skysight-inc/HackerNews huggingface dataset:
With the definition from edelans, attacks can be made on Ledger devices (or any device, for that matter) by watching how the hardware behaves as it does its thing.

Here's a recent proof of concept: https://www.coindesk.com/security-researchers-break-ledger-w.... TLDR, entering your pin # on a device results in significant enough current changes that they can be picked up, turned into a training set, and your pin can be worked out.

This repo provides a bunch of utils and examples to facilitate the testing and analysis of such attacks.
I grew up in the midwest. Most of the people I know are in Iowa, some in Illinois and Missouri. Saving up a down-payment is a significant obstacle, I think. I know that in some areas, you can get a rural development loan that requires a much smaller downpayment, but my friends don't want to live in the boonies and it would lead to a pretty miserable commute for them.
Go on a digital spirit quest with Zillow to towns and cities where you have never been. Be prepared to be amazed!
To use your analogy:

A good saw is spec'ed by a woodworker and made by a metalworker.

A great saw is made by a metalworker who is also a woodworker. This latter bit is true for the Python community, at least for the people and companies who write DS/ML tooling in Python. Excepting hobbyist/academic tooling, Python has some really high-quality DS/ML tooling built by people who know software and the problem domain. Julia seems to following the same path though it's not as far along as Python, but from what I've seen, Julia folks are numerical computation folks who also really understand software.

At present, Swift is like a metalworker who's seen saws used by woodworkers but isn't really into woodworking (yet) and doesn't have a whole lot of experience with the woodworking craft.
I think this is what krypt.co does, and they have an extension for Firefox (I use it daily). It's pretty neat.

The crux of this post looks to be "this is how I built a thing," which is also pretty neat.
There are a lot of skills in that list that I don't find essential, and a number that my personal list would add, but it's still one of my favorite quotes of all time. I might even call it the motto of my life.
This is a combination of thoughtful takes on being a school bus driver, quite an interesting topic in itself (how do you deal with the kids, traffic, etc.) and reinventing yourself in middle age in a job far afield.

It also contains reminiscence and opinions of Salaita on the controversy that cost him his promised job.

This second topic is a complicated one, I suggest before being quick to to decide that he was booted off wrongly for a "thought crime" or rightly because he's an ardent anti-semite one should get familiar with the controversy. At a high-level you can read:

* The Wikipedia article on the controversy: https://en.wikipedia.org/wiki/Steven_Salaita_controversy
* The NYT article from 2014: https://www.nytimes.com/2014/09/13/world/middleeast/professors-angry-tweets-on-gaza-cost-him-a-job.html
* Chicago Tribune article from 2017: https://www.chicagotribune.com/news/opinion/commentary/ct-steve-salaita-academia-exit-perspec-0728-jm-20170727-story.html

From there on, if the general topic piques your interest, you can branch off on one or many of the following topics, among others:

* Role of Hamas and other organizations in Middle East
* What is free speech - start with pg's essay : http://www.paulgraham.com/say.html
* Role of twitter (and other social media in polarization of contemporary societies): E.g. is this a new thing or does it have analogues in history, e.g. French revolutionary pamphlets (if you're in Chicago, you can see the collection in Newberry https://www.newberry.org/french-pamphlets)
* Jews and the Civil Right Movement in the US, how these two got disconnected, you can start with https://en.wikipedia.org/wiki/African_American%E2%80%93Jewish_relations, then check out https://en.wikipedia.org/wiki/New_York_City_teachers%27_strike_of_1968 and the book *Ungovernable City* which covers the strike in detail
* The relationship between the Left and Jewish Community: Whoa, this is a huge topic, New Yorker just recently covered it https://www.newyorker.com/news/the-new-yorker-interview/looking-at-anti-semitism-on-the-left-and-the-right-an-interview-with-deborah-e-lipstadt
* Is it all about the Benjamins? Just this month US Congresswoman Ilhan Omar had to publicly apologize for *her* tweets https://www.theguardian.com/us-news/2019/feb/11/ilhan-omar-antisemitic-tweets-house-democrats-apology
I believe the cloud computing vision came from Andy Jassy. In fact he wrote the original six pager for AWS.

Equally impressive since Jassy isn't really a technologist either.
A Few Things to Consider Before Localising Your Application
I guess this is what happens when everyone gets a trophy.
Physicality is an amazing feeling. I think it's why so many programmers get into making stuff. When you usually spend weeks and weeks moving bits around, building even the smallest real thing can be immensely satisfying.
Calibre with Apprentice Alf does a great, seamless job of DRM removal. Works for everything except iBooks, I think.
Ugh. I don't ever want to work for a company where my time tracking has to be so fine grained that I have to log bathroom breaks. Holy shit that sounds like a nightmare!
Not everyone, if put in Bill Gates' shoes, would have been able to take advantage of such an opportunity. Can you say that if you were there, you'd have done the same? And executed as well afterward, into a multi-billion dollar company?
Ask HN: Would You Use a Priceline for Medical Diagnostic Services?
The price varies considerable between offices and outpatient facilities (e.g., $100 - $3000 for the same service, depending on your insurance) and there are likely facilities with underutilized staff and equipment. Diagnostic services, such as X-Rays, MRIs, endoscopies, are low risk so patients would be willing to price shop for these services. I'd appreciate any feedback!
https://anthonyoconnor.ca - Mainly just for my resume and a few blog posts at https://anthonyoconnor.ca/blog
If your only metric is installations I'd say go is doing quite well at least.
Since my Shazam accuracy is also terrible, I'll give it a try. I was at a show this weekend and Shazam couldn't find musics played from its own author. In my experience it just work well when matching an official recording. Maybe it is better for anglo-american music.
> ...because no case has ever been so righteously pursued, with such a vigorous degree of righteous indignation, that an innocent person was ever thrown in prison[0], yeah?

Yes, wrongful arrest and conviction happen all the times. And I definitely don't want it to happen to me because my phone was near a crime scene.

However, I don't believe that the risk of wrongful accusation is a good argument against surveillance.

That's because while surveillance can make you a suspect, it can just as easily clear you. Imagine that there are two suspects for a crime, you and someone else. Turns out they detected the other guy cell phone close to the crime scene, arrested him, and found him guilty. Surveillance saved you from a wrongful accusation, even if you aren't aware of it.

There is a bias here, a bit like with vaccines. A vaccine is much more likely to save you from a deadly infection than to kill you because of some nasty side effect. But you only see the side effects, you can't see the sickness that didn't happen.

Note that I am not saying mass surveillance is a good thing (vaccines certainly are). Just that the "wrongful accusation" argument is more in favor of mass surveillance than going against it.
Have had many issues with USB2 RME pro audio interfaces and recent Macs, the most serious of which RME was able to overcome (for us) in the v3.13 driver.

More of a long term problem is the fact that USB C/TB3 is a totally unsuitable connector for professional use. It's far too prone to coming out of the port through lack of locking mechanism, insufficient friction. On MBPs the ports also wear very quickly.
I respect your superior expertise, of course, but looking through another site that has done systematic teardowns and measurements (https://lygte-info.dk/info/ChargerIndex%20UK.html), it appears to me that this might be too categorical a statement. While counterfeit chargers almost always seem to be dangerous, there seem to be some Chinese brands which produce quite respectable chargers, while still being fairly inexpensive.
Blockchain Startup Takes on Crowdfunding Sites to Cut Number of Failed Projects
The same extrapolations happen with population density. People in LA and New York think the world is overpopulated and everyone is on top of each other. They don't realize that 45 minutes north east of San Francisco there are no houses, no street lights and no cell phone reception.
tl;dr:
- the author is a photographer/artist running a small business

- for years he saw social media as a "necessary evil" to gain followers, promote his brand, and get clients

- he now believes success in his industry depends instead on building a close network, doing good work for clients, and growing by word of mouth. A photographer friend of his has no website and most people don't know who he is, but his business is thriving.

- he also felt two negative effects of social media:
1) he compromised his art to appeal to whatever was shared/liked the most (e.g. posting more images with movement and with a red palette, even if that wasn't what he artistically wanted)
2) he read too much into whether his friends liked or followed/unfollowed him on social media

- he decided to take a plunge and delete his social media to focus on building his business the organic way, and rediscovering his art

==

This tl;dr was brought to you by Shortform, an upcoming product summarizing the best content in books and articles.

Check it out at https://www.shortform.io
Use a Neutral Background Color on Your Website: Omit Superfluous Background Images
In the EU, you don't have to find a farmer's market to get fresh produce.
Dialect Dissection: Indie Girl Voice
Google Launches '.dev' Domain in (Expensive) Early Access Program
Congrats for the launch! I tried a large number of portfolio management options and end up using gSheet, listing some features most solutions missed:

1. Slot based positions instead of ticker based.

2. Cash management.

3. Performance tracking based on actual asset rather than latest asset.
The initial $11k premium threw me off at first, but if you click the (not immediately obvious) “Early Access” button you can get the full EAP pricing chart, or here’s a direct link: https://support.google.com/domains/answer/9232417?hl=en#inva...

To save some clicks (in addition to the $12/year):

Feb 19: $11.5k

Feb 20: $3.5k

Feb 21: $1150

Feb 22-24: $350

Feb 25-27: $125

After the 27th you only have to pay the normal $12/year rate.
>Most people don't have a problem acknowledging individual privileges they have been afforded. People object to broad assumptions made on their behalf by using their race or gender as a proxy.

You're painting one side as, "they don't have a problem with acknowledging privilege", and the other side as "they don't even acknowledge merit".

For every millennial who believes that racial privilege is 100% responsible for success, I'll show you a baby boomer who believes that they are 100% responsible for their own success and have had zero privileges. You'll find some of them arguing here right now. I've argued with many of them in the past.

In fact surveys show that there is a large chunk of the population that believes that being a white male makes it harder to succeed.

>People object to broad assumptions made on their behalf by using their race or gender as a proxy.

Privilege isn't about absolute life difficulty scale. Of course there is a given white man who has had a harder time than a given black woman.

Privilege is about relative advantages. The average white man would be less successful if he were a black woman--all else being equal.
ORM's have a big learning curve, especially troubleshooting, and tie your stack to an ORM brand. But the worth of ORM's are probably another topic.

I'd like to see a data-dictionary-driven approach where most of field info comes from a data dictionary, and only deviations need to be defined locally. (Or perhaps create and mark dummy columns in the data dictionary that are slated to be used for local customization.)

I suppose one could push a button and have static classes or definitions generated for the source code from the data-dictionary, and thus still have a statically typed system. It's still duplication of field attribute info, but at least it's systematic duplication.

I used to use systems/tools that integrated the database, business logic, and UI; and they reduced the amount of typing and code rework by a large amount. The multi-layered approach may give us cross-vendor flexibility, but at the cost of more code diddling to wire up the interfaces between all the layers. Layer independence seems to increase duplication of field-related info. Back then I could spend more time on requirements and analysis and less on code wiring and re-wiring. Now we waste too much time dealing with low-level repetitious grunt work.
I was surprised by no discussion of ordinality. Cardinality was something I also specifically expected.

Counts of things are described here, but the greeks went to great lengths with geometry to discover numbers (and even killed people who came up with irrational answers)
We have something similar here in Minnesota during the Fall: pick your own apples. You and kids walk through the orchards with a basket, gathering as you go or sometimes there's a tractor towing a wagon that will take a dozen or so people at a time out, and pick them up after their baskets are full.

Of course, it's much better when it's your friend's apple trees and they're begging you to take a few bags home before they're indundated with rotting apples :-)
But don't economies of scale still say that you can improve prices for good tasting food by scaling up from the small farms? Maybe that just gets taken to the extreme year over year when people focus on constantly increasing profit.
If you buy best sellers you cannot buy fakes. The first page full of bestsellers gives you enough choices. So do amazon search like bestselling <item>
Industrial Applications for Modbus
Confirmation bias works both ways.
> I like the idea of working with milling, threading and cutting metals as well as welding.

I do this as a part of one of my hobbies (robotics).

It's really not that fun: It's dirty, smelly, hot, and sometimes can be dangerous. You will get cut. You will get gouged. You will bleed. You will be burned. Not always, but it will happen occasionally. Ideally, that's all the worst that will happen.

I've never worked with a metal lathe; I haven't had the need to yet. But I do have access to one. That is the one of a metal shop's tools which you need to be very respectful and mindful about being around and working with. Depending on the size of the machine (the one I have access to isn't very large), it can do everything from maim you severely, to killing you - and it won't care. It'll barely even slow down.

Not trying to scare you about metal working, but realize it isn't roses, either. It can be very satisfying to make something out of metal and know you did that. But you need to understand what the price can be - even if you are careful and wearing all the necessary safety equipment.

Oh - and never wear gloves or rings (or necklaces, ties, long hair, etc) around things like mills or lathes - really bad to do should things go wrong.

But do wear heavy boots, denim jeans (and all natural fiber clothing period), and gloves (plus other PPE like goggles, face shield, etc) when grinding, cutting, or welding - sparks and molten slag/metal are not fun when they hit bare skin (or burn thru your sneakers - ask me how I know).
I loved that quote when I was a teenager, but over time I came to hate it. We can't master everything. We don't live long enough, and besides, the list of things to master grows superlinearly, which means mastering even one thing requires specialization.

One should absolutely have a diverse set of skills and interest and knowledge, but it's also important to pick one or two things to truly master.
If you buy best sellers you cannot buy fakes. The first page full of bestsellers gives you enough choices. They sell well for a reason.So do amazon search like bestselling <item>
The NYT have a team of investigative reporters who've been taking a big look at McKinsey and found something smelling off. Sort of like the New York Times and Uber (with Mike Isaac) and some of their Facebook reporting. Most newspapers will have a few investigative reporters who run series on things that are dodgy. And it's not often that it's a single thing - think about Uber's many problems (sexism, greyball, lack of executive oversight on key functions etc)

The Times actually ran an article today about the McKinsey investigation:

https://www.nytimes.com/2019/02/19/reader-center/mckinsey-he...

> We were intrigued by a company that seemed to be everywhere — and nowhere at the same time. As a private company, it had no obligation to report information to the public. And as a consulting company, it wasn’t regulated. Other types of companies, especially accounting firms and investment banks, have similar client rosters, but they are overseen by government agencies. This lack of accountability, particularly for a firm as influential as McKinsey, beckoned us to dig deeply into its conduct around the world.

> The most basic question we set out to answer was this: Did McKinsey’s pristine reputation as the foremost purveyor of “best practices” match its record? After nearly a year of reporting, we found that the answer was often no.

> That point was driven home in startling fashion when we recently reported that the Massachusetts attorney general had accused McKinsey of fanning the flames of the opioid epidemic. In legal papers, the attorney general alleged that McKinsey had instructed the maker of a powerful opioid on how to “turbocharge sales” of the drug, how to counter efforts by drug enforcement agents to reduce opioid use and how to “counter the emotional messages from mothers with teenagers that overdosed” on the drug.
There are a lot of ways to generate leads for business, and general social media shares into the ether do not tend to compare favorably to other channels. If social media is annoying or makes you contort your message, you can almost certainly just use another channel that is less annoying to reach people.
Have you spoken to your supervisor or manager about having to sit around all day?
A meta conspiracy theory!
> I did not have that option and did not get admitted to any of the famous colleges (I am discounting the constant mental tension associated with poverty here). Luckily, I have done quite well for myself

Rather than confirm the articles premise you seem to be discrediting it.
From Matt Levine of Bloomberg:

Here is a New York Times story about the “McKinsey Investment Office, or MIO Partners,” the in-house hedge fund of consulting firm McKinsey & Co., which invests employee money, including in companies that McKinsey advises. “That web of relationships underscores the unusual nature of McKinsey’s hedge fund, and the potential for undisclosed conflicts of interest between the fund’s investments and the advice the firm sells to clients,” says the Times, and I suppose there are some shady elements: When McKinsey advises on a bankruptcy, for instance, and its hedge fund owns one or another slice of the capital structure, then there’s a clear potential for conflicts of interest.

Mostly, though, it’s hard to get too worked up about this. For one thing, most of the fund’s money seems to be run by outside advisers, and even the stuff run by McKinsey employees seems to be mostly walled off from the consulting business. For another thing, the incentives are mostly good: McKinsey’s consultants are trying to make the company better, and its hedge fund is invested in the company and wants the company to get better, so there is no problem here. “The firm’s partners stood to profit from their own advice,” says the Times about McKinsey’s indirect investments in Valeant Pharmaceuticals, but why would that be bad? If they do stuff to make the stock go up, then they make money, but that is also what the company wants. (In the event, Valeant’s stock went down, which was bad for both Valeant and McKinsey.) Really companies ought to demand that their consultants buy some of their stock, so they have some skin in the game with their advice.

Of course, what would really be scandalous is if McKinsey’s hedge fund shorted companies that the firm advised, and then the consultants tried to give those companies ruinous advice. You couldn’t advertise that strategy, but much of the Times story is about how secretive MIO is, and if you can be secretive enough then maybe you could pull off this trade.
Time travel _to_the_past_ has all the potential to create inconsistent timelines. You can deliberately cause severe inconsistencies because you have the crucial component: being in the past.

The only way for the timeline to defend from such inconsistencies would be to proactively thwart all your attempts, but then, Time/Fate has become a conscious entity.
1. how did you start the experiment? Did you apply it to everybody from the start or did you run it on a small sample?

2. What do you mean "buy all 5 days" and "moonlight on the 5th day"? (not a native speaker)
I think I'd focus on manufacturing strawberries rather than growing them in the ground.
A $180,000 30yr mortgage will cost you ~$880 per month. These days the median of all home sales in the US is about $225,000. The hard part of that $225k purchase for most people under 30 is the down payment of $45k.

The median full-time income is about $50,000 in the US. Emphasis that that is the median, not average.

Two household incomes is ~$85,000 or higher at median type wages (assuming a pairing of one full-time median, one lesser).

Home ownership is very much within reach at the median, so long as your income matches your market. You can't live in major US cities, earn the median, and ever hope to own a home.
And don't have the word "Share" inexplicably pinned in one absolute location on the screen.

And don't make a huge fraction of the background clickable.
I want quality food that is mostly produced automatically.
How to Use Nginx, Lua and Redis Cluster to Create a Rate Counting System
Because if they keep eating a poor diet that encourages an unhealthy biome, they're going to defeat the point of a fecal transplant.
But nobody with any respect for themselves has an un-ISP doing borderline illegal shit like that.

It hardly seems like a worthwhile problem to solve at gTLD-scale.
Just to mention a tiny bit of friction that I find, that you're probably already aware of...

I would totally apply to do this but my OSS contributions are pretty sparse and go back a couple of jobs. I'm sure that I have the requisite experience but my GitHub profile for the last year and change is pretty empty. The application process totally discourages me from applying.
Considering the former head of McKinsey went to jail for insider trading, the probability is not so small.

Interesting data science exercise...visualize all the MIO LinkedIn connections to McKinsey people.
This was my life in college and I eventually realized I just had an above average prioritization mechanism. If it doesn't really matter, and I don't feel like doing it, it's not getting done.

It's actually pretty productive at baseline since I can do the things that do matter lightning fast, so if you're like that, just try to do more things/more varied things (for example start a class not related to your job or get a second job not in the same field). (Also different/more intense physical activity. I don't know if you're like that but I'm a standard issue adrenaline junkie in addition to having selective motivation.)