skysight-inc/HackerNews huggingface dataset:
Just pointlessly trying to exist way past its date of expiry.

Facebook reminds me of Edison pushing his DC power distribution model on everyone. Telling the world nothing else will work. Trying to get them to build an Edison Power station every second block. Coasting on momentum built and wasting everyone's time. Spending huge resources buying out/maligning/litigating the competition. But it all fails. Few people ever needed DC power distribution. At the end of that story Edison says after a series of humilations in public and finally loosing control of his company "I have come to the conclusion that I never did know anything about Electricity".

That moment for Mr.Zuckerberg is fast approaching.
Remote.tools – 100+ handpicked tools in 20+ categories for distributed teams
No doubt, A small team can sometimes accomplish amazing things when they don’t have oversight. It’s too bad that the quality will probably stay stagnate.
Screenshot of what the old site looked like: https://imgur.com/a/Xi1ZHYN
Would unveil and exec on the target binary work as intended?
2080 Ti is brand new :/
Users flagged this post, presumably because there were two major discussions in the last 24 hours:

https://news.ycombinator.com/item?id=18197431

https://news.ycombinator.com/item?id=18196934
This is sort of a ridiculous position. Americans have been exporting wealth to Saudi Arabia and China for decades. What's the greater sin? Driving to work burning stuff pumped out of the earth under Saudi Arabia, wearing an undershirt stiched by an exploited woman in Bangladesh or working with cash provided by some tyrant prince?

Unless you are living in a yurt somewhere, at some level you're going to morally impure.
They mentioned that in some of the use cases, the thing they're imaging is so fragile that it can only tolerate one laser pulse. So I don't think you're correct.
>maybe we can go with something like a public defender for contract law.

Public defenders for criminal law is something massively broken to the extent that we have innocent people going to prison every day. It is a system to be disgusted at, not attempt to replicate.
> An "automatic" update that would potentially cause the router to reboot and bring down the network would go over very poorly with customers, even if it happens at 3 AM.

Maybe the the trigger for the automatic reboot could be more complicated than just a time-based trigger. Something like

Reboot when
localtime > 2AM &
localtime < 5AM &
traffic averaged over the last 5 min < 5kbs

Basically reboot unless the router detects the network is being used actively.
Beware the AI delusion
I wouldn’t put bald face lieing beyond facebook, but this doesn’t seem like something important enough for facebook to care about.
>The company refused to hand over the data it recorded when Veale clicked on links in other people’s tweets, claiming that providing this information would take a disproportionate effort

He's asking Twitter for what additional data Twitter stores in response to clicking on Twitter-shortened links. This is perfectly in line with the spirit of GDPR. That said, we're going to have a long road and huge mess as a result of the ambiguity that exists at so many levels and there will be lots of legal tests.

FWIW, I led the GDPR compliance effort for a SAAS product and our strategy was mostly to stop storing or processing anything we didn't absolutely need AND to make sure we could generate necessary audits to provide that information in response to customer inquiries. Here, it sounds like Twitter dropped the ball or didn't go through the effort to be compliant.
>Hope not to see indifference caused by false equivalencies.

I'll try to come up with a 'close equivalence'.

>Person makes Billions of dollars by giving his organization to a questionable company. This includes the personal information of users, the social infrastructure, and employees.

I am a 10%er who saves literally $60,000 USD/yr, let alone my wife is a Dr. with her own income. I cannot see myself selling out for petty money. Money cannot buy happiness when you can buy almost everything you want.

My side projects look to profit as profit as a capitalistic indicator of beneficial change.

So I dont understand, what is this person going to do with the money? If you sell out, you better be doing significantly better things with that money.

All of this is IMO, life philosophy, and the culture around me.
I work for an internet radio company and deal a lot with streaming royalties, I'll try to offer some more context here:

- "groups representing (musicians)" from the article is, in this case, almost certainly referring to Performing Rights Organizations (aka PROs). The PROs are groups like ASCAP, BMI, and SoundExchange who manage the business of collecting and distributing royalties to artists. When you make a public performance of a work, or when you broadcast it in some way, you're required to obtain license from one or more of these PROs and report your usage of the work to them. They then determine what the artist is owed based on your usage.

- big service providers in the industry, like Spotify or Pandora, can make "digital direct deals" with labels and content suppliers. This lets them skip parts of the process of reporting their royalties to PROs, and instead they negotiate and pay the record label or content supplier directly. A direct license like this is typically also required if you'll be offering downloads of tracks, not just streaming broadcast.

- the biggest/best change on the artist side is from the Allocation for Music Producers (AMP) part of the collection of bills passed here, which officially recognizes producers for their contributions to a work and makes them eligible to receive royalties

- the biggest/best change on the steaming provider side comes from the Music Modernization Act (MMA) part of the collection, which introduces the concept of a blanket mechanical license. Interactive streaming (think on-demand usage where the user has lots of control, not radio-style usage where the user has little to no control) requires a streaming mechanical license, and up until this point, these licenses have been cumbersome to get - you don't get one by default, you have to request one specifically for each track you want to play from the copyright holder, and the streaming provider themselves is responsible for trying to track down the rights on their own. Clearinghouses like the Harry Fox Agency try to simplify this process and provide tools for automating it, but, it is clunky at best. The MMA makes streaming mechanical licenses much more like a noninteractive statutory license, where no pre-approval is required for use as long as the streaming provider is properly registered with PROs and promises they'll record their usage, report it properly, and keep some money on-hand for the eventual royalty bill.

I don't have much opinion on the parts of the legislation that relate to copyright for pre-1972 works.

In short: it should be easier to get paid if you're a music producer, easier to get paid if you're an artist whose work is being used by interactive streaming services but you aren't big enough to be covered by a supplier or major-label direct license, and the barriers to entry for a service who wants to provide interactive streaming just got a little lower on the licensing side.
While I agree this isn't the law's place in general, this hovers very close to the right-to-repair argument. Do you have a right to repair a printer? Can the company make physical attempts impossible or how far is a company allowed to go? Then apply that to reverse engineering and manufacture of replacement parts. Do you have a right to replace parts in a printer? Or, does a company have the right to go to any lengths to prevent it? Or is there a middle ground?
Is that really true? Sure you can write cryptic code using operator overloads, but the convention is to only use them in cases where they improve readability. For example numpy code would be a lot less maintainable without operator overloading IMHO.

I haven't written numerical code in Go but I am skeptical it will be as maintainable without operators. The lack of a particular feature does not in itself make code more maintainable.

I can't speak to metaclasses, since I have never had to maintain code using them. In my experience they are pretty rare.
BMC's are great--all my home builds have them because I'm too old to be fiddling around trying to figure out why a computer won't boot an installer from a USB key. But even on my home network the BMC's are on a separate switch on a subnet that doesn't have internet access except through a VPN gateway.
Kudos! This a great work. I remember few years back when I was exploring TLS, there were no such resources and it took many months of trial and error to get some reasonable understanding. I tried doing a similar thing, but was only able to do for couple of packets [0]. Surely such an illustration will go a long way to help newbies to understand a complicated protocol.

[0] https://serializethoughts.com/2014/07/27/dissecting-tls-clie...
Discussed at the time: https://news.ycombinator.com/item?id=18074690
Is there any decent tool for tabluar data extraction from scanned PDFs?
How the US withdrawal from TPP trade deal set back democracy in Vietnam
Cool! Would you be able to add a ascii view beside it?
It’s a bit foolish though, because “regression” will always identify a pattern too, or many other simplistic models.

In ML, techniques to avoid overfitting or reporting spurious relationships are a first-order, 101 topic, especially among the type of ML engineer a hedge fund might hire (they are not hiring data science hacks).

On the flip side, I worked in a quant finance firm before that mostly did factor investing with some twists, and the overall statistical rigor was embarrassing. Even with simple regressions, nobody was asking basic robustness questions, p-hacking was daily life, directly comparing t-stats from different univariate model fits was considered “advanced feature selection.”

If a firm is goimg to do bad stats, they don’t need machine learning for that.
Good thing I couldn't be bothered reading anything on that trashy blog anyway.
You are right, and I know AT&T is not the cheapest, but I am forced to use it for the time being. There are a number of reasons why one would need to stick with one operator or the other.

What I question is the fact that I have no control on incoming SMS, and still I get charged for them.

Most of the 4-5 digit numbers mention the STOP options, but I get messages from 10-digit numbers like the following:

"Tracie! Breaking report: This fruit burns up to 10lbs of fat in 14 days! Enjoy this special update here al49.xyz/ketonews"

The same message, a different number every time. Basically everyone in the US is forced to have unlimited text and calls in order not to pay for incoming marketing, how fair is this?
correct, and the Broglie-Bohm uses an abstract amplitude wave just like copenhagen - the only difference is in copenhagen the result auto-magically appears, in-toto, when it is "measured" (¿), and in Broglie-Bohm the particle really exists the whole time and travels the whole path mapped out by what the abstract amplitude wave specified.
Why I’m ending my 3-year Open Source contribution spree
Janitor wins the Rooney Prize for Irish Literature from university she cleans
500 Mbps, unlimited is the real deal here.

Datacenter grade unlimited connections are very valuable. Consider that someone like Google would charge you $0.10 per Gigabyte for egress traffic, and you can get that every 16 seconds with this connection...
I don't think it's very far from the reality of your full stack app developer though.

Ie. 900+GBP/day is listed rarely and for very specific/niche things.

Then, the more niche it is the more likely it is that the downtime between contracts becomes longer I imagine.

Curious what your anecdotal experience has been, to the extent that it can be shared.
Software won't help you. The premise is a phone where the spy agency has root and your only defense is "physical on/off switches" to control the I/O interfaces.
LOL is that for real! Please please can you give me a couple of good citations for that?
Why would he do this its going to damage china economically and diplomatically.
URLs are hard, let's kill them
Hello. Thanks for the comment. We have plans to open source two more products this year. with similar licensing compared to Porcupine.

1- Speech-to-Intent: It allows you to issue complex voice commands in a specific domain and in turn returns the intent. For example, in the case of a coffee maker you can say "Please may I have a single shot espresso with no milk and two sugars". The engine returns a JSON-like object with
{"product": "espresso", "milk": "no", "sugar", "two", "# shots": "2"}. It is a tightly coupled domain-specific speech recognition and NLU. It is small (less than 3MB and 8% CPU usage on RPi3) and ideal for home automation, industrial application, service industry, etc.

2- Speech-to-Text: It is large vocabulary speech recognition software that runs locally. It will support all platforms currently being supported. It allows you to do large vocabulary transcription with high accuracy locally on an embedded platform.
Mobile Exit Intent Technology
I think there's still a lot of blame on Mikrotik for having such bugs in their management service and other daemons. I explicitly opened up the winbox port to be able to remotely manage Mikrotik routers I deploy (I considered their VPN implementations to be an even higher attack surface), as did many other admins it seems.

The winbox protocol supposedly runs over TLS and requires a username/password before anything is possible so I thought it should be safe enough, but through this bug anyone can download any file with no authentication (and the user db was storing passwords in plaintext which certainly didn't help)!

The web server vulnerability, sshd vulnerability, the smbd vulnerability - all are their fault. Had they used standard, well-tested open source packages there would be no problems, but they had to write their own custom implementations of these protocols for "reasons". I hate to think how many remotely exploitable bugs are lurking in their ipsec implementation.
Exactly.

And regarding the kwargs I had this feeling first of oh no "what is this!?"

I have been programming Python since 2000 and I never used kwargs before. I knew they were there somewhere but I never bothered with them.

I was at first a bit annoyed, but I really wanted to add my own tags and discovered it was actually quite nice if I could intercept arguments in my own tags. You don't have to use kwargs to add your own tags, but you can make the tags more powerful and composable that way.

But kwargs are really only worth it to me if there is a strong component of, "write once, use many times" to it.

You don't have to use kwargs to add your own tags to Dominate, you can just return tuples of building stone tags if you want to.
How long ago was it that Mikrotik shipped devices that listened on the WAN port? The Mikrotik hEX and RB3011 I bought last year most assuredly was not configured that way even though the version of ROS on them was many revisions out of date.
whats up with the contradictory first point the article is making?

1) This data privacy glitch is just like Facebook’s Cambridge Analytica scandal, except it isn’t.

well, if its not, then why even bring it up? that part smells like sensationalism to me..

things doesn't get better when we realize there are no indications of any actual leaking of anyones anything.

The bug this article refers to was pretty bad, and googles handling of it was indeed poor. but this is just bad journalism.
Amazon Echo Dot (3rd gen) review: better looks, better sound, same price
Britain can become the natural global home for fintech
You do realize we're not limited to "our 5 senses" when studying the universe, right?
We will open source Cheetah this year with a similar licensing model as Porcupine.
Let’s Talk about – Promoting Software Is Tougher Than Promoting Anything Else
> copying data to the GPU (host -> device)

Copying data to the CPU (peripheral -> host) is expensive too, and it's perfectly possible to just replace peripheral -> host with peripheral -> device. I don't know if that is what blazingsql does, but it shouldn't be discounted.
I reportedly slept through my own circumcision and never seemed to even notice getting shots. My own son never reacted to shots as a baby. I'm not saying it didn't hurt, but I do think very young babies may feel pain differently and/or that "feeling pain" also includes anticipation and other factors.

This is all MHO and anecdotal, so please don't think I'm trying to state anything as fact or an educated opinion.
Apple taking the application processor business in house has gone very well, they currently have a substantial tech lead in the smart watch market due to their processor advantage over the outdated qualcomm most android devices are stuck with [1].
They have a similar (but smaller) advantage in phones, though that is also due to a very large die size as they can afford to spend more per product.

Presumably they are looking at moving power management silicon in house as well to consolidate that advantage. At there scale, they will be getting custom silicon from Dialog already, but there's probably some comms/cost benefits to dealing with a department rather than an external company.

https://arstechnica.com/gadgets/2018/09/review-googles-wear-...
Add in the value of that 500Mbps unlimited connection to the internet...

Egress - Americas/EMEA: 161,792 GB

USD 13,260.80
Of course, if you're on vacation and relying on that router to be available for security cameras, an automatic firmware update that results in a bricked router can be more than a little disruptive.
My favorite of these types of bizarro QM communities is that of the "holographic fractal" universe. Nassim Haramein[1] being one of the popular figures of this movement. If you're willing to sift through the mysticism, the r/holofractal subreddit has some interesting ideas to chew on during an otherwise dull lunch break.[2]

[1] https://resonance.is/about-haramein/

[2] https://old.reddit.com/r/holofractal/
Thanks! You are not the first one to sayme something similar... I was thinking in changing it to feedbackme or feedbackloop or something similar to make it more professional too, but it's hard to decide either do it or no.
My Epson AIO is going on about five years now, use it all the time, and I don't expect it to break any time soon.
You have any proof to back that up, or are you just going to spread FUD and hope the echochamber agrees with you?
someone else wakes up to find a universe full of 60's futuristic utopian planets nobody ever lived in

Reminds me of the paperclips game [1]. Would be horrid to find those people wake up and find the universe transformed into nothing but paperclips. [1]

[1] http://www.decisionproblem.com/paperclips/index2.html
Startup Accelerator for Bootstrappers
Because non-subscribers can’t get past the third paragraph of the paywall?
Security issues are tricky. Often making people aware of an issue is indistinguishable from having caused the issue.
I would become an EU citizen if I could the day GDPR went official. It is the second best thing to happen after the invention of WWW itself in this industry. Hopefully more is to come and more countries adopt similar measures, and browsers start providing standardised UI for GDPR etc. related options so that those popups, if they exist, are rendered futile.
Glad I didn’t go with Dialog for a BLE chip. Kind of puts their line at risk for future development.
Yes, if I do this again I will definitely generalize it into a content generator.

(Isn't that what every site turns into eventually, a custom CMS?)

As it is it's all tcpflow, hexdump, and vim.
You Don't Really Want That Burger – You Want Higher Social Status
>Supermicro boards were so bug ridden, why would hackers ever need implants?

Ummm, because if you need your hack to be reliable, you can't rely on someone else's bugs to be there when you need them. You never know when they'll be fixed, or just replaced by new bugs.

A long time ago when setting up computers and networks was driver version hell, we had a short list of manufacturers' computers that we'd do setup included in the price instead of on-the-clock. This came about when a shipment of about 20 Dell computers, all supposedly of the exact same model# and revision, required about about 11 different setups, because the various chips on the board were different. They were clearly just using the chip-of-the-week>from whatever supplier was cheapest -- great for their price points, but every variant required a different driver for some subsystem. So the list was created and Dell was not on it (it was IBM, Compaq, HP, DEC, to show when this was).

That's solved now by hiding it with the much more automated OS and networking setups, but it is easy to see how the Chinese spies would be in the same situation -- some buggy boards are wonderfully exploitable, but how do you tell that the version going to your target wasn't changed by some revision that wasn't even noted in the Rev- listings? Better to insert your own bug if you want to actually get the job done.
This happens again and again...

a. oh no!!!

b. nobody will go to prison

c. a programmer will be fired

d. managers will get bonuses

e. nobody will change the way they write programs, process data, etc.

f. go to point a
Not trying to come off trite, but the RFC [0] has a simple ASCII diagram of the message flow and the structures that follow are fairly easy to read. Granted you have to hop to a couple of other RFCs to understand extensions and maybe even real world impls to understand some changes (e.g. no time in the random block of client hello), but it's worth perusing if you're interested.

0 - https://tools.ietf.org/html/rfc5246#section-7.3
Scratch that. Upon reading VyOS's docs for the EdgeOS config (which has relatively poorer docs), it has strong advantages: commit/rollback, single config file, and Ansible has an EdgeOS module included by default to coordinate that.
Can we really continue to claim that we're unaware Google, Facebook, and other web companies are monitoring everything they can and sharing the information they collect, sometimes for profit, sometimes accidentally, and sometimes compelled by legal orders?

This isn't merely a legal technicality hidden in the terms of service. We know they're doing it, and by continuing to use the service we are consenting, however unhappily.
It depends on what you want to do. If you want to extract information from a specific network. maybe custom firmware is a good option.

If you want to just disable a very large number of machines to create economic damage or cripple infrastructure, a hardware implant would do just fine. And you wouldn't need to be very careful as to where it ends - if you make enough of them, they'll be everywhere.

If 1% of all MacBooks have a similar backdoor, there are about a dozen at my building.
Unfortunately Mikrotik updates tend to change a lot of things and potentially cause issues. Recently the whole bridge implementation was rewritten which required config changes if you had anything beyond the basic bridge/port setup. And the last "stable" update was bricking certain models by making them unbootable. If they were applied automatically then there would be lots of broken routers...
Most of those replies sound like: "we are experts, we know better" and stating badly outdated facts that probably passed through marketing department on the way to those experts. I hope no progressive person wants to work for them, but rather to compete with them to drive them out of business, a typical pattern repeating whenever somebody gets too cocky about their abilities.
Bravo Rob & Einar. So many founders are consuming their nights and weekends trying to get their side business off the ground with enough traction to be able to leave their day out. I'm glad to see someone finally tackling "funding for the rest of us" ;)