skysight-inc/HackerNews huggingface dataset:
> a bloom filter for 502M entries and a false positive rate of 0.1% ends up as a 800MiB large filter

With that sort of FP rate it's not really much use beyond filtering API calls. I'd suggest 2GB[1] as a more sensible minimum. A compressed filter can get this down somewhat.

> Binary-searching the whole dump is surely faster.

Not really. log2(500M) is ~29, k for a suitably sized bloom filter's only 23. Interpolation search can get you a result in more like 10 seeks, but a bucketed bloom filter can get your lookup down to a single read.

Having spent a fair bit of time faffing about with this stuff I ended up settling[2][3] on Golomb compressed sets[4], which can get the full list with a 1-in-10 million FP rate into 1.5GB.

[1]: https://hur.st/bloomfilter/?n=500M&p=1.0E-7
[2]: https://github.com/Freaky/gcstool
[3]: https://github.com/Freaky/ruby-gcs
[4]: http://giovanni.bajo.it/post/47119962313/golomb-coded-sets-s...
Do you mean sending money to prostitutes? I try to avoid those on Tinder.
Flip PDF Corporate Edition v2.4.9.18 Crack Full Version
> Too many of us are so used to git clone'ing a repo and building the software with make or its descendants that we overlook the security considerations.

The issue here is that the "git clone ..." allows for arbitrary code execution so the flow of 1) clone 2) analyze 3) make breaks at step 1.

Looks like it's back to tarballs for me.
Keeping Digital Communities Weird
Yes, you have to periodically recompute times.

For example, if you store time in TAI then you'll have to recompute all other future times as leap seconds are announced.
Former scientist here, too. People tend to forget what value a Nature article carries for the successful career in academia. The technical “hosting” of Nature and Arxiv might be the same, but the first will buy a lot of fame and potentially a good position at an research institute.
The Top Tools to Support DevSecOps – Part 4
In this talk, part of "The Future of Programmable Money" series, Andreas discusses digital gentrification and corporatisation, how this relates to the "blockchain not Bitcoin" phenomenon, and why we should maintain interesting communities both offline and online.
Did you ever see Throw Momma From the Train?

Crystal’s character has writers block because he is fixated on a good first sentence setting the tone for the rest of the novel, and he never gets past line one.
I have been using Python since version 1.5, and while not in web dev (I run a data team: ETL, BI, viz), I never went OOP in Python and do just fine. We write code in Go too, which has a growing presence in web dev, and is not OOP at its core, compared to something like Java.

Where I can't speak to the development of code interacts with browsers, procedural code and limited functional paradigms (apply like operations in Pandas, and dplyr in R) are still very useful. IMO it depends largely on the teams you would work with. A shop that has people or code with a strong OO foundation won't be a good fit. Bluntly, I believe OOP is over used in some cases. Like all successful approaches it has good and bad applications, the latter not a barrier to widespread misuse.

Maybe instead of picking a segment of coding (web dev), find one where the tools and techniques fit your preferences. If web dev or front end is dominated by what you dislike, pick one that has opportunities where you fit?
That was an interesting way to kill a few minutes.

My conclusion is that throughput is basically a function of space the intersection takes up. Also water is wet.

Sure given a fixed space you can optimize type to maximize throughput. If you really care about maximizing throughput with minimal complexity (the more rapid fire merges and lane changes you have the greater the chance of an accident that bottles up the whole system) big rotaries seem to be the way to go (above/below grade structures and traffic signals are a lot more expensive and cost more to maintain than some raised medians to divide right turn lanes).
I am looking for such a list on Russia.
Agree, its very interesting part of history.

Since you seem interested I think this is a great video:

https://www.youtube.com/watch?v=VG9evHIafx4
More Customers with the Free Facebook Chat Widget – Similar Drift and Intercom
ERRATA: The assemblages created from objects carrying C pointers had only C function pointer call overhead (of course). It was different scheme, playing linker games, that had GOT overhead.

And "multiple semi-abandoned monoliths with heavy feature overlap, but never code sharing" missed a key characteristic - the monoliths were all very partial solutions. So a common dynamic was "I need feature X, as in monolith A, and feature Y, as in monolith B, so... I'll create a new monolithic library C, with those features, but missing others from A and B that I don't care about". Leaving the next person in the same unhappy place, and scattering the little effort available into even smaller communities.
Page is down -- anyone have a mirror?
A small nitpick. Nobody alive is a descendant of Julius Caesar.
Side question: is your employer paying for your home office re-design, or is this just a personal project? Did you discuss any of it with your employer, or just opt to do it yourself from the beginning?

(Both approaches are good, just curious!)
FYI: Xbox One developer mode has opened up to give UWP apps pretty much all of the resources of the device.

https://blogs.windows.com/buildingapps/2017/09/15/resources-...
I'm always assuming that upstream will either accept the PR, or explain how to achieve my goal without requiring a change to upstream. Either way, such a pull request should be resolved fairly quickly and not linger around for too long.

Why does this not not scale when doing enterprise java? Is it the 'enterprise', or 'java', or the combination thereof?
Your last point makes me very sad.
Fair enough. I even joked about this on Twitter: https://twitter.com/lucperkins/status/1000878351903477765
Why now? Why wasn't this done several years ago?
The market is not failing to determine a market rate. The market is certainly failing to provide equal access to the legal system.
I thought the 12-hour thing came from Mesopotamia, not Egypt.
We've banned this account for breaking the site guidelines.

If you don't want to be banned, you're welcome to email hn@ycombinator.com and give us reason to believe that you'll follow the rules in the future.
Cached since I can't load the page: https://webcache.googleusercontent.com/search?q=cache:CO48Rd...
No one forgets that. Everyone just thinks we should solve the chicken-and-egg problem and move that prestige to a set of journals that don't gouge everyone for research that was mostly paid for by public money already and was peer-reviewed by public employees volunteering.
I have given up trying to calculate these things, so just use the meeting planner on TimeAndDate.com[0] ...

[0]: https://www.timeanddate.com/worldclock/meeting.html
https://webcache.googleusercontent.com/search?q=cache:CO48Rd...
This is tougher to get then time in general relativity...
Not new at all. Not sure why this was posted today though. Here is a similar marketplace / solution from one of their biggest competitors, Neustar https://www.marketing.neustar/identity-data-management-platf...

Adobe is also very much in this space.
A bit off topic but have research journals become a whipping boy for the anti-science crowd? The general public is being spoon fed either very poor quality click-bait "break through/cure cancer" articles or worse. Recently the peer-reviewed != reproducible issue was highlighted. I feel there is a common thread but it could my commonality bias of an HN reader. Is attacking science journals a new trend?
I did not downvote you, but I can imagine people are down voting you because you seem to be making an effort to miss the point. The point is taxes are included in prices in Europe, but taxes are not included in prices in the USA.
In the simpler variants it seemed like some cars passed right through the middle of semis or were my eyes deceived?
they are not mutually exclusive. nature allows for preprints on arxiv according to wikipedia.
No, I mean sending money to women.
>Untrue. It's directly from the second paragraph...

Fair enough, you're right and I withdraw that.

I realize now you were making irrelevant observation rather than a topical argument. (It doesn't matter to the point being made in the post you quoted or it's ancestor post or to the suit wether or not that poster's experience is the opposite of the disparate treatment alleged in the suit.)

> As you so politely introduced yourself to this conversation, COME ON. Again. Read before you start launching arguments that others will find laughable.

Oh, come on. My mistake was in construing your post as being more coherent than it actually was.
Thats an interesting point. I think high school physics teachers are split on units. I'm willing to change teams. The argument for just showing units at the end is that students who are just starting to master algebra have trouble with the extra symbols.

I think I should add units for more of the LaTex example problems. Maybe I could color code the units so it doesn't get confusing.
1. Geofencing is not very accurate. The range I’ve seen is ~100 yard accuracy. This is potentially a colossal waste of ad spend for lawyers because they get some people in the waiting room, but they also get every single device in the building, parking, and surrounding area.

2. They’re called device ids not phone ids. Proof right there the author didn’t research effectively.

3. The doctors/etc who have to abide by hiipa are explicitly requires to have their vendors (ex marketers) follow the same laws as them. This goes for any industry, but is written in the law for health.

Geofences are awesome for things like sports arenas, neighborhoods, malls, etc. but ineffective for anything smaller.

Edit: For #1 here are two sources. This is coming from a vendor that only sells location data, so their accuracy number of 93 feet is definitely not 100% truthful.

https://www.placeiq.com/2016/05/study-smartphone-location-on...

https://www.placeiq.com/2016/10/location-data-accuracy-the-f...
Increase Code Reuse. Reduce Overhead
Today: Tell the California Senate to Defend Net Neutrality and Pass S.B. 822
Maybe so, but could you please stop posting unsubstantive comments and flamebait to Hacker News? You've done it a fair bit and we're trying for better than that here.

https://news.ycombinator.com/newsguidelines.html
Well technically tabloids are just newspapers of a certain size.
So I am allowed to collect and store personal data for my toy project without consent?
So to an extent, this is bad, you can be compromised by a malicious git repo, however given that most people already trust code cloned from git (or acquired from similarly untrusted sources like npm, rubygems, maven central etc) it may not change the equation that much.

If you run code without trusting the author, you're likely going to have a bad time.
It is, and it is.
Well, then you have to come up with a good idea how to change the nature of humans. We thrive on fame as social status currency

Not just in science. The equivalent in startups might be a famous VC or whatever. It’s about attaching yourself to a brand.
Sure, but Bezos doesn’t have a record of threatening to start companies on a whim and then either poorly executing or not executing at all.

I know which one I can count on.
Out of interest, what about this tutorial do you find better than (which?) Coq tutorials?

I think Lean might be the better technology, but I don't think this tutorial is better than Software Foundations. I can't see beginners not being turned off by boring discussions of hierarchies of universes before the first real proofs to get you hooked.
also deepmind published in nature justthis month.
And the announcement from the Git project is at https://marc.info/?l=git&m=152761328506724&w=2. See also CVE-2018-11233 and 11235.
Surely Microsoft should have enough resources to survive the usual HN-hug-of-death?
OAuth 2.0 and OpenID Connect Implementation in Laravel (Authlete)
> "They posted my entire medical record, including notes about my mental health, my bills, my insurance info, my driver’s license, birth date and home address,"

We are hearing one side of the story here. HIPAA violations have teeth -- potentially 10 years imprisonment for intentional leaks for personal gain -- so a vindictive public action is highly unlikely, and certainly some lawyers would take the case on spec. Especially if personal information like driver's license info and home address were leaked.

What likely happened is this quip triggered the mess:

> “I suspect that this doctor gives unnecessary procedure [sic] to a lot of people and then charges the insurance sky high prices and no one knows the difference.

Levine is accusing Song of health care and medical insurance fraud. While there's some ambiguity regarding "unnecessary procedures", insurance fraud is a crime and arguably Levine is accusing Song of criminal behavior
My knee jerk response is “Events in a git repository are partially ordered. And we have a visualization for that.” And then I recall how often people misunderstand a git diagram with more than three independent chains of events.

Still doesn’t rule out bad tools but it doesn’t paint a good prognosis.
"It was the day my grandmother exploded."

- opening sentence of Iain Banks' The Crow Road
This comment breaks the HN guidelines by taking the thread on a flamey ideological tangent. Those invariably suck, and we ban accounts that do it, so please don't do it again.

https://news.ycombinator.com/newsguidelines.html
It's not that you can be compromised by running the code contained in a git repository, it's that there's a bug that allows somebody to create a git repository that will cause you - merely by (recursively) cloning the repository - to run arbitrary code that they've provided.

This is, of course, unexpected. And while you should perhaps raise an eyebrow if somebody you don't know asks you to recursively clone a repository that you're not interested in - this is indeed a problem and you should upgrade your Git client.
iPhone 11 COlors Leak and Latest News 3D iOS 12 Makeover
I run my own business, so this question wouldn’t be relevant as I can choose what I like (after I’ve spoken to my accountant about what I can and cannot expense).
In my experience those high fees usually only apply when publishing open access. In our lab we publish using the free closed access method, and then a free version goes on PubMed (potentially after an embargo). So the research is available for free, the lab still gets the journal prestige, and it doesn't cost the lab anything. This is by no means a perfect system, but it's not as dire as a lot of these articles want us to think.
Also many folks from Facebook AI Research (including Yann LeCun)
>Yes I totally appreciated your Tweet indeed, don’t get me wrong. I was just trying to communicate that in general I try to ignore stupid rules even if they are pretty damn real in the industry. Thanks!

Right on!
Leap smearing isn't related to TAI, it's just a way to minimize the effect of leap seconds on machines using NTP servers.
If you want a technical audience to read your page, get rid of the videos and unnecessary animations.
Top AI and Machine Learning Trends in Media and Entertainment
I could be wrong, but my understanding is also that fatalities per event tends to be in the low single digits. There are just a high number of fatal collisions.

That, of course, makes sense if cars generally have 1 or 2 occupants and accidents are usually single or dual vehicle.

It would make more sense for self-driving busses to be touted for safety and the trolley problem instead (though, granted, they may be far less likely to be in accidents already, having professoinal drivers).
Thanks - have a “normal” monitor on order but will swap it for a widescreen. Will definitely be trying not to watch movies in the home office, as that could lead to bad habits...
Sounds like it could be devastating for shared git hosting like github, bitbucket, gitlab, and for anyone just mirroring repos.
Oh yeah I'm not saying don't upgrade, what I'm saying is that you're already cloning a repo. presumably to run the code therein.

Given that running the code therein (if the owner of the repo. is malicious) will hurt you, this doesn't do too much apart from have it happen earlier on :)

I guess one scenario where it could be a problem is if you were planning to clone untrusted code and read it all carefully before running it.
If you look at the table, it's shorting even Bitcoin and then attack it.
Some Were Meant for C [pdf]
I would disagree.

“I love these chips” is subjective. Rate-of-saying “I love (.)!” is objective.

The absolute rate may or may not be important (I’d guess low importance), but changes* to the rate can indicate that a life changing event had a much larger impact than one may be subjectively conscious of, especially if the change was gradual — a loved one becoming gradually more ill or more emotionally distant, for example, slowly enough that one does not realise that light and joy has begun to leave one’s life until after the recycling bin overflows with beer bottles.
I work in machine learning, and on my team we generally avoid OOP in Python, and we take great effort to avoid inheritance and abstract base classes when we do use object-oriented designs.

In general, writing boring modules of functions with slight functional style, occasional metaprogramming, and lightweight classes, has worked extremely well for us. I would probably call our approach "module oriented design" because tend to think of modules as cohesive clusters of functions and topical little data structures (mostly just namedtuples, possibly using new dataclasses when we get around to it).

The main times we invest much effort in custom classes tend to be times we are wrapping or extended third-party tools that themselves chose OOP, and their intended extension mechanisms involve inheritance. Think of writing a custom Filter for logging, or custom Layers in Keras.

We don't like OOP in those cases, but we find it's better to stick with the convention of the library you're using, than to try to force it to fit into a different approach you like.

But overall, I've worked on many multi-thousand line codebases in Python, often with web service wrappers around them, that are just collections of modules with plain functions.

When I see this, I definitely would respect that development choice, and would believe it has a lot of upsides favoring it.

Of course, I would also say that in the hands of skilled OOP developers, OOP solutions are also good and also have upsides. If I found myself on a team where OOP was the established lingua franca and people delivered good projects with it, I would try to adapt to that.
They'll realize not dying or aging is more useful than running Windows 1.0 and drag out the process forever.
I'd say there's a trade off to be made. If we didn't have any illegal immigration or smuggling, obviously it would be unreasonable. On the other hand, if we had a million professional gang members entering each year via various tunnels into Yuma, it would be reasonable to put checkpoints on the outside of the city to help curb the problem. Or evacuate the city and nuke it from orbit.
In case anyone is confused (like me), the video is an simulation made using mods for the game Cities: Skylines - http://www.citiesskylines.com/
What browser is that? In Safari it seems to use negligible CPU when just text is on the screen, which goes up to maybe 20% of one core if one of the big videos is visible. It's also not enough to get the CPU to raise it's frequency/power consumption out of the idle state it is on, say, hacker news.
Given how many times "Google is evil because it destroyed Yelp (not because Yelp is a trainwreck)" headlines cross the HN front page, arguably, no one trusts Yelp.
I know that ‘therefore’ is the way it’s normally spelled, but I always thought it was goofy: all the other there-compounds (which are cognate to German’s da-compounds) & where-compounds (cognate to German’s wo-compounds) don’t change the spelling of their prepositions: thereafter, thereon, thereat, whereafter, whereon, whereat &c.

I also don’t understand why modern English doesn’t take advantage of them like modern German does.
see? now these are actually funny! Both would've been a very nice addition to the essay. Thanks for sharing.
Four days ago I saw an excellent presentation about the trickeries of time, dates, and timezones at DjangoCon Europe. It was by Russell Keith-Magee and is short, to the point, and super informative: https://www.youtube.com/watch?v=qabriMQ1SYs

I recently ran into a completely novel time bug while working with Excel file for GoodGrids. In Excel files, date and time values are stored as epoch time. But you can not tell what time a particular number represents until you check whether the file was made with Excel on Windows or on the Mac. It turns out, the developers chose a different start of the epoch on these two platforms.

A while ago I came to the conclusion that time is simple from any one perspective, but complicated when you try to handle all possible perspective. Try to explain the complexities of time to someone who does not travel, resides in the same timezone all of their life, and does not need to coordinate with anyone outside of their timezone. For them, the rules that govern time are pretty easy.
Nothing, I wouldn’t want someone who places so little value on my work as a customer.
Yarn also has a useful feature `workspaces`. With npm have to use lerna for it
Unless I'm reading it wrong the attacker still has to have a repo. under their control, then get the victim to clone the repo.

I'm not saying it's trivial , but more that people execute code from GH and similar alll the time without reading/evaluating , and this won't do any worse than that.
OpenFOAM might work for this purpose.
I had a former sales person who worked for the Berry company (who produced the Yellow Pages) tell me the two biggest buyers of listings/ads were doctors and lawyers. So not surprised lawyers may be willing to overspend a bit compared to how much those very prominent ads for lawyers were in phone books (think rear cover or side binding). I assume they still spend quite a bit on the Yellow pages since that may be all that is available to you while you sit in jail and need legal council.
Part of this bugfix includes changes to "git fsck" to reject these problematic repositories. Git hosting sites like GitHub and Visual Studio Team Services are actively blocking these repositories today to prevent being used as vectors for propagating this vulnerability.
Obviously it all depends on the application:

Birthdays (as the article mentioned) are not points in time and mean different things depending on where you are, so best stored as a year-month-day combo without any zone information.

Past times are not that big of an issue actually, just use UTC and convert to local time to display, but calendars schedule for the future, and you can't always calculate a future time in UTC.

In e.g. distributed system where monotony and ordering is important UT1 would actually be even better than UTC, as UTC has occasional jumps (hence the workarounds, like googles skewed NTP)
I wonder what the theoretical maximum throughput is? Anybody know? The video got up to 1000, which seems pretty high.

It seems like, from that simulation, that the longer the curve, the higher the potential throughput. I particularly liked the Turbine.
Yeah, that's true. That's closer to Oracle's TIMESTAMP WITH LOCAL TIME ZONE data type. In PostgreSQL you have to use the AT TIME ZONE to override the output time zone, so the client has to know which time zone they want. And I'm sure there are weird corner cases where information is lost.
You're assuming that $1B opportunities are ripe for picking, but only by companies incorporated in the state of Delaware and headquartered somewhere near Sand Hill Road.

The SV ecosystem has given these forms of companies a big boost for a long time. No doubt about that.