skysight-inc/HackerNews huggingface dataset:
I think if I want to invest in AAPL today I'd rather focus on this: "Services generated over $10.8 billion in revenue during the quarter, growing to a new quarterly record in every geographic segment, and we are on track to achieve our goal of doubling the size of this business from 2016 to 2020." Apple is definitely trying (successfully IMO) to diversify its business to services-centric and that is exciting to me!
If Not Venture Capital, Then What?
Most libraries do guard against this. But the point of a "standard" like JOSE/JWT is that you don't have to depend on a library; you should be able to consult the spec and build your own library. And, of course, alg:None is yet another pitfall that JOSE pointlessly opts you in to; it's yet another thing you need to know to safely implement JWT (it's far from the trickiest thing you need to know!)
Chances are that if you're buying glasses you're probably getting a brand that's directly owned by Luxottica (LensCrafters, Sunglass Hut, Apex by Sunglass Hut, Pearle Vision, Sears Optical, Target Optical, Eyemed vision care plan, Glasses.com, Ray-Ban, Persol, Oakley, etc). They also manufacture for an impressive string of luxury brands (Chanel, Prada, Giorgio Armani, Burberry, Versace, Dolce and Gabbana, Miu Miu, DKNY, and Tory Burch). [0]. It's an impressive roll-up of a number of retailers and brands by a not widely known Italian company.

[0]: https://en.wikipedia.org/wiki/Luxottica
Also interesting that AirPods are still the new hotness with plenty of people. Usually the interest goes down after launch, but my anecdotal experience suggests that, at least where I live, the interest has certainly risen.
If there is no subsidies in US from carriers, I would say that would be a better comparison. Consider that 40% US family had less than 400 in their bank account.
have you ever done course corrections in KSP? A tiny nudge early on is enough to make a huge difference farther out!
iPhones are made in special export zones, along with many other made in China products. SEZs don’t tarrif on inputs (components, raw material, factory machinery from Germany), so outputs are considered not made in China for the purpose of tariffing, even though they are technically made in China.

Apple was the first foreign company to price their computers and phones reasonably in China. Before the markup was around 50%, after Apple opened its first Apple stores in China that markup fell to 10-20%, which is about inline with tariffs.
Just one anecdote, but I got my battery replaced and initially my phone was super-fast. After a few months though, it slowed down considerably, and is now as slow as it was before I replaced the battery.
Companies hire IT departments to manage their IT infrastructure correctly. Maybe some companies just want some cheap kid who can activate a cell phone or plug wires into a tower, but those aren't the companies who NEED to care about IT.

You go to your doctor and pay him good money so he can tell you how to properly take care of your body. If your doctor tells you that you have diabetes and you continue eating sugar, you will die.

If your IT department tells you something is a bad idea there's a reason for it. You don't have to understand his logic, and he doesn't have to explain it to you. Your company pays him to understand all of that so you don't have too.

Enterprise infrastructure is extremely complex and enterprise applications are often extremely fragile. If the company could exist without their contributions I'm sure there would be no IT department.
10x Genomics | Software Engineers, DevOps, SREs | San Francisco & Pleasanton, CA
| Onsite or Remote (US Only)

We're a software group of 19 people within a biotech company of 380 developing
novel products that give scientists new methods of unraveling complex systems
like cancer and immunology. No biological experience is required, but if you're
interested, there are an abundance of opportunities to learn!

Last month, we announced a 2019 plan to grow by 50% in headcount and 200% in
office space. We also announced the acquisition of Spatial Transcriptomics [1].
In 2018, we were found to be the #1 fastest-growing private company by the SF
Business Times with "an eye-popping 2,044 percent spike in revenue, to more than
$71 million in 2017 from $3.3 million in 2015." [2]

You can find out more about our massively parallel pipelines as well as our
visualization software at https://support.10xgenomics.com/. We manage our
pipelines with Go, develop analysis code using Rust and the NumPy/SciPy stack,
and drive our front-end applications with React/Redux.

We're currently hiring for all software roles. Details are on our careers page:
https://www.10xgenomics.com/careers/. Feel free to email me if you think you're
a good fit for these roles or if you just want to chat. You can reach me at
kevin.wu@10xgenomics.com or @kevinwuhoo. I strive to reply to all emails,
regardless of whether they're informational or applications!

[1]:
https://www.genomeweb.com/business-news/10x-genomics-plans-l...

[2]:
https://www.bizjournals.com/sanfrancisco/news/2018/10/30/fas...
That's one part. The other is that iOS 12 really did focus on speed improvements. For many (most?) people, an iPhone 7 with a new battery is still a great phone.
I agree with you that people tend to have an over-simplified model of debt as something negative instead of a relatively efficient way to transfer liquidity from where it is to where it's needed. My parents are retired with a decent amount of assets and I'm young with low expenses and a high income, so we regularly loan each other money to bridge moment-to-moment liquidity gaps[1].

That being said, a high level of debt can still be notable. The cost of this liquidity transfer is risk, and the usual way entities holding a lot of debt handle this is by spreading the risk across the debt they hold. This obviously doesn't work perfectly if the debt is correlated, and as the proportion of debt goes up (relative to other assets, economic growth, etc), this risk also goes up.
https://github.com/clojure/tools.deps.alpha
Both convolutional and recurrent architectures were developed in late 80s. LSTM (improved RNN) was published in 1997.
In an attempt to get more mileage from my iPhone 6S and prolong a future phone purchase, I recently did the $29 battery replacement. I hoping that I avoid getting a new phone for another 2 years.
Apple needs balls. They need to show the world they can innovate where nobody has gone before. An Apple TV with screen and game controllers for $2k would sell like hot cakes. A stackable 'Mac Nano' the size of current Apple TV 4k for under $500. An 'iPhone Y' aimed at the lower end for under $300 so everybody can use Apple Pay, Facetime, etc and get immersed in the Apple ecosystem.

You can't survive in a competitive world with just 10% of the market share since interconnectedness is crucial for the dominance of any platform and that's why you need cheaper macs and phones without losing the appeal of high end products for those who have the money in times of economic duress like the ones to come.
So you know writing it out makes is more intellectually honest, as well as help point out issues.

As for hours, I expect the startup to need more.

Work friends are nice, and I have had many who I go back to. Not as many real personal friends.

There is a classic proverb: You regret what you did not do, more than what you did do.

I do not regret leaving a perfectly good job to travel by bicycle. Sure it put me behind financially, but what I am to do with a lot of money anyway.
The way it would burst is through a naive political change that permits e.g. the mass (and simultaneous) discharging of debt.
Re: first Kuiper Belt Object we've visited

Pluto may be a KBO also. Further, it's possible some moons of the gas-giant planets are captured KBO's.

The unusual thing about Ultima Thule is that it's in a nearly circular and "flat" orbit, which many experts interpret to mean it's mostly undisturbed from its point of origin. It's a prime "fossil".

Pluto has a "disturbed" orbit such that its origin is currently unknown. Same for gas-giant moons. Pluto has also been turned inside-out, perhaps multiple times, by a still unidentified force. Ultima Thule is probably mostly as-is since formation.
This is a little like saying "this is a problem you have with ANY identity solution that looks like JWT". Yes, that's true. The reason people complain about JWT is that (a) it's the most popular solution of this shape, and (b) people use it without understanding why they're using it or whether the tradeoffs work for their application. They usually do not.

Witness everyone saying that the important feature of JWT is that it's standard and interoperable, as if that was a mandatory feature of most token-based authentication schemes; in fact, the "portability" of JWT is a security liability for --- I'll hazard --- the overwhelming majority of applications.
MIT RadLab series (2011)
samesite doesn't appear to work in Safari, IE or Edge sadly.

EDIT: apparently it's a bit more complicated than that: IE11 on windows 7 doesn't support it, and Safari < iOS12 doesn't support it. Still seems like a significant-enough chunk that you can't rely on it.

https://caniuse.com/#search=samesite
I think we have completely unrelated threat models. I'm worried about malicious USB ports / devices trying to steal my data or at least make me have a bad day. If someone is trying to set a device on fire, authentication won't help. They just need to fail authentication and use that as the bomb's trigger.

You're worried, I think, about poor-quality devices that aren't malicious, just incompetent - or poor-quality cables. (I'm already willing to carry my own cable - I already carry a USB-A data blocker around, but USB-C data blockers don't seem to exist.) I think that can be solved without cryptographic authentication, with the standard approach of having a certification organization like UL or the USB-IF themselves investigate cable/charger production and test them. It seems the major problem here is with Amazon listing cables without showing whether they have certifications (or checking whether certifications are forged), and that's a general Amazon problem with poor-quality hardware and counterfeits.

This article is talking about autorun, Stuxnet, etc. so I think they're focusing on the latter. If the USB-IF wanted to use digital signatures to authenticate cables I'd be more on board, but if they do that, they should just be authenticating cables, not devices. (A cable, I believe, can be engineered to just cut the circuits if a device tries to pass too much voltage, or is wired backwards, or something.)
Lilt | San Francisco | Fulltime | DevOps & Frontend Developer

Happy New Year!

Lilt is a high-performance, large-scale language translation system. We invest in and prioritize both workflow (i.e., usability and interface design) and backend NLP/AI systems. Since the translation workforce is distributed worldwide, there are interesting multi-region cloud engineering problems to solve. We have a strong preference for building our own AI technology, so you’ll be implementing and working with the latest techniques and ideas.

Senior DevOps Engineer- 3+ YRS EXP.- Kubernetes, Docker, Helm, MySQL, Python- Java highly valued - Manage and deploy external and internal cloud systems in GCP and AWS - Build dashboards and track metrics for the production systems - Prevent and monitor security vulnerabilities - Adhere to the best infosec and DevOps practices

Senior Frontend Developer- 2+ years exp - Angular, React+Redux, Javascript, HTML, CSS- Node.js & MySQL- Develop our front-end web application, which also includes a javascript library (for integration into sites and apps) and a REST API. Work in a product team consisting of front-end developers, full-stack engineers, and designers. Consult with our customers on product definition and requirements.

Please send an email: brian@lilt.com
FullStack & Backend roles as well w: Python, Node.js, & Java.
I have a Model 3 and I don't know WTH are you talking about. It's a great car. Panel gaps are just a little too wide for my taste in the rear doors but you rapidly forget about it when you're behind the wheel. Best car I've ever driven hands down.
Chicago’s Deep Tunnel: The solution to urban flooding, or a cautionary tale?
Interesting how at the end, after acquiring out-of-bounds write access, that it was easiest to leverage the WebAssembly infrastructure to execute code than to build a ROP chain.

Apparently WebAssembly heap memory storing generated code is not write protected at all. I guess whatever architecture they have for managing typed memory chunks doesn't make it sufficiently easy to manipulate protection bits dynamically, and the WebAssembly folks were content to leave compiled WebAssembly chunks are RWX.

It's unfortunate that this thread hasn't been upvoted. It really drives home the futility of expecting something as complex as V8 to ever be safe enough to sandbox arbitrary code. And it has little to do with the language of the implementation--the same engine re-written in Rust would have been just as susceptible to the two exploits.

I guess it's just too inconvenient to accept reality. I'm still surprised that Cloudflare and AWS have actually convinced themselves they can make such architectures secure[1]. Less shocked that everybody is else is so credulous.

Though, I am shocked that Netflix is so credulous. A recent blog post described how they use AWS Lambda functions to manage their CA private key. But, again, because of how limited KMS is I guess it's too inconvenient to not trust Lambda. KMS really should support asymmetric key operations; it's ridiculous it's still not supported. I guess AWS's KMS "cloud HSM" solution just wouldn't scale (in terms of CPU) if people could do that.

[1] Absolute security is impossible, but as complex as this exploit was it's obviously still far too trivial. It's a totally unwarranted and unreasonable expectation that bad actors are incapable of reading (if not manipulate) co-hosted Lambda or Cloudflare Worker projects. Writing a non-JIT'd engine with a simplified memory architecture is not only feasible, it would be an obvious candidate for formal verification. But the demands for performance are just too strong and so, as always, security takes a back-seat to performance and speed-to-market.
To expand, it makes sense in situations where the "expert" is unable to scale up any farther (lack of capital or labor come to mind) or cannot expand farther without assuming an uncomfortable amount of risk. The second possibility should set off alarm bells for small investors. (Case in point: many McDonald's franchisees struggle to break even while the McDonald's corporation rakes in a steady income.)

If someone really is "retired but wants to help people", I would expect to see the core educational content available for free (or near distribution cost) with the option to pay for one-on-one coaching/consulting services.
Any thoughts on a series of better ways to rehabilitate people and get productive members of society instead of marginalized?
My thoughts exactly. The iPhone 6S is still plenty fast, does everything I need it to, has a large screen, and a headphone jack.

I have used the latest models and don't see any improvements worth upgrading for. FaceID is cool, but not enough on its own to convince me to upgrade.

In previous cycles, my update from 3GS to 4S was a no-brainer (retina, massive speed improvement), as was the upgrade from 4S to 6S (lightning port, LTE, massive speed improvement, larger screen).

Once I got my battery swapped, the phone was as good as new.

And I still have a headphone jack.
If you always have state, what's the point of making tradeoffs to get closer to "statelessness"?

I see clearly why some small subset of applications benefits from carefully minimizing shared state among components. It is not at all clear to me why pseudo-statelessness is a good default.
Where did you do the wrap? I can't find a shop that carries the cutout for the Model 3. Bay area?
Not much visual though is it ;)
Idea from common job interviewing process:

Make the unit tests public. Or useable interactively online.

I know it'd be a lot more work. If you had a repo for unit tests, I'd contribute.
I think they meant as people “redeemed” but they used the poorly-chosen phrase “took advantage”.

Because Apple shouldn’t offer something they don’t want people to use that phrase being very poorly chosen.
The solution I use and many others is to only charge a usb battery in public, and you use that battery to charge your devices.

That works well to solve all the issues with public power ports.
> coffee and two, stilton, cucumber and tomato ham sandwich

To me that actually sounds like a fucking delicious lunch, were I to pack that for myself lol.
i've seen js performance on synthetic benchmarks drop somewhat over the past months. perhaps JS JITs like V8 rely to some degree on specific branch prediction properties.
Komodo Health | Data Science & Eng Managers, Sr. Engineers, Data Scientists, Sr. Data Engineers, Product Managers | NYC & SF | Full-time, Onsite

Komodo Health builds data-science and AI-powered products improve decision making in healthcare. Our mission is to reduce the global burden of disease through big data analytics (we call it healthcare map). The map is where we process data and stitch together information about patients (have 295M US lives), doctors, hospitals, payers, etc.

We are a data-first & eng-driven company and growing fast. We have significant traction and revenue. Short presentation about us - https://goo.gl/zXzurq

Career Page: https://grnh.se/5ccd0c0d2 (Roles can be in SF or NYC):

Data Science:

* Data Science Manager

* Data Scientist

* Sr. Data Scientist

* Data Analyst

Engineers:

* Eng. Manager - Data Engineering

* Sr. Data Engineer

* Staff Software Engineer / Architect

* Sr. Engineer - React

* Sr. Software Engineer

* DevOps Engineer

Product / Design:

* Sr. Product Manager

* Product Designer

Stack: Spark, Airflow, Python, React, Scala, Kubernetes, Docker, AWS, PostgreSQL, Flask, Django
That's interesting - I didn't know Notepad++ still ranked so high.

Oddly enough, I'm actually pretty acutely aware of how much performance matters in this space - at my last job, I spent a year developing an IDE for a custom in-house language/environment with some unusual required features. I looked in to extending existing editors/IDEs. The web-based editors were too slow for my application (which required a very large number of page updates from remote sources) but extending the native editors was an unfathomable pain. When I looked into things that didn't use a browser back-end, I was budgeting a month just to learn enough about their plugin architectures to determine if what we needed was possible without rewriting the UI code from scratch, which I really wanted to avoid. From experience, working with raw Java/C++ UI toolkit code is a nightmare compared to html/js and requires orders of magnitude more LOC just to put anything on the screen that can be interacted with.

In the end, I wrote my own web-based IDE from scratch, using a lot of application-specific performance optimizations that would be really difficult for a more generic, modular system (lots more care about what parts of the DOM to touch and when went directly into the parser than would have been possible with Atom/VSCode/CodeMirror/whatever at the time). I spent 6 months optimizing it and it was only barely fast enough that you could type at close to 60fps in big documents, but I don't think I could have made a native version that worked at all in that time.

So I get it: performance is important, and there are cases where web-based things either don't cut it or are barely acceptable.

My point wasn't that performance isn't important, it's that it's not the only concern and pointing to the relative popularity of editors over time still illustrates that. Notepad++ was released 12 years before VSCode (which has only been around for ~3 years) and has had better performance this whole time, but in the 2018 Stack Overflow survey, VSCode beats it in popularity. So performance can't be the overriding factor in its relative popularity - it became popular in spite of being slower than things that already existed.

The author of the original piece argues that the whole web-stack is _wrong_ and should be thrown out and replaced with something else, because it's slow and people don't care about how easy it is to develop something if it's slow. I don't think that's true, and the easiest way to see that is to note that we already had faster things that were harder to develop and extend and they're increasingly being rejected in favor of the opposite.
iPhone 7 is $449, which is $50 more than what iPhone SE launched at.
Ray tracing does not do any kind of stepping/marching or anything similar. It's incredibly odd that you would claim it does, especially so authoritatively.
What game is the black and white clip at 04:13 from?
Let's replace self driving cars with remotely controlled chauffeurs.
The services business includes the app store fees like the one that Netflix is getting out of, so that revenue stream might have some challenges of it's own.
RFC 6750 describes the format of Bearer tokens: https://tools.ietf.org/html/rfc6750#section-2.1 # it happens than JWTs fit the format, so they can be used.

The spec is vague enough here that you can stuff almost any string you want into the header, as long as it has sufficient entropy that it is near impossible to brute force. Of course, JWTs introduce their own concerns, as discussed in other comments.
Ah, ok... I'll wait to see something like:

"hey this is a Samsung USB-C cable, you can't use it. Go buy an LG's one. They are exactly the same except of authentication but we can't trust if otherwise, it's for your safety!"

Than I'll wait for a crying herd of fanboys that proudly try to justify it well pushed by marketing sheepdogs in disguise...
StCUDA: Smalltalk CUDA library
Again, "shock humor" and satire are antithetical to "cutting through the bullshit".
The problem is in the US, people will become really upset if you try to tax those things.
> That sounds like Huawei fallout.

How would fallout from Huawei have anything to do with fewer people walking into Apple stores and buying a new Apple product? Have the prices risen or something? Are people afraid of being kidnapped if they walk into an Apple store?

To me, it is just a lame hyperpolitical straw man excuse as to why they aren't selling more products. It has zero to do with China, imo. It has to do with people not NEEDING a new device, so they are upgrading (a lot) less frequently. Personally, I'm on about a 5 year upgrade cycle now. Apple will have a harder time going forward having increasing records year after year, because they mostly rely on new hardware sales. I think we're kind of coming to a Moores law type effect in terms of hardware perception (not design/capability). There just isn't enough of a perceivable or revolutionary innovative difference for the average person to justify purchasing a new multi $k machine year after year. For most people (non power users), they get no actual tangible benefit. An iPhone X will perform just as well for the vast majority of an average users applications as an iphone 8.
Is the range still a big deal? Norway is not as big as the USA, and you can nearly get from Oslo to Bergen in a Chevy Bolt. (Stockholm, I'll admit, is too far for one charge)