU eventually.

While you in your home country you have no need to comply with the GDPR unless a treaty between your home country and the EU exists to mandate it.

The EU is also leveraging their trade agreements.

What they don’t understand is that China is next and they have totally diametrically opposed views on consumer privacy. But when has the EU ever been farsighted?
Well my opinion is that the EU shouldn't exist. A non-democratic state controlling democratic states seems to me to be a spectacularly bad idea. But I'm a consultant and I've worked and work for these people, mostly indirectly.

Let me assure you: there is absolutely no shortage of hypocrisy. You don't need anything more than to walk around their offices and ask what all those weird marking on public and private spaces mean. You'll be disgusted, and cured of any notion that the EU intends to do anything for anyone but themselves.

But outside of that, there are clear personal status cult being upheld everywhere around the European organisations, with the biggest distinction between the "fonctionnaires" and everybody else (although as an employee of the commission you're still several rungs above "les gens de la rue" (which does not mean homeless, like in France, it just means normal people of Brussels). And may God help you if you're working for ISS or any of the cleaning companies. At that point your status is so low that people routinely throw things at you just to cool their frustration. This is accepted and normal behavior, despite how incredibly immoral it is.

(The "European quarter" of Brussels has a ton of public and private spaces, from "public" parks to a small shopping center (with mostly cafes), and the highly coveted parkings and parking spaces that are reserved, by law, for European officials' use only. So does Woluwe, even if they're a lot better hidden there. To say that these people have no intention to use their power to improve people's lives is absurd when you walk around their offices)
See also another recent post on process and leverage in fundraising https://news.ycombinator.com/item?id=17013516 and another previous experience https://news.ycombinator.com/item?id=7858317

PS. We are currently raising Series A in China/HK @ http://8-food.com/
Honestly I left Facebook to get away from ppl like you who turn every post into a chance to judge me against some unwritten moral code. Who needs enemies when you have friends on Facebook?

So it seems the candle is burning from both ends.
US Cellular and Metro PCS maybe? Only two that spring to mind.
Naive question: Are there functions analogous to `dangerouslySetInnerHTML` in non-JS GUI libraries (e.g. Qt) that will allow a similar attack?
io1 volumes are expensive and not nearly as performant as local nvme SSD's.

io1's top out at 32K PIOPS per volume and a 32K PIOPS 225GB volume would cost around 2100/month.

But an entire c5d.2xlarge with 225GB of local SSD will only cost around $283/month, and (based on i3 performance) will give you around 180K write IOPS.
Carrier. LocationSmart must respect user preference from carrier. It is the carrier/consumers data, ultimately, so it is between the consumer and the carrier. LocationSmart is down stream and must respect the privacy wishes of the consumer/carrier. There are two layers of problems here. (1) carrier could just /never/ provide data to LS if user did not opt in. (2) LS could not have terrible bugs. Problem (1) is hard. So carriers just give companies like LS full access to location data long with the users preferences and LS agrees to respect users wishes.

I think the carriers carry way more blame in this whole thing than people are acknowledging in this whole thread. Users that didn't opt in are still having their data made available to these third parties cause it's easier to implement. It reminds me of the legal fiction the NSA uses. They collect ALL the data / traffic. But they can only ACCESSS the data with a warrant. In this case the virtual firewall leaks horribly between the carrier and LS and the incentive to make it strong does not exist. Totally different situation but the parallels are there.
I think some of the fear that smaller business have is that this will encourage lawsuits until people understand how the courts will rule on each item.

That concern really is unfounded, though. The primary means of enforcement of the GDPR will be action by national data protection regulators. It isn't some carte blanche for trigger-happy lawyers to start suing every business that gets a little detail wrong or anything like that.

The general concern that the picture is unclear until something happens to clarify it is, unfortunately, much better founded.
While the forum software needs to be decent, I don't think it is the fundamental reason it succeeds or not.
Well sure; so just tip off a foreign national who already lives in Russia or whatever, and they can do it. Unlike an NSA leak, you don’t need physical access to places only US citizens can be in to touch this data; you just need an internet connection.
That is not true. You do not need to comply with any country’s laws except the one you reside in, except for treaties by your home country that say otherwise or your desire to travel abroad.

Just think of what China would do to the Internet if it could.
Twitter is moving in on LinkedIn
Paul Graham explains why outsiders can be the ultimate revolutionaries
It's like flashy banner ads from the 90s back again that people jumped to for grabbing attention. At that time it was ads, now it's people posting their thoughts in this fashion. Since Facebook provides these backgrounds only up to a certain message character length limit, many people curate their messages just so it would fit with these flashy backgrounds.

And because these posts with the backgrounds get larger font sizes compared to normal posts, to get attention in a voluminous group one must play the same dirty game. They're literally dragging people into the dirt pit.

Hope they don't introduce animation in these gaudy backgrounds!!!

Why not just give some font controls instead and remove all this background nonsense?! (Though this could also be argued to be terrible)

One day everyone will look back at these stunts and see them for the ugliness and abomination they are, just like we look back at banner ads with derision and hate.
Same as the ban on the cheese wasn't a ban on "cheese" it was a ban on "cheese made with this manner" the regulations being shown here aren't a ban on "collecting/using personal information" it's a ban on "collecting/using personal information this manner"

Again cost / benefit is always a valid choice to operate somewhere.
I have started to think that parts of GDPR should have been restricted to large companies - e.g. anyone with more than 100k active users, data describing 100k individuals, or an organization employing more than 100 employees. That would seem like a fair way to protect privacy while keeping barriers low for tech ventures / experiments.
Lots of prior info available

https://news.ycombinator.com/item?id=14974383

https://news.ycombinator.com/item?id=13425728

https://news.ycombinator.com/item?id=13249523

Also DIY options :

https://github.com/ttlequals0/autovpn

https://github.com/jlund/streisand

https://github.com/trailofbits/algo

https://github.com/Nyr/openvpn-install

https://github.com/robbintt/popup-openvpn

https://github.com/sovereign/sovereign
Mijn Kadaster Online Inloggen Guide
The latest video I saw was a two-legged robot doing a backflip.
At the Door of the Loony Gas Building
this paper is about lip reading, which is indeed a difficult task (i cant do it well, to be honest) and worthy of study. however, lip reading is not body language. lip reading maps movements to words in a natural language. recognizing body language requires knowing e.g. that crossing arms maps to the idea of closed-ness and thus that the interlocutor is closing themselves off from the conversation to some degree. or maybe the interlocutor has very long arms and has never been able to know what to do with them in a conversation or something.
Any fast growing small company is still wild west, regardless of industry.
Punching someone in the face to get them to appreciate the risk they are running of being punched in the face is not ok.

I appreciate the sentiment here but no. I'm going to show you how easily you can be robbed with poor locks by robbing you is a crime. Infringing everyone's privacy to show it is possible is infringing everyone's privacy.

You can't claim to infringe privacy because you understand why it's so bad to infringe privacy any more than you can mug people to show them how bad it is being mugged.
I thought that was a pretty good idea so I looked to see if it was legal and lo and behold: https://www.upstart.com/

A startup exists which refinances loans based on college major and SAT scores
I can't help but feel that there's an entity somewhere that's benefiting from this somehow.. Crowd-sourced machine learning training? The pessimist in me says that something spreading virally (globally) so rapidly must have some purpose behind it.
So bored of Facebook hate.
Show HN: Simple and comprehensive tutorials in Deep Learning using TensorFlow
I’m in Canada and can confirm that the toy-in-the-egg version was always sold here. As far as I know, this hasn’t changed. E.g. http://www.canada.com/life/Kinder+Surprises+Banned/2353187/s...
A database provides developers with the convenience of composing queries by concatenating strings. You still need to be really incompetent to do so in 2018.
Triptans are awful. 0/10, pure awfulness in pill form.

Oddly, along with three prophylactic meds, I seem to be able to abort migraines with 1/4 tsp ginger powder dissolved in a cup of water. I doubt the ginger would help without everything else though.
As far as I know, they're not breaking any laws, so they're not criminals.

Basically, over the years, they acquired a bunch of academic publishers that were effectively not-for-profit. And since, they've been raising prices. Harvesting market position.

Sure, that's not illegal. But it's arguably immoral.
Looks like the drug works (better than placebo), although there's a significant effect from placebo (about 50% as much as the drug) also. Always fascinating how strong placebo effects can be, perhaps that also explains some of the anecdotal fixes discussed here.

https://jamanetwork.com/data/Journals/JAMA/937048/joi180039t...
https://jamanetwork.com/journals/jama/fullarticle/2681193
Why is this story `33 points by fmihaila 2 hours ago` below at 27th position, compared to `29 points by jeffbarr 3 hours ago` (9th pos) and `18 points by westoncb 3 hours ago` (13th pos).
This is one of the cases where "the exception proves the rule." It's massively specious to point to exigence as an excuse for general unprofessionalism. Of course that circumstance is different from chit-chat. If you're interrupting a meeting I'm in, when I could have had my hands on the keyboard accomplishing things for that, I'd want you to find a new job, too — but you probably wouldn't want to use me as a reference.
Learning music or another language makes your brain more efficient
>Electron means you're one XSS away from remote code execution, and even worse, it makes it way harder to mitigate XSS through CSP (which Signal did utilize, but script-src 'self' can easily be bypassed in Electron).

Can you explain that last part? I can't think of how an XSS attack could get around that, and Electron's documentation specifically recommends it: https://github.com/electron/electron/blob/master/docs/tutori...
There's no friction, but there's gravity almost everywhere you've got a magnetic field. And gravity accelerates things pretty hard.
Just letting you know that your comments/attitude/etc are likely hurting the cause you are championing. Your volume of replies, the tone you take in them, and the way you react makes it seem like you ARE deeply part of the project... Thus I (and likely many others) associate you with it. I don't care what you comment - be a dick to the fullest if that's your thing - I was simply letting you know the impression you are leaving out there.
Two bytes for a location? If you're going to store latitude and longitude, you'll want to do it with signed fixed-precision numbers. Four decimal places if you don't care about accuracy too much plus up to 180 above and below zero. That means you'll need 26 bits (25 bits to store the data plus one bit for sign), and that covers one half of latitude and longitude. You'd need 52 bits to store a full set of coordinates, and since we're not barbarians we can round that up to a nice even 64 bits (I don't think there's anything relevant you can store in 12 bits...maybe carrier ID?)

Then you need to identify what device it's for, that's another 32 bits if you're being conservative. I'll ignore timestamp, since you could infer that from the location in the data store (assuming you have nice even 30s intervals), but it would otherwise be a bonus 64 bits.

That's 10TB, but also pretty useless because you've got a giant pile of u32s. If you were going to do this for real, you'd probably store the user's location with full precision for the first sample, then simply have diffs with a precision that assumes, say, the device isn't going to move faster than the speed of sound. The index is likely going to be pretty massive, and you'll constantly be reindexing because you're getting new data all the time (with a cardinality of 300M).

Even then, you're probably looking at something that's triple or quadruple that size. Let's say 40TB. That's only 14.6PB/year, which is not unreasonable storage for the government. But then you need to consider other things:

- You're ingesting 600M data points per minute. If you're only getting the minimum (96bits/user), that's over 7GB/s.

- But of course, it's probably not in a binary format (in the article, it was JSON and XML). Make that 50GB/s.

- Now you're parsing XML and JSON. That's not free when you're parsing 600M documents/minute. You'd likely have a pretty damn big server farm to ingest all this data.

- Your carriers need to be able to send that data to you, so they need to be equipped to (collectively) deliver 50GB/s of encoded location data; not to mention be able to dump the latest record for every customer in their location database twice per minute.

I wouldn't bet money that the government cares enough about every last device in the country to rig together such a big system only to keep track of where my grandmother's Jitterbug is. It's nonsensical to think that they couldn't just send an API request to AT&T or Verizon and be like "Hey guys, where's John Doe's phone been in the last week?" That's almost certainly more practical and cost effective in every way.