skysight-inc/HackerNews huggingface dataset:
Great to see protocol versioning over negotiation. I don’t think replacing OpenSSH is as important as wireguard replacing OpenVPN but it’s up there.

Protocol tasting notes:

- If you’re going to dole out PSKs, why care about signatures? If you’re going to dole out PSKs, why are they separate from the knock PSKs? (You sort of address this by sharing knock PSKs are per server and handshake PSK is per pair. But if I have a PSK per pair anyway, why not use it for knocks?)

- the knock protocol looks like semantically it wants a PRF. Is there a reason not to make it a PRF?

- Why isn’t this a Noise instantiation?

- Why sign instead of 3DH?

- Why is PBKDF2 involved in the PSK (preshared key)?

Of these, not using a PRF feels like a smell (probably not a vuln, but why would you choose to have that in your spec?). On the other hand, having PSKs and then choosing to have PBKDF2 involved (to stretch a passphrase, I guess?) and then having a key exchange anyway is really strange to me. The point of a key exchange protocol is to get a shared secret. But the protocol starts by assuming you already have a shared secret! Just use that already. Plugin in a PRF and the current time and some randomness and BAM: fast trustworthy crypto forever.

Of course, there's a reason we don't use PSKs all over the place: it means that instead of exchanging N public keys you have to exchange N^2 secret ones. People do it, but it's not the default. I'm fine with something that uses PSKs and something that uses public keys, but I don't understand why a system would have both. You get the operational complexity of PSKs and the performance of KEXes. Why bother? (I understand that the protocol says the PSK is to make it post-quantum, but you'd get identical post-quantum properties if you just skipped the KEX!)
Project Orion was supposes to reach ~10% of the speed of light by using fission bombs and could theoretically be built using 1950's technology.

There are other proposed schemes to travel at ~light speeds - light sails, nuclear fragment rockets, but I'd bet on nuclear fusion in the not so distant future.

Faster than light travel may be off the table, but I see no reason why nuclear energy alone could not get us "close" to the speed of light in the next centuries or so.
Are you sure? i.e. has this been proven on pro level SC players?

I think a smart player could know the player was going Zerg, and wall in.. and make some decisions that make the micro of Zerg less useful.
There's a bus stop right outside of the Seattle building, and it has revolving doors.
Do you take magnesium? I have the same kind of thing. When I add magnesium, and stick to the diet, I feel like a normal human being.
How big are neutron stars?
Good one, though it's not really related to the field of psychology and its research.

I guess maybe one could argue his vision was influenced by his studies of psychology, but its hard to know.
The US Shermans were equipped with cannons that had weaker armor penetration by design so that they could fire more potent high energy rounds that would take out infantry since they were expect to meet very little tank resistance. I think part of the 5:1 myth is from the fact that out of a platoon of 5 Shermans only 1 would be equipped with a gun that could penetrate a Tiger from the front.
MFA from the command line
Instagram star isn't real. But brands are buying in
Effective Sales Techniques Tips Video
Carnival scam science – and how to win [video]
"Over the long run, that is always true. Just hold and grow, until you are within 10 years of retiring."

No, it isn't. It's quite possible to lose money with a buy-and-hold strategy if you get unlucky, particularly if you aren't diversified. It's probably the most reliable way of investing, but you can still lose money. Stocks are not guaranteed to go up over all possible 50-year intervals.

Monte carlo simulations of S&P500 investments illustrate this:

https://seekingalpha.com/article/4109617-buy-hold-just-works...
Far too many hyperlinks though. Who clicks on hyperlinks for words like "defeat", "complex", "train" and "move"? Seems like if I link them then they'll link me and we'll all get higher ranking search results. Maybe I'm the only one who gets annoyed by this.
Ctrl-F Jovelle Tamayo

It's on the corner of third and lenora.
I like your example of pong; because it illustrates how a simple problem of 'AI winning' can spiral out of control into a nightmare of work.

On the other hand. Pong is simple with 1 rule. Starcraft, or in this case Dota, have multiple facets to win.

Plus, most SC players just gg out of the game when they know they've lost. I'd think that is a more apt use for AI. Like chess, see out X moves; if it's a lost cause; call it, and get to the queue faster for another game.
The goal of the experiment is to test the harpoon itself. You could have a moving target but then it creates a constraint on tracking a non cooperative target and orientating your harpoon accordingly, which is quite a feat in itself. Also, by having it on the spacecraft, it allows observing the impact point later on with the in board cameras.
I'm not sure if you actually have ever used React but every single major version update is non breaking. The topics discussed in the link provided are discussing how an internal library is being updated (Context API) and how these functions are being depreciated in version 17 (https://reactjs.org/blog/2018/03/27/update-on-async-renderin...). The above depreciations are functions that typically should not be used in a v16 React application anyway! Using them typically means there lies a bug in your props updating logic.
And that's a fine answer. "Nobody has a plan for that because it's so unlikely, so the outcome is kind of unknown", then maybe some examples that come close.
Technologically advanced.

Meaning: likes to explore, accumulate knowledge/understanding, harness the laws of physics for its own betterment/pleasure.
Main discussion: https://news.ycombinator.com/item?id=17392455.
And, is this a pirated book?!

I see nothing on the O'Reilly site or the host site that gives them the right to redistribute this freely, but please let me know if I'm wrong.
They didn't during the original mission duration.
There is no evidence of this. If you have a system outside the US sending encrypted data to a system inside the US, all anybody can see is that these two systems are talking to each other. They can't see whose communication is inside that encrypted data to tell who is talking to whom and when.
TL;DW - dividing carnival games into games of luck, games of skill (usually with some sneaky tricks to make people overestimate their chances of success), and games that are more or less impossible to win. Most useful tip - don't ever expect to win at a stall which offers giant, expensive prizes.
One could have bought again at 1100 and still reduced losses significantly.
If you own the network it's not super hard to just filter all traffic doing DNS. If you have a properly owned phone, you can probably run this over your phone hotspot and do the packet inspection that way. Then you can block all nintendo traffic, while still not having a "custom" DNS. If you really tried, you could still even have your custom DNS except it would be spoofing another server.

The point is that if you own the network (and you do), then the clients are nominally at your mercy.
Yo, this probably isn't the type of HN comment you're used to, but I just wanted to say thanks for enriching the dota community. I know that's not really why you're doing any of this, but as someone who's deeply involved with the community, people get super hyped about what you guys have been doing.

They also understand all of the nuances, similar to HN. Last year when you guys beat Arteezy, everyone grokked that 5v5 was a completely different and immensely difficult problem in comparison. There's a lot of talent floating around /r/dota2, amidst all the memes and silliness. And for whatever reason, the community loves programming stories, so people really listen and pay attention.

https://imgur.com/Lh29WuC

So yeah, we're all rooting for you. Regardless of how it turns out this year, it's one of the coolest things to happen to the dota 2 scene period! Many of us grew up with the game, so it's wild to see our little mod suddenly be a decisive factor in the battle for worldwide AI dominance.

Also 1v1 me scrub
Why does everything as simple as this need to be a React project these days? It would be so much better if it was pure vanilla CSS or a Pen.
If anything, unwinding QE would raise long term rates.
Ask HN: Choosing where to incorporate (between US and EU)
We are building a SaaS targeted to European companies. We are based in a latin american country where the exports of services is treated the same as the export of, for example, a container full of apples: For each SaaS subscription over a $1,000 we sell, we need pay a customs agent a fee (starting at ~$150). Also we would like to use Stripe and their broad range of european payment methods, and Stripe is not offered in our country.

As incorporating in our home country is not an option, we are looking for a place to incorporate.

We can incorporate a company in Europe, to be "closer" to our customers. Ireland seems a good option as they speak English, and they will stick to the European Union. There are some tax advantages as well, but I don't expect to see much profits anytime soon. In the other hand, for non-EU residents, they require to buy a $1,000/year insurance (plus the registered office fee, the company secretary fee, etc) and there are not many resources and tools on how to operate your irish company. I fear that I will have to hire a lawyer or an accountant for even the smallest question. Also it looks like that I need to fly from my country to Ireland to open the bank account.

The other alternative is to set up a Delaware C Corp or LLC. There are plenty of resources and tools to help you run your business and there are services (Stripe Atlas, Gusto) that makes it easy to start and even get a US bank account. Also, if everything's goes well, we may look for US investors and I guess it is easier for them to invest in a well-know structure, such as a DE C Corp. On the other hand, it seems odd to have a Latin American-based US company selling to Europe.

We are talking to lawyers to sort this out. But it would be very helpful to know your experience and opinions as fellow entrepreneurs and investors.
Looking at the table, it's odd that only "inversions" are counted as predictions, and there seem to be far more cases where it got "close" to zero, but not quite there.

Without a good explanation on why that exact point is so critical, I am a bit skeptical that this is anything but noise.

If there is a good explanation of why it is critical, then we're not really in worrying territory yet either then, because we're not there yet, and we're in the zone of lots more false positives.
Please could you elaborate on the cloud vs on-premise comparison? Are you including the initial on-prem costs of buying the hardware?
It is essentially the same frequency of links that you'd see on any Wikipedia article. In a field where there is an enormous amount of jargon, it is probably a good thing that they clearly define as much as possible.
Fanny means something much dirtier in UK English than in US English.
adding money to the considerations in the heavy-handed way (above) is a common rhetorical way to close discussion on the topic as if there is no other 'realistic' option.
The difference is that a powerful group of people is enacting policies that have triggered recession/depression in the past and no good historical precedent/academic support for working. It's seems kind of crazy to me we're ignoring that part.

We're starting trade wars on multiple fronts, exiting or weakening multilateral alliances (and simultaneous giving an advantage to our global adversaries), and weakening the balance sheet of the federal government (during a business cycle peak). Of course this is going to end terribly.
EVs have half the per mile operating costs as an internal combustion vehicle. This increases EV utilization on the network, incentivizing the deployment of EVs on Uber’s network by drivers.

You shouldn’t buy an EV solely to drive for Uber, but if you are going to drive for Uber and have an EV, you should get more rides sent your way.
Sickbeard was also a giant piece of junk that crashed all the time, and sucked all available system resources.
We need a word for pointlessly bringing up quantum computation to prop up a vituosically weak set of arguments. Like Godwin’s Law, but more worse-er.
Akon is creating a futuristic city and cryptocurrency in Senegal
I want to see this datapoint on their AI and Compute chart: https://blog.openai.com/ai-and-compute/
> the communications will not be directly used against you
>in court.

Directly. But via parallel construction...
Agreed! Can't wait to not have to play Dota 2 with humans :p
> Partially-observed state. Units and buildings can only see the area around them. The rest of the map is covered in a fog...

Actually, this is true on multiple levels. There is fog of war, but then there is the fact that a human player can only look at a given window of the game at a time, and has to pan the window to see the area away from their character. (The mini-map shows some level of detail for the rest of the map, but isn't high resolution and doesn't show everything that might be of interest.) Also, you can only issue orders on what is directly visible to you, so if you pan away from your character that restricts what you can do.

Is OpenAI Five modeling this aspect of the game? Otherwise it's still "cheating" in some sense vs how a human would be forced to play.
I don't see how this is economical for a full time driver. Maybe a Bolt would have the range to make enough money between charges. Driving a (presently available) Tesla for Uber would be a crazy money loss. No way a Leaf could do it (I drive one daily), even with the quick charge port.

So a Bolt is probably $35k, and you are supposed to drive that full time, with time out between charges, and still make enough money to pay that off and make a living?

I suppose you could cheat and use a Volt. It's electric, but can run 100% off gasoline.

Of course it just reiterates the point that Uber and Lyft were never supposed to be full time, rather a way to quickly make a buck by sharing a ride.

Until used EVs with 200+ mile range are widely available, I just don't see it being economical. Of course Uber will sucker you into leasing an EV, where you net pay after expense will probably be $3/hr.
On purpose, none, of course. It is very difficult to avoid trace amounts.
Is There a Limit to the Human Lifespan?
Yes, I am aware, I did not mean random search as in random actions, but random search with improved heuristics to find a policy.

The point being that that the bells and whistles of PPO and other relatively complaticated algorithms (e.g. Q-PROP), namely the specific clipped objective, subsampling, and a (in my experience) very difficult to tune baseline using the same objective, do not significantly improve over gradient descent.

And I think Ben Recht's arguments [0] expands on that a bit in terms of what we are actually doing with policy gradient (not using a likelihood ratio model like in PPO) but still conceptually similar enough for the argument to hold.

So I think it comes down to two questions: How much do 'modern' policy gradient models improve on REINFORCE, and how much better is REINFORCE really than random search? The answer thus far seemed to be: not that much better, and I am trying to get a sense of if this was a wrong intuition.

[0] http://www.argmin.net/2018/02/20/reinforce/
Isn't this just the same problem IBM has had for...well...most of my adult life?

I had a contract gig at IBM Advanced Technology in Boca for about 18 months in early 2001-2002. Talk about missing the boat...

I was brought in to prop up a soon-to-be-failed project for the Japanese government...basically a "Napster for Tokyo" that would allow paid-for-play C2C song sharing for customers of "the Big 5" record companies.

I asked simple questions that no one could answer...why would people pay for content when it was so easily available via other means? you are using DRM how??? really? you need a special player to play the music?

Why would anyone do that?

I stayed for a few simple reasons...the fat consultant check I cashed every Friday. Exposure to some outstanding engineers and coders where I got to learn from true talent. The great strip club on A1A next to my rental in Lauderdale-by-the-Sea.

But reading over this article reminds me that IBM is just too big to get out of its own way, and has been for the longest time.

[edits]
"Offering managers didn’t have technical backgrounds and sometimes came up with ideas for new products that were simply impossible."

Sounds like they drank their own kool-aid, e.g., "Products That Enhance and Amplify Human Expertise," rather than understand the actual limitations and possibilities of ML. And it seems to me that they're still doing it with this nonsense about a human-level "AI" debating stack.

The oversell seems a real shame in light of how much good can be done with EMR and machine learning / NLP.
DOW 2005: ~10,000
DOW 2007: ~13,000
DOW 2009: ~8,000
DOW 2009 (later): ~10,000
DOW 2011: ~12,500

A 2 year window of precision is completely useless
It's a pretty interesting topic/field to get in if you're a security researcher, just because everyone is starting from zero and a lot of vulnerabilities are quite surprising.

If you're interested we've made a TOP 10 of issues with smart contracts here: https://www.dasp.co
2-3 years is a great prediction if that's a stable window. But if the range is 0-3+ years, it's not clear how much benefit there is. The average growth cycle has been 4.7 years since WWII, so blindly predicting recession within the next 3 years will pan out ~60% of the time.

I guess a solid 0-3 prediction would still allow aggressive positions outside that window, and caution or shorting as you come up towards 3 years since the prediction. But precisely because that would be so effective for investors, I assume it can't be that consistent a signal.
Thanks for the tip, started out really interesting!
I have OPNSense configured not to forward queries so it uses root servers directly, but it's of no consequence because like I said above, Unbound on OPNSense blocks RFC1918 responses by default anyways. As long as my devices are using my router as a resolver, I'll only get public IPs as responses to DNS queries. My misconfiguration in pihole just temporarily bypassed that.
I would even dare to stop calling it plasma physics at this point, but rather plasma engineering.
That's so darn cool. Dendrochronology seems like a science right out of a novel somewhere that someone said, wait, that might actually work in reality!
> "... making it the only database to combine the speed, flexibility, and power of the document model with ACID guarantees."

PostgreSQL with JSONB columns seems to have beat them to the race by quite a wide margin. MySQL too, for that matter.
The missing ingredient in the first wave of NoSQL was ACID transactions. (Disclosure, I was an early contributor to Apache CouchDB and Couchbase Mobile).

Now that we have global ACID transaction algorithms like Google Spanner's and FaunaDB's (my current employer), mission critical apps are moving to NoSQL because multi-region consistency is safer and easier to deal with than RDBMS scale out. With ACID transactions, temporal storage, and object-level security, these distributed databases can beat blockchain at its own game by becoming a scalable runtime for smart contract applications, with all of the safety but with the flexibility of a database.
Thanks for the reply, I like first only showing the subreddit with the option to further drill down.
Google Search Console releases URL inspection tool
Amazon Workers Facing Firing Can Appeal to a Jury of Their Co-Workers
> I'd argue this is a double barreled footgun as most usage of MongoDB is from garbage collected languages. One wrongly time GC and your transaction is dead.

That’s not how it works. The transaction as a whole is sent to Mongo for execution server side; the client isn’t manually controlling transaction execution.
Welcome to middle age ;-). I had a stern talking to a few years ago by my doctor and was forced to take measures as well or face the prospect of likely complications.

This stuff is hard because we people are not very rational. So, here's a few simple practical things.

- Get a scale, put it in your bathroom, and use it as often as you can. Step 0 is simply knowing how you are doing. I know down to a few hundred grams what I weigh most of the time and I've learned the impact of my behavior on the scale. A big dinner, excessive drinking, etc. has a measurable impact that peters out over several days before I'm back to "normal". Simply knowing, has a moderating effect on what I do.

- Make changes in your behavior that you can turn into habits. Starving yourself definitely works short term but you'll bounce right back as soon as you resume your old habits. Kind of pointless. Regular fasting is great though because it becomes a habit and you don't have to take decisions.

- Try not to set your self up for being tempted to eat too much. In my case, going shopping after work when I'm tired and hungry leads to predictably bad decision making. Make sure you eat before you shop.

- Be honest about alcohol. I actually quit drinking completely for a while. Turns out that going for after work beers multiple times per week has a insanely huge caloric impact. I identified it as the single biggest thing that was impacting my weight and duly eliminated it for two years. These days I drink but much less than I used to. In my case I found it easier to not drink than to drink a little. One of the side-effects of alcohol is bad decision making. 1 Beer always leads to more beers. If this is hard for you, that's a good sign of being addicted. All the more reason to try to change things.
This feels like Ender's Game without Ender.
If we make this the policy, what do we do when the subject of a piece does not provide that final round of comments? Do the subjects of articles get to prevent publication by withholding comment? Or can the articles go ahead without those comments?

Because what you're describing is generally what is done, what has been done for decades. This is why you often see a sentence near the end of an article stating that the subject declined to comment or did not respond when reached for comment.

The assumption seems to be that people are interested in truthful reporting. In fact, most subjects do not want truthful reporting. They want favorable reporting, which is often not the same thing.

There seems to be very clear evidence that Zimbardo lied, at least, and possibly acted extremely unethically, possibly even illegally. Why would he be interested in providing comments on a story stating so? What would be his motivation? By withholding his rebuttal until after original publication, he can base his response on which parts of the story are gaining traction, if any. In this case, he's doing just that, and ignoring several elements for which he has no good answer.

It would be very nice if life were documented in a series of objective wiki pages, but so long as humans are involved, that will never be practical.
Why does it matter whether or not it's typical or socially normal? Are people going to beat you if you stand out as a minor nerd?
A couple weeks ago I was asked to meet with two actuaries. Their company (a big one, I'm working for them on contract) is trying to promote the use of Machine Learning and when they heard I had just completed post-grad in ML, they were eager to pick my brains.

In a 60 minute meeting, we spent 5 minutes discussing how ML worked and 55 minutes going in circles. They had lots of data, but no problems to solve. And there are only so many ways to explain that a large dataset is not equivalent to a business problem.

I'll be sending this on to them.