skysight-inc/HackerNews huggingface dataset:
IIRC, the only reason the sequels exist is that fans (or maybe his editors) pointed out out that if the Ramans "do everything in threes" then there needed to be two more parts to the story. It was never planned as such, though.
If you mean something like network card ==> device via RDMA we are not doing that yet but are currently working on this implementation. These past few months we have focused more on adding functionality to libgdf. We are now optimizing some of the i/os like this one you mention here. As of now if it goes over the wire it is being copied into pre allocated pinned memory buffers then sent to GPU. This will go away in about a month or so.
You are probably familiar with... but for those who aren't... Here is something cool to read by Frédéric Bastiat, a French philosopher during the 19 century:

http://bastiat.org/en/petition.html
> a trusted network inaccessible from the outside

There is no such practical network which remains such a network for long. All networks must be assumed to be byzantine as they certainly will be compromised at some point, if they're not already.
It isn't implausible because of it being difficult and expensive, its implausible because there already exist much easier, cheaper, and (arguably) harder to detect ways of subverting SuperMicro motherboards.

As a bonus, subverting the BMC firmware is much harder to trace to the source since it could be injected by in so many ways by so many different people.

Why use a thermonuclear device when a hand grenade accomplishes the goal?
You're probably right that for those of us in developed, western nations data collection isn't quite as bad as some other issues (for now).

I do think that in the rest of the world this sort of data collection has severe human rights consequences. What happens when oppressive regimes are willing to sign a contract with any of the dozens of adtech companies out there?

Imagine one working with some authoritarian government to help them track people considered some a "risk". It might be a criminal risk at the beginning, but it could easily turn into people using this data to track and spy members of the opposition party. Or even just to track people who have voiced dissent or the people who've only _talked_ to those people.

It goes beyond pure politics, too. What if some entity is trying to crack down on members of a particular religion, sexual orientation, or ethnic group. People who might have been able to hide those well enough may not be able to do so if so much of their online activity is being monitored.
There's definitely an API. It's a core part of OpenStack Ironic, which lets you automate bootstrapping them like you described (for example, to put the rest of your OpenStack cloud on top of).
Only issue I sometimes had with updates is limited memory (on the lowend hap lite devices). Often a reboot before upgrade download was enough to solve that.

But the standard upgrade procedure is to put the new firmware image in the filesystem root (scp, update button via UI, etc) and reboot the device.
7 Situs / forum untuk belajar hacker terbaik ratis
It’s an intrusion.

Would you be outraged if you came home one day and there was a plumber fixing your sink? “Oh hi, don’t worry about me, just fixing your sink. Let myself in, hope you don’t mind”

You didn’t even know your sink was leaky let alone called a plumber.
US Building Footprints DB
Wadge is a mathematician, so he knows that. Presumably he simply chose an example that fits the material.

"Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize." (https://news.ycombinator.com/newsguidelines.html)
Ah you're right, the spot I was looking at was after having read it into Python and split into a list on the commas, so the outer ' is my string container. Whoops.
Wut? We write bugs all day every day, we should just quit coding entirely if we follow that sort of logic. Mistakes happen, they get fixed, those in good faith among us help them get fixed.
Yes, I thought about explaining client certs and others (the first request I got was to add ALPN to the connection), but there's already so much to talk about in even this simple connection that I thought it would detract from the document as a whole by making it even longer and denser.

I didn't even get a chance to explain the (normal, server-side) x509 certificate signing much because it just kept taking over the document. TLS is complex enough that just explaining the happy path is 400kb of HTML.
What does TLS have to do with the Gmail redesign? It used TLS before the redesign, didn't it?
If it were just a probability paradox, Bell's theorem wouldn't be a thing. You can win certain coordination games more often using quantum correlations than is possible with classical correlations.

That being said, I have complained about specific papers and articles making this exact mistake. For example, explanations of delayed choice eraser experiments are almost always confusing correlation or post-selection for causation ( http://algassert.com/post/1720 ). But Bell tests are not of that form, which is why the first thing you should ask of any proposed interpretation is "How do you deal with Bell tests?".
> I don't think regular updates are abused to remind you because it's pretty trivial for the application to pester you with notifications itself.

If you get gratuitous notifications from an app to remind you of its existence, you'll blame the app for being annoying.

The same stigma doesn't get attached to app updates.
What has truly surprised me in all of this is the skepticism expressed about this being plausible. Most nerd sites are rife with thoughts on how insecure things are and hypothetical ideas on how something could be compromised but all of a sudden this one isn't possible? We know the US Gov't has done it in transit but it's ridiculous to think a state owned manufacturer wouldn't do it on the factory line?

We know this very state does it to laptops brought into the country by corporate execs (https://www.securityinfowatch.com/blog/10861870/keeping-secr...) but again, there's no way they'd do it on a factory line?

I don't get it. Are we so confident that Amazon, Google, and Apple wouldn't fall for this that we refuse to believe it? I know everyone is saying "show us a compromised board!" but it's very likely that the our Gov't would ask that either (a) those boards be left in place or put in a honeypot so the enemy doesn't know that we know or (b) get handed over to them for forensics, etc and probably destroyed.

For the most part in my nerd circle of friends I've noticed that the only ones that believe the Bloomberg story are the ones that were or currently are in the intelligence community. Everyone else thinks it's Bloomberg being dumb because of that whole "they pay journalists based on how they change stock prices" article.
> Can we really continue to claim that we're unaware Google, Facebook, and other web companies are monitoring everything they can and sharing the information they collect, sometimes for profit, sometimes accidentally, and sometimes compelled by legal orders?

Yes, we can.

1. Some people (mostly technologists) are aware, but many people aren't.

2. Much of the awareness that does exist was not the result of those companies being transparent about their practices. It's the result of inferences based on scraps of information and speculation.
Well, Arc doesn't seem to be solving an "overlooked problem" or "iterating rapidly" anymore. I think that's fine - not all seeds give birth to trees. Just find some new seeds to bet on :-)
The technique of making "ultrafast" movies of repeating phenomena by imaging "one pixel" at a time and then assembling the raster-scan of all the pixels has been used for a long time.

The technique described in the paper is different from that....

> Thus far, established ultrafast imaging
> techniques either struggle to reach the
> desired exposure time or require repeatable
> measurements. We have developed
> single-shot 10-trillion-frame-per-second
> compressed ultrafast photography (T-CUP),
> which passively captures dynamic events with
> 100-fs frame intervals in a single camera exposure.
>In my experience, the threat/worry of bad publicity is actually the best motivator in a company getting their security up to par.

I think the Equifax debacle has shown otherwise.

Big corps have too much Lobbying power and PR presence for public shame to make a lasting impression. Facebook is on the hot seat right now but that too will pass since legislators are fickle and myopic. Heck Google straight up shut down G+ because of "Security Concerns" and no one batted an eye.
Tavis Ormandy works for Google project zero. Are you saying he has a vested interest?
udc supplies to samsung display (and others)
There's even an easy analogy for this! Putting strobe lights on fast, repetitively moving machines allows you to see their motion slowed down.

EDIT: I'm responding here to the parent poster's claim, not to the original article. For more information on the technique used in the article, see this other article[0] about "CUP" vs this article about "T-CUP". In CUP they use a random 2D sampling of a scene projected onto a streak camera.

[0] https://www.osa-opn.org/home/articles/volume_26/december_201...
I was wondering this, even the leads seem enormous and wasteful compared to the actual device.
"My point was perhaps too broad - but deigning to tell someone their pursuit isn't as worthy as one you think they should be pursuing is, frankly, pointless."

That seems to assume immutable human values, and/or a postmodern view of the world. Promoting thoughtfulness about the meaning of human activity seems pretty valuable, regardless of the conclusion.
The odds that the first extra-solar object found is close to earth is really high, because they're easier to see if they're close.
An alternative: https://github.com/jsvine/pdfplumber
YC-grad Papa raises $2.4M for its ‘grandkids-on-demand’ service
PDF (especially full spec'd PDF) seems bad, but I never like reading epub or other formats. PDFs are the static builds of documents.
True for the top 10%. Put in the top 1% (~$500k), though, on the effective tax rate chart at https://qz.com/74271/income-tax-rates-since-1913/ and you'll see it has dropped significantly for that population (by about half) since about 1980.
Note that a rate such as "x frames per second" doesn't mean it needs to be able to operate for the full second. That would be like saying you can sprint at "12 miles per hour" means you can run all of 12 miles in an hour.
Underlying Linux kernel updates? I thought their OS was built from scratch?
Gmail was using TLS since day 1. If it's slow for you the first likely culprit is the sheer weight of Javascript and DOM work, followed by making more web requests than necessary.
Commentary: Home devices are becoming less cool and more creepy
Show HN: A 5kB DOM-Utility with components and JSX
Neural networks don’t understand what optical illusions are
Great work and write up! HN submissions about PDF extraction seem to be as reliably popular as threads mentioning bees or bashing Mongo, which I guess goes to show how pervasive a problem it is.
Since this one got marked as a dupe, the original (by 2 min.) is here - https://news.ycombinator.com/item?id=18201776
Agreed. I replied in a sibling[0], which I think is relevant here. It seems I should definitely queue looking into what testing has been publicly done, etc. and collate that.

>Would still be nice if they were both open source but hey: I use the open source vscode and it phones home uncontrollably all the time, so source code only benefits us so much

Yup; definitely true.

[0]: https://news.ycombinator.com/item?id=18201533
My heuristic is that anything co-written by Gentry Lee is not worth my time.
I'm not talking about what's legal I'm talking about what's imo ethical. I should be able to copy my movies etc to whatever device I want and legal action should be taken only against me if I used it in a commercial way.
Appreciate it, sir!
It's a tradeoff. You have to balance that negative against the negative of having botnets of millions of never-patched routers.

Automatic updates should be the default, but you should be able to shut them off if you want to make a different tradeoff.
Disclaimer: I used to work at Jet and am biased.

Not entirely true, but not entirely untrue either. In my opinion, lots of Jet tech was more stable, featureful, and performant than what Walmart had to offer. But in many cases, politics prevented them from taking full advantage of Jet's tech.

In my experience, Walmart tech was very resistant to letting Jet run services that the Walmart website had to rely on (not in all cases; pretty sure Walmart is using Jet's inventory system: good presentation on it here: https://www.youtube.com/watch?v=dSCzCaiWgLM). I think there was a feeling like we were encroaching on their territory. Think about it: Walmart buys Jet, Marc Lore is made head of Walmart eCommerce, layoffs happen on the Walmart side shortly thereafter. Not exactly something that will foster warm fuzzies.

Walmart also gets WAY more traffic than Jet, and I think there was a little bit of dismissiveness caused by that too. A sense of, "We are the big fish, we are not doing anything wrong, and we are just going to keep on doing what we're doing."

I'm sure there were other areas of close collaboration, but I didn't see too many of them. I haven't worked there for five or six months, so things may have changed, but that's how it was from my perspective.

I did love working there though, was a very transformative time for me as a technologist.
Surely the author, editor, and publisher of this article, and anyone likely to read it, are aware. "We" are aware.
Neatly for manufacturers. If the users don't own the vehicle, the data remains the property of the manufacturers or the business renting them to users (though I'd bet most of it would belong to the manufacturers).
Apparently unpopular opinion: an internally-discovered vulnerability with no evidence of abuse is not a breach and does not require public disclosure.
About the effectiveness of convincing friends & relatives: I know what you mean about skepticism about changing people's minds. It's hard, and I certainly don't think you'll realistically ever flip someone's deeply held belief on its head with a clever argument. The most effective thing I feel like I can do personally is push people who are already mostly on board with something out of complacency and toward action. For people who disagree with me more strongly, I just try to continually nudge them in my direction since that seems to be more effective than shutting them off.

About how frequently you actually need to read the news: if you're asking "do things move fast enough that hearing about an event when it happens vs a few days later matters?", then no, I don't think it does, and for some things you really need to wait before there's any useful information. But, at least personally, I don't think I could dedicate a block of time on the weekend to reading up on the events of the week. I follow some journalists on Twitter as well as some folks focused on local matters, and ask my brother questions about things I hear since he has more experience and I'm still relatively new to all this. Also, newspapers are great!

Lastly, about all parties being equally corrupt: I think they're all corrupt, but I don't think they're equal in either the degree of corruption or in the magnitude of harm their policies & discourse cause. On just one current issue: it's hard not to look at consistently Republican-lead policies that disproportionately disenfranchise black people and think that one side is very much worse here. Even if both sides are trying to stop their opponents from getting more votes, one side is clearly being more ruthless & cruel. Again, this is just one issue, but it's a big one and I believe there's plenty of evidence that this isn't an isolated case.
There are a few exceptions, nevertheless, the postage itself is kept unopened. They're usually detected by specialized test equipment with very low false positive rates.

1) Explosives and biological agents. Likely detected by sniffers.

2) Radiological materials.

3) Heavy packages or letters may be opened and inspected, especially for customs purposes. Depends on the postal service.

4) Potentially xray may be applied.

None of this is really an obstacle to communication.
By the way, phone service is not censored or modified in most countries either. Including cellphones.
Can you press decline? I can't read what the other button says.
Isn't it more like a locksmith letting himself in because your lock wasn't working as it should and he fixed it?

Without going any further in than he had to and without charging you? I'd probably be a bit weirded out but quite pleased as long as he didn't hang around!

I guess this is part of the issue... even for people who have an understanding of it, it's a nuanced topic and the analogies are widespread but often misleading, because they're analogous. I'd imagine most people don't even care so long as they can access facebook.
> Picking a license is easier than trying to defend an unlicensed work in court..

Are you speaking from experience here? Whether it has a blanket license or not has absolutely nothing to do with its status as a copyright protected work.

Quite to the opposite, having a blanket license should make it harder to determine whether its use constitutes an infringement on the copyright or is permissible by the license.

There are plenty of reasons not to give your work a blanket license. For one, you might want to share an idea without necessarily giving anyone access to use your work directly, or you may want to present the work publicly for exposure so that interested parties can license it individually.
Should I honk? [video]
I heard this exact same story from a certain someone on a certain Slack the other day. :)
Why some newly licensed truckers aren't ready for the road
Every now and then, when I am bored, I reverse engineer some of my phishing emails (Linkedin message, Fedex parcel etc). Very often I find that the phisherperson has embedded a rogue document (often .php) in a legitimate server. Sometimes I send a polite email to the admins of these sites warning them about the injected file. I NEVER received a thank you from any of these people. I don't care - I am not doing it for thanks, but I do sometimes wonder what the internet has done to once-common human decency and politeness.
I don't understand stocks anymore either, but I own them anyway.

It seems like the original idea of "share in the profits" (i.e. dividends) has been entirely replaced with "guess which companies will have the most hype in X years." The role as capital allocation seems have diminished too - it seems like no one goes public to actually raise money anymore, just to cash out.

Knowledgable Internet, please educate me.
That's not what they're doing. They're seeing the actual motion of something that doesn't necessarily move repetitively.
A lot of Mikrotik's are installed at WISP's and other ISP's... making unplanned reboots very disruptive.

Those of us using them on our corporate networks might be inconvenienced by a temporary outage, but that's unlikely at 3am... however, scheduling and doing these manually is still the best way for enterprise gear.
>There is no free lunch--if you make it illegal to sell cheap, restricted printers, manufacturers won't just sell unrestricted printers for the same price. They'll sell better printers for more money, and price out the bottom of the market.

The EFF isn't just complaining about selling "cheap, restricted printers" though. Epson chose to sell a cheap unrestricted printers, people bought them knowing they were unrestricted, and then Epson restricted them after sale.

It'd be like if Tesla had a lower cost car and thought they could make up some costs by charging you a large premium at their Superchargers on road trips. You bought the car knowing that topping it up in your garage overnight was enough for your usual commute.

Then a year later they decide they aren't making enough money at the chargers because people haven't been using them. Now they push out a "Security Update" that makes your car refuse to charge anywhere but the Supercharger, which happens to cost 500x the going rate of electricity.

Somehow I don't think people would be OK with that.
Great question. Better yet why not have both and use whichever one suits you the best at the time?
You could have answered the pricing question here, directly, in response to someone asking about it.

You said it needed to be addressed, and was a priority yet the question remains unanswered. It gives me the cognitive-dissonance.
A specification has to be, um, specified.
For example, the first thing to explain is whether the file format is actually text and if it is what the allowed characters and encodings are.
And let's not forget the big one: how are records and fields delimited? Too boring to explain?

On the whole, some ideas to make CSV files human-friendly, but neglecting backward compatibility (comments, use of spaces...) and introducing major syntactic and semantic cans of worms (multiline values, named fields, defaults...). I think CSV files should evolve towards tighter constraints instead.
The fact is that the greyhat could intrude, which means anyone else could intrude. If you didn't want him there you should have patched your damn router. There is no point in being outraged because you have already been owned, and the grey did you a favor. Now, there's no need to thank them, but being mad is totally counterproductive. Learn the lesson, patch your router.
“Machine learning algorithms will always identify a pattern, even if there is none”

Is this partly a problem with interpretation? Let's say I do a binary (supervised) classification with an algorithm that is also capable of assessing probabilities. If I generate a data set consisting of a randomized bag of words, and randomly assign them to 0 and 1 categories, and run it through a supervised ML classifier, then yeah, everything in the test set will get assigned to something.

But if you look at the probability estimates resulting from the ML, you'd almost certainly see something that indicates a high degree of randomness in the assignments (various techniques such as cross validation, or probabilities that indicate a high degree of uncertainty for almost all of the predictions).

I'm not sure this is a problem with the algorithm itself, because the output from many of these algorithms does indicate low predictive value.
What about links that need to be available for failover or during emergencies? What about organizations that operate at those hours? I used to work at a 24 hour retail chain, and some stores in mining towns had their busiest hours around 4AM as busloads of miners came in to shop before the day started. We could _never_ upgrade those stores in the early morning hours.
PDF is for printing and for (well, with the exception of a few edge cases) guaranteeing a layout and display given a set of paper dimensions. HTML has the advantage of responsiveness, but the inherent problem of variable output.

When I was a professor and advising my students on creating portfolios, I told them to build websites of course. But I told them to also have a link to a one-page PDF because many organizations (not just academia) forward resumes within an organization to someone senior who eventually prints it out. And you don't want that person's first impression be whatever your website's print.css churns out.
Only if you're technologically-illiterate.
That's already existed. In many iterations. Even specifically for newspaper websites.

Why aren't you already using one of the many options?
How much work do you think will an ESP32 port take?
This is pure speculation, but I wonder if this has anything to do with the AirPower wireless charging mat's development?
Show HN: WebRTC signalling data using QR codes