skysight-inc/HackerNews huggingface dataset:
The article is not about the (trivial) way to compute pi by putting random numbers in the square. It's about altering the way you compute your target function to narrow down the confidence intervals, while still computing the same value.

Definitely you can compute pi by scanning a uniform grid in a square and checking how much ends up in the quarter-circle. But with these stats tricks applied, mere 10k points give the author very good approximation, beating 22/7 30% of the time. Scanning a 100x100 grid will give a much coarser approximation, I suppose.
Do you think that only top researchers are capable of moving the needle? And that these researchers only work at brand name AI companies.

It seems FB and Google have had more negative societal impacts (ie fake news, public manipulation) than IBM, Salesforce, and numerous other niche AI companies.

We all need a more nuanced perspective on all thinks than this absolutism we have embraced as a society, online.
NearlyFreeSpeech has a pretty comprehensive guide for how they handle 2FA resets, it might be worth a look: https://faq.nearlyfreespeech.net/section/login/losteverythin...
A $21,000 Cosmetology School Debt, and a $9-an-Hour Job
When I got a tattoo, I literally hired an artist to take my general design, make it look nice (and tweak it for the medium), and apply it. There's not part of that process that isn't work for hire.
To kind of combine the others comments and add some more depth:

HTTPS runs over port 443, and port 80 is normally for HTTP only.

Most people setup their webservers to serve HTTPS over 443 and redirect port 80 to 443 so anyone that sends something to `http://example.com` automatically gets forwarded to `https://example.com` (and then the browser can tell them to ONLY use the HTTPS version from that point forward)

This is a generally "acceptable" tradeoff between usability and security.

But when you control the API and the client, you can know that you will never send credentials over HTTP, only HTTPS. So you should have nothing coming over port 80.

Then, with a simple script, you could set it up so that it will accept everything on port 80, and if it includes a token of some kind from your app, it logs the request, then marks the token in your database as "expired" so it can no longer be used anywhere (even on port 443).

There's a kind of attack sometimes called "SSLStrip" which can block all requests for someone to an HTTPS version of the site, and in many cases can trick the client into trying the HTTP version if the HTTPS fails. This kind of thing would not only stop that attack, but it would also log it and ensure that any tokens sent that way would be instantly expired, so that the attacker (who saw the tokens when the client tried to send them) can't use them.

There are other reasons too. It will notify you of any developer-mistakes that are sending credentials over HTTP (it's a one letter difference, and despite the best efforts sometimes these kinds of things slip into a codebase as typos or a dev just not thinking), and it can help you tell "scanning" traffic from "normal" traffic (since nothing in your app will ever talk to port 80, so everything on port 80 is "bad" and can give you some clues into what attackers are trying on your network).

And the best part is that it's easy! I could probably throw something together for our API servers that does this in a day or so start-to-finish. That's a REALLY good ratio between time spent and security benefit that you normally don't get!
I was surprised recently how cheap low end *nix VPS are.

Like 2 bucks for a year. Sure it's a crappy 128mb system but that's enough to do a lot of things.
Show HN: Reading File in RUST and C While Comparing Memory and CPU Usage
It looks like it's been replaced. Was this the original link?

https://www.reddit.com/r/CryptoCurrency/comments/a9yji3/elec...
You may find happiness living in a less dense environment. I live in a residential neighborhood among adults who seldom subwoof at any time, much less at midnight.
I have never typo'd a G for a 6, but I sure am glad my password manager shows digits in a different color from letters, because I confuse l/1/I and O/0 all the time.
So wondering if one of the hilly roads on San Francisco might be on top of a buried ship..!!!
If you need high current draw followed by low draw, you could use a flywheel.
NCC: 64-bit C compiler (and preprocessor, assembler, linker, etc.) for AMD64
It's crazy how far behind the US is on mental healthcare.

I have been battling depression for a long while now. My insurance can only get me to see an in network therapist four times every year!!! I can only see a psychiatrist once every six months.

This is with paying an already ludicrous sum each month for healthcare. I feel like I'm burning money, the most pressing healthcare issue I have, I cannot get help for.

Regardless, I have been working really hard on improving alone.
Musk lawyers move to dismiss cave explorer lawsuit over “pedo guy” tweets
Do you think there might be a cultural issue as well? I think individuals might be hesitant to report offenses because it might make them feel like they're trash-shaming the homeless/neighbors. I know for myself that I hesitate to cause any ruckus, and let people be, but I think the residents of SF take that view to the 10th degree.
If you did get one (or already had one): Which one, and how do you like it? What do you use it for mostly?
Robert Anning and the Almanac: Book Trailer
The results were surprising,
C language used entire CPU on the other hand Rust used the entire memory however they were close in terms of the timing.
C took 2min 1sec and Rust took 2min 5secs
If someone else needs to use your API, please use OAuth/OIDC. I've seen countless hand-rolled (and insecure) authentication schemes. It's almost always a nightmare. If you plan on connecting this to multiple apps and partners, rolling your own will create a hellscape for everyone

If you use OAuth, anybody can connect using a standard library and "flow" across tons of languages. And you don't need to worry about screwing up the most security critical part of your API. It will save you countless headaches.

Some people bash OAuth because of JWT, but this overblown. Storing permissions in a token is the only sane way to do things if you end up with multiple services down the line (you will).

The whole revocation debate is a bunch of noise about nothing. Make the expiration interval fairly short, and if that isn't enough you can make a cache of revoked tokens that only needs to live as long as your expiration interval. This is still orders of magnitude more efficient than not storing permissions in the token and just as secure.

If you need to revoke all tokens in a breach scenario you just change your signing key. I recommend using SHA256 based signatures rather than public/private key since even though public/private is theoretically more secure, calculating signatures is quite a bit of overhead. If your backend is using a fast language like java/C#/Go, the majority of server CPU will be signing tokens.

Read about OAuth and ignore the haters. The design is well thought-out, secure, and efficient. If it was really that bad you wouldn't see most of the tech giants migrating to and using it. There's a lot of people that don't like it because they don't understand it well enough.
As much as I agree with your sentiment that desktop computers are infinitely more useful than mobile devices, the reason that smartphones and tablets have succeeded is because they won over the idiot market (a.k.a. computer novices). There are an awful lot more computer novices/idiots out there than there are people who can appreciate the power of a desktop computer, so market forces make mobile devices dominate. Developers write applications for the users, and since the users are now on mobile devices, we get into a cycle of power where both the users and the applications are on one platform.

Unlike netbooks, which were underpowered laptops released ahead of their time, mobile devices have already hit their critical mass of users. Kids grow up with phones and tablets instead of computers, on average, which makes real computers a much scarier and less interesting proposition.
> One of the constraints is that lexicographic sorting must order the nodes by generation time. This precludes wrapping.

I suppose, if you're particularly worried about the one-node situation.

> It's a little weird that they didn't just reserve or add some bits for sorting within milliseconds before or instead of having to increment the randomness.

There's no particular reason to make the fields separate. If you mask out the top bit of the random number then they can share and also make overflow effectively impossible.

It's also worth noting that there are two bits that go completely unused. They could eat overflow if the layout was slightly rearranged.
I'm probably the only person I know who believes that privacy is unsustainable and overrated, and that a social credit system is unavoidable and massively underrated.

I have never understood people's obsession with privacy, Orwell's 1984, etc. It always seemed motivated by selfishness and irrational fear.

For the longest time, I've been wondering what was wrong with me. Why don't other people share my preference for transparency and efficiency? Why is everyone trying to make things more difficult for people around them?

Then I discovered China. It seemed like WeChat and Sesame Credit were what I had been looking for all these years. How come don't we have these things in the west? Why are we so conservative and technophobe?

I quickly realized that WeChat and Sesame Credit were poor (centralized, authoritarian) implementations of great visions. It is now overwhelmingly clear to me that we need a decentralized version of WeChat and Sesame Credit. This would be the greatest innovation since the invention of the Internet.

Yet, I can't seem to find anyone willing or capable to appreciate these ideas. What am I missing?
Vancouver has special problems to deal with, it is the only year-long livable city in Canada so a lot of people end up congregating here, additionally the housing market is absolutely bonkers.

There is no significant provided housing in the city and it's causing the problem to get much worse - decriminalizing drugs has helped quite a bit with street safety though.
“There is no concept for pain” is only true if you believe that human experiences do not map to the physical world. Otherwise pain is entirely a manifestation of physical chemical interactions. Pain is actually a pretty well understood phenomenon. Perfectly understood? No, but that’s typical of most things.

As for pointing out that an explanation is not sufficient, it is perfectly reasonable to point out the gaps in our knowledge. If those gaps are extremely large, it’s reasonable to call that out as well. It’s not reasonable to claim that the knowledge we do have is meaningless simply because there are still gaps in our knowledge. We don’t understand the origin of the universe, and yet we still manage to fly rockets pretty well. We managed to predict eclipses with perfect accuracy long before modern astronomy existed. The gaps in our knowledge don’t prevent the existing knowledge from being useful or accurate.
I hope everyone realizes the grassroots 'solutions' to these problems involve encouraging people to use drugs and then contriving situations so people end up dead. I hadn't used in 8 years, but the 'community members' kept giving me free meth and heroin until I broke down and used again after being hardcore homeless for 4 years. You hypocrites dare to even give lip service to morality but really would rather see homeless murdered than anything else.
Yes, each node would have different random values, but sorting works because time is at the start of the UUID so "more significant", and sort order within a millisecond is not guaranteed.
Which is the best article? This one, or https://news.ycombinator.com/item?id=18768630 or https://news.ycombinator.com/item?id=18768626?
What is the texture and taste like (since whales are mammals) ?
Does it have fat marbling like beef/pork ?
100 Years of IBM [video]
Milk costs about $3.50 per gallon in the USA.

If approximately 73% of the milk price is subsidized, that is about $12.96. Also, oil is heavily subsidized, which is the main cost of plastic bottled milk dispatched by oil using trucks.
That's my point, Fortnite is bigger than a "video game". It's a legitimate cultural phenomenon.

This isn't about video games anymore, it's about tapping into something bigger. Even Minecraft couldn't crack into the market segments Fortnite has.
When thinking about AWS Glacier, please calculate the transfer/restore/bandwidth fees in your costs... just saying. I ended up with a crazy cost long time ago for if I wanted to restore from Glacier. I have switched to Backblaze b2 since then for backups.
I can't help but feel bad for folks who are coming to front-end dev now. with such a massive (and rapidly changing) list of "you should learn..." subjects, I think the biggest challenge is keeping focus on the most fundamental things.

I've interviewed so many junior and mid-level candidates who will opine at length about react vs. angular or why redux is the one true way to manage state, but who don't know about `setTimeout` or other fundamental language features. that kind of spotty, "just throw it together" knowledge may be enough to land a job somewhere, but it certainly isn't enough to solve anything beyond factory-floor, Lego-like app delivery.

I wish I knew the solution, because the problem only seems to be getting worse despite my thinking that "peak framework" is just around the corner in the js community.
> Do you contest that l can be misread as 1 or I?

I declare that 5 can be misread as S and yet there they are. (And that L looks like 1 or I far less frequently than 5 looks like S)
Cash has the same properties and people have been using it for millennia.
I hope you made a point of asking for two hours off that day, to sit in the waiting room for a note to make HR happy.
> Probably around morbid obesity that's unrelated to genetic/chronic issues.

The jury is still very much out on how common this is, isn't it? Who is going to make the decision of whether I am "at fault" for my obesity?

Also how many people actually choose to be morbidly obese? Like, suppose I am genetically predisposed to like "unhealthy foods" (scare quotes because we don't really know what that means). Does that excuse my obesity as genetically caused? How are you going to tell the difference between someone who "selfishly likes" unhealthy foods and someone who can't help themselves? More to the point, is there a difference?

> By setting an unreasonable standard and saying no one under it has the ability to cast judgment is extremely anti-intellectual. If 2 people were telling you about health habits and one of them was an olympic athlete (who occasionally ate bacon), and the other was a random overweight person from the street, whose advice would you give more weight to?

In the face of this claim that my argument is anti-intellectual, I think I get to be pedantic and say that this counter-argument is a straw-person and equivocates.

I am saying that I don't think an Olympic athelete should pass moral judgement on other people. But of course an expert can pass intellectual judgment on ideas (e.g. "candy is healthy").

I can't believe I'm here as an athiest defending Jesus, but there you go. :)
The Hidden System That Explains How Your Doctor Makes Referrals
Or people should move and not do drugs. Oh right no its the government that is responsible of that.

Move to france. We have free healthcare and few opiod medications.
> This, however, is almost certainly a human-controlled PR-Stunt.

Thank you. Unless they prove to us that it is not, it is.

PS. Chess game could also be staged without having to find a better player. My other answer is above.
From the obvious things: ULID relies more on randomness while Twitter's Snowflake relies on some assigned worker IDs
Announcing a New Book: “The Programmer’s Way”
Your GP was allowed to charge you for that letter, and if you were inside the self-certification time your employer must pay the charge.
I know at least two other people in my immediate circle who believe in the inevitability of ubiquitous tracking. For my part, I want to make sure it gets built right.

I've also lived in very corrupt societies etc. This can be done right. I'm sure of it. I guess we'll see in the next ten years or so.
> What am I missing?

First hand experience with corruption?
Apparently journalists still don't understand the meaning of the word "shortage". There is no shortage. The supply and demand curves still meet. The government hasn't imposed any wage controls or banned raises. If employers want more workers then they can just pay more, or offer better working conditions.

If raising wages means that some businesses will lose money then that's a different problem. But it's not a shortage.
Human nature and its propensity to misuse great ideas.

See also: communism, nuclear physics, and cryptography.
The font rendering looks awfully similar to that of Xorg. Does it use the library/code/fonts?
I'd used Nomorobo since inception but found more calls getting through, mostly neighbor scams. Went looking for a new call blocker and they are all similar. Hiya had built in support for neighbor scam which was a huge percentage of my inbound spam. It's worked as well as Nomorobo plus it blocks neighbor spam, so I'm ahead at the moment.
https://github.com/spesmilo/electrum/issues/4968

This bug is absolutely atrocious: who decided that displaying error messages (with rendered HTML!) from untrusted third-party servers was a good idea?

It's a shame since SPV wallets are a great solution for most users, and Electrum has a relatively nice UI, but after this bug and the JSON-RPC one who will keep using this software?
Show HN: Theme Wise – Identify themes, apps, color palettes and fonts
2017: https://news.ycombinator.com/item?id=13518170

2014: https://news.ycombinator.com/item?id=8362518
I have about 250 hours in it, but I stopped playing in 2013. At the time, I found the drop system to be pretty unrewarding unless you paid for keys (or just bought what you want). Has it changed since then?
Saying "Strogatz did once beat a grandmaster in chess" without specifiying that it was simultaneous exhibition is a lie by omission. I am a chess player, and I would never insult another player by claiming to have beaten him or her without specifying the format. There is a way for you to say what you want to say without exaggerating to make a point.

What's the threshold for someone serious enough to write a chess article?

There's no threshold whatsoever, as long as you communicate a respect for the game and you don't try to use chess as a metaphor to make a larger point about AI and humanity that doesn't hold up to scrutiny. If a rank amateur can appreciate that AlphaZero plays chess beautifully and wants to write about it, by all means. I happen to agree. Just please don't abuse my beloved game for marketing purposes or to win an argument.
I use NextCloud on a home server, and use restic for backups (which are then synced go a few cloud services like BackBlaze or rsync.net).
> Have you ever had a multi-day run of beautiful work?

> Y’know, flow state the whole time, work is clicking, everything is getting done without distraction or interruption, the feeling of unstoppability, time disappears, work gets done…

>… good feeling, eh?

Yes, I get that with work that I enjoy doing. I don't need it with work I don't enjoy doing (doing less so long as I advance at a steady/estimable pace is fine), so this looks like working for work's sake.
They also say "Within the same millisecond, sort order is not guaranteed" but the carry behavior seems to be intended to preserve order even with a millisecond. I guess they mean order is not guaranteed between different UUID generators with different random parts.
Centurylink nation wide outage
This comes out of Twitter Snowflake. The "prior art" links at the bottom are pretty informative.
If cryptocurrencies were the main currency, do you think anyone would feel bad if someone kept their entire net worth in a single wallet?

This would be the social prudence equivalent of walking around 24/7 with all of your life savings in cash.
I've been a user of SDF for many years, and even though it may be irrelevant form a technical standpoint, even with all its faults I am thankful for its continued existence.

At least in the case of SDF, it can be a "social" community just as much as a platform for various hosted services.

It features a custom BBS of sorts called 'bboard' - which lets users post messages about any and all conceivable topics - from Unix to ham radio to philosophy and old telephones.

It also has its own chatroom called 'com' in addition to various channels on its own irc.sdf.org server.

There is an active ham radio "club" within SDF, and there are regular "partyline" voice chats (conference calls) offered through its VoIP service.

It also hosts a huge gopher/phlog community - where users not only post interesting and unique content, but often make a point of writing posts in response to other users' posts.

As someone who first got online in the mid-1990s via AOL on a Macintosh, I largely missed out on the early days of the Internet, before it came to be dominated by the WWW. I truly appreciate SDF because it is a nice space for folks to get a small taste of what life used to be like on the net, before it became dominated by commercial interests, relentless invasion of privacy, and proprietary services.

I'd encourage all to create an account and take a look around. The one-time $36 donation to get lifetime ARPA membership status is well worth it, in my opinion.
Right, I meant google play services. AOSP phone app, while quite similar to the stock google phone app, doesn't include this feature.
And in fact I'd say medical coding is a boarder line predatory practice. There are a number of companies that specialize in padding / inflating medical codes against insurance companies for hospitals (or fighting them etc). It is just another inefficiency in the current system costing everyone more money.
The experience of nazism, an industrialized killing system made possible by huge databases.
Joey Hess is an all around hoopy frood and all articles on his website are highly recommended.
The value starts at a random point and can't overflow. This means that in a particular millisecond you might start at ZZZZZZZZZZZZZHJ and hit an error after a few hundred IDs. Your chance of hitting an issue is (roughly) proportional to the total number of IDs you generate.
Decriminalization of drugs in Portugal didn't result in reduced drug use. It resulted in significant reduced heroin use among youth (which was also reduced in the same time period in other countries that didn't decriminalize it), but that reduction was more than made up by increased rate of use of other drugs by the youth, especially ecstasy.

In the general Portugal population, since the decriminalization, cannabis use is increased, heroin use decreased (thought much less than it decreased among the youth, which means that it likely increased in older groups), cocaine use is increased, amphetamine use is basically the same, LSD use is increased, ecstasy use is increased, and hallucinogenic mushroom use is increased.

If drug decriminalization in Portugal led to increased total drug use, and increased heroin use among people over 35, why exactly you believe that doing the same in the US would solve any problems here?
> How come don't we have these things in the west? Why are we so conservative and technophobe?

Because of basic concepts like fundamental human rights, privacy, and other things guaranteed by documents like the US constitution, bill of rights, various constitutional amendments, and other documents such as Canada's charter of rights and freedoms. If your comment is not entirely satire, I'm appalled that I even needed to type this reply.