skysight-inc/HackerNews huggingface dataset:
Most omnivorous and carnivorous animals can get sick from uncooked flesh too.
What’s difficult isn’t the DOM itself, it’s that you thread in and out of the DOM with a changing DOM state and with multiple people writing application code. Many of the frameworks / packagers exist to help tame the context switching, since in frontend land you might have business logic that is dependent on a CSS class that may or may not be present at any given moment and might be modified by some other piece of logic.

Everything in the DOM is basically a global variable, and any part of the app might manipulate any part of the DOM.

Example: Someone wrote CSS that is coupled to a child element (which seemed the clearest way to write it at the time) and someone else comes along to edit the content of the HTML which adds a layer and now your logic is broken even if the CSS still looks right. The frameworks make it easier to avoid that kind of fragile coupling / enforce a consistent way to manage the interaction of JS, CSS, and HTML.

All that said, web applications really are an entirely different beast than websites, even if they exist on a spectrum.
This is awesome! I been wanting to see something like this for the last few years, and was even thinking about starting it in the future if I had the resources. I would have definitely applied last year, but I'm a bit too far along now so I don't know if it makes sense. I've also realized that I prefer being independent and having 100% control, and I don't really feel too much need for accountability or community. I think I probably have enough between Stripe Atlas, Indie Hackers, Nomad List, Hacker News, Reddit, and local meetups and events.

I haven't had a great experience with YC Startup School, to be honest. I quit when I found out that I had to be aiming for a billion dollar company in order to qualify for the $10k. The phone calls were really long and I had to get up early. I would stay on the call for over an hour every week while people talked about their startups. It wasn't very interesting and I didn't get much out of it (no offense to the people in my group.) I think it would be better if I was part of more conversations, but I was just on mute most of the time. I also watched a few talks, and they were fine, but I don't think I learned anything that I was able to put into practice.
Awesome! I look forward to trying out the speech-to-intent and speech-to-text products. Will these also be Apache 2.0 licensed?
95% of C code is comment teasing Greenspun
You might find this useful: https://github.com/mallendeo/cdp-rawgit-fix

It'll scan all your pens and try to suggest jsDelivr URLs wherever you've used RawGit.
As a parent, I have done this.

It’s hard when an active kid is constantly distracted. It has been a big exercise in discipline (for me) to say that food is eaten at the table at specific times and if she’s hungry, then she can eat more at the next meal. (Obviously baring force majeure etc.)
> What does that have to do with independence and transparency?

It was a marketing stunt performed in partnership with a television show and was installed without the user's knowledge or consent.
I don't think it's phrased to correlate the second outcome dependent on the first. That part of the article was referring to the racer regressing to their mean. With the assumption that they overperform in their first race based on the phrasing "surprisingly well", then the conclusion is still correct because the likelihood of them performing to their average performance level (whatever that may be) is still more likely than overperforming.
I used to contract with a WISP. I would regularly get calls to "reboot the router" from the owner. The "router" was a fiber switch at their CO. I would just do it when they asked. I wasn't a customer nor did I get paid enough to fix their network. Sorry if that was your connection. :)
I'm among the hacked people. I'm feeling so disappointed.
It's not as delicious looking as what's in the article, but gas stations like Cumberland Farms often have surprisingly decent grab-and-go prepackaged lunch items. Or if you can pop into a supermarket, there's often a salad bar, hot food, deli sandwich, sushi section that's nothing to sneeze at. Oftentimes that's faster, cheaper, and definitely better than your fast food McDonalds/DunkinDonuts/whatever chain.

Alas my go-to is still the classic New England general store steamer full of red hot dogs...
Thanks for responding here with your thinking around the issue - I know there's always strong pressure to not engage or that any talking to the public will just backfire/make things worse, but I appreciate the insight into how you're thinking about these things and the complexity around the tradeoffs.
MoodleNet: more than a technical project – Alex Castaño
> The more vulnerabilities they attempt to exploit the faster they're going to be noticed so that's a risky gambit.

It seems your entire risk computation is based on the premise that this is true, and that if true how much more likely they are to be noticed is significantly high enough to make it less worth the risk.

Do you actually have data to back that up, or are you just going by an assumption? Because to me it seems likely that there are blobs of JS that look for a wide number of vulnerabilities floating around blackhat sites ready to be slightly tweaked for the individual case and then deployed. That's basically the entire premise of what script kiddies are, but with JS, so I don't see why it wouldn't at least be easily available.

> The more realistic threat model is software being compromised and the auto-update feature pushing out malicious code to all of the users like what happened with the Transmission BitTorrent Client.

That's possible. It would still be interesting to see more of the reasoning on this. I can think of a few things that might mitigate what I think you are referring to, but there's not much by the way of details to address.
I don’t see why you think that. Let’s say each of your classmates has a number of dice representing their innate ability, and rolls all of them. You have 5 dice, do surprisingly wel and roll four sixes and a four for a total of 28, beating some classmates who have 6, 7, or even 8 dice.

If you repeat this, it’s unlikely you will do similarly well.
That's true, but it's still worth it. I can barely read most sites anymore on mobile or desktop without reader mode. I use Firefox but Edge and Safari's reader modes are also great.
There is a qualitative difference between an internally discovered vulnerability - presumably by somebody with lots of access, knowledge, and the ability to verify their hypotheses - and an externally discovered vulnerability.

Furthermore, if every potential vulnerability that might have been exploited needs to be reported as a breach... then each and every bug in any library and other dependency you use likely needs a breach report too - after all, you typically cannot verify retrospectively whether that exploit wasn't independently discovered and abused before the fix.

I'm not even positive such a reporting requirement would really be a bad idea, but it would definitely needs some more mature reporting and population education to tell the two classes of issue apart, especially since it's pretty vague where you draw the line on what needs publication once you get that far.
Every now and then I let a software company that supplies enterprise software know that their marketing emails are going to spam because their marketing email provider doesn't have an spf record on their domain. They know me personally but still never reply.

I told the same company that the certificate had expired in one of their sub-domains. It intrigued me that the first 3 of their tech team didn't know what that meant.

Still they never said thank you.
Interim author here. Surprised to see this reappear. I'm a bit embarrassed by the code quality nowadays, but I still like the concept and as critics here have correctly pointed out, there ought to be a lot less C in it.

Back then I was struggling very hard to get the low level details of the machine under control (Pi back then and some experiments with x86 BIOS stuff). It was super fun to have this ham-fisted brutalist JIT actually do something real and to connect to IRC on this mockery of a TCP stack and to make some VC4 GL triangles appear out of a bunch of commandstream arrays.

In the meantime I've built an FPGA graphics card for Amiga (VA2000) and an open laptop, the MNT Reform, whose beta units will ship very soon now (TM). A while ago I also worked with some really smart software engineers as a startup CTO for 1.5 years and all of these things together have given me a lot more perspective and depth compared to back then.

It will be fun to return to this and clean it up as a demo for Reform.
The Toddler Who Was Detained at the Border and Persuaded to Sign Away Her Rights
Because they didn't actually look at MacBooks, they're just guessing the price and specs.

Also for some reason people who say this never mention that they're happy with a 1080p screen.
I think this is explained by the optional compression which is handled at the record layer.
You'd be surprised how many of us mostly ingest news through RSS feeds.
If you do long distance running or cycling, at one extreme, it's obviously a no-go.

Not obvious at all. My best marathon times followed training cycles where I didn't eat breakfast before long runs (i.e., 13+ miles).
My main qualm with intermittent fasting is that it makes me hungry, which depletes my will-power budget for the day (which prevents me from being productive later in the day). Is there any diet that works better than IF (or just as well), given the constraint that it also needs to minimize use of your daily self-dicipline resevoire?
Opening up with the claim that computer software is "based on the ideas of Claude Shannon" is strange. Does anyone seriously believe that Shannon's contributions to the foundations of computing stand so far above others'?
Logged in today and found:

"[name], we have more information about the security incident we discovered on September 25, 2018. An unauthorized third party accessed your name, email address and phone number. We acted quickly to secure the site and took action to protect your account, and we're working closely with law enforcement to address the incident."

Ridiculous.
I do, but that sentence is weird.
No suggestions. Just a thought on cause and effect.
Inoreader can pull the whole content
Definitely not. Any similarities are more likely to be a consequence of the limited options you have designing an Intel-based system in the first place.
I've done extended water fasting several times. 5-days, 7-days, 10-days, 17-days. It's MUCH easier for me to fast for 7-days than do 7 24-hour fasts. I feel much less hunger and fatigue when doing extended. All the negative experience is in the 1st day or 2 and gets really easy by day 3. So the result is much less net discomfort with extended fasting.
> at a rate that would be more consistent with a human?

I think that's the hard part. Some content providers put out content way quicker than a human could ever keep up with. I wrote a web crawler once to download high resolution pictures of cars from a Russian website at a quick but modest pace and I got IP banned within a couple hours.
There's a lot of calorie in fats and sugars. It's quite easy to eat a single meal at some place like Carls Jr or Burger King and meet your calorie needs for the day of a run...and then some. If you eat at Cheesecake Factory, it's hard to find a meal which wouldn't satisfy your calorie needs for an several days.
it would feel more natural to just have the feeds in the sidebar instead of a dedicated feed reader
You must not realize how slow a lot of companies are in updating software. If you're doing something like online banking, why expose yourself to that risk at all?
It's a simple matter of measuring the calorie content of the food going in minus that of the waste going out. There are many things that contain calories that humans don't digest well but the things we tend to eat have pretty consistent calorie digestion to waste ratios, regardless of the eater. Beliefs to the contrary are mostly driven by the food fad industry.
6 Degrees of Delay: The Many Ways We Procrastinate and How to Stop
I'm not an expert either, so take this with a grain of salt.
At the risk of sounding glib, I'd think the biggest cause of this unavoidability is that security professionals have to be "right" (in the sense of plugging every hole) every time, whereas black-hats need to be right (in the sense of finding said vulnerabilities) only once (or a few times depending on the vector, but you get the idea). Being on a Blue Team strikes me as a hard, thankless job, and I'm grateful for the people who volunteer for it.
Hey Matt! I'm surprised you didn't have an account before, although I guess lurking's a lot easier around these parts.

I just wanted to let you know that I've been a really big fan for a really long time, and you are part of the reason I'm so openly nerdy and excited about math and science in general. Thanks for all of the amazing content you put out.

Also, Let me know if you're gonna be in the Boston area any time. I'd love to buy you a pint.
I am not sure where did you live during your years in Japan, but let me assure you it is very easy to find bad tasting food in Japan. I consistently find food at tourist trap destination overpriced and tasted pretty bad.

And most married persons do bring boxed lunch. Along with a lot of female, married or not.

And Japanese food is no where near healthy with all the deep-fried menu as a staple. But I guess if you compared it to US fast food..
Actually they replaced Thunderbolt 2 with Thunderbolt 3, and it's better.
Potential outcomes:

a) The rape allegations remain unproven. Perhaps he's awarded some damages from the woman who made a huge mistake originally posting the list, which she had acknowledged by immediately taking it down.

or

b) An alleged rape victim comes forward. Whoops!

Best case scenario where he IS innocent, he ends up where he is today, in purgatory. And either way, it seems likely women will come forward claiming various degrees of harassment and he'll look like a dirtbag regardless. Is that a win? Is pursuing it a smart strategy?
It’s always the users who have the final word. Otherwise we’d still be watching TV.
Thanks for everything! Are you going to open source the Rawgit codebase? I'd be interested just for educational purposes.
> I assume Facebook has a lot of smart people working on security.

I am not willing to roll the dice on that assumption.
The stats he has quoted on the FAQ it wouldn't be surprising if it starts making $10K/mo (just a wild guess) and the malware reduces as a side-effect too.

But I guess you're right. Not everyone is driven by money and it would certainly turn a hobby project into a full time job. Sounds fair to shut it down.
Also check out his channel! https://www.youtube.com/channel/UCSju5G2aFaWMqn-_0YBtq5A
The multi-billion dollar question is still... how many of them were EU citizens?
What other subject has a problem so simple, that an elementary school student could easily understand it?

Yet, the problem received 10,000 wrong answers, many from PhDs, even some mathematicians, including one who refused to believe the answer even after seeing proofs.

To be able to teach counterintuitive concepts is an impressive skill. Wish I had a recommendation but let us know if you find one.

So does any other problem meet the above criteria?

https://en.wikipedia.org/wiki/Monty_Hall_problem
> The larger you become, the more software you have to run, the more you have to manage, the more lucrative an attack on your systems will be for the attackers.

Also the more people you have who might be compromised. It's almost a certainty that there are people with access inside Facebook who are or have been corrupted. That can happen in a small company too, but the risk/reward is usually lower and there are many fewer people who can be targeted.

One person with a thumb drive can exfiltrate a highly damaging amount of data.
People are social engineering a random string when talking to customer care. The attacker says “Ah, a bunch of random characters, do I have to say it?” or even worse I have had a customer service rep look at it, laugh and say never mind.

I use “batteryhorsestaple” type of passwords stored in a password manager for the security questions. Those are easy to say over the phone and more resistant to social engineering.
very fine work. the data flow and annotation are clear and concise. good job
As somebody who has eaten three normal-sized donuts in the morning (even early morning) a few times, I can tell you I've never been ravenous by noon, or even hungry. Maybe I'd start getting hungry around 3 or 4, which proves your point some, but certainly not by noon.
They got 30 million users' access tokens. They didn't do anything with 1 million of them but grabbed contact info from 29 million people and additional profile info from 14 million of them, according to Facebook.
I do exactly the same.

Big pain the few times I've had to read over the phone a giant randomized string, but the phone reps always seem to think it's funny.
Nonsense. Pocket and tree style tabs are what make firefox the best browsing experience.
> It is interesting, still, that someone took time to build an app like that

Countless people still insist that Facebook is literally recording their conversations. I'm not sure it's possible to overestimate people's paranoia, or how stupid it makes them act.
How about numbers or complex/unknown words? I would love to proxy everything that isn't known AFTER the offline trigger word to Google voice recognition or something. Is that possible?
Foundations of Deep Learning from a Kernel Point of View (2017) [pdf]
RawGit has been open source from day one: https://github.com/rgrove/rawgit
Visa and MasterCard seems to handle security ok.
Well, let's do some quick and dirty math.

Let's say you have a very bright light source, and that light source results in shining a full 100 Watts of light into the sensor of your camera (I'm using this not as a typical example but because it will make it easy to scale the answer). Photons of visible light have an energy of at minimum 1.5 electron-Volts (800nm red light), which means that 100 Watts of light represents 4.2e20 photons per second.

And that means that with only 100 Watts of light reaching your sensor you cannot attain an fps higher than 4.2e20, because at that speed you'd only get on average around one photon per frame. More realistically you need tens of thousands to millions of photons per frame to have some meaningful level of dynamic range and spatial resolution, which limits the fps to around a quadrillion fps per 100 Watts of light falling on the sensor.

Though once you get into that range you also have problems of signalling, we don't really have electronics that work at those speeds.
I'm not on Facebook at all, and my spam call rate has shot up too. I think it's just an increase in spam calls, not a result of Facebook hackery.

If anyone you know is on FB the chances are FB slurped up all your details from their address book.
It seems like these products are mysteriously tainted with illegal active ingredients that make them functional. It is unclear to anyone why or how this would happen.
Why the demise of companies is a good thing
A good ML system has to be architect-ed to exploit known structure of the task that is being attempted.

CNN's exploit spatial locality and LSTMs exploit temporal locality. The SOTA models are architect-ed with even stronger assumptions about the nature of the task.
Methods like Neural Networks, Random Forests and SVMs when used as unconstrained universal function approximators for unstructured data only learn some non-linear polynomial/ exponential/logarithmic combination of data itself, without much nuance.

It is critical to help a model out by constraining the space of models it searches over to find the right answer.
I think, unless we figure out a way to constrain architectures to exploit specific traits of task they are trying to solve, (universal function approximator type) ML won't succeed in the same way that it has in vision / language.

As it of now, the alternative is to use PGMs where the model is fully interpretable as a graph structured combination of explicitly parameterized random variables. PGMs work well with low data and give really good uncertainty estimates, to evaluate the quality of a model.
PGMs of course suffer from the problem where they are excruciatingly slow for large datasets and require require a decent amount of prior knowledge about the problem to explicitly define the type of graph structure / random variables we are going to be using.

I think ML is most certainly capable of solving this problem, but the community is probably waiting for another break through along the lines of AlexNet/LSTMs before that it the case.
Mathematical Foundations of Automata Theory [pdf]
> Those data dumps are going to be sold on the black market eventually, and I speculate that in many cases government agencies will be able to identify unannounced breaches.

Sure, but how do you prove it was covered up rather than merely discovered externally before it was discovered internally?
This strikes me as fairly unreasonable.

The full range of human thought is probably possible to express in the language my sibling and I made up as children, but I'm not arrogant enough to assert that my teachers are all incompetent liars just because they refuse to grade essays written in our made-up language.

Every mathematics professor I've ever known would readily agree that part of teaching mathematics is teaching how to communicate ideas using the established linguistic customs of modern mathematics. That's reasonable, just like it's reasonable that literature professors insist on essays written in modern English.
Yeah, it's pretty bad. Some games try to gamify polite behavior (bonuses for getting tagged as helpful in a dungeon, etc), and that sort of works. Kind of sad that it's necessary, though.

I also think the rude behavior is a combination of both anonymity and "I'm never going to see or hear from this person again".
I wouldn't be able to tell you a priori what the price difference is, but the Balenciaga is obviously trying to be more avant garde, whereas the Nike looks much more ordinary, even conservative. It reminds me of the way (in my opinion) cars are more attractive up to a certain price point and then they get less attractive (to me) because really rich people want to show off that their taste is different from the masses.
doesn't strongly typed mean that the type cannot change once assigned? and you can do that in python, can you not?
In my password manager, I save nonsensical answers (not a string of random characters) to built-in questions.
Read Google's response carefully. They say they only had 2 weeks of api logs. They never say if the logs even had enough context to detect abuse.

After reading it, I got the impression they have no idea what did, or did not happen.
>She died in her Manhattan apartment [1], not some government funded facility.

I believe the parent was referring to government institutions such as social security, which Ayn Rand wound up using after being signed up by a social worker. She spoke out against such programs her whole life. However, she needed it, it was different. A common refrain with such people.
With that kind of remark I guess you never used a mainframe.
The free market proscribes fraud.
I just "refreshed" my work MBP to a Lenovo and Linux.

I'm happy with a 1080p screen.

I don't need a trackpad that's half the size of the laptop. I don't need keys that only mostly work. I don't need a strip of whizbang capable of playing Doom.

I need function keys, that work, and give me tactile feedback.

People like different things.