skysight-inc/HackerNews huggingface dataset:
Whilst this article has some decent points, I feel it overblows/mis-understand others.

It's fair to say that downloading and running images from Docker hub without establishing trust is a dangerous practice.

Similar in danger to using npm, rubygems, nuget, Maven central etc. In that there is only limited curation of content.

That attackers have "malicious" images on Docker hub isn't that relevant, unless they can get people to execute them. If they were typo-squatting or otherwise trying to trick users into running those images that would be more relevant. Instead what seems to be being described is the use of Docker images as part of attacks on other systems (e.g. Kubernetes installs with poor security)

The bit around running a malicious container instantly leading to root on the host is just wrong. With a standard Docker install, no customization, there are some risks, however unless you do something like run --privileged, or mount a docker socket inside the container, you're not guaranteed to be able to get root on the host.

(BTW anyone who reckons this is trivial should give contained.af a look)
Which is a major reason why peer review exists, to prevent authoritative people pushing their agenda.
So... guess you don't use it then, eh?
Alternate Data Streams: The Obscure Side of NTFS
Why can't you estimate probability of something speculative? Of course it must be speculative if you're talking probabilities; otherwise you'd just know if the life is out there or not.

If the assumptions are very speculative, you just end up with very wide probability distributions, which is exactly what the paper argues for.
Both sides. The goal is the chaos and discord, not a particular outcome.

They would make the debate very strange, though. At least some of the agitation will sound literally foreign to our normal concerns.
Do you also get confused by Dragon Naturally Speaking and Firefox and their similarity to those 2 names?
> So this is "we don't want to use another language".

Yup, which is a perfectly valid reason.

> If calling out to a binary is a security problem for you

You miss the point. The security problem is sending the raw data from the client to the server.

> So again, this boils down to "I don't want to use Python and I'd prefer to use JS instead."

Which once again, is a perfectly valid reason

> Servers are expensive so hosting static weights on a server is cheaper?

No, CPU/GPU intensive tasks on a server is expensive but storing a few static weights is cheap.
This is what history’s coolest subcultures look like now
> I’ve never traded options.

Then please stay away from multi leg options stuff because it gets even more complicated.
A net neutrality bill already passed the senate. With a new house (and speaker) it could potentially go through.
And likewise with Gulag literature in the West.

No no no no no no. How do you jump from one to the other? That's like saying Anne Frank's diary's credibility is tainted by the injustice of the internment of US citizens of Japanese ancestry.
I think you're conflating privacy and security. Serving the
model on the client side means that the server is never aware of who put the inputs in.

Also he isn't contradicting himself, serving static data off a CDN or server is a lot easier and a lot less expensive than having a cluster setup to do inference.
Interesting business model, risky, but if it works - it’s definitely innovative.

The other aspect of this is that there are a lot of other companies that are doing the exact same thing in several markets including the elephant in the room Zillow which recently changed their business model overnight to involve buying/sellling property themselves.

It’s clearly a capital intensive business so this fundraise makes sense. However, it remains to be seen what efficiencies these firms can get at scale and whether those efficiencies are meaningful enough to differentiate from other services that increasingly offer a similar buying/selling experience.

Down the line, there could be consolidation in the space. I could see Opendoor being acquired or a lot of the smaller firms consolidating into some bigger entity that competes with Zillow, Opendoor etc.

Anyway, probably still too early to tell which way the winds are blowing.
Having wireless providers who are able to provide landline-level speeds means that many markets will go from having one or maybe two real ISP options to having three or four. Competition means that if the benefits of net neutrality are desirable, customers will prefer an ISP (wireless or otherwise) that provides those benefits.

Of course, most actual counterexamples to net neutrality are seen as positives (free Netflix or Hulu with usage not counted towards a data cap) rather than negatives, so it might not work out.
On the home page at https://tether.to/, it states:

> Every tether is always backed 1-to-1, by traditional currency held in our reserves. So 1 USD₮ is always equivalent to 1 USD.
Why is that valuable?
> are you actually suggesting that Google may have a “privacy issue” per your definition?

Until the GDPR started being enforced, I think it was common practice to collect and sell data without the user's full knowledge and consent. It's a huge change in mindset having to know and explain what they're doing.

Even when not signed in, YouTube remembers the sort of video you've watched and suggests similar ones; I didn't explicitly consent to this, and they didn't tell me clearly what data they were collecting. I'm a former Gmail user; I didn't explicitly consent to Google analysing the contents of my email messages; I think a typical person would not expect that.

If something “feels creepy”, it's probably a privacy breach.

Maybe Google think they have the user's permission. It may be an honest misunderstanding. I'm not saying they're malicious; but I think they have very little incentive to really care about privacy, because their users don't demand it. Third parties will pay for user data.

Also, I think you should be able to choose who you trust. You shouldn't be obliged to trust Google (or Microsoft or whoever); I would see that as a monopoly.
This type of comment implies you think the world is static. I'm not saying that this good, but what makes you so sure market and social forces won't produce a better model?

To me this is just a temporary setback, and a reminder why we need to focus on developing new technologies, like a "truly decentralized internet", blockchain, cryptography, and more.

It almost feels like a the death throws of a monster that will do a lot of damage is it goes down, but will ultimately be overthrown by the better forces in the world.

Edit:

"Truly decentralized internet" is a loaded phrase, so I'll expand a bit. The fact that we see small companies and municipalities beginning to develop their own ISPs is a positive trend in the right direction.

Mesh networking has the potential to happen. Most WiFi chipsets in theory support short range mesh, and the gear from Ubiquity and others, not to mention SDR also have this potential. In fact, I'd hypothesis that the basebands in most cell phones have the hardware capability to participate in mesh typologies. The right software could enable some very interesting things. I could be totally wrong here about the HW capabilities. Anyone care to chime in?

Layer proper digital identities, and something like TOR as a first class citizen, and you start to get a pretty nice picture.
Given they say this only affects cards without chip-and-pin, this is probably of interest to people from the US who have flown in to British airports, as Dixons operate electronics stores selling things like portable USB chargers, headphones, kindles, SD cards, etc in most large UK airports.
I can't exactly delete a physical transaction with real money, so that provides zero new benefit.
How strange. I could have sworn I was replying to Didn't Carmack himself port it to OS X? What is now "XQuartz".
It would be 160GB, not 1.6TB
Fork/exec time for extra processes is usually unimportant. If data transfer is truly a bottleneck, shared memory is as fast as threading.

These costs, though, are generally trivial compared to the lifecycle costs of dealing with multithreaded code. Isolation in processes greatly enhances debuggability, and it's almost impossible to produce a truly bug-free threaded program. Even a heavily tested threaded program will often break mysteriously when compiled with a different compiler/libraries, or even when seemingly irrelevant code changes are made. It's a tar pit.
Is there a Cryptocurrency Market Bubble? Learn how to protect yourself
Me too. Maybe it's cause I've only been developing for a year, but I'm not sure what a 'native object' is and there don't seem to be any good definitions
Browser vendors are very much complicit in this abuse, imo cleaning up cookies should be opt-out if they were serious about privacy.
I'd wager the 720/1080 split is due to the former being their limit for browsers doing software decode. 4k being restricted to edge sounds like Microsoft is the only one supporting HDCP (drm).
Wait, are you saying you'll take a bet where you pay 10^15 to 1 if we do not find life out there? I'll take you up on that for $0.01 on my side.
DARPA/IARPA now invests in search 2.0: Instead of asking it to retrieve stored information, you can instruct an agent/search bot to perform tasks for you.

For instance, one should be able to search for: "who is the leader of this IRC hacker group?" "where can heroine be bought on the deep web?" "Is there women trafficking going on behind that log-in wall?" and then an intelligent agent is dispatched, avoiding/crossing roadblocks, like log-in forms, and will eventually bring you the answer.

Coursera has more on the basics, like: https://www.coursera.org/learn/text-retrieval

OpenAI has more on the current happenings of creating more intelligent search bots: https://github.com/openai/universe

Other possible future research areas in information retrieval include being able to search for services ("Where is cheapest taxi service for current location?") and an integration with IOT.
Not that I would trust them, but literally the next sentence;

Through our Transparency [1] page, anyone can view both of these numbers in near real-time.

[1] - https://wallet.tether.to/transparency
That is just not true. One of your primary advantages as a retail trader is that your positions (being much smaller) don't move the market anywhere near as much as if you're a big institutional investor. So you can pursue strategies that are off limits to institutional investors. Options on small cap companies tend to be illiquid and traded in small quantities, so they often won't be touched by big money. This presents an opportunity for retail investors.
If you don't close a spread prior to it expiring then it's possible for a execution of the option by the counter party. In that situation you can be forced to either provide the securities (if you sold calls) or forced to buy the stock (if you sold puts). As it happens at the expiration of the option you no longer have the option to exercise the other half of your spread.

As the margin required for a spread is substantially less than the full price of the security (which is the whole point of the spread), you can end up in a situation where you're forced to buy more stock than the total liquidation value of your portfolio. Plus this happens at the close on a Friday (as that's when option expiration happens) so you can't liquidate the stock until Monday morning and you're at the mercy of the opening price. If the quantity of options sold is large enough and the price moves against you far enough, you can get completely wiped out.

It's your responsibility to close out your spreads prior to close. FYI, this situation can happen even if they're out of the money as the counter party to the worthless option could still choose to exercise it.
Including a link to https://github.com/Microsoft/react-native-windows
>"this project has a lot of stars, so, you should know it!"

This is how the industry works these day, and beginners coming from bootcamps are told to pick a framework that way.

The more stars , the better.
> The British have a huge amount of respect and gratitude for the Polish pilots and honour them annually.

Not seen much sign of the Poles being acknowledged as Polish when being honoured as Spitfire pilots — heck, I didn’t even know many of the pilots were Polish until recently, and I’ve been living in the UK for my whole life… well, except for six months or so of post-Brexit looking for somewhere else before coming back because of family medical issues.
Ok, I misunderstood. I agree with you. I think it's an interesting situation - the broader term is more relevant, but it's also less measurable. So we settle for what we can measure and kinda forget that it doesn't capture the full picture.
You can actually watch 8k video off of youtube:

https://www.youtube.com/watch?v=Mn24cQLqAE4
No, Tether never completed an audit. Their auditor fired them. Their claimed "frequent professional audits" on the home page encompasses precisely zero completed audits.

https://www.coindesk.com/tether-confirms-relationship-audito...

> Given the excruciatingly detailed procedures Friedman was undertaking for the relatively simple balance sheet of Tether, it became clear that an audit would be unattainable in a reasonable time frame. As Tether is the first company in the space to undergo this process and pursue this level of transparency, there is no precedent set to guide the process nor any benchmark against which to measure its success.
Reviewing images is relatively straightforward. For anyone using automated builds you can just review the Dockerfile either on Docker hub or github.

For non-automated builds just pull to a local machine and use something like portainer to have a look around.
I would also consider D
Adblock Plus owner Eyeo launches browser extension to combat fake news
There are obvious, concrete ways to fix the API that would reduce the problems, for beginners and experts alike.
Oh goodness!
This actually sounds like something that could literally happen. Given how things are going..
> The difference is that the housing prices were clearly in a bubble and banks were intentionally packaging subprime mortgages that they knew were bad and selling them as a low risk investment.

That's exactly what Bitcoin looks like to me. Places like Goldman Sachs are getting involved in selling Bitcoin derivatives. These are akin to subprime mortgage derivatives; the bankers know their current value is inflated with respect to their fundamental value, but for the time being people clearly want to buy them, so they can make lots of money selling them. Once they are making money selling them, it behooves them to downplay the risk. They can point at a BTC graph, talk about it is the future, draw a line up and to the right, and make it seem like a no-brainer.
>> Very silly; best not to alert the media or we'll soon see "AI can now generate memes" clickbait.

This Artificial Intelligence Learned to Create Its Own Memes and the Results will Make you ROFL!!

How scientists trained an AI to create memes by looking at images

The end is near. The singluarity is here. Run for your lives!1!!
This report:

1. Is not an audit to be used for assurance purposes. The disclaimer at the top states that it "should not be used or relied on by any other party."

2. Is rather old now.

3. Was conducted by a firm that no longer conducts business with Tether, probably because Tether would not comply with information requests needed to conduct an actual audit, which is not as difficult as Tether makes it sound here: https://www.coindesk.com/tether-confirms-relationship-audito...

Or in other words, it isn't proof of anything, and the fact that Tether has not been able to produce an actual audit for assurance purposes in all this time, speaks volumes.
> For anyone using automated builds you can just review the Dockerfile either on Docker hub or github.

And then review what it `FROM`s. And then review the core OS build that relies on.

It's a lot of work. It is doable, but it is a lot of work.
I would argue that Brothers: A Tale of Two Sons or What Remains of Edith Finch are both examples of games that use inherent features of physically playing a game to deliver their stories in a really unique way.

I would say that kind of thing, finding ways of using interactivity to tell stories in ways that no other medium can, is an example of the field "maturing". (Beyond just "pass this test of skill or strategy to see the next part of the story, presented in an otherwise conventional manner").
it's not quite as straightforward as just UID mapping. Assuming a standard install of Docker, the container processes only have a limited set of capabilities, have an AppArmor/SELinux profile applied and have a seccomp filter also applied, which makes it harder to break out the the underlying host.
Are these providers actually going to compete with landline ISP's? My landline ISPs over the last couple of years have had monthly data caps ranging from 256gb to 1tb. My cell plan currently throttles me after I exceed 6gb... That's two orders of magnitude that my wireless provider would have to increase the cap in order to compete with the landline ISP.
Audit of NHS Trust's app project raises more questions than it answers
Perspective. We didn't know it at the time, but looking back it's pretty obvious. Once the issue of the forks and the SegWit activation was cleared, the price rose relatively fast.

And I'm talking in relative terms; it was undervalued relative to what happened next.
Or to just go to the rings of Saturn, which are mostly water ice, and which give you the added advantage of having something pretty to look at while you refuel.
I don't disagree. There are alternatives to archive.org [6]. There are ways to decentralize centralized services. I'm sure you can think of many more ways to do better than what is done. I mostly linked to https://archive.org because of the "https" in the URL. My point is that there are technical solutions to the technical problem of preserving history that do not require weakening the security of the whole internet.

[6] https://archive.is/
I don't want to be pedantic, but doesn't this comment imply that there will big changes and hence the world is non-static?
C# doesn’t easily compile to the web. This is why they are rewriting office 365 in the first place right?
Just wondering. Would it matter if they win on state level if the traffic is slowed down on its route in another state? Also do the states even have the authority if the federal government wants to enforce the states to get rid of NN?
I m not sure if it s an effect of age, but i can barely watch a movie. I believe however its a consequence of technology that ‘just works: we demand (re-)solutions now and are impatient.
Read Option Pricing and Volatility, by Sheldon Natenburg. This is the bible for option trading. As a former member of the now defunct AMEX, every trader from here to Chicago is familiar with this book.
Yes they're also hedging their bets by getting distribution via Xfinity - I can watch Netflix through my Comcast cable box. This essentially reduces them to a "channel" ala HBO (albeit a deep channel).
If the only concern is about unbound potential losses, You can cap your risk by buying far out of the money calls
I know the architecture too good, more than I need as I was leaving MS recently. This tweet is not likely to happen.
Talking about desktop apps, this doesn't make any sense. Office apps have millions of lines in code and many years of lost knowledge between the classes. Just too many screens, checkboxes and features. A complete bloatware. Buy MS doesn't take any feature off the app- if you have 1B users, most likely that any minor feature cut will hurt some of them, hundred of thousand of them, and they are probably paying, not free riders. Any new office version only hides features, letting this small users group to get them back, never deleting lines of code. MS doesn't want to get billions fined as happend when they moved to docx/pptx/xlsx and didn't support backwards.

Talking about the online versions of office, it is a mess. For Word and PPT they tried to replicate the desktop to the web, rewriting the code, so their current online versions are already using (mostly) new code dedicated for the web. Saying that, they also have a huge number of legacy components and features that they need to support for backward compatibility.So for word and ppt this is a mix in code, not a total re-write. They also have a substantial subset of the features that appear only in their older desktop brothers. Even the PMs don't dare to dream on features parity between the versions.

Excel is a different world and a big-big elephant that won't likely be rewritten any years soon. Think of a code that is maintained over 30 years. Literally, developers are still maintaining code written in the 90s.
Trying to bring Excel to the online world made MS create an architecture of html frontend which communicates with a dll session behind the scenes. As weird as it sounds, this dll lives as long as the browser has the spreadsheet opened. Think of it as MS raising VM for every excel file that is opened over the internet. While this is not very cost effective (saying the least) and not very performance friendly (hey ma! I made an understatement) this allowed them to move forward with Excel online very quickly by having a UI communicating with the bloatware dll that runs on the background in Azure. Summarizing Excel, it probably won't also be rewritten in js.

So this PM might be talking about the new apps - Teams or flow or something similar. Not the office cash cows. Personally I really hope he is talking about Skype which became a total garbage in the past versions.

Anyone from Google here? I'm looking for a job :-) ping me (chengmau) in the blind app
It's even more complicated in my experience. You get up to 1080p in Edge compared to only up to 720p in Chrome or Firefox, but you still don't get 1080p guaranteed. For me it varied depending on the specific movie or TV series, and I often still didn't get 1080p in Edge, and even only 480p sometimes (as confirmed with the debug overlay). Only switching to the Netflix Windows 10 App and later to a Smart TV actually fixed this and gave me consistent 1080p content.
What are you talking about? You can do directional with multi-leg just fine. Like you could buy the August TSLA 350 for $25.50 and sell the August TSLA 400 for $9.25. Selling the higher contract lowers your entry price to $16.25 and you'll make money at expiration from TSLA being $366.25 instead of having to be above $375.50. Max upside ends at $409.25, but more likely to actually be profitable.
> The reliability is up to 99.9999%

"up to"... Certainly looks like a wrong wording.
Every company and their mother is tracking mouse movements. How is this trending???
>"Not all cookies are bad, mind. They're one of the earliest widely adopted implementations of "local storage" for websites, and for a time they were the only reliable way a site could remember a visitor between requests."

Could you elaborate on what you mean by "for a time they were the only reliable way a site could remember a visitor between requests"?

Isn't this still the dominant/primary way websites add state to a stateless protocol? What other way is there for managing se? Is there something that has supplanted cookies for "remembering" or managing sessions?
Machine Learning: Black Magic to Science
It's inevitable with the efficiencies brought by technology. You need fewer and fewer middlemen, and so you end up going vertical.
The +ImportantWord syntax was recycled for Google Plus searches at some point and replaced with "ImportantWord". And now to get a "Important Set of Words" query to work, you now have to enter some special "Verbatim" mode by going into Search Tools and clicking on a special checkbox.