skysight-inc/HackerNews huggingface dataset:
> ... focusing on banking... - yeah. Commonwealth Bank Privacy Policy:

5. Who do we share your information with?

- Service providers — for example, mortgage insurers, loyalty program partners and our product distributors

- Businesses who do some of our work for us — including direct marketing, statement production, debt recovery and IT - support

- Organisations involved in our funding arrangements — like loan purchasers, investors, advisers, researchers, trustees - and rating agencies

- Auditors, insurers and re-insurers

- Current or previous employers — for example, to confirm your employment

- Credit reporting bodies and credit providers

https://www.commbank.com.au/security-privacy/general-securit...
Lwan: A high-performance and scalable web server
It's also interesting that people perceive Elon Musk as an engineer because as far as I can see he is primarily a businessman. He got a bachelor in physics but then moved on to earn a bachelor of economics.
Thanks for the heads up, I'll have a play. What's the vertical height of your display and zoom level?
Musk gets told his PR stunt is unwelcome and should bugger off, and his reaction is to call one of the people who risked their lives to save those kids a paedophile?

What a narcissistic prick. Confirms his stupid sub was nothing more than ego-stroking.
Show HN: I made a service to easily manage feedback from customers
Judge jails defendant for failing to unlock phones
It's misleading to call it one of the bestselling phones in India. This article is the first time I even heard about this phone.

It's just a bit below the price of the cheapest xiaomi, which is miles better, and can arguably be used as a less shiny i-phone replacement
For better or worse, "container" is the most intuitive concept to use when trying to explain monads. Yes, there are monad instances that don't really fit the container model, but they're not important at first. Definining "monad" as a thing for which monad laws hold is exactly the sort of almost-tautological non-explanation that makes people roll their eyes at FP aficionados.

However, I agree that the important step in understanding monads as an abstraction is realizing how map and flatmap make sense for many things other than lists.
> So the recursive resolver (your ISP, google, cloudflare)

Why not yourself? Your ISP can still see the RR working, of course.

> We also need encrypted DNS for the recursive lookup itself so you can run your own resolver somewhere.

This would indeed be optimal but would require upgrading a significant portion of authoritative name servers, sooo... might take a while.
which laptop is this?
I don't get it. (And I don't think it's because I'm a "true mathematician".)
Tool as a tool (I work daily with a "nth-priority-ideas.md", and appreciate that plaintext files clutter-free, portable, customizable, etc).

But what I found inspiring is to maintain a list of accomplished tasks, not only a daunting one of todos. My PhD co-advisor run one, maybe I should have copied this approach.
If you siphon off the water captured by trees, won't you risk killing them?
Or services which use subdomains for individual users, e.g. #.github.io, #.tumblr.com, #.blogspot.tld and so on.
> far too much can rely on a few events that are basically a coin flip

Can you give us some examples?
>Unsworth's words may have been crass, but they weren't an accusation of anything

To be fair, he accused Elon’s effort of being a pr stunt. Doesn’t justify the response but it was an attack of sorts.
> Essential complexity in this case is just a need to run a code. That's it. I just want to run one command, with one or two switches max, and get the result running in a browser.

So, why don't you just double click your index.html? Or is there more to the problem statement?
> I think Elon Musk lacks the empathy to understand the damage he's doing to those around him - family, employees, strangers on the internet - when he's throwing away words like that; I genuinely think he's actually lacking these social skills.

It's not just social skills that he lacks, the interview with his first wife[0] where she notes that he regarded her grieving for their first kid (SIDS death at 10 weeks) as "emotionally manipulative"[1] is something else entirely.

[0] https://www.marieclaire.com/sex-love/a5380/millionaire-start...

[1] https://i.imgur.com/YDYeRW0.png
Is this a way for the ad-industry to evade pi-hole or similar technology?
> “If the linked article succeeds in linking any of the concepts of thermodynamics — which is one of the core building blocks of modern physics and relevant to almost every field of practical engineering — to DL models then that’d be huge boon. There are a lot of well honed techniques and tools available in the thermodynamics and statistical physics toolboxes which could vastly improve the ability of DL to be tuned for useful tasks in a scientific manner. ”

I think this is just wrong. Firstly, statistics has already been linked with thermodynamics for a long, long time, and people already have been using ideas about thermodynamic laws to describe potential functions and algorithms like Hybrid Monte Carlo and simulated annealing, even borrowing convergence metrics for things like parallel tempering.

When that connection is practical, it is about explicit, case by case algorithms, and not at all about recasting the generic interpretation of models into some other thermodynamic framework, which is just a type of cute toy analysis.

I would say specifically the example of Boltzmann machines highlights this exact point between a result that has pragmatic implications and a result that is just playing around with definitions.
https://m.youtube.com/watch?reload=9&v=gIVgUjj6RxU

Orson Welles’ F is for Fake is essential viewing if you’re interested in forgery.
Sure but there are numerous other examples where human activity has ruined the ecology...
Artificial Intelligence Chatbots – The new way of doing business
Great power, great responsibility, etc. not everyone can unleash a torrent of pain just by tweeting.

People with such power should be held to much much higher standards. Or better yet, they shouldn't have it in the first place.
Another rule of thumb I like to apply when mix-and-matching different levels of tests: how visible would a bug be in higher level tests? If things will fail in obvious ways, a unit test will give no benefit besides narrowing down the bug location in case of a failure.

But if symptoms would likely be too subtle to stand out, e.g. a typical bug would manifest itself in results that seem plausible despite being wrong, then it's a strong indication for unit tests.
Couple further questions:

When you built this, did you validate the idea at all with people in your own network (or extended network) wether they wanted something like this?

What (in terms of feedback) have you received from people you judge to be your target market?

When you say people don't convert, do you mean they don't even test the product or that they don't convert to a paying subscription?
Just a brief melange of twitter links, but worth noting that:

Global carbon emissions supposedly increased 1-3% for 2017: https://mobile.twitter.com/i/web/status/930027167689342976

And US EPA might’ve been underreporting some it’s methane emissions by 60% : https://mobile.twitter.com/chrfield/status/10153735848757289...

The US’s emission declines are decreasing due to economic / administration changes - from https://amp.smh.com.au/environment/climate-change/limiting-g... - “News in recent days that the Trump administration plans to bolster the ailing US coal-fired power industry by intervening in markets would worsen the global emissions picture.

The CSIRO's Dr Canadell said while US carbon emissions had fallen for a decade, last year's decline will likely be much smaller because of quickening economic growth at home and abroad.”
No, you don't know it. It is not like health insurance. You pay and submit the bill. They guy take over the negotiations. One objective is to get you back alive. The other objective is to pay as little as possible. The third objective is to make the whole process a pain in the butt that this guy will never try this again. Trust me. You have no idea what you are talking about. I know former military guys who work in this field. Keep downvoting me.
I absolutely adore Djikstra's stubborn and always eloquent insistence on rigor and purity in CS education, his unabashed refusal to see even one tendril of its mathematical connections be sacrificed for mere code production efficiency. If this case isn't going to be made at the university level, then where?
Yeah, this rings true from experiencing two kids at my home and visiting single children and multi-children families as a kid.

The single children where very demanding on their parents. The only source of attention and entertainment is the parents, so this makes sense.

Two children entertain themselves a bit more, but like in duopolic situations you have the most extreme competition. This leads to a lot of fights over shared resources.

With 3+ children fights over resources between 2 children don't lead to zero sum gains, so that the competition actually becomes less. Cooperation becomes more important. And the kids almost always entertain themselves.

I'd definitely say the 3+ children parents were usually the least stressed, but maybe that was just my impression. The older siblings at some point functioned as quasi parents to the younger siblings.
How can it be unworthy and wrong... yet understandable?

It's understandable to be pissed off and call the other guy an asshole. This is totally fucked up and not at all understandable.
That wasn't my experience - few people were really doing AGI (though some were, even up to the early 90s) but most effort in any area that was explicitly identified as AI was generally in applications (e.g. fault diagnosis and qualitative modelling - the areas I worked in).
That’s an accurate summary, but CDNs are important because they terminate huge numbers of sites. In your example censorship is relatively easy since network operators who want to block a site won’t have very much collateral damage by blocking your entire server just to deny access to that single site. CDNs, terminating millions of sites, make that far more challenging.
> Why not yourself?

Well, then what attacker do you defend against if your laptop asks your router via DoT but then the router does an unencrypted recursive lookup anyway?
Machine Learning Challenges in the Manufacturing Industry
You should hear some of his more informal interviews. He did a couple for Y Combinator, available on the podcast. The technical knowledge he shows is lower level than CEO activities provide. He's probably never in the trenches, but surely talks a lot with people who do.
I agree with you, but could you care to elaborate on that?
Get paid for predicting Snapchat's users in October
Speaking as both a ML researcher and an applied ML business owner (one who hired stared at one point — hi Piotr :), I respectfully disagree.

The replication crisis in "AI" may not be as bad as psychology (I wouldn't know), but it's not great. Sadly, my brain has somehow learned to equate "SOTA" with "hot-stitched crap, stay away". Too many painful lessons.

On the subject of publishing code: this is useful to the degree that it removes bad faith as the possible reason for the lack of replicability. But otherwise helps little in practical terms. You just have the privilege to sift through the bugs and bad design in more close-up.

"I am afraid you are right. I used to reach ~72% via the given random seed on an old version of pytorch, but now with the new version of pytorch, I wasn't able to reproduce the result.
My personal opinion is that the model is neither deep or sophisticated, and usually for such kind of model, tuning hyper parameters will change the results a lot (although I don't think it's worthy to invest time tweaking an unstable model structure)."

= quote [1] for one of the "new SOTA" papers from NLP (WikiQA question answering), where the replication scores came out 62% instead of claimed 72%.

I generally call this the "AI Mummy Effect" — looks great but crumbles to dust on touch.

[1] https://github.com/pcgreat/SeqMatchSeq/issues/1
I put money on Belgium (12.0 decimal odds) and Croatia (15.0) after the group stages, where some form was visible, combined with knowledge that they had some of the world's best players.

The odds shortened as the tournament progressed, I was able to hedge as the shortened odds made lay betting profitable.

(High variance in football outcomes means there's no guarantee of profit, I don't bet big sums.)
Raising a child in a doomed world
The real problem here in the US is that we have gotten away from tracking students at all levels, and we were never even doing it much compared with most of Europe or Asia to begin with. It's dragging down the whole system. But I don't want to totally derail this thread, so I'll just leave it there.
That's about it.

The theory is that if you put your server behind a popular CDN, then a state-level attacker is left with little choice but to block the entire server.

Another benefit is that attacks that can observe but not modify traffic will be less able to track what sites you're visiting.

There are risks though:

* It's unclear how resistant CDNs actually are to state-level attackers.

* It's unclear how resistant CDNs are to regular attackers[1]

* Corporations/Security-savvy users will find it difficult to control what [their] workstations can reach and cannot: Allowing access to a single cloud-based service may inadvertently allow access to a malicious command/control server sharing the CDN.

[1]: https://9to5mac.com/2017/02/24/cloudflare-server-breach-clou...
And how does that "forcing" work? You just install it voluntarily because you get annoyed by certificate errors on every other site?
It makes sense. If your car is covered with rust, you should be almost sure that no one will even try to steal it. :)
I'd like to see some scientific evidence of this (i.e. using multiple experiments, null hypothesis, etc.)
A vanilla install of Phoenix with Brunch yields a node_modules with 388 packages

Look at what Phoenix (https://hexdocs.pm/phoenix/overview.html) and Brunch (https://brunch.io/) can do. To suggest 388 packages for all that stuff is too much is ridiculous - there's a lot of functionality, so there's a lot of code. The fact that it's not one huge, opaque blob is a good thing. Could they be implemented with less code? Maybe. Does that mean they'd be better for it? I don't think I've ever come across a reasonable argument that says 'less code is always better'.

You could very reasonably argue that you don't need all those features, and maybe the two things are bloated. I would suggest that means you've picked two things that do way more than you need, and you've not chosen your tech stack very well.
I use NixOS on a day to day basis, and have encouraged others to do so - and I completely agree with the documentation issues described here. I’ll also note that using Nixpkgs/NixOS will practically require you to actively maintain at least some portion of Nixpkgs to keep it up to date and functional for your specific use case. I think that’s where a lot of the configuration mess comes from - NixOS modules have tended to be created to meet a specific user’s need, rather than meet some holistic design goal.
> They'll probably issue an NSL to some cert vendor, or just tell the NSA to extract their keys, and then listen quietly to all secured connections.

There's no "quiet" in this approach. The cert vendors do not have the certificate's private keys; all the server operators send to the cert vendors is the certificate's public keys. Therefore, the only way to listen on the secured connections through a cert vendor is to use the cert vendor's private keys to sign a counterfeit certificate, which is presented to the browser. And at this point, the browser has everything it needs to prove that the cert vendor was compromised.

There are also several other gotchas: Certificate Transparency can force them to publish their counterfeit certificates to the whole world; Extended Validation is allowed only from some cert vendors (and requires Certificate Transparency); and last but not least, this (like all MITM) breaks client authentication (client certificates).

Finally, this only applies to cert vendors under the USA jurisdiction. A NSL has no power over other countries.
It's really not that much money as an incentive. Doctors won't do it unless they believe it's a good thing.

Source: I'm an Australian doctor.
Yes, of course. Anything else would be DOA.

On a general note: there really seems to be an extremely inaccurate narrative regarding AV1 and speed taking hold. I can't understand why it isn't easier understood that a reference implementation is about accuracy only, completely ignoring performance considerations. Not in the usual "we'll now try to make it faster", but as in "this is never meant to be used in production, and it's performance is in no way indicative of the performance optimised encoders will see".

As but one example: media encoding is pretty close to being "embarrassingly parallel" in principle, making the first three orders of magnitude easy wins for a straightforward GPU implementation.
Its not the idea that Australians mistrust - its the implementation. No great technical project in the last couple decades has been successful.

Under the current government we have the broken NBN, the fractured MyGov that has been repeatedly hacked, the falling over census website, other broken health care systems.

We can't trust that they can build it safely.
ParcelJS was great before Webpack 4, but now Webpack has a very good zero config mode you don't really need ParcelJS. It's still nice though.
Accenture - with Oracle and Orion Health - according to this: https://www.itnews.com.au/news/my-health-record-replatformin...

Hilariously, they've already let on they're not going to renew the Accenture deal - which no doubt will _highly_ motivate them to provide exemplary support and security over the next two years:

"The Australian Digital Health Agency has begun talks to replatform the My Health Record system ahead of the 2020 expiry of its multi-million deal with national infrastructure provider Accenture."
> There are some quirks in the golang ecosystem which mean you end up analyzing your dependency tree way, way, more than you do in basically any other common language.

What are these?
It boggles my mind that these are movies that need to be "discovered". There was a time when everybody had, at the very least, heard of them.

I'm so old.
Show HN: Hasura – Fast, instant GraphQL APIs on Postgres
> When you built this, did you validate the idea at all with people in your own network (or extended network) wether they wanted something like this?

Having worked in 'websites' for 9+ years, I spotted the pain points people had with various aspects of updating their website - paying an agency thousands to create/update a simple brochureware site, not being able to navigate various CMS's people put in place, etc. I spoke to multiple people in/out of my network and in my opinion, validated the idea.

> What (in terms of feedback) have you received from people you judge to be your target market?

Good question. I've had less feedback from my target market, vs. my network (designers, developers, etc). I think this is where I didn't do particularly well. I validated the idea with the target market, but in terms of ongoing feedback of the product, I didn't acquire that.

> When you say people don't convert, do you mean they don't even test the product or that they don't convert to a paying subscription?

They reach various phases of the sign up process. It goes: Email/password -> Auth with FB -> Pick FB Page. Then you go through to your Dashboard, where you can view your site online, or pick a new theme, etc. People got to various stages of this, with most people going right through to the Dashboard (a created site), but rarely deciding to pay.
Phoenix is actually very agnostic as far as asset packaging goes, one can swap Brunch for Webpack or Parcel (or nothing) easily. So it's not to say those 300+ build-time-only node packages have anything to do with Phoenix (or Elixir, or Erlang's) ability.
Invidious is what YouTube should be
Why do startups fail and how to avoid it? – SlickAccount Blog
As there are relatively few goals, anything that can turn a goal into not a goal or vice versa can have a massive impact on the game. For example the penalty decision against Croatia in the final.
Another thing that adds to the randomness is the chance that a key player may be sent off or injured.
Someone deciding to handball the ball out of the way, a tackle that goes harder in a temper flare. A penalty that is saved/missed
Time-to-market is the only valid argument for writing crap code and not unit tests. I'm not sure if you can seriously argue with economic reasons when talking about testing. The most costs in software development arise in the operations/maintenance phase and are probably (there are much papers on this topic) multiple times higher than the costs of the implementation phase.

I agree that every software development team has to make their own decision to balance development time and maintenance cost but I don't agree with this low entitlement mentality of writing correct code in this article.

Of course there are also costs when implementing tests and your unit tests are rendered useless on design changes. But so what? You're also decreasing code assurance and it's better to increase it with tests so that you won't encounter bugs in production which is much more expensive than writing tests.

Software development is not only about adding functionality but also about ensuring its correctness.
I think the "scientific consensus" you describe never existed.

I am no specialist myself, but I remember reading a long article about Easter Island, signed by several archaeologists. They were really annoyed by the charismatic people that propagated their romantic views on Easter Island and ignored everything the archaeology proved. IIRC they especially blamed the popular book "Collapses", though others non-historians neither archaeologists, like the Kon-Tiki leader, had propagated other fantasies.

Studies proved the Rapa Nui inhabitants were better fed than inhabitants of other Pacific islands, though the women were below the average and the men above. They had developed technologies that palliated the lack of trees, notably an atypical irrigation system: they scattered black stones in their fields where water condensated at night. There are no remains of wars: no heaps of bodies and no weapons. The moais were not brought down by conflicts, they were laid down delicately when the funeral practices changed. At the same time, the inhabitants stopped producing moais, but it was not abrupt, and no statue was left unfinished because of this. No trace of a collapse until the Europeans arrived.
What's even more disturbing, is that Visa/MasterCard are possibly get itemised data from store transactions, like Milk BrandA, bread BrandB, Medicine Name, BrandC.
I wouldn’t intentionally place my health records out of my own control, because I have significant risk to my life if those records become public. Having certain illnesses and medical history is inherently political in 2018 - being trans can result in violence against you, talking to your doctor about STIs - even just prevention - can get you kicked out of your home, having medicated/treated schizophrenia will result in losing job/housing/etc opportunities.

This isn’t going to change even if all those records become public in some way.
What are the strategies to build a successful business among the competitors?
It would be hard to convince me to sign up for such a study, if there’s a 50% chance they give me a placebo and I die.
As well as opting out, if you're concerned about privacy it might be good to contact your doctors directly to let them know that you don't give consent for your data to be uploaded in the first place.