skysight-inc/HackerNews huggingface dataset:
Thanks so much for chiming in here.

Admittedly, bot detection is really interesting to me as a subject. It's not the kind of thing you can throw infinite ML at and expect it to break even in terms of scaling; you need careful tuning and optimization baked in from the ground up, which means a fundamentally "manual" approach involving lots of lateral creativity and iteration. That creativity and one-upmanship (along maybe with the gigantic piles of money, because manual ;)) is what makes the field so interesting to me - but alas, I cannot pepper you with questions/topics/discussion/anecdotes/stories for two hours for obvious reasons :)

So, instead, a couple of questions, considering datapoints likeliest to benefit others, and perhaps (hopefully) provide some appropriately dissuading signals as well.

- How does Botguard detect Chromium running in headless X sessions? By looking at the (surely very wonky) selection of pages visited, or...? (Obviously IP range provenance is a major factor, considering the unusable experience Tor users reportedly have)

- Regarding the note about "bending over backwards", while playing with some old VMs very recently I observed with amusement that google.com works in IE 5.5 on Win2K but not IE 6 on Win2K3SP4 (https://imgur.com/a/zg7FoAW), entirely possibly due to broken client-side config, I'm not sure. In any case, I've also observed that Gmail's Basic HTML uses very very sparing XHR so as not to stackoverflow JScript, so I know the bending-over-backwards thing has stuck around for a long time. Besides general curiousity and interest in this practice, my question is, I wonder if this'll change going forward? Obviously some large enterprises are still stuck on IE6, which is hopefully only able to reach google.com and nothing else [external] :)

- I wonder if a straightforward login API could be released that, after going through some kind of process, releases Google-compatible login cookies. I would not at all be surprised if such ideas have been discussed internally and then jettisoned; what would be most interesting is the ideation behind _why_ such an implementation would be a bad idea. On the surface the check sequence could be designed to be complex enough that Google would always "win" the ensuing "outsmart game", or at least collect sufficient entropy in the process that they could rapidly detect and iterate. My (predictable) guess as to why this wasn't implemented is high probability to incur technical debt, and unfavorable cost-benefit analysis.

I ultimately have no problem that JS is necessary now; if anything, it gives me more confidence in my security. Because what other realistic interpretation is there?
It would be great if the Neo4j team helped jepsen.io do an analysis of their enterprise clustering features.
Nice to see a Java based technology taking off.

Java will always be king of enterprise despite all the drama with the future of the JRE.
Also, local to who? There aren't 56 points in the UK such that everyone has a local point for any reasonable definition of "local".
Tech giants' monopoly on web “must be broken”
> Wouldn't it be easier to create an algorithm for compensation which clearly didn't involve gender (i.e. no deep learning stuff). Something which boils down to base salary + experience factor + google service factor.

You mean, the kind of thing basically every public sector employer has, where alleged gender pay gap is never an issue?

Yes, of course that’s easy to do.

OTOH, private sector employers like to have personal productivity be a factor, but don't have good objective metrics for that, so they let subjective assessment play a major role, such that the biases of managers become a substantial factor in setting pay.
>Unless they're bombing buildings the word you're looking for is extortion, not terrorism.

You don't have to blow up a building to be a terrorist. You don't have to carry out an act of violence, or even suggest one, to be a terrorist. Organizing a walk out is intimidation,

ter·ror·ism
/ˈterəˌrizəm/
noun
the unlawful use of violence and intimidation, especially against civilians, in the pursuit of political aims.
Currently just concatenate but I will switch to Merkle trees.
"Lie detection" is probably just the beginning. Think of what could be done by combining this system with facial recognition. Deployed widely enough, this system could build a personalized profile for each individual, mapping emotional state to times and locations, or more crudely it could be used for racial profiling.
Worst part is (in my view) that they wont be known to be "incorrectly flagged" until after a human has dealt with them. Initially they will just be a "flagged" person (incorrectly or not) and so the immediate bias (unconcious or otherwise) for the human operator will be "this person is a liar".

This is going to be awful - imagine all the people who are anxious anyway, perhaps dont speak the langauge very well, get confused by the questions etc. There are going to be a lot of people who will get "enhanced screening" and generally treated like a criminal for no other reason than "the computer said you are a liar".

Awful.
56 terminals for ~3 million people? Even if we're only talking about 5% of those who don't have a suitable smartphone this is really inadequate.
Yes, I guess it looks like this? https://github.com/LeCoupa/vuedarkmode/issues/22
This is my favorite definition of 江湖: https://www.youtube.com/watch?v=8rcFoN1Ding&feature=youtu.be...
Tech breakthrough to allow 100-times-faster internet
I would put the word fraud on almost all church activities, but this is just my purely personal view.
Great response!

> But that doesn't make the story any less beautiful -- in fact, I would argue that the innocence and purity of the hobbits against this unknowable and extreme evil is part of LOTR/Hobbit's charm .... Frankly, I find that this kind of story is something that we are quick to want to discredit because we think it lacks "depth" and is too much of a fairy tale

Yes, completely agree. Tolkien's formative experience (analogous to the Cultural revolution for JY??) was the First World War, the death in combat of most of his closest friends and the characters of the ordinary soldiers he met in the trenches. He explicitly made the connection between these people and characters such as Sam.
This seems to be the case for soooo many foods. And every time something gets sweeter, my family complains and we stop buying that item. We swore off a pizza chain years ago when we sat for lunch and the sauce was too sweet.
I don't know can I judge him. I listen to music all the time. Every imaginable genre that I happen to like. I'm not putting hundreds of thousands to my setup, but a good pair of headphones and a good headphone amp is a must for me in every office I work. Put some cash for Beyerdynamic DT-1770 Pro and been having a handmade headphone amp for the last 15 years, still using it. The sound cards differ, but now I'm ok with a Dragonfly serving the system.

If you spend most of your day wearing headphones, you might invest to them a bit.
I'm working on a project with old school RDF & semantic web, and I tend to concur with you. I often miss my usual RDBMS. Maybe it's the way my data is structured, but any complex display of data quickly becomes a weird maze of async calls.

I'd be happy to be proven wrong, I love graphs!
They of course have the legal right to do this and given that they require contributors to hand over copyright, they have no legal right to complain about this either. As the only copyright holder, Mongo gets to license their contributions anyway they want.

Of course the latter practice is very common with this style of licenses and doing a bait and switch like this on the license is always a bit controversial, no matter what the intentions. AGPL style licenses without copyright transfer agreements are very uncommon as re-licensing becomes near impossible without full agreement of all copyright holders. This means none of them are able to use the software they worked on other than under the strict terms of the license, which typically precludes many potentially interesting ways of using the software. AGPL as a license is only interesting if you can opt out from it. This is only possible if you own the copyright.
Google employees walk-out in protest of sexual misconduct handling
Communicating with a passport requires two-way communication for authentication and data transfer; they're not simple NFC tags.
It might take months to be be able to use its full power and be efficient (delivering at a high velocity), but as someone who was proficient in python but had never used pandas it took me just over a week to write a process to clean data and produce graphs (with seaborn) to compare sets with boxplots. This incldes anonymizing the data properly and play with different Turkey's fence values for the graphs to make the most sense. This is after people spent weeks, and failed, to try to get a similar process with excel.

It's good to warn people, but let's not scare them.
I haven't used tidyverse myself, but I know that pandas is heavily influenced and inspired by R. Most analysis tasks are doable in both platforms. If later stages of your pipeline involve deep learning (or machine learning, generally), then it could pay to be in the python universe given the wide adoption of python ML/DL tools. I generally wouldn't advise switching unless you have a certain pain point, though.
They support a very limited form of NFC, which will most definitely not allow you to read a passport.
Search job boards for job openings that list the technology as a requirement.
How This Entrepreneur Raised $18M from Investors with a Blog Post
Ask HN: What's your media centre setup?
I was recently surprised with a nice gift of a Samsung Smart TV. I never owned a Smart TV before and it seems indeed pretty nice with all its capabilities. I hooked up a portable hard drive to it and the media playing capabilities seem rather limited so I'm interested in expanding it with something silent and with low power consumption. I'm interesting in torrenting unlicensed indie films and copying all the dvds I ripped and bought over the years via a network. What options do I have?

As far as I researched, a NAT seems likely the best option, albeit I'm not really sure how nicely it would play around with a smart tv. How do the streaming protocols work on such a thing and I don't know which ones are decent.

Other options seem to be a raspberry pi or a router with a torrenting client.

I opened this thread because I'm curious what setups other HNers have and if one seems nice enough I might emulate it myself.
> Any idea why Apple doesn't allow use of NFC?

iOS apps can access NFC capablities on devices with that have appropriate hardware support, but from what I understand the CoreNFC API has some limitations.

For example, it doesn't provide a way to read an RFID'c unique ID without using a private API that would disqualify an app from being published on the app store. There's some information about this at [1] and [2]. CoreAPI can read NDEF tags, but they don't expose the UID.

Perhaps the Home Office's app needs the UID of the passport's embedded RFID? I don't know why they might want this, or why Apple restricts the ability to read it. Privacy concerns?

[1] https://www.taptrack.com/article/blog/core-nfc-2/

[2] https://stackoverflow.com/questions/51822226/corenfc-not-rea...
Can you use groupby for your stratified sampling work?
>This version also comes with the experimental release of Node-ChakraCore

Wow, it looks like Microsoft is really truly supporting this!

I have to be honest, when I first saw they were trying to run their engine in node, I thought it would be like all the attempts before. Half-assed, or done once then not kept up to date.

But not only are they still maintaining it, but they are still improving it!

I really hope that node-chakracore gains more adoption, even if only as an alternative from the v8 monoculture that we have. And that being said, I'm going off now to put my money where my mouth is and install it locally and see how much I can run with it.
The passport is a standard NFC smart card, just like your credit card. Internally it can do crypto, which means it’s not just about a passport number but cryptographically proving the person is in possession of their passport.
It works if you are selling something of actual value and mail the right person.
It's signed and encrypted:
https://en.wikipedia.org/wiki/Biometric_passport
If you're listening to uncompressed (losslessly compressed) audio, you're mostly fine with Bluetooth. But if your source is already lossily compressed, they you're multiplying the artifacts of MP3 or AAC by the artifacts of aptX or SBC, and that becomes very audible if you know what to listen for.
Don't pine cones rot?
So you can't pass this wealth on between Generations.
Maybe that's a good thing though.
https://www.washingtonpost.com/world/the_americas/trudeau-wa...

French's is making headway in Canada due to Heinz closing it's facilities and laying off 700 workers.
The name makes this seem a little bit more official than it really is. And I agree with another comment that a light mode would be nice. Then, the name makes less sense.

I’d suggest to consider a different name, that would identify the design system (like Blueprint or Material), not a feature of an existing framework.
Local as in administered locally and not nationally.

Its astounding you didn't infer that.
Thank you for contributing to the discussion.

One of our goals is to increase the price of natural resources that markets aren't yet accounting for or undervalue.

Last night, our first trick-or-treater showed up with a plastic pumpkin already loaded with candy. He asked why there were pine cones with tags on them in with the candy that we were giving away. We said that it was a trick, and that he was welcome to take a pine cone, or one of the rolls of pennies we also had mixed into our candy cauldron. He took the pine cone.
>I just can't imagine cold-calling/emailing people actually

If it didn't work people wouldn't be doing it I presume. It probably works every now and then but it's good enough when the cost of doing it is low.

When does it work? When you reach someone who is actively looking for it.

For example, in the talk given by YC Partner Aaron Harris[0], suggests that cold e-mailing professional investors work when done right.

[0]: https://www.youtube.com/watch?v=Jzz4AEIddzY
> There are constantly people trying to invent "like X but better", where X can be absolutely anything in your JS workflow.

Complaints like this always mystify me. Would things be better if what you describe wasn't the case?
We evolved to adapt to our environment and we are not some kind of 'final form' that we are stuck with forever, we are still evolving. And people are able to extract nutrients from plants just fine. Also the two incisors do not have to determine anyone's diet. Now if you don't want to be be a vegetarian fine but don't tell me it's impossible because that's just not true.
You don’t just need the UID (and by the way, passports don’t have one).

You need to do a proper cryptographic handshake with the passport, something impossible with the current SDK. You need to be able to send raw “APDUs” (commands) to the smart card/passport.
It looks to me like your hire messed up something about this guy's plans and he set out to minimize damage as fast as possible. Since he had contacts and you didn't, he won (they usually do). Look, when you start at a new place, especially as a manager but even for ICs, it's because someone high up thought they needed an extra person (or a different person). And it's quite likely not everybody agreed with them. It's not really personal (although sometimes these people are OK with the hire but had a dream of a different skillset and don't think yours matches), but it's dangerous.

In those situations you have two options -- find someone he is close to who's more positive about you that you can leverage into brokering a truce, or try to use him for information. (You can straight up ask braggarts what they would do in your place, which usually makes it obvious why they aren't in your place already, in addition to giving you future bones to throw him to keep the hostility in check)
Ask HN: How to suggest '/.well-known/health' as a standard?
Currently I'm working on a project that would benefit from a standard, reserved URL to check if a web service is available and working correctly or not. It should not conflict with typical website URLs.

I know that the /.well-known/ prefix is reserved [1] for such URL endpoints, but it seems there is standard for health checks yet.

What I'd like to exist is simply:

- A standard URL, say '/.well-known/health', that is reserved to respond to HTTP(S) health checks.

- This URL should respond with a HTTP status code 2xx if healthy, anything else (including network errors) is considered unhealthy.

That's it!

How should I make this happen? I guess I could write a document that describes this, but where should I put it? How should I get attention from the right organisations/people to make this happen? Any suggestions how to make this happen?

I think having this would be extremely useful, also for cloud load balancers, Docker containers, Kubernetes deployments, etc. I've noticed many projects tend to use /health or /healthz as defaults, which is 1) not standardised AFAIK and 2) probably a bit risky if you have no control over all URLs your service responds to, since you could accidentally mask a legitimate URL.

[1]: https://www.iana.org/assignments/well-known-uris/well-known-uris.xhtml
Wouldn't the materials needed to build and maintain such environments ultimately have to come from nature?
Productionproofing Amazon EKS
How do you know they are solvable if you pick what problems to solve before consulting engineers about feasibility or cost?
People think Neo4J is for things like social, but Facebook's social graph doesn't actually work like Neo4J does – Facebook's load is dashboard shaped and read dominated, so query/storage/writer separation is really important. http://www.dustingetz.com/:datomic-facebook-tao/
It was pretty violent if you were a centrifuge. More targeted was stuxnet.
Love Neo4j. The console makes it SO freaking easy to use!
Relatedly on twitter: https://twitter.com/JakubKrupa/status/1057665110976663552 downthread

"The most difficult part of the process - confirmation of ID - was not being done through an automated process: applicants didn't have to use the controversial app to scan their passports. Of those who voluntarily decided to use it 30% FAILED."

And as various people have pointed out, unless a deal appears in a really short timeframe, all 3m EU nationals living in the UK will have to go through this process in order to continue working or renting in the UK. https://www.bbc.co.uk/news/uk-politics-46035919
HP supercomputer in orbit is ready for researchers
It took me years to realise that whenever a non-tech person would see the ugly UI he would actually lie to me about the prospects and give me some generic advice because they simply didn't want to appear dumb.

Not all of them are like that, but you get used to the overthinking approach most of the techies take so you expect some critique rather than some sort of defensive take on the matter.
Really really useful - good to see NI making this level of detail open and easy to access.
both are true depending on the circumstance. for example going vegetarian encourages restaurants to offer more vegetarian options making entry into a vegetarian diet easier for others. Riding a bicycle makes car drivers more aware of cyclists, more awareness means it's safer to bike, means more will be willing to do it regularly, and more people who will advocate for bicycle friendly communities.
Have you reached out to the major stake holders, i.e. organizations and people who have an interest in your proposal and have the resources and connections to champion it into reality?
Getting Ready to Break Everything
or to Harvard
I think the problem with Algae is that you won't get as high a yield of proteins, because the plant cell is producing other chemicals as well.

Compared with animal cells that are producing a protein specifically and can be engineered to produce more.
I does seem crazy, but apparently it includes the application process as well. In general not a lot of people tend to care about this kind of thing. Governments often aren't empowered to do it, the large tech companies don't care, the idealist are busy copying the large tech companies and the hobbyist are busy with their own hobbies. Left are large consulting companies that can provide custom solutions and will charge as such.
Humans are primates, and most primates of the world are vegan, or nearly so, including our closest relatives. That's not something new.
It needs to be ready and distributed in less than 5 months.

Furthermore, not everyone thinks the Home Office or the government in general is making a good faith effort to do this competently.
Both of those can be seen as a cultural problem.
Many of us who have worked in the graph database space have been tempted to use the graph abstractions on top of a relational database. It's a reasonable first step. Tables are nodes, join tables are relationships and so forth.

It's also however a bit of a dead end once you go beyond the basics. The costs of joins get worse the deeper you go, and "hundreds of milliseconds" is at least an order of magnitude slower than what Neo4j would do for you.

Once you take that major performance penalty, and then layer it into more complex graph algorithms or analytics, it gets really, really painful quickly. Granted, you might not notice this if you never needed to go further than 2-3 hops in a graph. But once you start working with graphs you're not going to want to stick to such basics.

More technical detail on the difference between a graph abstraction on top of another database, and a native graph database, can be found here:

https://neo4j.com/blog/note-native-graph-databases/
Was this written under the auspices of Native Instruments? If so, I’m extremely impressed - they’re doing some very cool work over there.
I totally agree with you if we are talking about preliminary market research, which also usually involves components of research into the technical investment required.

That said, the article of this post seems to emphatically say something different: that you should actively _sell_ before building. Not merely collect research, but to sell stuff you do not already have the capability to deliver, and then somehow backfill that delivery capability after getting customer buy-in.
Time magazine is absolutely a right-of-center publication. Here’s a nice piece they published last week calling for more nationalism in the US: http://amp.timeinc.net/time/5431089/trump-white-nationalism-...
I found this:

https://ico.org.uk/for-organisations/guide-to-the-general-da...

It is interesting that there is a comment about explicit consent - I imagine this will be like the millimeter wave scanners: you can either go in and get your genitals imaged by some remote voyeur, or if you dont like that then you can get a thorough strip search by someone in blue gloves. Have a nice day :-)
> “We took a system from factory floor with no hardening, no preparation, running an open source operating system,” Fernandez said. “The majority of the community didn’t think it would function or wouldn’t last long.”

> HPE relied on software to make the computer resilient.

> “We monitor power, cooling, components,” Fernandez said. “When they get out of nominal range, we isolate them, work around them or do something. Each system is self-sufficient with fault detection and isolation.”
I think we need to see the overall efficiency first.

As I understand it this process requires that you generate electricity then use that electricity to produce proteins.

I suspect that good old plants may be more efficient.

This technology may be more useful in space and/or in circumstances where lack of growing space is the overwhelming factor.

Also, since the production is food the overall cycle is carbon neutral.