skysight-inc/HackerNews huggingface dataset:
I have the primary store on a RAID-Z2 zfs volume on a FreeNAS server in the basement. That backs up all photos to Amazon Photos ("free" with Amazon Prime, which I have anyway) and important things (family photos, family videos, and legal docs) to S3 with lifecycle policies defined.

Family photos are additionally rsynced nightly [one-way] to a Synology server (just because I had it before I built the FreeNAS storage and it has a reasonable picture browser app while on the home network).

zfs gives me copy-on-write (protection against crypto-locker, though I'd lose effective backup while crypto-locked) and availability even in the face of loss of 2 drives (RAID-Z2 ~= RAID-6).

I'm posting not because my solution is perfect, but because I'd like a better answer to client-side encryption for backup of legal docs, a better solution for video backup, and a better solution for browsing/tagging/auto-albuming accessible from mobile devices. I don't object to the current costs, though probably wished I'd skipped the Synology and went straight to FreeNAS.
its still the best way we have ... its the process of spectating the debate that the viewer can consume two opposing sides and then make a decision. To think that a debate itself could actually create truth is to give too much faith in the skill and equal skill of either debater. And in reality, no subject is completely one sided in its conclusions, it healthy to be able to make peace with paradoxes and contradictions. Requiring a "only one right way" standpoint is dogmatic, stubborn, and mentally weak.

A good debate gives the viewer a strong mind by being able to hold opposing views simultaneously.
eye-popping talk about WIFI4EU which shows that this program is essentially a EU sponsored backdoor aimed to track citizens movements across member states through its captive portal. It's targeted at enterprises across EU that allows them to offer WIFI to their users (e.g. smart-cities, coffee-shops, public spaces etc). Please watch this talk and let everyone know that this should be burned with fire!

talk outline: https://fahrplan.chaos-west.de/35c3chaoswest/talk/K39NLS/
Iraqi lawmakers demand US withdrawal after Trump visit
> This is really a communication problem, guys. Whaling could have been ended many years ago, if no one made such a big deal out of it.

I don't follow that conclusion at all. Really doesn't seem like that's how it would have played out to me; maybe it wouldn't have been worse than it is today, but I can't imagine they were simply being encouraged to whale to be ornery.
Surely if killing animals is wrong, so is exploiting them for eggs and milk? So the only moral option (currently available, in the absence of lab-grown meat) is veganism, which is deadly (it's missing some B vitamin I think).
I don’t think in my case that it was necessarily about me and my performance. Just like I don’t think that the OP’s story is necessarily about him and his performance. When teams grow, they change. There is an all-too-often unspoken assumption that roles will get more and more specialized as the team expands. You can go from being a dev/pm/architect/analyst to being “just a dev” or “just an architect” so slowly that you don’t even notice the de-facto demotion until it is too late.

A metaphor I use with management to prevent this from happening again is “I eat my broccoli so I get to eat my ice cream. Hiring someone to eat ice cream for me so I can focus on just broccoli might make intuitive sense to you, but will have a detrimental effect on me”
https://www.ons.gov.uk/employmentandlabourmarket/peopleinwor...

> 18.7% of people on “zero-hours contracts” are in full-time education, compared with 2.3% of other people in employment

See also

https://assets.publishing.service.gov.uk/government/uploads/...

https://www.ons.gov.uk/employmentandlabourmarket/peopleinwor...
Google photos is the best I've found. Your privacy feature seems to be a "nice to have", so I would use that. The UX and cross-device syncing is far better than anything else I've used.

To your bonus points: Google photos web UI is truly impressive even ignoring the awesome search capabilities. They wrote an article[0] on how they built it and since then I've been keeping an eye out to use similar techniques in different applications.

[0]: https://medium.com/google-design/google-photos-45b714dfbed1
Beautiful Boostrap 4?
Dictionary does a pretty good job. "Not Needed. Unnecessary."

There's a pretty valid point to be made that you don't NEED to eat whale meat. Or Cow meat. Or any meat really. There are economically available options in most areas that would allow for a nutritionally balanced, vegetarian (possibly vegan) diet.

This is specifically true about a developed nation like Japan.

There's counterpoints to be made (not all farm land is suitable for crop farming, so using it for husbandry is valuable; a complete one day flip without a slow phase out of meat would be economically devastating; freedom to eat animals is my right, etc) but you can't really say you NEED to do it. Science and nutrition doesn't back that up, and the economics are hazy at best.
I don't think the most effective argument against whaling comes from concerns about their suffering. Same with horse meat.

That would be persuasive to some vegans and vegetarians, but they represent a small subset of the population.

A much larger group will respond well to concerns about their extinction. I want my son, and someday my son's kids (if he has any) and their kids to be able to go whale watching. I don't want them to go to school and learn about extinct species that my generation wantonly destroyed.

Unfortunately, this common desire runs afoul of other cultural activities that a few small minorities want to maintain: they want to follow their parents, and allow their kids to follow them, in hunting and eating whale.

A question for you: the banana tree is at risk of extinction, many historical variants have been pushed out of existence by massive cultivation of sterile farmed varieties. Blight, disease, and other issues put this large population of identical plants at risk.

The difference between the whaling problem and the banana problem is that bananas don't have the ability to experience suffering[citation needed]. Do you think it would be meritorious to advocate for the preservation, cultivation, and careful stewardship of bananas?
Most answers here are things that won't work because people are human and will lose or forget stuff one way or another. What I've seen that works quite well is to have a user list a number of email accounts that they trust to vouch for them. If they lose their 2FA and 2FA backup then they can do an email reset, but only if n of m of their friends authorize it and only after a delay of some kind (24 hours, say). Now an attacker needs to figure out what the likely friendlies are, pop multiple email accounts, and the delay gives enough time for someone to notice something and lock the account down.
Is Chiangmai in particular especially desirable?

I would hesitate moving to a “3rd world” (I know not all developing countries are the same) long-term as I got the impression once you start caring about schools/healthcare (serious stuff, not getting some routine dental work) they become a lot less attractive.
The collecting system is way too complicated for a provider to know. Nobody can reasonable assure you of that, the same way an accountant cant assure you you are compliant on all IRS codes, or even a doctor can assure you you will be healthy if you do a treatment.

But think what happens when you have a patient with insurance, bleeding right in front of you: would you turn them away because of this lack of assurance? its an unreasonable ask of a human being.

Insurance copmanies are the Ticketek of the health industry: they take the bad rep for the ones reaping the benefits.
>D. Reset via email is the most commonly used one. It's scalable, unlike manual review. Less secure, arguably.

What's the argument that it's not any less secure? That seems like a pretty obvious conclusion to me.
"The day an animal can articulate that, I'll agree with you."

They can if you keep your eyes open just a little.
You're assuming that they aren't trying: it's not too hard to try out bag-of-words and see what happens. But things like Attention and LSTMs are pretty good, but not without their costs.
Still better than Word 2017. ;) I mean, come on, it still screws up fonts on macOS and it's 30+ years old?!?
Legally you can take a stranger's photo for yourself and keep it if it's in public. Unless there is a being model case the photo belongs to the photographer. So anyone can take pictures of people and bands in concerts and they do. Thing is how they're using them. If you sell that to a brand there should be a model release. On every other case even for the person itself he or she should pay for the sharing license. Take real models as an example they are being photographed and they are released in stock photo markets the only thing they can do is finding themselves on that marketplace. Later on they share stock photo branded screenshots :). Because they don't pay for the original ones. They need to pay for the photos that includes them as the subject.
What deal? You still haven't clarified your position.

> the rights normally granted by society

What kind of weasel words are these? What you mean to say is copyright as enshrined in law. He has not lost these rights, and I'm not advocating that he lose these rights.
Yes, and lots of people do.
But not allowed in many many organizations and firms.

Governance and security forbid people to be op and dev in one person.

Or God forbid: control the dev, pre stage and production environment.
What you’ve described is a workflow that will technically work. But I’m weakly confident it’s still suboptimal for most use cases.

How will you deal with the usability problem introduced by expiring all sessions for users who are offline (closed tab, spotty internet connection, etc) for at least 50 seconds? It actually seems like you really should be wondering how to interpret users being offline temporarily.

You could just accept this as working as intended, but you don’t need to accept it if you just use normal session IDs. Is your application really so latency sensitive that it can’t tolerate a DB lookup? What is an example workflow in which users on a web or mobile application cannot be tolerably authenticated with standard DB lookups?

You can also use a refresh token, but this brings you back to the revocation problem, but with longer term tokens. Likewise, there is a material difference between millisecond revocation and sub-minute revocation. There are good reasons to care about sub-minute revocation.
Data Science Is More Than Machine Learning
I thought so too. Even if they’re all mechanical, it usually makes sense to keep the fan running across the evaporator to prevent moisture buildup (which will then sit in a place susceptible to freezing). It can also be more efficient to push this residual cold into the vessel.

My car’s AC gets funky if I don’t remember to turn off the AC a few minutes before shutting down.
Orthoprint, or How I Open-Sourced My Face (2016)
Ditto here. I know it’s not even close to technically the best or safest or most independent etc.

But it really does Just Work. I’ve got basically every photo I’ve taken since ~2002 in a single archive, easily scrollable by date on any of my devices, searchable (on a map!). It works perfectly for me.
IF you do fixed pricing in medicine, then as a provider you want to turn away care from expensive patients. They become huge money sinks, so you have to do everything in your power to turn them away.
> This kind of comment might make one wonder why not just use a sessionId to begin with

JWT and sessionIds are totally different beasts. JWT are used per request, are designed to expire and be refreshed, are specific to each individual endpoint and store authorization info in a specialized third party service.
Comparing eating meat with slavery is exactly why people won't stop eating meat. It's impossible to take such an argument seriously.

> no one is arguing that meat doesn't taste good or that most people don't like to eat it.

That's pretty much the final word on the subject. People will never stop eating meat. It's part of being human (yes some humans don't do it, but we are omnivores).
I'm interested to see how well Halide's approach would pair with the GPU optimizations being put into GraphBLAS [1].

[1] https://hn.algolia.com/?query=GraphBLAS&sort=byPopularity&pr...
The protocol isn't finished yet, but there are implementations - I believe the primary one is Cyrus: https://github.com/cyrusimap/cyrus-imapd
I highly doubt that the scientific community "could not work out how to effectively use that many parallel core" given that the gaming community effectively used the SPE cores of the PS3. These cores are considerably more difficult to use as they only have small local memory and have strong alignment constraints. If the phi does not have enough bandwidth to service the cores that would simply mean it is not a parallel architecture.
I am pretty clearly offering an opinion here, so I'm not asserting that it's true. But the naive optimists I'm speaking of here were the greater fools [1] who bought Bitcoin as it was rising. Journalists are generally cynics.

[1] https://en.wikipedia.org/wiki/Greater_fool_theory
Google Photos has been my goto for a while now. The search feature is great and I use it frequently. For example, I was recently looking for a blue screen error code I'd taken a picture of months ago, and was able to find it within seconds by searching "monitor". It's really incredibly good, I'd say whatever model is on the backend is probably close to state-of-the-art. I recently hit the free limit, but for ~$3 a month I now have 100gb which I don't expect to reach for years to come.

I don't typically take photos of really private things, so the convenience of quick automatic backups from my phone and the availability of the search feature outweigh any privacy concerns I might otherwise have. I do also take local backups occasionally to my external hard drives in case Google somehow suffers major data loss.
> Surely if killing animals is wrong, so is exploiting them for eggs and milk?

Prefacing an argument with "surely" doesn't make it a stronger argument. I don't see why it follows at all that raising animals for eggs or milk could not be done humanely.
There are literally open source projects that talk to the baseband over HSIC on iPhones. This isn't a huge mystery.
Yes, I was being sarcastic, which is sort of bending the HN rules but: 1. I thought I had enough substance in my post to balance it out and 2. I didn't think it was a claim that showed any depth and was therefore worth responding to seriously. Haha I mostly responded for fun and to get my own thoughts in order. I thought it was so far down the HN rankings that even the original poster wouldn't read the response to his/her comment. Thanks for a great read! The subjects of the article are a real inspiration.

Edit: Well I guess you're the subject of the article so congratulations and I wish you and your family continued success.
Why wouldn’t you rate limit connections? That is something you should be doing anyway, and it neatly resolves the denial of service problem.
I use Dropbox to backup my photos. The Dropbox app on Android backups all photos in your gallery when given permission. I also dont have as many photos so the 1 TB limit on the pro account is more than sufficient for me.
Shouldn't purchasing the tattoo transfer the rights to the person being tattooed?
I just wish they’d up the file size and length maximums. Kind of amazed they don’t as I know quite a few outlets that don’t like using YouTube and would gladly host it on twitter. It’d also help keep people on twitter longer = more ads.
It should be noted that CNNs and LSTMs are an order of magnitude slower than things like bag-of-words/fasttext unless you're using an expensive GPU, and the accuracy benefit if any may be marginal in practice.

Kaggle prioritizes chasing a metric, but real-world data science has more considerations.
Black Mirror: Bandersnatch – Official Trailer [HD] – Netflix
That was terribly frustrating to read. The dev gave reasoned, metered answers, and the others responded with Cathy-Newman-esque “So what you’re really saying is...” questions.
Or you can just buy a DC refrigerator.
It's somehow not connecting to the Keycloak-instance. Same with using the host network:

`docker run --network=host -t -i -p 9443:9443 sirixdb/sirix`
Also http://nyx.net/ which, at least when I joined, was free to sign up. An existing member could verify your ID face to face, and you just had to provide a photocopy, envelope and stamp(s) so they could send a copy to nyx.
Top Tech Trends of 2019
I'm sorry, Ron, but this is a non-sequitur. The premise of my argument is that SS7 is insecure, and that doesn't matter, because modern phones don't rely on SS7 as a secure channel.
Yes, in Cyrus IMAP we take care to follow the latest spec. It's the version that drives the JMAP backend at FastMail.

The JMAP website has a list of other clients and server: https://jmap.io/software.html
I use a Synology NAS.

They've got that decent photo library app called Moments, which is available on mobile devices to upload your pictures from your phone directly.
They also have another app called Drive, on mobile and desktop to upload photos and files. It's basically a closed source Google drive.

The NAS itself can very easily be plugged to Amazon S3 for encrypted incremental backup (I do a weekly backups).
I really like how Album sharing works. We've got one that has photos of my kid, with much of the family set up with read/write permissions. At family gatherings they can just add pics they take on their own. Low-hassle and they're happy enough with it to stop bugging me to get back on Facebook.
He has great time lapse videos using Krita on his Youtube channel -- https://www.youtube.com/watch?v=Hr7OPBxh5_o
Right, we just need to have a sane court agree that this is the case. Some people saw dollar signs and were able to use the absence of precedent on this question to snag some of them.
Put a timer on the reset - Allow them to start the reset process, but make it so it takes a while (At least a few days), and during that time make sure any successfully logged in person on that account sees large warnings that someone is resetting their 2FA. This ensures that whoever actually owns the account can react in time to stop a takeover, at the cost of making the reset process kindda painful.
It tastes like a good steak, just with more umami and tenderness and perhaps a slight hint of fish oil, depending on how it's prepared. There's also something about its deep dark red wine color that feels luxurious.

It's easy to avoiding the fish oil taste of you're careful.
purchasing a work of art usually does not give you the rights to reproduce the piece.
If you hire an artist to paint a landscape for you, do you have total ownership of that painting? Could you recreate it digitally and sell it? Assume no extra rights were explicitly transferred, just a standard commission of a piece of art, whatever that entails.

I would have assumed that the answers to these were both yes, but this article makes me think not.
"Michigan parents are legally allowed to skip or delay their children's vaccinations due to personal beliefs.

But Bredow fell foul of the law because she reneged on agreements with her former spouse dating back to November 2016 to have the boy immunised."

Sounds like an edge case that's more about custody than legal rules over vaccination.
Oh by the way retrieval of nodes/records and storing modifications are logarithmic (O(log n)). Space complexity is O(n).
> In short, servers are free to reject any token, which triggers a token refresh on the client-side.

Servers can of course implement whatever custom behaviour they desire, but the protocol itself (and common implementing libraries) does not have any direct support for revocation.

Furthermore, any revocation implementation will inherently have to compromise the statelessness that is JWT's most prominent selling point.

> Token revocation is even an intrinsic aspect of JWT as they suport issue and expiry timestamps, along with a nonce to avoid replay attacks.

JWT does indeed support expiry and nonces. But these are not the same thing as revocation.

> It seems some users have an axe to grind regarding the idea of having to keep track of some tokens that were poorly designed (i.e., absurdly long expiry dates without a nonce) but the solution quite obviously is to not misuse the technology. In the very least, if a developer feels compelled to use a broken bearer token scheme that does not expire tokens based on issue date then quite obviously he needs to keep a scratchpad database of blacklisted tokens to compensate for that design mistake.

Insults and "obviously"s are not a good way to convince people of your point of view.
The cost for the provider is the same, but what the insurance pays is in someone elses hands. If you wished not to abide by the insurance, just pay out of pocket.

Insurance should really be only high deductible plans, so the patient really looks into pricing for his general care/periodic care.
The value in a startup comes from finding a profitable seam of product market fit. It doesn't take an MBA to do that, but a stereotypical engineer isn't likely to find it either - it's all too common for an engineer to think that good engineering is what makes a good product, when in fact it's giving people something they want that matters.

And a photo can be technically excellent, but if it's not of something interesting, it's unlikely to have broad interest.
That’s the $64,000 question, isn’t it? I’d also like to hear how people approach this issue. I can’t speak from experience, but I read a couple of interesting ideas somewhere. One was to embed yourself in a forum related to your idea and start messaging people, asking if they’d be interested in something that does what your idea would theoretically do. There’s a fine line to walk, though.
> I still maintain that IBM is above everyone else in the AI game, everyone.

Yeah I don't know about that. At best they are starting to incorporate deep learning into Watson. I'm guessing Watson has always been a rules engine and more specifically one designed with a lot of statistical analysis. That's far below the level of sophistication we're at with NNs.

This is IBMs page on deep learning:

https://www.ibm.com/cloud/deep-learning

While it might be nice to use whatever that tool is - it's a wrapper on top of Tensorflow/Keras or Pytorch... Wouldn't it make sense for it to be a wrapper on top of "Watson's API" whatever that is.
Definitely agree on just spinning up a free tier VM for very mild use cases or for a jump box or testing, or for troubleshooting network/provider/access issues. Google's always(?)-free tier 600M F1 Micro instance works nicely for this. Be aware only 1G transfer in the free tier though.
Mainly https://news.ycombinator.com/item?id=7544855 from 2014.

Also https://news.ycombinator.com/item?id=10410832 from 2015.