skysight-inc/HackerNews huggingface dataset:
Oh boy Mickens must really hate blockchains and uncensorable platforms like a̶s̶s̶a̶s̶s̶i̶n̶a̶t̶i̶o̶n̶ prediction markets
Nvidia Strong Q2 Earnings but Drops 5% on Weak Q3 Guidance – Says Crypto Is Dead
And of course, there's Ada where you can use 'First and 'Last.
Ignorant, unintentional, self, incidental.

Stupidity is probably the biggest threat. Dietrich Bonhoeffer:

https://religiousgrounds.wordpress.com/2016/05/11/bonhoeffer...
For the record, I'm working on a topological data analysis project that is in some ways quite similar to this, and I'd be astonished if a single community hospital has the depth needed. We're working with thirty-some.
> Yes. https://code.visualstudio.com/docs/supporting/FAQ#_how-to-di....

That's opt-out, not opt-in.
I've also thought a lot about this problem (I recognize a lot of the intermediate steps); I've got even a good idea on user applications that could benefit from that unified data and computation model.

In fact, I'm more interested in the practical applications than I am in the underlying model. However, I'm glad that such model is something I'm familiar with as is logic programming, and not some obscure branch of category theory full of point-free abstract operators.
I have to ask, because IoT and lack of security are synonymous, who is providing secure IoT platforms to consumers? Is there history of such companies failing?
Yup it's his personal Twitter. No one was contesting his right to post whatever he wants. But as soon as you're trying to address an audience it comes with certain responsibilities. You're free to ignore these of course but then don't be surprised if you get backlash or if new people don't listen.

I'm not really sure why you need to equate being civilized with wearing kid gloves? Is it hard for you to not call people stupid when addressing an audience? Or rather, if you do, does it help? You can call people stupid all you like in private but if you want to educate developers on how to do better I'm not sure why you're so intent on going down this route.

People also often try to make this a generational thing and blame silly emotional millenials but not attacking individuals isn't a brand new concept. And until people stop buying Windows and VS licenses en masse these people have no real reason to worry over their job and thus no real reason to listen to personal insults.
Iirc, PayPal responded to a previous support request from us stating they were aware.
How about a law where someone who finds an exploit can claim a bounty against the company selling the product or publishing the website? This doesn't address the machine learning part, but it does address IoT and security generally.
Using CSS Transitions in web designs
Imagine if the Purple Wedding had ended with a celebratory fight- a joust?- gone tragically awry, and Tyrion was prosecuted with pastry.
Such a company would be maybe 5 years late to the market, so...likely would never happen.
It is no longer required that it be force-enabled on ARM.
A quick and dirty option could be text to speech. It won't be as nice as audio, but easy to code and less bandwidth.
I think you can define a country as a 3rd world by the amount of foreign aid that country is getting.
Writing an interactive Telegram bot using Claudia.js
intel is still single thread performance king and will be for the foreseeable future. It's the most important performance metric when considering a desktop processor for most workloads.

While arm is catching up, there is no gaurentee that it will actually be competitive one day, not to mention beat it. Intel is still a beast and spends more in R&D than what amd took in last year. It would be foolhardy to write intel off.
It was not a design feature, but IPv4 NAT provides some anonymity that IPv6 will take away in the future (if it hasn't already).

ISPs in my area assign a prefix per customer; If you know the ISP, you know the length of the prefix, and can thus pinpoint the exact ISP customer with every connection.

On ISPv4+CGNAT, the common deployment, they can't do that.
Forward Security is about creating a single session key and then ensuring that it isn't trusted after the session.

This is a good best practice and SHOULD be used everywhere.

It does not prevent any attacker, government or otherwise, from making client implementations do things like:

* add in third party key distribution (backdoor the conversation)
* send a 'backup' of keys or other details to a central server
* directly man in the middle by only establishing a "secure" connection to a middle server
* compromise the situation in other ways; E.G. using a flawed "random" source

BTW, if you can't build the client your self from source, how do you KNOW the above isn't being done?
Show HN: Dmooji lets you send live comment on every YouTube video and see others
then they say crypto is overvalued
In case you didn't know the author has built the programming language that formed the backbone of some of the original multithreaded web servers that reached an incredible scale for their time. He is currently involved in research on "core aware thread management", "nanosecond-scale logging".

This causes me to interpret statements like "Programmers tend to worry too much and too soon about performance." more charitably. I think he does care about real performance.
There's no guarantee that the client you install on your device is built from the same source code that is publicly available, unless you build the client yourself from that source code. I suspect no one is doing that at this point (since Noise died with CopperheadOS).
At Azure Sphere we're trying! Dev boards ship in a month.
In terms of inspirational leaders Joan of Arc comes to mind.
What Lua is doing today, TCL was doing 20 years ago.

Though I believe Lua is a smaller binary, which matters in some embedded scenarios. According to [1], the core Lua interpreter is 40kB with additional base libraries of 22kB, so total of 62kB.

There are a variety of "small TCL" implementations [2], and one of them, TinyTCL claims to be <60kB, excluding C library functions. I can say that for my embedded requirements, Lua would win...

[1] https://www.lua.org/notes/ltn002.html

[2] https://wiki.tcl.tk/1363

[3] http://tinytcl.sourceforge.net/
I'm not sure that companies responding to obvious market failures isn't the companies' fault. We're not some geoup of mindless automatans max/mining for profit (that's the purview of the ML at discussion here). Selling shoddy, dangerous wares should come with consequences.
This is like saying doctors should push cheap drugs that may or may not make your testicles explode because customers don't demand non-testicle exploding drugs.

We trust doctors to take into account all the nuances of medicine that laymen have never even heard of, and give us good advice. Because not everyone can be an expert on everything.

Its the same with software. We can't expect everyone to be an expert.. its up to our industry to act responsibly.

Sure its "market failure" in so far as duping uninformed people is a good way to make a quick buck, but the deeper issue is moral failure / failure to take responsibility.
> too much and too soon

That's the critical part of that statement. It is not important to solve for performance concerns until the code actually works so you can verify you've solved the problem at hand.
As a Millennial, I don't know a single person who doesn't like mayonnaise. Considering new high-fat diets like Keto are very popular among millennials, I am especially confused at the authors conclusion. Mayo seems more liked then ever.
Philadelphians Drink a Lot More Alcohol Since the City's Soda Tax Was Imposed
Your taste has nothing to do with effectiveness. There's plenty of evidence that loc are one of the most reliable predictors of # of bugs in a codebase.
Samba isn't "dealing with" them, it's just dropping them because it doesn't know anything about them.
Person 1: "It didn't work for my single use case / environment / circumstances = non-working garbage"

Person 2: "It worked for my single use case / environment / circumstances = the best thing ever, it's your fault"

:)
At what point does the technical community stop trying to technically interfere with the efforts of law enforcement, and start trying to change the laws that make law enforcement behave this way?
Hard-disks aren't slouches when it comes to sequential throughput, but building around disks has some serious non-future-proof consequences.

Building things for spinning disks is a cul-de-sac, which has no exit over onto the faster characteristics of SSDs.

A significant part of Hadoop is built around the idea that "random = bad, sequential = good" and this is still arguably true when it comes to writes.

However, building around sequential reads gives you the wrong idea when the hardware changes underneath you.

I see a tiny sign of that in this post, where it talks about the smarter data partitioning.

For example, when dealing something like a join, a spilling sequential write join like Grace hash-join works much better than a memory mapped hashtable for spinning disks - however a grace join will be crushed by a better random IOPS driven SSD.

Also, if the author is reading this - Zlib isn't a slouch either (just like a spinning disk), the trick is to use the right combination of Zlib parameters. Compression will be slower with Zlib, but the read throughput of Zlib can exceed the performance of memcpy of the same data depending on your data conditions (look for inflate_fast and inflate_slow).

And if you're getting into the business of improving sequential reads, the next big trick for systems is vertical row partitioning of data (think of TPC-H, except now you stored L_COMMENT in a separate file).
Yes, what if a female CEO had founded the first private space launch company and had made it into the world's most successful and revolutionary, and had brought a small electric cars company to huge worldwide success and astronomic stock market valuations. What if she had spent days and nights at the factory, working 140-hours weeks for months, never taking holidays longer than a week in the last ten years?

Then, would we pardon her an emotional interview and a few tears? I'm completely, absolutely sure we would.
That'd just be one automatic system attempting to compensate for another going offline. Same question poses : what guarantees are in place to force maintenance of the second system (the one that never runs, except in exercises or disaster) ?

How long until management demands the datacenters work with cooling that just provides, say, five nines of cooling capacity ? Can you guarantee that doesn't happen ? Do engineers at Google even care that that doesn't happen ?

In other words, how long until Google loses the ability to pull the plug on this system from a physical perspective ? How long until Google loses that ability from an economic perspective (that turning it off would incur unacceptable costs) ?
Google Is Failing in Employee Transparency
Hopefully web packages⁽¹⁾ can eventually solve this issue.

1. https://github.com/WICG/webpackage
Dollar General and Family Dollar are general stores, like used to be common in days of old. They are not "dollar stores," which refers specifically to stores where all or almost all merchandise costs about one dollar. This is a point of confusion on every article about Family Dollar and Dollar General, because most people commenting apparently never go there.

The bargains vary. Some of the standards at both mentioned general stores and Dollar Tree (a widely-known dollar store chain) meet Walmart's prices, e.g. for ammonia, which beats any other grocery store by nearly a third.
At first I thought this seemed a bit like a scam, but on further reading, ignoring the $5k as that is a bit of a loss-leader, the terms of the $100k investment seem very well considered at this point.

At a max of 20% of a funding round you don't have to be concerned that one investor is going to hold all the power. Though they may attempt to bring other investors in, you are able to maintain the balance in the investment.

Daniel's history with Cue, having been through multiple rounds and an acquisition are also good signs for an early investor.

I don't have the time to dig into the specifics, but I like this more than I thought I would. What are others thoughts? Am I missing something? How can we help others not have the initial reaction that I had if it would actually benefit them?
Rook at this mess: French park trains crows to pick up litter
UFO's filmed during Blue Origin's rocket launch
Probably at the point where elected officials start to care. They won't care until their voters care, and most voters don't seem to care about or understand the issue here since it does not affect most of them in any meaningful/measurable way.
Moving away from a centralized infrastructure and having fully P2P doesn't necessarily mean there's no points to tap, does it?

It's just mildly more difficult than a subpoena to Facebook asking for all messages.
I'm a software engineer who works for Google who has worked on web tech for 25 years (hello NCSA and CERN). We went into this because a web dev on the team thought it would be a good solution, and put a bunch of work into it. After some time, we noticed that it added a ton of complexity and violated many of our core assumptions about how web pages work.

Note that service workers weren't really new when we used them, we deployed them carefully and with intent, with skilled developers.

Don't get me wrong- I like the idea behind service workers- I just found how they were implemented to be difficult.
sounds like you've never needed to diagnose a broken cert before..

all of this nannying for the common good and breaking functionality is not always a good thing. provide sensible defaults and give the user control to override it as they see fit (like the continue button)
In terms of hype? Kim K will destroy Elon in head to head.
"Blockchains Are a Bad Idea: More Specifically, Blockchains Are a Very Bad Idea."

https://www.youtube.com/watch?v=15RTC22Z2xI
How the Pioneer anomaly was solved
The secret US prisons you've never heard of before – Will Potter
Sunmaries are not there to prevent you from reading a book, but to highlight which books are worth reading.

Most books spend about 80% of the content defending an idea. Something like 33 Strategies of War can easily be summarized into 15 minutes, but it will lose its charm, as the book relies on historical storytelling to get its points across.
Facebook's Haxl team openly discusses their ability to wiretap Messenger at scale for anti-spam.

https://www.youtube.com/watch?v=sT6VJkkhy0o

Users should be given the option to use peer to peer strong encryption with friends they whitelist.
This is a case of the government trying to force Facebook to essentially strip out their technology; saying technology is the solution here is kinda ignorant of the actual issue
Speaking generally, and not about this post - Keynote speakers often aren't technical (enough), but speak about topics that have technical underpinnings.

Take for example, dangerous management consultants who speak all over the place about AI, disruption, innovation, digital transformation, but don't know technology, which is the underpinning of all the things they're speaking about.
Keep in mind they do have the infrastructure in place(carriers and oems) to directly tap on cellphones. While a federated encrypted chat services are a step in the right direction, we won't get truly 'free' communication device until an open source hardware to software solution exists.
He says at one point "Patrick Thistle" and I grant this seems like it makes sense, but indeed the name of that particular association football club is "Partick Thistle" and Partick is a real place, albeit not one which today would obviously be in need of a professional soccer team, and it isn't where they play.
Why Unilever Stopped Issuing Quarterly Reports
The problem is not this advice, but that people tend to stop reading (or remembering) there. It's misapplied or misunderstood so often that I wonder if it shouldn't be promulgated. Today something like this may be more appropriate:

"You should pay attention to performance, but your algorithms probably won't be the problem. It's more likely you're doing something stupid or wasteful, probably with the help of your technology stack."
Plain Text List – Easily copy and paste-able lists of things
If anyone wants to try Finger Induced Lucid Dreaming, I made this a long time ago: https://asselin.engineer/FILD_Mouse

It simply plays a song when you aren't pressing left mouse button. I go to sleep with a mouse taped to my hand and try to keep pressing he button. After around 5-15 minutes the song starts playing on my laptop speakers. For some reason, even if the music is plays, I lucid dream.
Not directly answering your question but stil relevant.
At a fairly big company I worked at as a student I was able to circumvent the website blocker of the company by just applying google translate to the site. Formatting and images etc. were lost but it enabled me to browse reddit.
I'm inclined to agree too. Though having the possible damaging and destruction of the artifacts of collective heritage rest on the actions and decisions of a few exclusive individuals isn't really cool.
Probably because Mozilla subscribes to the ethos that a user should get the final say in what computation gets done on their computer, and not some third party. I would be sad if they ever took the "continue" option away.

This is consistent with their position on drm in browsers.
i agree with everything. however.

i recently subscribed to Curiosity Stream. its like netflix but only academic-ish documentaries. its "curated" by human beings. i can almost feel the lack of "algorithm". its weird how i feel about it, compared to youtube or whatever.

it reminds me a little bit of going to a "health food store" in the mid 1990s. they were all tiny, tiny niche shops usually owned by one person or a family. they sold weird stuff like organic tofu and soy milk. nowdays, you can buy both of those products in walmart and target.

something very strange happened... somehow the shitty mass market moved towards the tiny, higher quality, higher price niche products.

how did that happen?
No need to stop there - it's just historical, very old advice, the rest is pretty good. It underestimates how aggressively inefficient today's trends and frameworks are. It actually advocates for focusing first on simplicity. And I think Ousterhout would not consider an "easy-to-use" "developer-friendly" but big and featureful framework to be that kind of simplicity. He says:

> "faster" algorithms often have larger constant factors, meaning they are slower at small scale and only become more efficient at large scale

So what I think he's worried about is sophisticated large-scale-oriented algorithms, but that's really not the problem today, which is huge frameworks and middleware and cluster applications, and the desire to use the very latest of these things. More than once I've heard a frontend dev say they want to use "react and redux" for the next project, without knowing what redux is. I've also seen many backend teams decide they need to use Cassandra for scalability and availability, but the cluster ends up being overwhelmed or down for half a day, every month or so, because you need to be a JVM and Cassandra expert to keep those clusters working. I think this kind of thing is exactly what Ousterhout would warn against.

The zeitgeist has swung wildly in the other direction, developers are no longer eager to implement the most complicated algorithm for theoretical optimization, now they are eager to implement the most complicated frameworks and services for "best practices and to be more maintainable" than the last mess they made. But the recommendation is the same in both cases: make it simple. Study the problem, clean up the mess (hard work!), keep it simple.
we use this in production (flags for kube execs of python scripts)

it is bounds better than argparse and click. would highly recommend.

important to note here, that a lot of this is thanks to the python team's continued extension of the inspect module.
Salvatore 'antirez' seems to think pretty highly of the book too; got a copy on his recommendation and am just starting to read it.
>IoT devices aren't secure because their customers don't demand security.

This is hard for me to agree with, because as a consumer literally ALL THE TIME I notice small things product designers do because they know better but that I am sure none of their customers noticed, or read about in reviews or something.

Producers often know better and do the right thing just because they're the experts, and even though nobody demands it.

It's just that IoT security is not something that these experts can do.

To use a recent cupcake analogy, it's as though every single bakery in the entire world that sold cupcakes, sold ones that to the few people who actually have good taste (which includes you and me) actually tastes like shit. Why do the bakers only sell cupcakes that taste like shit? Because nobody demands cupcakes that don't taste like shit? No, because if the bakers knew how to then at least some of them would be selling good cupcakes. It's because a good cupcake recipe doesn't exist anywhere on the planet. Anybody who is making a cupcake is making a shit cupcake. This is the state of iot security: the experts are shit at it. You and I notice.

If the experts figured it out then bakeries would follow. What, you don't think anyone who goes through the trouble of manufacturing and boxing a product bothers to Google "how to make a secure IoT device" and read what they find? Of course they do. What they find is "hahaha whatever."

It's as though if you Googled "best cupcake recipe" all of the top hits said "I don't know mix some flour and butter and bake for a while, put some frosting on it. Whatever, it's a cupcake."

Here is the link:
https://www.google.com/search?q=how+to+make+a+secure+iot+dev...

Do you see a single useable recipe there? I don't. All I see is "I don't know, mix some flour and butter and bake it? Put frosting on it. Beats me."

An actual cupcake requires milk, sugar, baking powder, eggs, and an actual recipe. Maybe some vanilla essence. These aren't even listed.

If the state of the art is shit, blame the state of the art.

A secure IoT device is like a watermelon soufflé. You're on your own.
North Korea has 28 DNS records to represent their internal network (2016)
So...opt-out then.
I agree with you, but the continue button does seem too easy. I'd make this an about:config type setting.
This doesn't actually point to a PDF. But rather a webpage, which shows only the first of three pages.

See instead https://sci-hub.tw/https://www.jstor.org/stable/pdf/25526750...
They have terrible software support too.
Startup Ecosystem in Puerto Rico
Is it? You kind of lost me. Isn't the actual issue math?
Firefox Nightly has the continue button regardless, but if the site has HSTS, it will tell you so, and will not allow you to add an exception; continue only shows the cause of the problem, in this case, that the certificate came from an untrusted source. This is in line with the "no user recourse" section of the HSTS RFC.
you are basically accusing them of foolish behavior at best, fraud/unethical behavior at worst

Given the conflict of interest in this article, I'd say that's the least of what the authors should be accused of.
>The problem is not this advice, but that people tend to stop reading (or remembering) there. It's misapplied or misunderstood so often that I wonder if it shouldn't be promulgated.

That's EXACTLY my problem whenever I hear this or similar advice. It's exactly what I think when I hear people (mis)quote Knuth by mindlessly parroting the old adage (optimization is the root of all evil). Too many people interpret this as a licence to waste resources and bloat your program with reckless abandon to an egregious degree, that I too think people should probably not say spread stuff like this.