skysight-inc/HackerNews huggingface dataset:
Would the washing of all our "anti-bacterial" cleaning products into the oceans and water ways be killing off the invisible foundation of the food chain: Bacteria and Fungi.

Molds (Fungi) and Bacteria are something Humans have been at war against with their cleaning and pesticides for decades...

Phytoplankton eat bacteria, correct?
The site is down. But a valid threat model was requested and not given by the original OP.

If there was a post with a valid threat model. That would be interesting, until otherwise, it remains closed
Arent humans tricked the same or in similar ways? For instance advertising exploits weaknesses in human psychology. Advertising is sort of an adversarial tactic.

AI attacks take it to the next level, but the problems are not new I'd say, just an evolution of existing issues that are now applied to computer algorithms instead of humans.
It might be frustrating for users to have their typed password rejected without an explanation. Since there’s no authoritative list of compromised passwords they would have to take your word for it.

Wouldn’t a better solution be to increase password requirements until users are forces to generate one using a password manager? If you can memorize a password it’s probably not secure.
> And that is why science education is so important. Thinking like a scientist is not natural. It is a learned skill. You need to stop asking yourself what it feels is the correct answer and analyze it to get a universal truth.

I agree, but you have to be careful: a universal truth might not exist outside fixed formal systems, and after years (or centuries) of analyzing the problem you might realize that you were only analyzing the question itself, and not the problem it tried to state.

I think in a more deeper way, this is the basic problem behind many experiments like the one described in the paper: they all assume that the question they are giving to the subject is equivalent to the problem they are trying to present to them. However, as soon as you transfer something into spoken (or written) language, something is lost. Always. You can never be sure that you were successful in transferring an idea, or a problem statement, to another person in exactly the way you are thinking of it. Because if this, imho you just cannot ask people which is more likely, HHHHHH or HHTTHT if I toss a coin 6 times, and then, if 70% answer HHTTHT, say that people's intuition for probability is bad, or explain it with "anchoring" or "substitution" or another mechanism. It only proves that the majority of people will not give the correct answer if a probabilistic problem is given in formal language to them, in a controlled environment. This is a completely different problem. If the same problem appeared to the subjects in an everyday situation, directly and without the need for language as a mediator, they may very well have precise intuition. I think the problem is, however, that creating such situations is hard for researchers, and also hard to reproduce. But as long as you are trying to keep a sterile testing environment, you will only get answers that will hold in this sterile environment, not in the real world. On the other hand, creating social science or psychology experiments that are not sterile might very well be extremely unethical.
You might be interested in the concept of "Defense in depth": https://en.m.wikipedia.org/wiki/Defense_in_depth_(computing). If the effort is minimal to migrate from HTTP to HTTPS, there's no reason to not do it and to fix the validation.

In fact, if the HTTPS change is faster, this should be prioritized, given that the other issue might take a lot of time to fix: the old validation mechanism will have to be supported for a long time to keep older clients backwards compatible...

I'd take that the VLC guy had a bad day, otherwise that'd be a terrible reaction from someone involved in computer security.
Tweet from Tom Dale himself https://twitter.com/tomdale/status/1086675110801625089
Not a developer here. I work mainly as a translator, and I work alone, so YMMV.
Kanban works best for me. I have a self-hosted Kanboard instance (https://kanboard.org).
However, sometimes even that is difficult due to the hectic pace of work when business is abundant.
But a good salary is pre-tax too unless you’re talking about the actual paycheck which is far lower than listed salary.

There are benefits. Like matching 401K, paid vacation (though if this isn’t long enough it can be a negative), and mainly, health insurance. Those should be counted for a normal salaried job. Otherwise taxes should be compared the same way, no?
It doesn't help that public transport is okay by American standards, i.e. appalling. And that because of congestion, walking and cycling are so dangerous. Police have even stopped ticketing people blocking crossings because it happens too frequently (which is the wrong thing to do). Which means the alternatives are even less appealing, which means more people drive, etc.

Of course, nothing will change as the rich people still want to drive, no matter how much they pretend to support public/alternative transport in a bid to look progressive.
We don't really know what it's written in anymore, since the new version is closed source, but given that they had to rewrite it because of how slow it was, it's unlikely they chose Python again.
I saw no controversy in at least the second (reddit) link, appart from an anonymous coward insulting him and making random gratuitous hypothesises - moreover likely unrelated to anything...
If he had bought in Jan 2018 what would happen to him today? Index funds are a sound idea when the market is pumping but remember if we really were going into a recession, which we are not as the market is fine, you would have a chance to lose your job which in turn would cause you to sell your index fund investments to maintain your lifestyle, which in turn would be taking a significant loss. Something like a lazy portfolio would help in this scenario where you have money in bonds/stocks and ladder GIC's to be able to buy the dip.

I prefer options and it seems the write of the article is fairly new to trading, excepting to do great in 2-years is like being a neurosurgeon in 2-years, really challenging. The market has its way to chew and spit people out, there is so much to learn from money management, to risk tolerance, to finding a working edge. It takes decades to find something consistent.

Winning in the markets is the toughest profession out there so you have to work at it, but you also have to have capital to work at it. It's hard to turn $5k into $30K, but turning $100K into $150K is much easier.
so suddenly the onus of developing the threat model is on the user?

I believe both devs and users should have the liberty to discuss and propose threat models, but if there already is "some level of precaution" the real question is where was the previous threat model that dictates signing? or is this security theater?
He is commanding them to fix it ASAP

The thanks afterwards is meant for after they have done it and makes it worse.

What he actually says is:
The bug is posted, I offered the solution. Fix it and I won't follow up on this.

Which would be something what a boss would say.
My office has 1 person cellphone booths for use when someone needs to meet 1:1 with a remote office. In my ideal world I'd just have one of those as a dedicated space to work in when I needed it. With such a setup there needn't be any expensive office rework between tenants.
I love the software, but after seeing this interaction would never help out their community.
I could be wrong, but USB MIDI is still limited by the same bandwidth and latency constraints. I don't think it's any faster in terms of baud rate, despite being carried over a faster bus.
Ask HN: How to get clients as a team?
Hi there,

me and my friends started a small company where we focus on creating (mostly) backend services (as we all have rich experience with that).

We would like to find a startup or some comapny that would be interested in hiring such team - basically team that can deliver for them implementation of their ideas. How common is such scenario? What would be the best route? We don't even know where to start... can anyone share their experiences?
A pi-hole for my home network. I love it.
Or he may have meant 'stores'.
"Jean-Baptiste Kempf" the main contributor of the project later on said :

"Are you sure? For me it verify_signature() for the new key, based on the hardcoded public key."

And concerning the fact that the ticket is open for OsX :
"As for OP, the updater on macOS uses Sparkle, and clearly not this update code. "
Speaking of this, I was trying to reverse-engineer the operating system for the DSI Tempest because you can send its binary data as firmware updates over SysEx messages. So you have the binary source of the OS, but not the source code. Unfortunately, I can't figure out what processor it uses without opening the thing...
I'm currently building a small reminder and timer device with time tracking functionality. Touchscreen, maybe battery powered for a bit if possible (it'll probably be plugged in most of the time but it would be nice to move it around the house).

I'm sure there are phone apps that do this, but I hate my phone and I want to integrate it with one of my web applications to some extent.

It's been fun playing with and hits the sweet spot between convenience and price. A nice break from web development.
It’s a shame Iridium flares are quickly becoming a thing of the past. If you’ve never seen one, it’s about time!
Why not? The stock markets are large enough that you could easily invest billions of dollars and get average results. The main reason to do something else is if you can get above-average results (which can include considerations like lower drawdowns, less exposure to a single currency, etc.)
The threat was given by the comment, and a good community manager or developer would have acknowledged that and not have continued to act obstinate. They are actively ignoring it.
Here's an example of how to misplaces satellites were used to test General Relativity:

https://www.youtube.com/watch?v=aKwJayXTZUs
No need. House seats are up for election every two years for this reason.
Thant's an interesting observation, possibly can be solved with a signed version file, which is released daily. Signing of (datetime, version, package_image_hash) can be done with CI daily or hourly and probably way faster than encrypting the whole traffic.
Hotels in India are very expensive in the big cities, and for lower-level and 2nd-tier cities, you have to be very careful what and where you end up with. Its either pay a lot, or end up with arrangements and sanitation that would be acceptable to a local would be considered OSHA/CDC-worthy in the US.
Yes. Mandatory jail terms for all sorts of white collar crimes. You gave no reason why we shouldn't other than that you seem shocked. I bet the first few people will be shocked. Much like Martha Stewart was. And then they will very quickly get the message. We've tried fines. Huge fines. Businesses don't care. They continue to do this stuff on a very regular basis.
Corporations are no different than being in the armed forces. You do unethical things, but it is all justifiable because you're "just doing your job and taking orders".
Total lunar eclipse meets supermoon Sunday night
When? There is a glut of global capital and a 90 year+ history that shows the market grows at 7 percent annually. What contravening data do you have?
I wonder if the insect die-offs that have been reported lately are linked to a nutrient deficiency such as this.

It's amazing to think about the scarcity of various metabolites and how they might become concentrated in different populations and species over long time scales. I wonder if these phenomena are long scale oscillations that we are just scientifically observant enough to begin noticing.
I thought it was self-evident that most western European countries have a long tradition of social democratic parties with strong trade union connections.

Those politicians to vote for doesn't come about magically. In the US there's no such options, just two right-wing parties, and that's reflected in their labour laws. The labour movement in large have provided those options in Europe and the trade unions are where the practical power is through the threat or use of strikes etc.
I've noticed that anything "security" related tends to attract lots of loud-mouthed authoritarian cargo-culting do-gooders, and for this reason I prefer to distance myself from them as much as possible. Perhaps it's a prerequisite for this type of work (in the real world, think of police, TSA border guards, etc...)
Big private company wants to trade shares publically but doesn't want to go through the whole process of an IPO... so the big private company buys a smaller publically traded company. Now big company has "merged" is a publically traded company.
And even if it did differentiate between serious injury and dying, considering mankind’s history of warfare, being able to continue to perform while mortally wounded is definitely beneficial to the survival of the clan.
I don’t know how to comfort someone that thinks a light hearted “hobbiest wierdos (heh)” is offensive and inflammatory.

Show me serious embedded device mfgs using Rust. Actually using. Not some testimonial on the Rust site. The real truth is no company is going to use it until there is serious use will happen until there is IDE support. Segger is a company large enough to be taken serious and unlike Keil or IAR small enough to get it done.

Great things start with hobbiest wierdos. IMO... once you stop looking for things to be offended by you can get to work, son.
Let’s accept your premise that she wants to be treated as a sex object - and still do tech.

Why shouldn’t she have that right?
It's very popular opinion and it's demonstrably wrong. Atom was carving out niche from all the fast and responsive text editors by being open source editor with plugins that are easy to write, inspect and fix when they are buggy. Only dangerous competition for atom is vs code because it does exactly the same only a bit faster.

What you are saying is similar to that the Firefox never had priorities right because instead making itself faster and more responsive it made possibles all those script and DOM based extensions.

Being able to extend your tools without messing with binaries or learning dialect of lisp and some weird gui toolkit is a huge feature that Atom brought to editor market.
> If Michael Dell "parked" his money in stocks over the last 5 years, the prices would have been altered.

No they wouldn't have been, at least not materially. Michael Dell's entire fortune is about $30 billion. That's literally a rounding error on Vanguard's entire assets under management, which is over $5 trillion. That's just Vanguard - Fidelity and Blackrock each have over $6 trillion as well.

I think you're vastly underestimating the amount of liquidity available in the market if you think any single billionaire could materially move the prices of a major, diversified fund.

> Also my long standing challenge, point out the index fund billionaire. We all want to meet that person who's winning so hard, by doing nothing.

Do you mean someone who became a billionaire by taking a relatively small net worth and parking it in index funds? Or do you mean a billionaire who maintains and grows their fortune by parking it index funds?

The former is ludicrous to the point of being a strawman, and I don't understand what it proves by being true. The latter is trivially true and demonstrates that billionaires do choose to passively grow their fortunes.
You’re not going to become a billionaire by investing in index fund but it’s a lot safer than active investing.

On average, you’ll do better in index funds but there’s a lot more variance in active investing. I’m up 400% over the past 4 years or so active investing (although at one point I had lost 50% of my initial stake). A coworker of mine lost 90% of his money this year. You’re not going to see either of those outcomes with index investing.
Consider the following three plots. In one of the plots each of the blue points is sampled with equal probability from the entire square. Which one is it?

1. http://norvig.com/plot1.png

2. http://norvig.com/plot2.png

3. http://norvig.com/plot3.png

You can read the rest from http://norvig.com/experiment-design.html
Anti social media
Traditionally, grog was a British Navy mixture of rum and water in 1:4 (ish) proportions. Circa-late 1700s.
Why would that be a reason? Why would they want to harm their existing business by acting like that?

How would they benefit anyway? Installs aren't worth shit. They'd be better off going to a forum and buying thousands of installs for their malware if they wanted to spy on people, the kinds of people renting out their facebook accounts certainly won't be particularly interesting targets.

If someone wanted to "install a backdoor or steal your personal files including but not limited to personal photos, electronic tax records, banking information, etc," this would be the worst imaginable way of achieving that.
> Arent humans tricked the same or in similar ways?

The human perceptual apparatus is eminently hackable. This is how optical illusions work and it's how magicians make a living.

But those hacks are not usually the same as the relatively simple hacks possible with current neural nets.
Hey amelius!

Great questions. The target audience for these instruments are scientists and hobbyists who don't want to spend a ton of money on similar commercial systems, and want the flexibility to modify their operation (e.g., poseidon can run custom flow profiles per experiment whereas off-the-shelf commercial systems typically only run one flow rate per experiment). The purpose of poseidon is to show that open source biological instruments can be developed and used by a community, similarly to how open source software tools in biology are developed and used.

Academic budgets vary from institution to institution and are sometimes determined by exogenous forces beyond the lab's control.

A complete commercial system to do single-cell RNA sequencing costs tens of thousands of dollars! Using alternatives such as the Harvard Apparatus syringe pumps and DropSeq [0] to run the same experiment will still cost you into the thousands of dollars. With the poseidon system, we greatly reduce these costs. Users can build the instruments to run these experiments for less than $400 and are not restricted to additional costs and tedious firmware upgrades to expand the system.

In response to your point on time management and instrument-making, I think that if there exists a need to develop these systems such that they will advance biological experiments then it's totally cool to have academics work on these sorts of projects! Biologists and bioengineers have always developed tools alongside discovery and this is no different from developing bioinformatics tools.

[0] https://www.cell.com/abstract/S0092-8674(15)00549-8
- how many hours a week will be worked

~40 hours, but most of those big companies only care you get your work done so it can vary from person to person (less or more).

- how much stock options are on offer

All companies mentioned are public, they're stock grants (RSUs) not options. If OP was an L3 it would probably ~40k/year, L4: ~75k, L5: ~150k.

- what's the total compensation package like

L3: ~180k, L4: ~250k, L5: ~350k

- what other benefits there are

- what skills will be gained

- what is the office environment like

These are all easily researchable, and most big companies are actually extremely good in these areas.
I believe it's at least partially due to Windows Defender, but creating files in WSL is dog slow.

$ mkdir scratch;cd scratch;time perl -e 'for (1...10000) {open(F,">$_");close F}'

Runs for 5 seconds in WSL, 100ms or less on an actual Linux box. I do like WSL, but this sort of thing limits how useful it is. Pull some big repo with git, and Zzzzz.
It's confusing to me that you want to subsidize a relatively wealthy demographic at the expense of the young and relatively poor.
I think in this context he’s talking about a very specific meaning of symbolic, vs connectionist the two main classes of models of thought. Symbolic is something where you can make out the structure of what’s going on (a requirement for analysis or “introspection”; hence clearly). The alternative is bottom up modelling eg with neural networks where only the outcome is known and the internal processes can’t really be analysed.
Thanks for the link! I'll check it out and send it to the other authors.
You don't know what you are talking about and accuse others of your very sins just because of internet points...

FYI mitm attacks have been employed against high profile targets, and VLC is deployed pretty much everywhere. This is a very plausible persistent threat scenario, not a mere theoritical issue...
Sorry, I don't think I made my point well here. I was trying to say how 128 discrete values is incredibly course grained for a lot of uses, but I should have mentioned that it seems to be worse for Control Change parameters than Note + Velocity. 7 bits maps fairly well to an 88 note western style keyboard a lot better than emulating a potentiometer on an analog filter.
A huge amount of vintage electronic music gear, from multiple manufacturers, receive firmware updates via MIDI. Keyboards, synths, even electronic drum systems. It is extremely common, though not so much anymore thanks to USB.
Atiku Leave debate venue because of Buhari’s absence
My ticket was closed without requesting a threat model. As a trivial example this is a privacy leak - anyone on the network path can see what version you're upgrading to. It doesn't sound like a huge deal but we are moving to a 100% encrypted world, and it is a one character change to fix the issue. If VLC wants to keep the update over plaintext then they should justify why they want to do that, not have users justify why it should be over https. Instead, it feels like the VLC devs are having a kneejerk defensive reaction.
If you do, you probably should use https.

https://time5.nrc.ca/timefreq/bulletin_tf-b.html

There's probably some really weird MITM attack possibilities here if people have automated systems fetching and using these files. Also, following the link from the article, it would seem the US government's official source is unencrypted FTP?
Fact check. Knowing that heart disease was the number one cause of death in the US, I assumed the number of deaths would be high. At 300k deaths a year related to obesity, it is a high number, but no where near the number of deaths caused by wars that could be argued were caused by a person’s decision.

Thus it turns out my first statement was wrong. This is a good reminder to fact check before posting.
The quoted passage is textbook rationalizing.

The clipped sentences, the defensive clauses "Being frugal", "was one option", "as a business teacher" and the rest of the article, all point to a man who wasted a chunk of his life in a rabbit hole and refuses to admit it.

At some point, justifying becomes gibbering. The author has reached it.
That's true, you're right, ageism
Doesn't really exist. I will say though that seeing my dad, an aging surgeon, there are other stresses. Doing emergency surgery at 3am is a lot more stressful as a tired 60 year old compared to an energetic and confident 35 year old.

I'm always reminded when I'm at his house, and he's on call, how much higher and stressful the stakes are in his line of work.