skysight-inc/HackerNews huggingface dataset:
I loved programming naturally when I got an old pocket computer with built-in BASIC (Sharp-PC series) and some books for it from my father who did not need it anymore.
Generating Osu! Beatmaps with Deep Learning
you're not contributing to that system freely though - the mechanism of the state takes away your agency to freely help others in this way. You can rationalise it that you're contributing to the welfare of others, but the reality is that your money is being taken from you and put into a bucket marked "welfare" that will go to welfare but also be inefficiently wasted, spent in ways you don't agree with, and so on. At least under private charity you can engage in effective altruism (or at the very least claim altruism).
Yes, people do actually die from compromises, you just don't hear about it.

For you, somebody snatching your CC might mean a hassle due to having to call the bank and dispute the charges. For somebody with little money to spend, it can mean the difference between feeding their family for 3 days and not doing so.

For you, somebody leaking your private messages on a social network might mean some inconvenient messages that have to be explained to a friend. For somebody else, it can mean that suddenly their homosexuality is well-known in a country where that carries the death penalty, and gets them executed.

Software is infrastructure, plain and simple. You don't maintain it, people die. You don't make it safe, people die. It doesn't matter whether you personally see it causing problems for yourself. This "morally righteous fury", as you put it, is absolutely justified.

Developers (and the companies managing them) need to take some goddamn responsibility for the infrastructure they build.
Every operating system I’ve worked on has had a tiny few lines of relatively isolated code for this sort of thing. Even some crappy RTOSes, it seems it is natural to want to abstract it. You need to forge a number into a physical address pointer, not just a pointer. Look at some Linux drivers, they will have some offsets defined but they don’t just create a void* and assign it to a memory location, they use macros and helper functions to fix things up. They can even check if the address is in reserved io spaces and do things like that. There are also helpers to write the bytes to those addresses. It’s a tiny amount of code that is usually already abstracted.

I don’t know. Seems like a lot of kernels do extra things so driver writers can write fairly normal looking C and produce fairly safe drivers without just arbitrarily assigning pointers addresses from numbers. And even if you use C as your comparison, those helpers will often be written with some assembly language (read C isn’t completely good enough for the task all by itself) I don’t know of it existing but a kernel in go with ref counting GC and a handful of cgo primitives seems very possible and maybe even delightful to work on.
There were reforms to address banks not holding enough cash - but there wasn't anything to address the misaligned incentives and short-term-ism that rewarded people for mispricing assets.
Nice open source stuff too.

https://github.com/galiboo/olympus
They are using "weighted" salary data without specifying how the data is weighted. I suspect this is what is skewing the data.

Like, do most zoologists really make >$110k/yr?

I'm guessing Bankrate is taking people graduate degrees and applying salary information to bachelors degrees. The zoologist with high salaries probably have Ph.Ds in veterinary sciences. Same with Health&Medical Prep; the high salary is likely the result of most people pursuing an MD.
It degrades the rule of law when lawbreakers not only don't even get a slap on the wrist, but in fact get rewarded for their lawbreaking.

Since the confidence in the markets only exists because people believe the laws governing it will be enforced, not punishing anyone degrades the confidence in the market.
> Most network devices support jumbo frames¹, which are an IEEE standard, but they aren't the default.

Jumbo frames are not an IEEE standard.
The reason it bugs me is that popularity drives what will be supported by companies. I used to have plenty of linux and Emacs support from official helpdesk channels. In my last several jobs, not at all. At my current job, even though we rely heavily on linux servers and there’s a strong minority of Emacs users, the company (over 300 engineers) mandated that all support for configuring our in-house build tooling and monorepo tooling will be 100% Sublime on Mac, no support of any kind for Emacs.

In one company, the primary language was Scala, and one of the primary Emacs tools for Scala is Ensime. But the company had its own bizarrely wrapped version of sbt running inside of pants tasks, so without explicit support from IT, it was not possible for a developer to use Emacs+Ensime for that Scala codebase.

I am perfectly happy for people who use these UI-heavy tools productively. But the marketing shtick attempts to raise it in popularity and promote it, like this very paper’s recommendation, seem harmful to me.

Code tooling should be extremely fractured, bespoke and customized, by its very nature, and that should be embraced and supported. Instead it seems like PR battles and a rise of (IMO) ineffective proprietary tooling.
> Learning some new stuff to get a free cert didn't seem worth it because they're not paying anyway

Even if they are paying, the ROI on spending even a single day on learning new stuff is a long, long time if you're just buying a DV cert.
This seems like a huge chance for some company more thoroughly obsessed with item quality to wade through the muck and offer some value in terms of product reviews, since reviews are being gamed.

Seems like lots of free time to buy and try products in various niches, an easy to use browser extension and an extensive set of affiliate links, and a coupled website (probably not youtube since negatively reviewed companies might just copyright-strike) are all it would take...
That’s not true
Just because it's not a "life or death" situation doesn't mean people shouldn't say something. What kind of attitude is that? I mean, is the rule for when we should speak up against negligent practices or stay silent really "if no one will die, it doesn't matter"?

There are other types of harm people can suffer other than just physical harm. And those other types of harm are no less significant or noteworthy, at least in my opinion.
Fair point, but it does presuppose you have a return ticket, which isn't always the case.
Why? You can have hedge fund strategies embedded within the legal structure of an ETF.
I have worked as a health actuary for the past 6 six years with degrees in both math and computer science. I am happy with my career choice. Prior to this I did work several years as a programmer and decided while I enjoy programming it is not something I want to do all day every day.

My current position allows me to make use of some of those skills along with learning a wide variety of other skills. Although from the sounds of other people's posts I might be lucky in my current position, where I do have variety and challenges and more than only routine work.

But from an education stand point I am glad that I went the route that I did given the additional skills rather than an actuarial science degree. The one downside is that it has made the exam process a little longer.
Check out the Svalbard Global Seed Vault[1]. There are other seed vaults around the world as well (although some have been affected by wars- see what happened to the International Center for Agricultural Research and Dry Areas in Syria).

[1]: https://en.wikipedia.org/wiki/Svalbard_Global_Seed_Vault
Monopolizing one part of the value chain, enables you to leverage that monopoly into controlling the next.

Owning the railroads enabled standard oil to price it's competitors more, put them straits, and buy them up cheaply.

Owning the OS, Microsoft can make sure they own the Office Product productivity.

It's why the electrical grid needs to be separate from the energy makers (and regulated).

Amazon and Google as the 'front of the internet' can just suck the surpluses out of every other business; sure, you can still sell 'cereal and gadgets' - but all of your surplus / profit margin will be sucked up by them.

... but I have a sneaking suspicion that something disruptive will come along before they entirely take over.
In macOS I use Keyboard Maestro, which allows you to create a macro that pastes the current clipboard by typing. Very handy for these no-paste text boxes.
Same here. I either go to eBay or B&H. In eBay I can see at least quickly the seller rating. Amazon has just turned into a big mess.
This was kind of my original point though. If you do treat them as compile time functions i.e. for a bit of light code gen then they can be super useful.

But that's often not the case. In fact, OO is a nice example. It's probably less true now that OO seems to be a bit out of fashion, but the number of crappy, poorly documented OO systems I've seen in Lisps over the years is staggering.

It's not really a criticism of macros so much as an observation. It's also possible that the type of developer who is attracted to adding a bijou OO system into their application is the type of developer that is attracted to Lisps. It may well be the case that adding a macro system to JS wouldn't have the same attraction so wouldn't have the same downside.
Hey thanks for the feedback! :)
How to Automate Database Workload Analysis with Performance Advisors
There are shit tons of other "guys". The industry is making new "guys" every year.

Maybe they don't have as much experience as the current guys, but does that matter when those people use their experience to rush after profit for themselves when they know it will cause problems like this?
Apply to smaller companies.
More anecdotal evidence in support of this: a friend of mine with a lot of experience in the finance industry looked into starting his own fund, and determined that you'd need $150mm and a full time compliance officer on day one for it to be practical. Another friend did start a fund with a few million under management, but essentially just to establish a track record so he could raise enough money to be worth it.
But schooling in the US is biased in all sorts of ways, and trying to draw conclusions from that is being encouraged in this discussion.
> would you place your security in the hands of some 3rd-party providers such as password managers?

I don't know if I can think of a better solution than an open-source password manager which encrypts and stores everything locally. Unless you have an incredible memory.

> but honestly these companies have much bigger internal problems than reconsidering their whole stance on usefulness of password managers

I guess Troy is just focusing on what he knows best.
KeypointNet: End-To-end Geometric Reasoning Framework
Bahaha, 3 of the 30 front page stories are about Lisp. Yessss, rise, Rise! Let the Lisp dominance commence! Take to the streets and take macros into your hearts! Demand a formal holiday to celebrate all conses! Tear off those strongly typed shackles and write a macro system to expand your grocery lists! https://github.com/sctb/lumen

Today is a good day.
Why "yet"?

I've worked with CMS tools that allow you to add plain HTML blocks, even stuff inside <script></script>. If their CMS allows this, and some marketing person had "password123" as their CMS password, and they allow access from the web (instead of intranet/VPN + 2FA requirements)...
Their basic underlying assumption appears to be that they're no longer in danger of losing customers and can now act accordingly.

Now that they've captured 50%+ of US ecommerce, they've also raised many prices, to the point where they're far from the cheapest price in many cases. A random example... the cat litter I just purchased is $17.89 at Amazon, $13.49 at Walmart. Last week I bought a chair mat for $21.95 on Ebay - identical item on Amazon was $33.95 (both including free shipping but Amazon came with an additional 8.25% sales tax).

They can do that because so many people don't price compare anymore before going to Amazon.

Not to mention the issues of buying an expensive brand item and getting a fake instead, as well as the large numbers of fake reviews. Indeed, it is pretty hard to get started in Amazon FBA these days when your competitors all have hundreds of glowing reviews for similar products and you have none.

They've also moved many items to the add-on category (no more free shipping unless you have $25+ in the cart, even with Prime).

My Prime membership expires in a couple months time, and this time I'm not renewing it, after being a member for several years.
> Brazil simply has no culture to foster an ecosystem of startups.

Yes. A startups incubator in Brazil had a 'pool of developers': if a startup needed a developer, just enter the pool. Incubator startups had just one busines founder, never a technical founder. The technical things in Brazilian culture are irrelevant (any 'manual work' is, and developer is a manual work in Brazil culture).
> not break apart due to fall.

If they're falling and there's an impact at the end, something has already gone wrong.

When operating correctly, the descent is a smooth glide.
WATCH: 9/11
The reactor under Cory hall was decommission years ago and it's the CS department now.
What interpretation of "valuable" do you propose instead? A discussion of remuneration was exactly what I expected when reading the headline.
I think a lot of US based techies don’t really know how much better their local services really are compared to the rest of the world. Finland didn’t get Netflix until 2012 and the selection is much less than in the US. The local online auction sites are not that great and nobody here uses Craigslist. Mailing packages is expensive and Fedex etc are for businesses only. To buy from Amazon, I have to go on the German site, Google Translate the page and try to figure out if they will ship here in the first place. Regular order takes almost 2 weeks to arrive. Amazon won’t ship a Kindle here.
Nerds have been saying this about the HTTP-ization of protocols literally for decades, but HTTP's gradual assimilation of all other protocols has continued basically unimpeded.

Also: your primary objection to DoTLS is that networks block 53/tcp, and you say "same analysis applies to DNS over HTTP", except that, obviously, it does not: the whole reason DoH exists is to address that problem.

Finally, even though I believe over the long term that DoH will be successful and will eventually become the primary mechanism with which browsers look up hostnames, it doesn't have to be for DoH to solve, entirely, the real problems DNSSEC tried to solve.
Good point. Worth spelling out that your DNS doesn't need to understand CAA records, it merely needs to be able to conform to the obvious requirement that if you ask it "Hey are there CAA records for this name?" it says "No" rather than crashing, silently ignoring the question or returning an error indication.

As usual in DNS this works fine in the Free implementation your OS vendor included, shame about all the expensive proprietary choices that get this wrong for every single new record type.
if possible, change your location. Move to a place which is less demanding on your life. From Metro to a small City which is less demanding.
Analyzing the relative security of Ethereum and smart contracts
> How much time did you actually spend looking?

Like I said, more time than it took me to learn markdown.

> Here's one I found in under a minute by searching for 'how to write linux man page using troff'

Of course I was not searching for "How to make man pages". Why would I do that, when parent said this was a better alternative to markdown.

> Also of note: troff supports macros so the man page formatting won't be found in the troff manual because they are part of the man macro package.

Which again makes it pretty reasonable why places like github chose markdown over troff.
Think again, having to deal with identity theft have seriously derailed some people's life. I wouldn't be surprise if there was a few suicides that could be directly tied to a specific breach.

There might be a line to be drawn, for example I don't expect a small shop to adhere to all the last security recommandations.

But a big company handling highly sensitive information at scale? It should be a crime to have a leak caused by a well-known issue. Unfortunately, there was barely any consequence, as far as I know.

Those companies certainly have the means to keep up with security requirements, and it should be mandatory considering their business. Until they act properly, shaming it is.
Isn't that rather a symptom of modern society? As others have noted.

Still, it's certainly not that modern society is horrible. Far more people (especially in "developed" countries) live far better lives (materially, anyway) than at any time before. But maybe what's missing is meaning. Family and other social connections. Like "Why am I doing this?"

Maybe it's just an unavoidable consequence of the extreme specialization of labor in modern society. And that there are many important jobs that just aren't much fun. Or at least, aren't acknowledged or rewarded well enough. Don't come with enough status.
There is probably, at certain point of time, eventually a lisp behind every great software.
Show HN: Mindstamp – Make Any Video Interactive in Seconds
How to create a real-world Node CLI app with Node
Pretty typical that it doesn't have hygienic macros. Scheme is mostly a pretty simple language to implement. Even things like call/cc is easy if you transform it to CPS.

Hygienic macros however is very much not a simple thing. You usually just copy one of the existing implementations.
I was hired as a backend developer (and frontend development came next) at 45. I can't tell about other countries, but yes, it's perfectly possible to get hired in the wrong? side of 30s.
IIRC Hedge fund has to be funded by accredited investors, and usually have significantly more capital than under <1mm, but I'd imagine you would want to co sult a securities/specialist legal counsel for a question on forming a fund
> having to 'pretend' I am an expert
Experts don't pretend to know everything, because it's impossible for anyone to know everything.

When some one asks me something I don't know, I tell them ill find out the answer then I do, this way i'm always right.

Most people wont do this, they just say "I dunno" and look dumb. Some people will make up something, sometimes it works and they look like they know what they are talking about, some times it doesn't and they look dumb.
I don’t recall him kneeling. I think the commentator was exaggerating
There's an extension already that does that. It's called Don't Fuck with Paste or something like it.
how do you "point out fascism"?

in today's culture, this term is used so broadly it has become meaningless. Can you point out some fascist behavior in the news?

more inane is the related accusation "literal Nazi"....ugh, no unless you were a member of the Nazi Party of Germany between 1933 and 1945, you are not a "literal Nazi"
Qualcomm Snapdragon Wear 3100 SoC to Fuel Next-Gen Low-Power WearOS Smartwatches
I agree with the idea, but I don't think it is enough: A fuzzer does not necessarily find all problems.
USBank?
Fun! I highly recommend watching Dan Friedman and William Byrd give their miniKanren conference talk (they've done it a number of times slightly differently) e.g. this one at the "Conj" Clojure convention: https://www.youtube.com/watch?v=5Q9x16uIsKA

It's really a fun presentation and does a great job introducing logic programming and miniKanren to lay programmers.
معلم جبس بورد الكويت
>Can the said journalist just release the application in public domain? If not, why not?

Pretty simple. Do you want everyone in the world to have access to the database? Now at least it is hidden through obscurity. This is exactly why in this report the said journalist got it verified by three external experts, one of them a professor.

>If authority has no way to audit them then how did the whistleblower arrive at this magical "40%" figure.

Authority has no way to audit the fake accounts, authority does know for which entries backup documentation exists or not. In fact, he attaches official documentation later on as an evidence.

Forget the grammar, typos it doesn't matter. Ignore the whole of his letter except the official correspondence that is attached and does in fact validate his/her point.

I meant to write Aadhar data. So you are totally over loooking the fact that some of the Aadhar related data was on US servers, and more importantly the password is being relayed over E-mail? Also, no secure way to host the government data, except HP servers?

Government has been so opaque regarding this project that we have to rely on journalists, researchers and whistleblowers to help us with any sliver of info.

Do you have a conflict on interest with this project? I see on your Twitter that you have retweeted some posts from Ministry overlooking this project. Not casting doubt, just needing a clarification due to the tone of your posts in this thread. Sounds very government'ish.
This looks handy, will try it.
It's possible, and fairly easy. You should see a "Buy for others" section on most Kindle book pages, right below the main purchase options. https://smile.amazon.com/gp/help/customer/display.html?nodeI...
1Password clears your clipboard after a short period of time, and you can customize it. Is this not a standard feature of all password managers?
Now I am even more confused.

What is this thing called energy that gives 98% of mass? what is it composed of? is it a field? is it some kind of force? is it composed of particles?
And why does the UI language depend on which country's version you're visiting? It makes sense for the descriptions, but the UI is the same in all versions.
THere is no consensus, but there is also a upper limit on the total damage. Epidemiologically, there isn't any strong evidence this radiation has influence enough for us to care. Every high quality study has found no effect or a tiny effect, much smaller than the total benefit of mobile phones. Many people publishing in this space aren't good at quantitative research and make common errors, yuet the mainstream media ends up publishing the "shocking" results and convincing people it's dangerous.
Risks from vehicles is dependent on speed your traveling (which is not fast in NYC or SF), the driver, the size of the vehicle you're in, and the backseat. All I know is if there is no traffic according to google maps, and it's at least 2 people, then it only ends up costing a few dollars more to take Uber/Lyft to get to where I'm going, and it's more consistent (time wise) and clean than public transit.

If public transit didn't result in worse experiences, then I wouldn't opt to use Uber/Lyft.
If possible, change your location. Move to a place which is less demanding on your life. From Metro to a small City which is less demanding.

Secondly, create one more company.

Third read 4 hour workweek by Tim Ferris. He has some practical not so evident shortcuts.
Works well. How much are you pulling from the video title and description?
No it isn't.

The SEC approved it with this exact language

> Applicants request an order that would allow Funds to operate as actively-
managed exchange traded funds (“ETFs”)

It happened back in 2017 in Investment Company Act Release No. 32810.

Not sure how you missed that.
The banks paid back their bailout loans, with interest. There was no way the borrowers who got those no-doc loans in the mid-00s could have ever paid off those loans. Bailing out the borrowers would have actually cost money, and would have created enormous moral hazard.
Amazon (and prime as well) is a godsend for those of us that don't live within a 90 minute drive of a Target or Wal Mart.