skysight-inc/HackerNews huggingface dataset:
> Specifically, how will you prevent SpiNNaker from going down the same path as the Connection Machine - (stops doing AI stuff because, say, geneticists want to use it for protein sequencing)?

I'm on the team. I can say that we're specifically funded to do and support computational neuroscience. However, if someone comes along with money wanting to do other kinds of projects on the hardware (and are able to handle the special characteristics of the machine itself) then they're welcome. The challenge is that it's non-conventional in a number of ways that make porting code tricky: in particular, the messages are small, designed to be multicast rather than unicast, the instruction memory per core is only 32kB, and there's no hardware floating point at all in the current generation. (You can do floating point in emulation. We do that in one of our projects.)

> Why do you see this as the future over something like NVIDIA's new HGX-2 or clusters of TPUs?

We see it as solving different problems. Those approaches you mention are great for solving problems that resolve to big matrix operations; SpiNNaker is better at tackling problems that are dominated in terms of description by communication. Neural simulations are really just vast hybrid ODE systems, but where it is possible to break up the simulation into lots of communicating domains (the synapses and neurons).
So double the concessions?
I was hoping for a significant cooling of the Seattle housing market with a full fledged hq2, but it appears it will be seattle first for quite a while I’d guess.
Using deep learning to detect malaria in images
I think they prepare already a while the shift to .NET Core as the primary .NET platform (also on Windows).

- .NET Core will soon run all three UI technologies of modern Windows UWP, WinForms and WPF (.NET Core 3).
- The Windows Compatability Pack for .NET Core shifted some popular .NET Framework libraries to .NET Core (some only on Windows).

There are one thing, Microsoft is really bad with: Telling the world that something is deprecated. There is a set of technologies in the .NET Framework which have no future: AppDomains, WCF, Code Access Security, Workflow Foundation, Cardspace, ... (just to name a few). They are all already dead for some years, but no one tells. They are supported in the .NET Framework but no progress happens. And .NET Core will never see them.
Looks like the github wsjUnblock repo got nuked at some point and the most recent version doesn't work on wsj anymore. Does anyone know if it's still alive (under active development) anywhere? If not I'll probably start poking around and see if I can get it working again.
Litany of failures:

* Firmware protection in drives is almost uniformly broken, so that they can get code execution (through JTAG or through hacked firmware images) routinely. This is bad, but shouldn't be the end of the world, since in the drive encryption threat model you don't want to have to depend on the firmware anyways. But:

* Two Crucial SSDs encrypt the drive with a key unrelated to the password; the password check is enforced only with an "if" statement in the firmware code, which can be overridden.

* Another Crucial SSD uses PBKDF2 to derive keys, but then has a master override key, which is blank by default. It also has a multi-volume encryption interface (Opal) with slots for volume keys, all of which are populated whether they're in use or not, and if they're not in use, they're protected with an all-zeroes key that recovers the master key for the device.

* Two Samsung drives implement PBKDF2, but not in the default mode, which is "password is checked in an if statement, like the Crucial drive". Also, the wear-leveling logic in one of the drives doesn't zero out old copies of the master key, so that when you change your disk password (or set it for the first time), unprotected copies of the data encryption key are left in blocks on the device.

* The Samsung T3 portable drive uses the drive password in an "if" statement and is trivially unlocked through JTAG. Its successor, the T5, is no more cryptographically sound, but is simply harder to obtain code execution on.

People have strange ideas about what disk encryption is good for (in reality, full-disk encryption really only protects you from the situation where your powered-down, locked device is physically stolen from you and never recovered [if you get the drive back, you have to assume, at least from a cryptographic standpoint, that it's now malicious.])

But the net result of this work is that Samsung and Crucial couldn't even get that right. This paper is full of attacks where someone simply steals your drive and then unlocks it on their own. It's bananas.
Yes that's about right.

Standard = an API set. If you know OO in C# or Java this is effectively analogous to an interface.

It's the smallest common denominator of various implementations.

.NET Core = the new implementation

.NET Framework = the old implementation
Sorry no, i don't trust Shay Gueron either and, even if I did, I wouldn't trust what Intel, AWS or anybody else did after he left the building. Same goes for Whatsapp. It might be based on Moxies protocols and excellent work. I might trust Moxie, but I still don't trust WhatsApp to be eavesdrop free because I can't easily create compatible clients, inspect their protocol, or look at their code.

That's not to say you shouldn't use TPMs, HSMs, or CPU enclaves. It's just that, if at all possible, you shouldn't elevate them to being the only thing protecting you. In fact, most of these devices can be coupled with software encryption by splitting secrets between them and the users brain. My android phone for instance is encrypted, but only protected by a 6 digit PIN. I'm aware that I'm totally dependent on the SoC vendor here to rate-limit and otherwise fend off bruteforce attacks and protect the key ultimately protecting my data. But you know what? The encryption itself is still done in software and can be verified, and I have the choice to use a ridiculously long passphrase instead.

What Microsoft did is choose a stupid default, and put their users at unknown risk.
I agree that it can get better results. But I'm not sure if you've noticed that the political party-in-power in the US is actively against collaborative approaches. I'd love to cooperate and win-win for everyone, but at some point you have to acknowledge that it's going to take a larger effort than is currently available.
Candidates bussing certain people to the poles has been done for a long time
> Not all apps need multi-thread[ing]

you are correct, not all apps need multi-threading, but it sure is useful. Especially if you don't like callbacks. Blocking the UI to do a HTTP call with no network isn't not a good move.

> GUI is most easy part for web app to mock.

Yes, but thats not my original point. Mocking a UI in a webapp easy to do, but very hard to do fast, smooth, offline capable, with all the features you want, and cross platform.
Ruth Graham, a writer for Slate, commented on this this morning[0]:

"

A sword was brought & Bezos said “Cut HQ2 in half. Each of you can have part of it.”

“Please don’t split HQ2,” the true host city screamed.

“Go ahead, cut it in half," the other city said.

Bezos pointed to the first city. “This is the real host. Put the headquarters here.”

"

It makes me wonder if this is another negotiation tatic by Amazon to get the final city to shell out more incentives.

[0] https://twitter.com/publicroad/status/1059533656694362115
The unit cost of a chip isn't too much. The price of doing the design and creating the masks for the silicon OTOH...
It's widely known ad the "noisy cricket" amp I believe :)
I remember when people were saying that the end is near for web apps since mobile apps are going to eat everything. No one knows what will happen in the next three to seven years. Best we can do is observe the market every year and adjust course as necessary.
Brita's are pretty much unless unfortunately. As are most pitcher style filter systems. Faucet mounted systems are probably the easiest way to go (eg Pur), but better under the counter or household water filters do exist.

Its also worth mentioning that there good chance that a water filter won't actually filter this out. Water treatment plants will often treat the water through multiple levels of filtration, reverse osmosis, UV treatment, ozone treatment, etc.
I’d bet money on the two being Crystal City, VA and Denver.

The DC suburb makes sense for an East Coast hub, and it’s smart to be near the capital for DoD contracts. And Denver is a nice, growing tech city with an attractive lifestyle.
To produce feed that the cows enjoy, the researchers cut a small amount of red seaweed with cattle feed and molasses.

You only need to add a little seaweed to the cows' regular food.
I need to highlight, that ASP.NET Core never run on .NET Standard. Some parts always have been dual-compiled for netcoreapp2.0 and net46(?).
When someone is directly comparing Amazon and Microsoft "clouds", I absolutely assumed they meant Azure vs. AWS. To the exact generic definition I shouldn't have done that, but when it's specifically up against Amazon, well, things can be true but also misleading.
Well, both implementations do have a strict which has the length as last member. Is there any special reason for it? Something like struct-layout optimization?
Just wanted to point out that JS has TCO coming, just a question of if/when engines have it implemented. Looks like Safari/JSCore is pretty much the only one so far though: https://kangax.github.io/compat-table/es6/#test-proper_tail_...
CppCon 2018: G. Nishanov “Nano-Coroutines to the Rescue
You are looking it wrong, when the computer is on the attack surface of hardware or software encryption is the same, if the OS is compromised or any other major part like your CPU the hacker has everything.

When the computer is off the software has zero attack surface so your only attack surface is a cold boot attack against the computer in which case it doesn't really matter if it's HW or SW encryption as long as the keys are in the TPM or an offline attack.

With an offline attack the attack surface of a HW encryption that might also store a copy of the key encrypted or not is now greater.

Also the attack surface alone is only a small part of the risk metric, how easy it is to fix it is just if not more important than how likely it is to have a vulnerability and a firmware not to mention controller level flaws in the cheapest SoC with AES encryption the SSD vendor could find is a much much harder thing to fix than a software solution.

TLDR; if someone would compromise your OS then your data is compromised anyhow, for what FDE supposed to protect against that is unauthorized access when the device is out of your control and off then the software stack does not pose a greater attack surface.

Literally the only case in which the "software" solution might be more vulnerable is when your device is suspended with the key in memory which means that you can attempt memory extraction through physical means (e.g. freezing it and transferring it to a reader before the charge fades), in which case there is no guarantee that the HDD solution would be any better, nor is there any guarantee that you don't hold the copy of the key in memory regardless of what mode is used.

If the device is simply locked then the HDD is in an unlocked mode anyhow if they can unlock your OS through some sort of an exploit then HW or SW they still get your data.
A simple tool to orchestrate ML experiments: skeletor
So, the article is coming slowly or not coming at all because two of the four bootstrappers are timing out and, if you're unlucky enough to hit one of them, it might take minutes to replicate the article content. Bug has been reported to the js-ipfs guys and a pull request has been merged: https://github.com/ipfs/js-ipfs/pull/1693

That was instructive and I'm glad the experience has resulted in people getting interested, questions being asked and bugs being fixed. Sorry if it didn't work perfectly, distributed stuff is hard. I don't understand the flagging but hey, HN will be HN, I guess :)

I will fix the issue in the next days and will keep on developing Vitriol. Obviously any help is appreciated. Thanks to everyone for your comments!
You just can't make money from solving this problem. (And if you could then we would have multiple competing wannabe monopolies.)
It seems like the kind of thing that should be possible - after all, Mono has had System.Web for a long time, and can run both MVC and Web Forms apps. I don't know anyone who has actually done so in production, though.

But although it's possible, I imagine there are lots of reasons why MS, or certain teams at MS, don't want it to happen. We'll see, though. I didn't expect them to make the decision to add WPF and WinForms support to .NET Core, but they did.
Sr. Software Engineer - Backend | San Francisco, CA | Volta Charging | ONSITE and WFH | voltacharging.com

We are a nationwide network of 500+ charging stations, and the only one to provide free charging to all electric vehicles. Our mission is to create the next generation infrastructure for domestic and global EV adoption. We just raised a $35M round of funding ($60M total to date), and have assembled a leadership team comprised of veterans from a variety of industries and companies including Goldman Sachs, FOX Sports, GLAMSQUAD, Yahoo! Inc. and more.

You’ll get to work on a small close-knit team of 4 engineers. You’ll be the first person to spearhead our newly formed Station Platform Team. This role is a hybrid between DevOps work and Engineering work. Some role highlights include:

- Prototyping new components and sensors on the stations

- Building a message bus to allow services on the station to communicate with each other and services in the cloud

- Ownership of the station service and infrastructure layer

- Our stack includes Linux, Node, Docker and BaSH

Apply at https://jobs.lever.co/voltacharging/0e6c9081-8c9d-4b01-8689-...
It's not a terrible idea - but that is a valid concern, yes.

Note that mass buying of votes is a concern under the current system as well. Allow people to pledge that they’ll vote a certain way, and pay them if their county and/or country votes the way they pledged.
>Transparency is a dependency of trust.

I think you go too far here. Trust is a dynamic spectrum, not binary. Transparency is one potential avenue to add trust, but is neither necessary nor sufficient in most cases. Every instance must be evaluated in light of its specific details, threat scenarios, and available tradeoffs.

>If you can't see how it works, then it's objectively impossible to trust it to do the right thing.

For most people "seeing how it works" is utterly meaningless by itself because few are able to properly evaluate the system (both knowledge and time play a role). For complex systems they're simply physically beyond the capability of any human to retroactively fully evaluate, or any system at all for that matter. Transparency can help positively change the incentives all involved players face, lower the upfront resource cost to evaluation which in turn may allow users to expand their trust parties to include actors with more direct interest in their interests, allow more casual white hat investigation even if there is less direct compelling need, etc.

In this specific case yes, open should definitely be standard given the stakes and because pure symmetric crypto should be simple, fast and standardized long since. There is no competitive advantage or secret algorithms here to be had. Furthermore as something that is effectively "infrastructure" it can result in less attention then flashier stuff.

But transparency is not a panacea, and closed software can perfectly well be probed anyway (as this very software and every single vulnerability ever found in proprietary software demonstrates!). The biggest value of open is less finding issues then fixing them. That was always the big driver of open source, not that it would somehow be magically bug free by the power of a thousand eyes but that when issues were discovered users wouldn't be up shit creek because whoever made it had gone out of business or moved on to new products or whatever. That has happened constantly with proprietary products for decades, the frustration with that is the huge practical driver for OSS. Over a long enough time span a lot of proprietary software devs will die or pivot or abandon useful expensive "old" tools without support and in turn their customers will get screwed. Transparency/openness can help with that, or at least offer more options. But in terms of just finding security vulnerabilities it's much less of a big deal then it gets made out, which again should be obvious given all the security vulns in proprietary software constantly being found.
Ipe is fantastic. I used it for technical images in my thesis and papers and the graphics turn out beautifully despite the program being so simple.
If you want a box with two tweeters and a woofer for some really legit sound, here's a design from a superstar of the DIY speaker design world:

https://sites.google.com/site/undefinition/isetta

He mostly just lays out the speaker and crossover design; but as he mentions a search for "TPA3116 2.1 amp" will give you lots of results on Amazon, AliExpress, and Parts Express.

PE's forums are good, lots of people have tackled similar projects:

http://techtalk.parts-express.com/forum

For anybody else interested in this hobby, there are lots of fantastic kits out there, primarily for bookshelf/tower speakers and subwoofers.

https://www.diysoundgroup.com

https://www.parts-express.com/cat/speaker-kits/286

The product page for the C-Notes (a fantastic value at $100/pair!) kit has a build video which gives you a great idea of the process and the tools you'll need. Process is similar for any flat-pack kit.

https://www.parts-express.com/c-note-mt-bookshelf-speaker-ki...

Of course you can also go as far down the DIY hole as you like, designing your own electronics and selecting drivers, etc.
I'm in the military. The ability to scrape weather data from a satellite or tune a random radio while huddled in a tent, or on the deck of a ship at sea, is VERY appreciated. My SDR dongle is in my strange tools bag, right beside my lockpicks. You don't need them every day, but once in a blue moon they might save a life.
I know this is a snarky comment, but... is it surprising that an industry built entirely on framing things to look better has a problem of workers having to frame themselves to look like better workers?

I do think we should aspire to better, but the extra image consciousness seems like the common thread here.
Doesn't seem to work. Tried with input ["z","b","a","c","d"] and returns the same ["z","b","a" "c","d"] as the output, using StackOverflow answer 4833835
I also subscribed only for OneDrive. I was happily using LibreOffice.

With Dropbox dropping support for ZFS on Linux, I had no reason not to switch. It's cheaper than Dropbox and you get Office.
Seaweed farming is a thing, and has been for about 400 years.
Is there a good place to go for the current state of client certificates?

I've heard that there was an issue where other websites could see the certificate, so there were privacy problems with having them installed.

It seems like something that would have been fixed, but it's hard to search for. Server certificates are so much more common. They end up taking over all the search results.
Take a look at some "sophisticated" retinal scan, they are in the end cameras, a special kind one. Fingerprint readers? Another kind of scanner. It doesn't matter that today's only few simpler model can be cracked with a single strip of scotch, it's only a matter of time.

And we can go up, even imaging quick DNA scanner, quick enough and smart, it does not change that much, your DNA can be grabbed around you in many way.

The essential point is simple: using your body means using an exposed key, using a password means using your brain that it's far harder to "expose". Also passwords are trivial enough, you can even check your keyboard for builtin keylogger, protect your environment from camera, microphone (phone/audio analyze to determine key's you press) etc. Try to hw check a biometric system and well... Good luck.
Ironically, I downloaded my first copy of Windows 95 from one of these FTP sites.
If you can't do FP properly, most of your OOP codes are smell.
Why ? At its root, OOP is born from FP.
What You Can Learn About Running a Fundraiser
Movement Prediction
Yep and I guess if it is only California dairy cows then that wouldn't be a lot either. Time to think about farming seaweed :)
Why would anyone tolerate not having proper discourse.

In full.
As horrifying as that is, it is ultimately not scalable nationally, while some zero day exploit is.
This project is both Awesome and Awful at the same time. Love it!
Note this is unfortunately not a news discussion site for the meal replacement of the same name.
Square CTF 2018 (starts nov 8th)
To my father who had chronic kidney disease (Stage 5)
Regards Portable Profile: I think the case is different. .NET Framework will just no longer evolve. It will always stay on .NET Standard 2.0.

.NET Standard is not a intersection. It is a small bubble being in a bigger bubble. And the biggest bubble is the latest. The reason Miguel and the Unity folks are so important in this process, is the fact that they have to agree to participate in the latest and biggest version of the Standard.
You can have whatever criteria you'd like for trust. I'm familiar enough with the "open source security" argument on Hacker News to know where this discussion converges.

I'm just offering a counterpoint:

1. Closed source wasn't too much of an obstacle for a pair of interested researchers to independently validate, without assistance from vendors, the firmware and hardware crypto interfaces on a bunch of drives.

2. The determinant of whether something is likely to be cryptographically sound is less likely to be "open source" (open source is full of cryptographically unsound things, many of which won't be ascertained as such for years to come) than whether you know the identities of the people who verified the design.
I would disagree, it's not a "no true Scotsman" argument.

Microsoft is actively competing against AWS IaaS and PaaS services, and leveraging embedded product features and license terms to force the issue with enterprise customers. Microsoft's spin is that those embedded relationships will compel customers to just join Azure. (Example: Windows 10 and Azure AD dramatically simplify PC management. How receptive is the market to that proposition? (I don't know, btw))

If they aren't getting heavy traction with their millions of existing enterprise customers adopting cloud services, they are doing something wrong that Amazon is doing right.

Additionally, the fact the Microsoft can sell Office and Exchange is a known, irrelevant fact -- they've been extracting a toll from every business since like 1995. What isn't clear is if they have the ability to compete toe to toe with AWS (the market leader in IaaS/PaaS).
Xamarin Forms also has WPF, OSX, and GTK renderers, so it might be an option. Based on GitHub activity it looks like they're being worked on fairly actively, too.
Or wave. That seemed like a nice idea that just needed some polish.
Some say it's still running bogosort to this day...