skysight-inc/HackerNews huggingface dataset:
It's common for me to find stuff not on spotify, but I'm into some really niche stuff from the 90's and 00's that just didn't have a big following. I'm also into less mainstream stuff and do get good value out of Spotify, and most small/independent content creators are also putting their stuff on Spotify themselves these days, which means the situation shouldn't happen again.
Way too slow even at moderate scale.
> arguments like men being physically stronger and faster solely due to upbringing and not biology.

Is that a real example? It seems obviously untrue and I’d be surprised if people really think this. Especially the word solely.
As I sit in my fancy editor typing away code fragments I am often struck by the notion that my productivity would improve if the analyzer remembered something about the last clean parse of the file.

If you parsed the file as a diff against the last known good state you should be able reason a lot more about what’s going on. Especially if the programmer has a habit of writing code incrementally.
Hackers can use a WhatsApp video call to hack your phone
Nobody is going to let you cook in a food truck where permits are required. There's just no way to do that safely with a random truck.

Even fast food franchises do all their salads centrally to avoid the Chipotle scare that happened a couple years ago.
the ones that do are replacing the ones that don’t, but not a 1-1
Skype for Business is different than the normal Skype.
I certainly do. After playing Black Flag, sea shanties started to grow on me.
Noria: data-flow for high-performance web applications
I mean, all the arguments to support my conclusions, are their arguments. If someone spends 10 pages giving you facts and anecdotes and other types of data, and then uses them to support a "dumb" conclusion, they've still done useful work. They don't realize what exactly it is their data proved, but they did do the work required to prove something. Those facts and anecdotes support a conclusion, whether or not they feed it to you at the end/in the abstract.

And, that being said, I think they're right about the conclusion, too. A shorter way to say "Protocol Buffers are a bad choice of common ESB-bus format, even though being an ESB-bus format is the primary thing they're for and what everyone tries to use them for" is "Protocol Buffers are a wrong design." If something doesn't work when used to do the thing it's advertised to do, then it's broken, even if it can do something else.

The only difference between "Protobuffers Are Wrong" and my conclusion is that I'm making the implicit context of their argument explicit. Read between the lines of their argument—they are talking about the use of protocol buffers (specifically, gRPC) in an ESB-bus common-format scenario. None of their arguments make sense if they aren't.
This doesn't work for a mutating traversal in general (although it can work if the tree structure is split from the data being stored, so only a subset of the parent needs to be passed into the recursive calls).
Commercially Available 'Invisible A.I.', and Nanomites Announced by RedFire Tech
Protobuf is not size efficient. The half self-describing nature and built-in backwards/forwards compatibility features sacrifice a lot of bits in efficiency. I'm not saying that this is a bad thing, just that choosing protobuf if bandwidth efficiency is your main goal is probably not a good idea.
This was extensively discussed on reddit and a few other places (not HN afaik, or I couldn't find the thread), after the video^ Jonathan Blow posted on the topic.

I think the tldr; is, opinions vary.

Using indexes manually doesn't by-pass the borrow checker, its just a different, manual, memory allocation and management strategy.

It preserves memory-safety, but, it's questionable if you're better or worse off in terms of correctness of application logic when you use it.

...you're probably better off using the borrow checker (that's why it exists) or an abstraction in a crate to deal with this sort of problem, regardless of whatever implementation strategy it uses internally (unsafe, this, etc).

[1] - https://www.youtube.com/watch?v=4t1K66dMhWk
And had to be convinced not to unilaterally pull out of South Korea, and not to back the Saudis' blockade of Qatar that was assisted by his son-in-law, and that the North Korean missiles he saw on Fox News were from an earlier video, and ...
Mozilla's $3.5M competition to bring ethics to undergrad computer science
I wasn't expecting really to work on a next breakthrough algorithm, and such (although folks in my team actually worked on some incredible statistics related stuff - and this is where I understood I know nothing about statistics).

Plenty for everyone, I think. I'm glad I was part of the experience!

As an ex-game tools developer (back then, and back again - current job), it was quite a change for me. If I haven't learned enough, then at least seen things from quite different perspective.
I don't refuse the shortest pipeline of interview. I'm a big fan of pretty intensive interviews, both giving and taking.

My issue is about the shotgun approach of many recruiters. I don't mind taking a coding test, I think they're great. It's frustrating to have to take a coding test to find out the area of the company, or pay grade, or basic position info. Or being put into a phone screening for a Java position because the recruiter mixed up Java and JavaScript, etc. etc.

This gets worse with the higher level of effort test. I think that it helps when companies describe the position well. Otherwise it takes some sort of knowledge of each other before I think it's worth actually dedicating time.

It may be different if you're looking for a job full time while unemployed. But spending 10 hours of time is only something I'll consider if I think I'd take the position should the org want to hire me.
An audience member recorded a recent talk about OpenBSD unveil(2), given last month.

https://www.youtube.com/watch?v=wdeFQJXd_II&list=PLbx1j8Pb6u...
> Everyone is toxic to someone.

I'm not known for my positive view of humanity, but I don't believe that's true at all. "Toxic" doesn't apply to anyone short of a true saint. It's meant for people who exhibit specific behaviors that undermine others' confidence, satisfaction, etc. If a person X who seems above average in collaborative and supportive behavior to everyone else has a single bad interaction with another person Y, does that make X toxic? Of course not. It probably means Y is toxic, and is projecting their own toxicity onto others. Who's the lazy one? Who's evading responsibility for their own outcomes? Whose character does that reflect on?
Same thing for Win10 UWP apps.
When you go from SD to HD video it's hard to go back. Same again when you go to 4K. Same again when you start eating higher quality foods. Same again when you start driving nicer cars.

I'm sure there's a technical name for it, but for a significant number of people, once you get used to the higher quality it's harder and harder to go back down a level.
Here is a report made immediately after touring one of the places where the kids were imprisoned:

https://www.real.video/5834676234001

She brought a whole camera crew and intends to produce a documentary. This is just the initial report, evidently done on a cell phone right after she left the facility.
> Check if the file links to .bashrc?

That would seem to be the obvious right choice. What's the problem with it?
There's a few, the most tangible is that someone not technically qualified deems the design inferior and communicates to decision makers. So there's this kafka-esque experience where someone two degrees from engineering asks you to defend against a misunderstanding of proper design.

Maybe the easiest to deflect is "You're developing in Ada, and we prefer Lisp, etc. etc."
Oh I heard about the US backing off Non-Proliferation of Nuclear Treaties. And it's probably because of Russian hackers.
It's simple, the last attempts at getting Windows into the new computing spaces failed. Windows RT & Windows Phone (Windows on ARM) have all failed.

Microsoft is being left behind, and their only hope is to pick up the "open-ish" platform and run with it. SQL Server has always been portable, and it running on Linux is no surprise. Expect more and more of this, culinating with a Microsoft branded Android devices.

By this time Google will have abandonded Linux & Android to have moved onwards to Fushia.
Leading Ideas: Buffer’s New Engineering Career Paths Framework
They're not too dumb, and the hiring process isn't sexist, so why? And that's where hands come up empty.

There is strong evidence that women are on average more interested in "people" and men more interested in "things". Several references in http://slatestarcodex.com/2017/08/07/contra-grant-on-exagger...
injection lol
First, most city’s have a lot of space for solar and can easily import wind power. ~66w/m2 average over 24 hours is 66 MW per km^2 / the percentage covered in panels and really adds up.

Wind really can't be calm for long periods over large areas because large areas will always have temperatures differences.

It's like saying what if the sun does not rise tomorrow? If that's actually happening you have much bigger problems.

Load following nuclear power plants become even more expensive. Not a huge deal on nuclear subs, but a major issue for civilian infrastructure. Just like energy storage they simply increase the cost of energy above alternatives.

PS: Now if you could get nuclear without any form of subsides down to about 2.5c/kWh then running 24/7 or peaking power with average load's of around 30% down at around 8c/kWh then I would agree it had a major place. But, it's just no where near those numbers.
If you want to know why mcron as opposed to cron, you only need to look at the introduction: https://www.gnu.org/software/mcron/manual/html_node/Introduc...
This is correct. Even on things that obviously skirted the law like Ethereum and Ripple, which at one time or another the SEC has said, "Yeah, basically a security," everyone seems to have gotten off scot-free. Ethereum went on to be hailed as a major financial innovation and was never fined [1], while Ripple had to pay a $700k fine and continues to contend with lawsuits [2][3]. Ironically, one of the former government attorneys creating regulations is now working with Ripple against the US government (Ben Lawsky), along with former SEC chair Mary Jo White. When the price of Bitcoin isn't going up, sentiment in here sure changes.

[1] https://ethereumworldnews.com/sec-chairman-clarifies-the-com...

[2] https://www.businessinsider.com/ripple-just-got-slapped-with...

[3] https://www.xrpchat.com/topic/26151-ripple-lawsuit-tracker-a...
The last time I checked the password-less root is on first setup with telnet, accessible only via LAN and with WIFI off.

The first thing it asks you to do is to set a password, before enabling SSH.
Yes, but that's kind of the point: Rust's borrow checker only really works for data-ownership graphs that are trees, and although it does pretty well for that use-case, it's not perfect and research continues on how to make it less conservative while still being safe (consider the non-lexical-lifetimes feature arriving in a near-future release of Rust). A static borrow-checker that works for directed-acyclic or even cyclic ownership graphs would be wonderful, but that's definitely an open research topic, not a production-quality-compiler topic.

So if you can't prove your ownership graph is safe at compile time, you have to do it at runtime. For some ownership graphs, reference counting with Rc<T> is the right choice, but in the general case indexes and vectors are the least-verbose way to represent a runtime ownership graph.
Serveral parties such as...
I don't know, I'd never seen a whole tuna being carved up before that, let alone by someone that skillful.
Not with NATO all over the place.
Maintain focus without letting distractions and burn out stop you
The thing that killed my desire to write my own programming language was the stark difference between how I as a human would deconstruct a piece of code that doesn’t compile versus how the tools we tell people to use to build a programming language “accomplish “ the same goal.

At the time I gave up for good (never say never?) SGLR was the only strategy one might possibly mistake for “sane”, and it didn’t yet exist in a programming language I wanted to work in.
So you imagine a scenario where the US military would annihilate it’s own citizens ruthlessly to preserve insane wealth disparity. Ok.
In-N-Out Billionaire Lynsi Snyder Opens Up About Her Past and the Chain's Future
Interesting concept, though I figure this will be leaky abstraction on steroid.
When it comes to collaboration tools used in business, especially the enterprise space, that is open source and used widely?

I personally think Skype* is amongst the worst tools in the particular space. (Which is my personal opinion). I find that for messaging, Telegram and Slack work incredibly well. For conferencing, Zoom has a much better experience.

Teams is a confused product where messaging similar to slack is a goal, but it is confused with poor search and a UX based more around posts than conversations.
Yes, I agree, and that's why I'm trying to take this approach.

Interestingly I work in a world where enterprise architecture means something completely different. PM me for more details.
What makes you say that Protobufs are bad thing? I'm finding the opposite - where you end up with everyone's favourite json parser, not able to handle UTF8 here and there, or some handle multi-line json, other handle comments, etc, etc. Also certainly slower, and certainly when you process data back you have to serialize, convert, check, etc.

For me protobuf+grpc gives you enough building block, not to shoot yourself in the foot - but rather start from something ready. You get on top of that census metrics, bi-directional communication, and yes there are limitations - it's HTTP2 only (right? correct me if I'm wrong), but maybe that's what you need.

Instead, I see folks - going back to sock(), using them directly, and then reinventing wheels of wheels of wheels.

Then discovery comes - how do I discover what's there and there? I've got used to the nice (forgot the itnernal name) where I can ask the "grpc" server (well stubby, whatever it was called) give me your endpoints - and it gives me the endppoints. Then I can talk to it.

Yes, it complicates build systems (need to generate damn protos), but you can also do custom protobuf generator plugins that generate custom tailored access, where you get performance gains, sacrificing features you don't need, like project perfetto - https://android.googlesource.com/platform/external/perfetto/...

Here: ProtoZero - https://android.googlesource.com/platform/external/perfetto/...

Possibly old, there might be newer version, but still: https://docs.google.com/document/d/1bxlk9F79JZDk4wRXZQ9WQ5DP...
The fact that years later people still don't know that BadBIOS wasn't "real" speaks volumes about how this whole incident is going to be remembered. All of the sensational claims get reported everywhere while the eventual retractions are largely ignored.
I'm honestly pretty shocked that Amazon went ahead with this which is such an obvious legal liability in an extremely touchy area of business practice. Everything about this should have been a red flag that meant it never should have gotten off the ground, let alone been in place for years.
Cause Russian meddling.
> but overwriting files it didn't create itself restricted behind a permission prompt

It's more nuanced than that. A user might not even have a .bashrc, but you still don't want to allow any random app to create one.

In general, it feels like the security model for the FS has to distinguish things that can be executed, and things that cannot. Which it already does on Unix with +x, but then you've got all the scripting languages that cheerfully ignore that, and all the apps that use executable configs etc. If you can fix all those such that +x is required for any source of executable code on the system, then you can just prohibit apps from creating +x files. But the cost of doing that in the existing ecosystem is enormous.
Dismissive non-constructive feedback about projects like this is stupid and IMHO makes people not want to post their projects here.

Your statement and question could have been conveyed like this:

> From my perspective this looks a lot like ASM.js implemented on top of web assembly, but web assembly was meant to replace ASM.js?

The difference is that "congratulations I guess" makes your entire statement and question blatantly communicate "what you did is worthless" when clearly the author had _some_ valid reason to do it, otherwise they wouldn't have.
Well, while I agree that it's an industry wide problem, it's kind of obvious why Supermicro has been singled out out of all vendors making enterprise servers with BMCs -- Supermicro is the cheapest, no-frill whitebox vendor. I'm pretty sure that other big tech companies like Google have greater control over their hardware, custom design them; most financial clients I've worked with would simply never touch these generic boxes with a 10 foot pole. For lesser enterprise tech companies like Apple whose datacenters are filled with cheap generic Chinese servers they penny-pinch from noname companies like Supermicro, Wiwynn with bare minimal, unstable, insecure mgmt BMC's with little or no control of their own (to save money).

I've worked with these BMCs past 10 years off and on; started at a large bank automating deployment of marketdata infrastructure on HP hardware; couldn't believe how unstable and insecure they were and how much security risk they posed. Most recently at my last job, about half the BMCs from Supermicro went lemon in production; and not too long, discovered the AAAA* security bug with ILO4 on slightly older HPEs. HPE's had at least fairly responsive post-sales team and I must say their OOB BMC (ILO) improved a lot over time. SM just sucked so bad that my last employer, who had unwisely standardized on Wiwynn's and Supermicro's to save money, ditched them all for HPE this year.
Lack of GDPR compliance.
You mean like Tay?
Perfetto – Performance instrumentation and tracing (Linux, chrome, android)
> What we need is to add an application list to filesystem ACLs and then have security groups like Video and Finances which contain apps. Because GIMP should be able to access your photos but not your accounting spreadsheet.

This isn't that hard in a technical sense. But I very much doubt you can get the casual users to actually do that. They'll just end up with one giant group, because it's the easiest and doesn't require understanding the concept of security boundaries.

Basically, it'd be Vista UAC prompts all over again.
Surely just a bug that will get fixed promptly.
That definition doesn’t work when presented with a program with a working set that grows arbitrarily large.
>For example - the legalised abortion and crime effect. I'm sure you can think of plenty more.

source on why this is shoddy science?
We are pattern recognition machines. If you consider pattern matching unintelligent, then machines are more intelligent that we are since they rely more on logic than pattern matching.

For the black man = gorilla problem, an untaught human, a small child for instance, can easily make the same mistake. Especially if he has seen few black people. And well educated adults can also make the mistake initially, even if they hate to admit it.

However, in the last case, a second pattern recognition happen, one that matches the result of the image classifier with social rules. And it turns out that mixing black men and gorillas is a clear anti-pattern and anything that isn't certain is incorrect.

Unlike us, computer image classifiers typically aren't taught social rules, so like a small child, they will tell things without filter. It will probably change in the future for public facing AIs.

Not stereotyping is not a mark of intelligence, it is a mark of a certain type of education. And I don't see why it couldn't be done with the usual machine learning techniques.
I don't know the details of this specific situation, but it's possible to have two signatures on an intermediate CA. One by the old Symantec root, and the other by a trusted root. Up-to-date clients will ignore the Symantec chain and only follow the trusted chain.

For example, Let's Encrypt maintains compatibility with old browsers by having IdenTrust (a widely trusted root) cross-sign their intermediate CAs.
Multiple Bloomberg sources have claimed to have been misrepresented in their articles.[1][2] How has Bloomberg not mislead anyone?

1. The article in the OP
2. https://twitter.com/riskybusiness/status/1049429881031819264
Ask HN: Do you think web is bloated and inefficient these days?
[No content]
AI bias in medical school applciations (since 1988)
I stopped using Android a month ago, and it was amazing all the emails from google wondering where I was, or suddenly getting invited to various beta programs and stuff.

They really do their best to lock you in.

I just hate that WeChat had their hissy fit with Microsoft, and it blocked WeChat on Windows Phones. (I have a Wo Mobile China OEM version of a Nokia 1520 and it refuses to let me logon with the Chinese version of the app in Hong Kong, China & Macau using local SIMs in each area).

When you look at the Xbox One where Google doesn't compete it has things like YouTube, and other popular media apps, and yet the Windows Phone was denied these apps as Google's primary target for Android was to dethrone the Microsoft Windows CE world, which they did brilliantly with the aquisiition of Android, and releasing it for zero dollars to any OEM for any formfactor, while Microsoft kept too far of a strict control over the platform.

Ironically Micosoft forgot the lession of MS-DOS, which is that the money isn't in the hardware, but the end users buying software.
I feel like raw pointers and indices are about the same. Indices can be runtime bounds-checked, with a violation resulting in a crash. Raw pointers—if they're single heap allocations—are also runtime validity-checked, in the sense that violations will (probabilistically) result in a General Protection Fault, given a large address space and ASLR.

References (i.e. pointers the compiler knows about), on the other hand, are strictly better than either. Indices can only be bounds-checked at runtime, while references can be both alias-checked and bounds-checked (if they're references into a slice of memory that is known to the compiler) at compile-time.

But, of course, you can't do math to references. Construct a pointer by through an integer cast + math, and now the compiler has no idea what that thing is, what it's inside of, or how many other pointers point to the same place it does.
Nope. The search box UI looks very similar, but the UX has changed a ton.

From not being able to use "+" in queries to how your queries are interpreted to what you actually get as your results (from map results to AMP articles, there's a whole spectrum), it's very much a different product these days.
> You're assuming that it was based on whether or not the candidate was hire. Nobody with an iota of experience in machine learning would do something like that. (For obvious reasons: you can't tell from your data whether people you did not hire were truly bad.)

It's a fine strategy if all you're trying to do is cost-cut and replace the people that currently make these decisions (without changing the decisions).

I agree that most people with ML experience would want to do better, and could think of ways to do so with the right data, but if all the data that's available is "resume + hire/no-hire", then this might be the best they could do (or at least the limit of their assignment).
Syncing GitLab and GitHub Repos