skysight-inc/HackerNews huggingface dataset:
> If you mean symbolic in the sense that computers use symbols, then no, it won't involve that

Why not? Not consciously, but as part of the underlying process that produces consciousness. Particles and fields that make upboir brains carry no more intrinsic meaning than the charged bits in digitial computers.
The comment may just seem annoying but after a fair amount of reading on AI, I think it actually is an OK if snarky comment on state of the art AI.

Current AI involves complex statistical analysis that essentially sacrifices robustness and unbiased-ness for predictiveness. It's basically blindly squeezing all the extrapolative qualities available in a huge dataset, getting impressive seeming results while picking up all sorts of "garbage associations" along the way.
I brought the same issue up with Tesla about their firmware updates not being encrypted in transit, and their argument was the updates are cryptographically signed. Good enough I suppose.
The point is not that people are becoming rich by investing in index funds, but that rich people mostly do no better than people investing on those funds. Rich people are not special as a population, except for having a lot of money.

Except that this is a much more complex affirmation than it appears. I do think people making this point are deluded, ignoring the complexity of the situation. What, of course, does not mean that they are wrong, only that the affirmation doesn't add any new information,
'Paternalism' is associated with men - it contains the latin word for 'father', and means ".. the manner of a father dealing benevolently and often intrusively with his children" according to https://www.dictionary.com/browse/paternalism

And in this article, it was deliberately chosen for its association with men - it's clearly the wrong word, even without its connotations of gender. Only laws that are meant to prevent you from harming yourself are paternalistic, not from harming others. E.g. banning high-sugar foods, driving without seat-belts, etc. You wouldn't call laws against assault, murder, or theft 'paternalistic', would you?
I'm surprised anyone would actually want to drink skimmed milk. Semi-skimmed at least still tastes like milk, but skimmed tastes very watery (to me, at least).

> what would be the alternative of selling the skimmed milk? Just throwing it away?

Huh, hadn't thought of it that way!
I'd get annoyed with many sealed offerings with soldered hardware. It's not just Chromebooks.
Can you provide a source backing this up? I worked in the EU for many years and was never a member of a union. I worked in technology. However I enjoyed strong labor laws. It could be as simple as voters choosing politicians who promise strong labor laws? So it's not self-evident that unions were involved.
Sounds like nonsense. There's no meaningful difference between digital computers and other kinds of physically realisable computers.
Modern version, still actively developed by Microsoft: https://docs.microsoft.com/en-us/sysinternals/.

First thing I install on every windows box, the power of that toolset is incredible.
I’m not OP, but I suspect it was “The Prophet from Silicon Valley: The Complete Story of Sequential Circuits,” for which Dave Smith wrote the foreword.
NASA could also be hacked by determined criminals, VLC hasn't got unlimited resources to spend. The HTTPS change could be easy, but you don't know what other things can be affected at first glance ( eg. update mechanism on older versions with no https support).

If the attackers can do a MITM, they probably also have other stuff at their disposal :)

But more important, issue the bug with a valid threat model and it could be fixed. As long as there is no threat model and perhaps an active discussion ( this is how open source works), the ticket stays closed.

The OP had 2,5 days to respond.
I consistently see criticism towards the space thats provided by an employer. I think there needs to be params on the culture of working in an open space environment. The truth is its just cheaper than everyone having their own office. Headphones, Slack/Email and not having conversations in the open has worked in my experience.
Well, I do believe that government interventions sometimes create more problems than they solve, but...

1) how did other comparable economies fare during this time? Was a drop to 18.9% unemployment better than, say, Portugal or France or Italy?
2) they did have a government, as the article admits, actually
3) there are times when you have a crisis which requires quick action, and times when you don't. If you got along ok without firemen in the fire department, that probably means you didn't have a fire during that time, not that you don't need a fire department.
I might be missing some context, but I am deeply unimpressed with how Rémi Denis-Courmont chose to handle this. As far as I can tell, Rodger Combs gave a perfectly lucid explanation of a plausible threat model. If this is how the VLC developers typically handle security issues, then I'm unsurprised that the EU has decided to offer a bug bounty.

https://www.zdnet.com/article/eu-to-fund-bug-bounty-programs...
Some critical questions: who is the target audience for these instruments? Aren't academic budgets sufficient to provide for a lab with proper basic instruments? Are these kind of instruments a financial bottleneck when setting up a lab? And do we want biology PhD students and postdocs to spend time on instrument-making (and publish papers on that) rather than on biology?
CEO sits behind double doors.
Sure, but it's all a bit different if you have the chance to revive a company that you founded and carries your name.
It does not mean anything. It's a minor variation on a commonly copied piece of text that has been doing the rounds for years, by people placing it in discussions for fun. It's not actually a genuine argument.

You only need to read one tweet further down.
Sketch, Adobe Creative Suite, VPN.
yep, only did a few C# projects but had the same experience.
Jesus, maybe appreciate the fact that just a few years ago real-time raytracing was nothing but a pipedream. Now we have cards on the market that can do a limited amount of real-time raytracing. That's huge. Next year they'll get faster. The year after that they'll get faster. More games will support it. Developers will buy in. This is a generational change that will take 10+ years. That doesn't make this any less significant. It's not a gimmick if it's going to take time for things to develop. That's how things work.
Trac is written in Python, one of the slowest languages that there is. Posting a link to a Trac installation on HN is practically an act of terrorism; the server it's hosted on might explode and expose you to civil liabilities. You should check with a lawyer.
At the same time, there are really no 'models' like in, say, Physics or Engineering. The state-of-the-art consists in 'well, this seems to be reasonable and seems to work'. I mean 'models' like 'mathematical models' not like 'a model of a simplified neuron'.

Which for a chess/go-winning program is pretty harmless and even interesting.

Not so much for autonomous driving and/or security, for example.
In addition to your career perhaps being over. Most companies do strong background checks for executive positions. Plus your reputation in the local community. I'm sure if Martha Stewart had to chance to choose again, she'd skip the insider trading and the jail sentence.
FWIW, I don't think low carb diets are fad, they're here to stay.

I agree with the last point though.
Almost 20 years before Searle, a short fictional story by A.Dneprov, "The game", was published in the Soviet pop-science magazine "Knowledge is Power".
Not only had it described the essence of the Chinese room setup, it also came to the same conclusion:

> If you, being structural elements of some logical pattern, had no idea of what you were doing, then can we really argue about the ‘thoughts’ of electronic devices made of different parts which are deemed incapable of any thinking even by the most fervent followers of the electronic-brain concept? You know all these parts: radio tubes, semiconductors, magnetic matrixes, etc. I think our game gave us the right answer to the question ‘Can machines think?’ We’ve proven that even the most perfect simulation of machine thinking is not the thinking process itself, which is a higher form of motion of living matter. [1]

[1] A Russian Chinese Room story antedating Searle’s 1980 discussion
http://www.hardproblem.ru/en/posts/Events/a-russian-chinese-...
Please leave your toxicity on reddit.
Baidu Announces “OpenEdge”, an Open-Source Edge Computing Platform
I'd have to disagree with this - I've had quite a few devices that have used mini-dins, and they aren't anywhere near as robust. Maybe have options for different sized connectors, but they should all be equal in terms of functionality (a bit like USB-B connectors), and need to be as robust as the current ones. I can think of many times where the simplicity and size of the DIN connectors on MIDI gear has been the difference between 'no worries, I can just about get my arm down the back of this rack and get the plug in' and 'no chance, can't feel where this needs to go'. And DINs are strong enough that you can rotate them to get them to the correct orientation without causing damage.
The problem is, if you are a Linux user, what else can you buy but Lenovo? Maybe some Dells, but the durability of the laptops is definitely not on par with Lenovo laptops. And other than that? System76? Last time I heard, their laptops were rebrands of another brand, and the quality actually really bad (though this was some years ago, maybe it has changed).
If the updates are cryptographically signed and validated, then it makes no difference. A MITM would just be giving free bandwidth to the VLC project.

The best argument is for defense-in-depth—in case someone breaks their signing scheme.

Edit: u/dcbadacd makes a great point about old but vulnerable versions potentially being served up by a MITM.
Sound support? I still have various sound issues on Debian, to the point I just can't be bothered to sort it out. It kind of works.
It'd be a bit like "EIIR selling Scotish holdings" or "Pope selling Vatican"
As some one who doesn’t eat fortified foods this brings up questions. Is the balance of vegetables and meat I’m eating lacking in vitamin B1 or other key vitamins? Looking up the top sources of B1 the only one that is a staple of mine is beef (100% grass fed).
Yes, and interestingly enough, this advice can be found in The Internship (aka The Google Movie) [0] towards the end with the pizza parlor.

[0] https://www.imdb.com/title/tt2234155/
4 months in prison for a VP of a tech company is not the same as 4 months for poverty-stricken career thief. It's rather absurd to mention this, but the VP has a lot more to lose; it could potentially ruin his entire life.
Towards Pandas 1.0 [video]
Presumably people pay for this when nobody else can provide the coverage they need?

We have a winner!

Speaking as someone who has to regularly do development work from a solar+Jeep-battery-powered satellite internet connection, the more companies that put birds in the air, the better it is for me.

Unfortunately, since startup costs as so high, what little increased competition there is isn't really dropping the price/megabyte ratio.

Save me, Elon Musk!
> There are some pretty nasty workarounds being used to avoid zipper noise when you adjust a control parameter

Workarounds, sure, but I wouldn't call it a nasty hack to simply interpolate between the discrete MIDI steps.

> There are various hacks to send 14-bit control change messages

NRPN is part of the standard and allows 14-bit control messages, so no hacking required.

> MIDI is also built around the western scale, with no real accommodation for other tuning systems.

There's the MIDI Tuning Standard since 1992, so there is a standardized accommodation for other tuning systems, and a bunch of synthesizers that implement it. Just not part of the MIDI 1.0 standard itself.

> OpenSoundControl addressed these issues and more besides, but it lacks widespread support because it was developed unilaterally rather than as an industry-wide collaboration.

IMO OSC probably lacks widespread support exactly because it doesn't specifically address most of these things. It's a protocol for sending timestamped and namespaced data over a network, and anything much more specific than that is just a matter of ad-hoc convention. It solves getting high precision data to devices in a timely manner, but it doesn't address the issue of getting a client to play a note.

In general I think that MIDI 1.0 just being tolerated is a great way to summarize the situation, and I'm glad that actual MIDI 2.0 implementations are seemingly around the corner.
Oracle's practiced the same policy with VirtualBox distributions and that's been fine because they signed packages. VideoLAN signs their packages too. It seems to be a common practice for a highly loaded services to outsource as many cryptography to clients as possible. I think for the same reasons Google dropped CSRF tokens for their api in favor of different security measures.
2019 was the first year we've had copyrights expire in a very long time. Everybody assumed that Disney et al would push through another extension, but they didn't even try because they knew the opposition would be too loud.
Some of it is probably because it's something productive to do. Say you are Michael Dell and already have tens of billions of dollars. What do you do with your time? Sit around and read?

A huge part of the economy of Austin is Dell and I am sure he likes being part of the action and an engine for the local economy and his employees.
Those and Take Command for me. (-:
lol ... your comment made my day.

... `with a layer` ... rofl
I know this is not a popular opinion but I feel that atom never had the right priorities for a project.

A text editor’s primary goal is to be fast and responsive.

Atom uses a rendering layer that makes no sense in the context of a text editor.

Using a DOM introduces all this cruft that takes away from actually editing text files.
This game's gonna be on the news for racism LOL
Detailed study of dusty red rocks is all fine and dandy, but I don't think anyone is clamoring to land a man on Mars for #ScienceGoals. The most inspiring space achievements have all been trailblazing, and visually iconic. Think of Earthrise from Apollo 8, first Man on the Moon photo from Apollo 11, the lunar rover, the Blue Marble, the Space Shuttle itself, images from Hubble, landing 2 SpaceX rocket boosters at the same time etc. The Viking landings on Mars count too as well as the first rovers, but we're far into diminishing returns territory at this point.

Given the reality of a limited budget, I'd prefer to see those resources spent towards doing something new, more challenging, and more interesting; such as landing on the moons of Jupiter and Saturn (or even a more durable modern lander/drone on Venus). Also I think there is plenty of science to be had on a geologically active moon with a significant atmosphere.
I don't think Mueller breaks his silence for the first time in 2 years to comment on a news story, just to adjust some marginal details.
IBM survived their instrumental role in Nazi Germany's war machine. They'll survive this.

Corporate crime seems to have become a slap-on-the-wrist offense in the US.
There was a neat twitter thread about this here:
https://twitter.com/agl__/status/1085648851594137610

The tldr is:

- BoringSSL supports an option called EqualPreferenceGroups. This lets you create groups of ciphers (say, AES GCM for desktop computers and some ChaCha option for mobile devices), and the server will select the client's preferred cipher from the server's 1st preferred group, then the 2nd group, and so on. This lets you get the best of both worlds.

- OpenSSL felt this was a bit too complicated so they added a `SSL_OP_PRIORITIZE_CHACHA_FOR_MOBILE` option to handle the common case. The way it works is: if and only if the client specifies ChaCha as their first preference, and server cipher priority is used, and the server specifies SSL_OP_PRIORITIZE_CHACHA_FOR_MOBILE, then reprioritize ChaCha above everything else.
It's already being done. Since 1955 in submarines. Since 1959 in ice breakers. Since 1962 in commercial shipping.

https://en.wikipedia.org/wiki/Nuclear_marine_propulsion
Ask HN: Improving the world as a software developer
In my day job I’m a web developer who has spent the best part of the last 10 years writing software to help sell tickets to arts venues and extract as much money from the customer as possible, it’s not a noble way to earn money but it pays the bills.

I recently started wondering whether I could use my programming knowledge and experience for something better, something other than trying to extract money from rich arts lovers. For the moment I’m stuck at that job but it got me wondering if there are open source projects for things that actually help people. I stumbled on https://hollieguard.com (sadly not open source) recently and it was a reminder that as software developers we have the ability to make real, positive, differences to people’s lives. I’m just not sure where to start.
"If it was impossible to contact a politician"

this is why we should be voting on ideas and not on politicians. my opinions don't accept bribes for their new garage doors...
Coincidentally, there was a post yesterday on HN about how to communicate to developers. Sounds like they didn't read it.

https://www.cryptologie.net/article/466/developers-are-not-i...
For merges and other finicky git actions I’ve been increasingly turning to Atom instead of the commandline. I like how it auto-formats my commit messages to line wrap and how it makes highlighting merge conflicts easy.

For everything else these days I use VSCode.
My name is Sina Booeshaghi a second year PhD student at Caltech and I built and designed the poseidon system (with the help of Eduardo Beltrame, Jase Gehring, Dylan Bannon, and Lior Pachter) in the Pachter Lab.

If you have any questions I'm happy to answer them!
> Had Dell gradually bought SP500 index over a year, the effect on price would have been minimal.

But this is the whole point: you need to be careful when investing this kind of sum, because you may end up negatively impacting the market.

It's all about scale.
I think a mixture. Coining the term “Ban Scrum”. Which is a mixture of KANBAN and scrum sprints. Where the sprint is not over until an identified set of tasks/stories are completed. The truth about software development is, it takes as long as it takes. But you don’t have infinite time. So digest what needs done, carve up/reduce into the smallest workable step/task, group like things into sprints. Work those sprints until complete. This also allows for larger teams to work more sprints concurrently by dividing the dev teams up into smaller unit teams. Then having a single KANBAN board for management to watch progress. While also allowing for continuous development and rolling releases, eliminating the artificial deadline of the traditional scrum sprint and resulting crunch of code reviews a day or so before the end of sprint cycle.

Ritual meetings are similar, but there is never a end of sprint meeting/next sprint planning session. Rather a weekly sync up to talk about what’s working and what’s not, what can we do better. Then weekly backlog grooming to identify and group future sprints to get them ready to be started, when it is natural to start that work. Then of course daily standup to communicate roadblocks to managers so they are aware and can do their job to unblock the road, and also to promote general awareness to of other team members of what each other are doing.
The issue says that the cryptographic checking is broken, and accepts new public keys as authoritative in the presence of MITM.

Which makes the report totally valid, if true.
>the filter doesn't operate on single frames, but considers several previous frames in order to maintain temporal cohesion and to improve quality.

Do you happen to know how bad are the artifacts? I remember temporal antialiasing produced very good results with static scenes, but fell apart on dynamic ones.
There are more facts in a day than would fit in a million newspapers. You have to make choices. Which news will you report? Who will you interview, and which sources will you consult? Which ones do you even have access to? Which ones will you still have once you publish this week's story?

Impartiality in journalism is a myth invented by those propping up the status quo. The most you can be is honest.
Virtual machines running Linux have actually become quite popular in the past decade. ;)

It's not the research project's fault that a different mechanism is used in the public cloud.

As for microkernels, they are actually used, but not in mainstream server systems.
I don't know about the rest of the world, but the American public has been heavily misinformed on myriad subjects. My European parents were constantly baffled by how unexpectedly bad it was, with my father often wondering aloud how they won the war.

Raising a family here isn't ideal, but the economy is strong arguably because of the poorly-informed, convenient-entertainment obsessed, consumer society. It's a great place to start businesses and/or earn money. This is what attracted my parents to leave Europe, but they were very young and hadn't predicted how potentially bad the culture and education would be, and seemed to regret not raising us kids back in the motherland.
Transport security would help because according to a commenter the payload validation is broken.
Well if we're talking about the possibility of an offline attack against a password database that's a bit different. The standards for a good password are higher for that attack.

But anyway if you pick a password from a list of 20 trillion where the offline attacker knows the list, it doesn't actually help them much because a single selection from 20 trillion options has 44 bits of entropy.

Passwords that users choose typically have less entropy than that afaik
It means it has a large processor that can run an RTOS. It does not automatically mean it has an RTOS.

I would be surprised if the faster bus and memory controllers had it (because of latency problems). I would expect something like it on a USB controller, GPU, network or disk interface. I really have no idea what to expect from a DMA controller.
They are signed with 1024bit DSA with SHA1, every piece of that combination is considered obsolete cryptography nowadays. Even the NIST dictates you shouldn't sign anything new with that.

Signing also doesn't stop serving old-and-vunerable-versions as the latest which is in my opinion a vunerability. Apt also has that vulnerability.
Towards a hands-free query optimizer through deep learning
Well, it's not the first time he has been controversial, e.g:

http://cdm.link/2011/01/as-apple-pulls-gpl-licensed-vlc-the-...

https://www.reddit.com/r/apple/comments/h6jmp/r%C3%A9mi_deni...

https://arstechnica.com/civis/viewtopic.php?f=14&t=1133166
Yeah, i was trying to edit my comment with variations of:

1) PS ...{text} and would loathe the open source model for a second.

2) PS2. Some sign of respect to developers would be nice (y)

3) ...

But haven't found a good one. Your comment is better

:)
Mirror as the bugtracker seems to be taking a beating from the post: https://archive.fo/Dmtwo
It looks like their crypto validation is busted, according to a commenter.
I always thought it's more about caching
https://web.archive.org/web/20190119162021/https://trac.vide...

The issue appears to be that while VLC does in fact verify the authenticity of a downloaded update, it also allows it to be signed with a key that it doesn't yet know, in which case it will retrieve this key from the VLC servers _via HTTP_. If that's true, it is a perfectly valid issue that needs to be resolved.

However the tone of the original ticket is a nasty one, which seems to have resonated with the VLC dev in a wrong way.