skysight-inc/HackerNews huggingface dataset:
Correct, Rasa is text-only. Core purpose of Rasa NLU (https://github.com/RasaHQ/rasa_nlu) is user text to intent translation (with entity extraction); for Rasa Core it is mapping user intent to assistant response . Speech-to-text is one layer above these and Rasa doesn't handle it.

The easiest way to use it with voice is to connect it to a platform that supports voice input.
BlackBerry, Canadian government pursue autonomous vehicle software
That article isn't about health insurance companies.
I am familiar with the concept of a loss leader, but that has nothing to do with what was happening here. Giving someone a discount on taxes doesn’t mean they don’t pay taxes, or, as your original comment and the tweet you linked to implied, that they were simply handing Amazon $3 billion in cash that was sitting in the bank and can now be diverted to random government projects designed to invent jobs. The $3 billion never existed; it was a long-term estimate of Amazon’s potential tax savings under the deal.

Anyway, it’s a moot point. They aren’t going there, and either are the jobs and (discounted) tax revenue that they would have brought with them. If you consider that a win, then you have indeed “won”.
If you struck down the rules about providing different prices based on payment type and did a 10% discount by paying in cash, you'd be surprised how quickly things would change.
That's a security failing - you shouldn't let the website user know that a given account exists.

The right way to do this is have a log in form (one or two pages - doesn't matter) and a separate create account form. You can try to log into a non-existant account, which will fail in exactly the same way as a wrong password. You can try to create an already existing account, which will result in exactly the same behaviour to the webpage user as creating a non-existing account - a page saying "An email has been sent to the email address <foo>".
> The virtualized nature of cloud hosting makes benchmarking over a period of time vital to getting the full picture.

It's so nice to see a benchmark of VPSs that takes this into account.
Nah. I use 8.8.8.8 at home simply because it was a long time since providers in the UK didn’t try to intercept the failed DNS queries.

On top of that, Virgin Media resolver managed to go offline particularly regularly.

So here we are: what user sees is that a particular device doesn’t work, while others do. So they obviously blame the ones adhering to standards.
Employees are not property.
Show HN: Purview – A server-side component framework
Sticky Add to Cart Button Example: Actual AB Test Results
It doesn't bother me because it's a Chromecast, an appliance I don't want or need. If I needed something similar, I could get it from other manufacturers.
My list:

1. Don’t have your website take a longer password than your mobile app and then not let correct passwords login inexplicably

2. Don’t break completely on valid passwords because there’s a char you didn’t expect, testing is a good thing in security critical code.

3. Don’t mess up MFA if you’re a financial app logging into a 3rd party bank for a user by trying to replay a token code

4. If you login to any 3rd party services on behalf of a user, support a method that doesn’t require asking the users for their password such as OAuth2
Who do you think has the most influence on the regulations?

The powerful or the powerless?
What would you be trying to "fix" here? More often than not, the first result for a given query on most common search engines is the correct, authoritative source for something. If I search for a company, the company's official website is nearly always the first real result.

The only thing I think is really wrong with search (and all major search engines right now are guilty of this) is making paid ads look very similar to real results, which makes it possible to pay to hijack a result.
Its a great example of how just building more housing isn't a complete solution, because all builders are going to target the top of the market if they at all can.
Print Thyself
The approach that Altavista took didn't scale with web growth. It was based on the idea of database searching, where the engine was supposed to return all pages that matched a query. This meant that you couldn't expect to type a generic term and get a useful result; you'd be overwhelmed with random pages. You could find pages that contained an exact phrase, and this could be useful for finding out what some error message means. But as the web exploded in size, the results you could easily get from Altavista got worse and worse; you could fight by adding more and more qualifiers to filter out what you didn't want, but junk results were mixed in with good results.

That's why Yahoo had a business: search engines were of limited use pre-Google, so you needed a hand-curated list to find the good stuff on the web.

Google was first to figure out an effective algorithm to rank results by quality. People immediately stepped in to try to game the system with link farms, junk tags and the like, but even so, it was a revolution.
What no one will tell you about data science job applications
Value tuples are good too. Somehow I don't seem to get too friendly with the syntax but they are very useful.
This sounds a lot like COM, which is one of my least favorite features of Windows programming.
This change was definitely inspired by F# (or ML ultimately). It's far from the first feature to be brought over. Look at async/await, usable tuples, lambda functions, range syntax, etc.
The paper states: confidentiality, integrity, availability
Taylor Swift showed us the scary future of facial recognition
O yeah, the early days of online translation were . . . interesting. Especially fun was bidirectional translation (i.e., english -> german -> english, etc.).
Could web developers and password manager developers get together and develop a standard web API for authenticating with a website?

I want to specify a URL and have my password manager run a behind-the-scenes conversation with the website and, ultimately, drop me into the home page in a logged-in state.
For what it's worth I don't think that's paranoid at all. You don't want to deal with Google, so you don't introduce them to your network, that's reasonable.

What is paranoid IMO is some commenters' (as well as seemingly Paul Vixie's) implication that Google does this trick with the Chromecast to better spy on people, which completely goes against Occam's Razor.
3264 conics tangent to five conics
I believe if you own a "business" that constantly loses money year-after-year, the IRS can classify it as a hobby and not tax-deductible. Though maybe that's why the yacht ownership turn-over is high; they sell off their "unprofitable business" as to not incure the tax liability of a hobby.
That is reverse, yes.

I think your original comment was unclear, if not misstated. I had read the "like" in "[a]rchitect your microservices like your org chart" as something like "to resemble", and the rest of the comment seems to follow just fine. Other readings seem possible but I don't see one that gives the sense you want without what feels like some serious contortion.

In any case, no worries, we're clearly on the same page now - just trying to figure out what went wrong.
> However, the password fields could have been present and hidden in the same page supporting both password managers and avoiding a page transition

But then you run the risk of your password of being submitted to the wrong portal no?

> And also the hundred other sites that don't need federated flows but think they need to copy this feature as well

Very true. It seems to be becoming increasingly prevalent :(
Ask HN: Ozone food sterilizer
Hi, recently I've heard about ozone food sterilizer. I'm quite skeptical about it since ozone is toxic for people. Do you know any scientific research regarding influence of that technology on food as well as on human's body (direct of using sterilizer and eating sterilized food)?
How to Work with Creatives Towards Business Goals – Pretty Is for Concepts
One of these days someone will "solve" login and we won't need all this. Today is not that day.
> You can write C# in too many forms and I don't believe that's really good.

Why not? And what, exactly, defines "too many"?
If you don't write tests, you are a bad developer
This features graphical and musical artists performing "live coding" sets. This concept is new to me, curious if any HN'ers here have experimented with any live coding techniques or groups?
> Maybe the designer thinks that is a good reduction in friction.

Maybe the designer should use the site as many of their users use it, and realize the inconvenience it causes people (broken password managers, bad browser experience in general, etc).
> Curious to know if there are downsides to this (performance is an obvious one) or whether you're weakening the stronger hash by hashing a weaker one?

You're weakening the stronger hash by hashing the weaker one. The two main problems of MD5 are entropy (128-bit maximum) and collisions (because of lack of entropy).

By always hashing to MD5, you are losing the entropy of the stronger hashing algorithm.
Your list is more valuable than OP's.

I find 1Password is generally good at working with "clever" login forms.
My first job in high school was adapting altavista into an interface for an internal government parts procurement tool (thrilling, right?). The Boolean operators let us use altavista kind of like a database layer: we offered a cartoony interface that build queries behind the scenes that hit existing parts specification documents - eliminating a giant data structuring and reentry problem.

It was my first exposure to how much work could be saved by working efficiently with unstructured data! Of course, Google took this to a whole other level, realizing that for common users queries themselves should be treated as unstructured data! Learning as much as you can from how people already express themselves is one way to write the future, it turns out...
Putting people in prison is a shitty thing too, but it's still better to do it to people who are actually a menace to society. Something doesn't have to be good in an absolute sense to be better (than an alternative) in a regular one. Even if we're just dealing with statistical probabilities, hustling the rich seems less egregious than hustling the poor. Would you have reacted so strongly if the same sentiment had been expressed as "preying on the poor is especially bad"?
> Could web developers and password manager developers get together and develop a standard web API for authenticating with a website?

There is, it's called HTTP basic.

But I guess you're meaning more form based login? Well most password boxes are fairly obvious from an HTML point of view already.
This. Though I would slightly amend this with "the threat of violence" vs. simply "aggression." The problem with aggression sans any violence is that those being aggressed against will eventually call your bluff. The threat of violence requires the existence of violence sometimes occurring to make that threat real.
My Roku does (almost) the same thing.
It defaults to 8.8.8.8 to attempt to block dns proxies, but if you block 8.8.8.8 on your router, unlike the Chromecast, it will actually use the DNS server my router provides.
This feature requires consent before it does anything at all, similar to location requests.
> Trade with China is as old as the republic itself, blossoming initially out of Salem, Massachusetts, and then later usurped by New York–based merchants.

No Transcontinental Railroad, no West Coast ports, no Panama Canal - so did they sail from Boston or New York, along the length of the Americas, through the Strait of Magellan, and then the long way across the Pacific to China? That's quite a trip. Or was there a portage in Central America somewhere?

The wikipedia article on US - China trade in the era prior to that of the clippers is rather interesting:

https://en.wikipedia.org/wiki/Old_China_Trade

I had no idea that America bought opium from Turkey, or that ginseng was grown in Appalachia for export to China in the early 19th century!
Study: Organic food, does it make a difference?
Pretty sure the 20% interest goes to the bank and the 3% fee goes to the processor. They’re not the same entity.
It might be to accommodate business diners and really rich people who have those black cards. I've personally never had an Amex except for corporate cards.
If I came across as harshly critical I apologise, that was not my intention.

I meant to say that the why is to treat your data like a normalized database, which provides those properties you list at the bottom.

In fact my example demonstrates at least the following properties:

> (without type issues or hot code becoming polymorphic), that the data you frequently iterate over can be stored in friendly contiguous chunks

My example was not to show that you can loop over every entity. It was to show how easy it is to loop over only what you care about without doing extraneous work, by iterating over a contiguous chunk of exactly what you need to update.

I was going to add an example of creating a regenerating health component and system, but I didn't for a couple of reasons. One, it was already past bedtime. Two, I would have compared it against adding a tick handler and so it would need to be a larger example with more explanation of the way the imagined engine works. The post was already pretty long in the first place so I decided against it.
Does Google make the DNS requirement clear pre-purchase, or accept returns over this issue?

This isn't the same as coming into your home and forcing you to use Public DNS, sure, but I think people are justified in being annoyed if they buy something, then find an arbitrary and unannounced dependency in it.

(I can't find any mention of the DNS requirement by Google, just extensive threads elsewhere about working around the problems it's caused people. It looks like there is a 15-day return window for working devices. That's something, but if I stopped allowing Public DNS on day 16 and my device stopped working, I'd hardly feel like I had fair notice unless it was explicit somewhere in the instructions.)
I agree that Spectre is somewhat overblown. It's something that we should be working on mitigating, to be sure, but it is very difficult to exploit. Memory safety issues, in practice, are significantly easier to find, so that's what attackers go for. We're not in a "drop everything, all hands on deck" situation.
Hearsay from folks I know at FB - you use your personal account at work. There's no work account/personal account split.
... aaaaand blockchain just won
You must have lead a sheltered life if you think this is "pretty rude". Its blunt and to the point I will give you but really
Framed a bit too much in terms of men v. women, but by the end I liked the article (or rant). In particular:

> This is my attempt to break the spell, I guess. Repeat after me: calling something logic doesn’t make it so. Calling someone rational doesn’t make it so. Opinions from Youtube men are not facts. Getting mad about philosophers you haven’t read isn’t reason.

This is why Spock always made me cringe. He would declare something "logical" when the subject quickly bottomed out into unsupported speculative assertions. The logic part would be very, very small, and the rest would be how much you trusted your instincts about what you can't verify.

But Spock would turn into a boring character if every time he said "your conclusion is logical if we grant the following" and then he would list all of the things we think we know but don't really have any clue about in this episode.
Based on some really outstanding examples I've seen in the wild, the solution is here, it's just not evenly distributed yet.
I would be delighted if less than half of my phone calls were telemarketing spam. My ratio is north of 80%.
Generating slugs automatically in Django without packages – Two approaches
I prefer that honestly, i feel like im getting a discount for paying in cash
I think this falls under the principle of 'good design is as little design as possible'.
That echos my experience really closely. I spent almost 4 years traveling twice per month with each trip lasting between 3-6 days, and each day, due to work schedules, being 12+ hours long. At the end of those 4 years, I couldn't tell you anything about the actual cities I visited, but I can still describe the intricate details of the hotel/conference centers in which I basically lived.
‘Your margin is my opportunity’ -someone who has a lot of money
1Password handles this just fine. You just have to hit the button twice.
Is it a cosmic coincidence that these two large competitors are going to increase fees at exactly the same time?
How is it legal for them both to do it at the same time?
Cash free societies?
Ditto for a standard API for updates. That way you could have your password manager automatically rotate your password, either on a schedule or in response to a known breach. Hell we should have an API or machine readable stream for breaches too.
I agree with a lot of this but magic links are great and I love them. Don't take away my magic login emails.
Organic diet significantly reduces urinary pesticide levels in children, adults
Would you append the & to the fragment, or to the query? If to the fragment couldn’t that affect routing for SPAs?

To be clear, I agree that this format is exceedingly unlikely to collide with real fragments, but still seems like there is a safer approach.
So it's false consciousness, then? You know what's best for them?
An accounting with that accuracy just isn't possible. The OP was touching on the vast and varied social costs that are leveraged to build value for the shareholders.
Has to be if there's no documented evidence otherwise, right?
Yep, I am sure that this will be the turning point for "blockchain" and "cryptocurrency" and "machine learning" and "artificial intelligence" and "self-driving cars." /s
There was this HN post a bit ago:

Relevant Link: https://wicg.github.io/change-password-url/index.html

HN comments: https://news.ycombinator.com/item?id=18618193
But how many million tax-free hôtel and airline points did you accumulate?
this is awesome great work Mubs!
Unity give away a complete 6DOF FPS with multiplayer.

All source and assets included

https://unity.com/fps-sample
But the employer was monitoring the employee's activities on company-owned infrastructure... (I think the messaging is a different story than the location data)
It’s probably the “safety check” feature here: https://en.m.wikipedia.org/wiki/Workplace_by_Facebook#Workpl...
> Hustling is a shitty activity that isn't made better by the status of the victim.

But it is made worse by the status of the victims.

Also, I'd say that victim-status is the variable that's responsible for most (but certainly not all) of the "shittiness" of the activity.
Whether a company pays a dividend or not has no relevance to whether profit should matter to an investor. I'm not sure what you're trying to make a point about here. Additionally, I'm not sure what your point about "secondary market holders" vs "investors" is about either. Would you mind clarifying these?
"for all intents and purposes"
Hello, a little self promotion, you can see it our experiment with some deep neural networks doing real-time audio processing in the browser, using tensorflow.js

http://gistnoesis.github.io/

If you want to see how it's done it's shared source :
https://github.com/GistNoesis/Wisteria/

Thanks
> "The Origin of Consciousness and the Breakdown of the Bicameral Mind"

This is known to be bogus by most experts, though:

https://en.wikipedia.org/wiki/Bicameralism_(psychology)

> Jaynes's hypothesis remains controversial. The primary scientific criticism has been that the conclusions drawn by Jaynes had no basis in neuropsychiatric fact.[14]
HipChat is dead
They shut off service this morning. Even though we’ve all moved on to Slack or Mattermost, let’s all reflect on their legacy.
They have survived the internet revolution where other businesses have been disrupted. No startup is even close to chipping away their collective control. So they are empowered to do as they please.
I Quit Apple, Microsoft, Google, Facebook, and Amazon
I've followed a few directly, and as a web developer I generally have my ear to the ground for these things. It's possible this feature was discussed, but the article made it sound like it wasn't in a formal capacity, and I know for a fact that Google has forced things through in the past, even when there's been active protest from people at Mozilla. And that was while Microsoft still had their own engines.
> Statically linking the OS is quite common nowadays, better known as containerization.

Shipping prepackaged images with self-supplied libraries is functionally equivalent to shipping a blob linked statically. But the implementation is different, in a container, each program still loads the self-supplied libraries using the loader, and this difference matters. Only dynamically-loaded libraries with PIE executables can enjoy the fully benefit of Address Space Layout Randomization. But statically-linked executables cannot, and they leave fixed offsets that can be exploited directly by an attacker.

> Security measures like load address randomization cannot be used. With statically linked applications, only the stack and heap address can be randomized. All text has a fixed address in all invocations. With dynamically linked applications, the kernel has the ability to load all DSOs at arbitrary addresses, independent from each other. In case the application is built as a position independent executable (PIE) even this code can be loaded at random addresses. Fixed addresses (or even only fixed offsets) are the dreams of attackers. And no, it is not possible in general to generate PIEs with static linking. On IA-32 it is possible to use code compiled without -fpic and -fpie in PIEs (although with a cost) but this is not true for other architectures, including x86-64.

Unless we stop writing major programs in C one day, and/or formally verify all programs in the system and provide a high-assurance system that most people would use, using exploit mitigation techniques is still the last line of defense to limit the damage created by a memory-safety bug.

After thinking for a while, I think should change my stance, and support containerized applications such as Docker or Flatpak despite it's an ugly blob. A buggy and ugly container with prepacked applications linked dynamically to vulnerable blob with PIE and ASLR, is less of a evil than a buggy and ugly executable, linked statically to vulnerable blob with fixed addresses.
I'm not arguing with that, but lots of us can and do run our own DNS for various reasons, it should respect that, or provide a power-user way to override the default DNS.

By all means offer fall-backs to Google DNS if it's not behaving correctly, for the reason you mention.

I've found it's also, quite poorly implemented, particular on CC Audios, I had an instance last year where my internet connection went down at my ISP, my DNS saw 10s of thousands of DNS queries per-device from each of my Chromecast Audio devices in the time I was out at work. It was almost 40k DNS queries in ~12 hours, per device.

Almost everything else on my network behaved normally, but the Google devices just went mental spamming the network with insane numbers of impossible requests, back-offs are a thing, they should use them.
another excellent course, congrats to designcode team...and nice illustrations!
I thought most of the oversupply was in the “ghost cities” that were being built to boost GDP. I’d imagine that in most of the large Chinese cities housing would be pricy just due to the demand side of things. Huge amounts of people have migrated to the cities in the last 20 years.
This does not contribute to discussion.
Perhaps he means something like Python's motto of "There should be one--and preferably only one--obvious way to do it."

https://www.python.org/dev/peps/pep-0020/