skysight-inc/HackerNews huggingface dataset:
Part of the reason for this is that the lender really needs everyone whose name is on the title deeds to sign the mortgage deed and also wants to ensure that none of them are able to claim an equitable interest to prevent a foreclosure. A simple joint mortgage is a relatively quick way and reliable way to ensure this.

The risk if they don't look after their security properly is that the lender ends up owning (say) a 1/3rd joint share in a property which they are not permitted to sell without permission from the other 2 owners and on which they are not entitled to any rent and can't evict the defaulting borrower. There are cases where this has been the result of a defective mortgage arrangement. Understandably, that's not something lenders really want to risk.

It is possible for property to be owned with only one name on the deeds and one name signing the mortgage deed by establishing a trust.

If you want the lender to consider multiple incomes on that basis then you'd need guarantors and you then run into the problem that this probably needs specialist human legal input so it is suddenly not a mass market product.

It's also worth noting that under joint and several liability, the tenants would usually have the right to then sue one another for the relevant shares if the lender went after one of them for the whole amount.
Convenient 2FA is the answer, not weird UX.
There are actually various anecdotes about game developers playtesting "smart AI" where playtesters came back with very negative impressions, because e.g. a couple NPCs giving suppressive fire while another group flanks you quietly felt to players like the NPCs were cheating.

I believe one of these anecdotes was about the AI in F.E.A.R. and their solution was to add very clear callouts to the NPCs whenever the NPC made a decision ("Flanking, cover me!"). I think FEAR also had the concept of a director AI which handed out "tickets" to NPCs for attacking the player; an NPC without a ticket couldn't attack the player, so this limited how many NPCs engaged simultaneously.

I remember AI in Jagged Alliance 2 frequently flanking you and at first that was very frustrating; the stock (1999) JA2 AI is much better than every newbie to the game. You really had to think tactically and think about your moves and approach to be successful in that game. If you just go in "guns blazing" the AI will outmaneuver and outgun you. AI in that game was sometimes quite adept with grenades and such as well.

Edit: Talk about FEAR AI, might/might not be related https://www.youtube.com/watch?v=BmOOrh5lq7o#t=1m44s
> If you think I'm wrong, then write it up in a spec and show us.

Sure. It's fun.

On password creation:

0.0. demand 25% longer passwords from users than considered safe

0.1. along with the hash of the whole password remember a randomly choosen 25% of the characters of the password and their positions (in clear text or reversibly encrypted)

On each login:

1.0. ask only for the characters in positions you haven't remembered

1.1. server-side fill the positions you remembered

1.2. hash the result and see if it matches

If hash matches:

2.0. randomly choose 1/3rd of the freshly provided positions and remember them in clear text on server replacing the previous ones

2.1. give access

If hash doesn't match:

3.0. deny access, don't change anything on server

If I understand correctly - to get the whole password keylogger must be specific to this bank site (to understand which characters are provided), and must be active on at least 4 logins. In my book that's a big improvement.

And I can imagine writing the login page in a way that makes parsing it in keylogger to understand which characters are masked.
Nice! I built the following a year or two ago and it's currently running on AWS Lambda. It uses Highcharts to generate charts.

https://api.restcharts.com/

https://github.com/whatl3y/restcharts

A competitor that appears to be profitable and doing well is https://charturl.com/.
What are the pro et contra for react vs php for server rendering ? I thought react was php for the frontend. So running it on the backend seem backwards.
Please... head over to Paradox Interactive and seek to join their team if you're bummed out to a point of thinking that. (And you're welcome to link to this comment in your application.)

Their audience is basically desperate for a better AI that does better strategic and tactical thinking rather than pathfinding, weighted decision trees, and a couple of high level heuristics.

Here's what I and I'd gather many others would want instead: for the AI to go through the dev game logs, and perhaps even end user game logs, and then learn from what humans are doing, so they behave more like them. And then re-inject that into the game so it's something of a challenge to play without needing to give the AI some serious bonuses while playing.

As things stand the AI is so bad you can start as a purposely broken one province nation and still turn into a major power. [0]

And if you're thinking "no, the AI will trash them and they won't find it fun," here's a thought: right now, the AI is so bad that the only way to have some fun is to give it insanely large bonuses. But much like in a game of Go, as a player I'd much rather get those boosts myself to overcome a much stronger AI opponent.

The same holds for other 4X games, like Civ.

Playing Chess or Go against a computer used to suck. It no longer does thanks to how much better AI got.

[0]: https://www.youtube.com/watch?v=qJhyZ-9ktpo
Migrating to TypeScript: Five Practical Tips [Affinity Blog]
See this code posted on HN a month ago too: https://gist.github.com/macournoyer/620a8ba4a2ecd6d6feaf

I found the code very clear and understandable.
Good. I've always thought throwing distributed brute force at a problem is a sign of laziness. You can get 32-core systems with 128GB of RAM for less than $10K, and they will have orders of magnitude faster turn-around time than your average Hadoop or Spark cluster.
And when trying to do algebraic manipulation on paper, having an 8 or 10 letter variable name is incredibly cumbersome.

Frankly in the middle of a numerical algorithm it is typically also cumbersome in code to have descriptive variable names for everything.

However, mathematical code (especially when written by scientists, etc.) often takes this too far, introducing many 1- or few-letter variable names without enough context or description to figure out what they stand for, and for more of the variables than necessary.

This blog post was just fine though. h = hidden, o = output, y_pred = predicted value of y, etc. are quite clear
I have to say I always found it quite intriguing but never actually got one. I am quite positive this will eventually come back, in some way by Amazon or not.

It could be interesting if it was direct with the merchant, on a Shopify kind of level or even from bigger suppliers. All while bypassing Amazon pretty much.

The irony in this working would be wonderful.
I was on sertraline for almost 15 years. It took multiple tries to get off. I finally slowly tapered off. The worst withdraw symptom was the zaps for me.

I wish I had never started to begin with. I feel like a part of me is gone now. It is hard to describe.
This is not proof Sir, it's just a table. For something to be scientifically proven, the methodology has to be disclosed and it has to be repeatable, consistently. No amount of re-inventing the scientific method from first principles will help you, no matter how much this web site is "Hacker" "News" (:-)

Plebeian indeed!
I am pretty sure that note wasn't written there before. The author must have updated the article after I posted this question. Though "nice" is still somewhat vague to me. Nice in what way? Smaller numbers are nicer? Negative and positives make it nice?

The second part of the answer is more useful information, "Normally, you’d shift by the mean."
Well, Juggernaut should definitely take a look at Brave's BAT (https://basicattentiontoken.org/) as a revenue model. BAT is an Ethereum-based utility token that users reward publishers with. BAT can be exchanged with Bitcoin/Fiat on exchanges like Uphold (https://uphold.com/)
> Netflix (as TV) provides some healthy entertainment.

It's far from obvious that TV is healthy. This article has some discussion of one potential downside and a rebuttal: https://www.scientificamerican.com/article/does-tv-rot-your-...
>Putting away meth dealers supercedes strict adherence to the constitution, by far, IMO, even if the police have to break the law to put the bad guys away. (Parallel reconstruction etc)

Ethically, I disagree with your argument. See: unlawful asset theft by police departments, which the supreme Court recently confirmed is illegal.

But from a legal standpoint your argument doesn't hold water. The Constitution is THE binding legal document of the USA, from which literally every aspect of the US government, and thus justice system, derives authority. There is nothing but strict adherence to the Constitution, trying to work outside it might work for a bit but will end up with someone standing before the supreme Court to answer for it.
> If I had lawyers I would want them to be conservative and cautious too.

For good reason. I imagine if a few people dies because the engine as sold didn't perform well/stalled under certain aeronautical conditions (upside down, low air pressure, etc) then it wouldn't take long for the lawyer hired by the kit maker to start pointing at the big auto maker at every chance they got, even if it ultimately was something the kit maker did.
One place to start is by narrowing your search to companies that are:

1. Public Benefit Corporations ("A Delaware public benefit corporation (PBC) is a for-profit corporation intended to produce a public benefit and operate in a responsible and sustainable manner. Unlike traditional corporations, a PBC must consider its public benefit purpose and interests of those materially affected by the corporation’s conduct in addition to stockholder value.")

2. Certified B Corps ("Certified B Corporations are businesses that meet the highest standards of verified social and environmental performance, public transparency, and legal accountability to balance profit and purpose.")
Similar experience for me, I was about to lose faith in sw dev, then DDD, Greg Young, Eric evans, Alberto Brandolini and many others saved me
What is being meant is that the example is one of "unrolled loops" - that is, to an extent, some of the matrix math has been unrolled in order to show the discrete steps involved in the calculations that would be lost (more opaque) for someone learning.

Real systems like TensorFlow (and Keras, which is a wrapper that simplifies TensorFlow - which is already pretty simple; if you come to love TensorFlow, you will really love Keras - but you can't really appreciate TensorFlow until you understand the basics of what it does - which the posted tutorial tries to show) hide all of these steps behind a variety of API that tries to mimic the conceptual ideas behind neural networks (ie - "layers" of "neurons" with "connections") while hiding the lower-level "complex mathematics".

That's a good thing on one level, because it opens up ANNs for more users. But it's a bad thing at another level, for those who want to know what is going on in those "black boxes", as well as for those who sometimes will stumble into certain issues with their networks, and struggle to understand certain things if they don't understand those underlying systems.

No one implements neural network code the way it is shown in this tutorial for much the same reason most people don't code in assembler: Because there are higher level means to work with the same operations and do it quicker, more efficiently, and more correctly (also, the lower level operations used in such libraries have been rigorously tested to be correct - it's similar to the reasoning on how you don't roll your own crypto, because you will likely get it wrong - even if you are an expert in the domain).
This isn't going anywhere :

People that don't "care" -in the sense HN does- about privacy will stay in the free tier. Why should they pay now?

People that do care have either stopped using the platform or will be not be trusting FB enough to bother.
It’s insanely good deal. MSFT has to be losing money on that.
Too lazy to search it for you (and I read it roughly seven years ago); use a search engine yourself. Really, the sense of entitlement in this place...

And if that with the tanker surprised you, maybe you should spend more time researching and less time reading sensationalist studies which hope to hook people into a subscription (:-) Just a suggestion (;-)
Ask HN: Could a VPN that pays you work?
Recently I've been thinking a lot about the Facebook VPN that paid its users to collect data from them. There was a ton of backlash around this story, but it left me wondering, could something similar achieve success?

What if there existed some open-source "keylogger" that tracked and monitored everything you did on your desktop. It could provide a dashboard of every action you took. You could maybe edit the things you did or did not want recorded.

Then, if you wanted to get paid, you could sync your data up to some server. Your data would be anonymized and merged with data from all the other users of the service. 3rd party companies could pay to get access or insight for that treasure trove. Whenever that happens, the end-user is paid some small amount for their contribution.

Could it work?
This is going to cause confusion with Rust - the game - and Oxide, its 3rd party mod plugin framework.
I know you're saying it like a bad thing... but what if it's actually a good thing, we just don't know it yet?

I mean, none of us actually want to own a bus or a train, we just get on them and get off again when it's convenient for us. I have no interest in thinking about maintenance or service intervals or age of replacement or even how to actually 'drive' one.

What if that's the direction cars are going?

I understand that currently personal car ownership is deeply, deeply ingrained in the American psyche, but I do believe there can be a future where we don't own a car each, but rather just get in and out of them as they drive around autonomously. Why deal with paying for tires and brake pads if you don't have to?

I mean, I'm a car guy, and I'll probably always want to own some kind of "fun to drive car", but then again, I'm a dinosaur at 37, and to be honest if I'm just going into a city with mind-numbing driving I'd rather take public transit anyway. The stats on how few people under 30 don't even have (or want) a license clearly points to some changes coming.
Yes, for example I am using Adobe XD and Paint.NET installed from the store.

I also have a couple of other games and utility apps.

Having the sandbox around is really nice from my user point of view.

Then as Windows/Web dev, I do like the rebooted version of COM as well.
If I can chime in, I have made NHK Easier to help practicing on stories from NHK News Web Easy.

https://nhkeasier.com/
Using - to mean "here's a dict and a seq -- remove all the seq's keys from the dict" would be useful and consistent, but they specifically prohibit that. They require the rhs to be a dict, too, even though the values are never used. Why?
The claim is not "naive" as in "of course the NSA wouldn't want to exploit things, they're innocent angels", the claim is "naive" as in "they have better ways to exploit things."

Interpreting _NSAKEY as an NSA backdoor is similarly naive. First, it's named _NSAKEY. Surely they could name it something else. Second, its purpose was reverse-engineered, and it's capable of signing cryptography modules, same as the existing Microsoft key named _KEY. Anything that could be done through _NSAKEY could also be done through _KEY, so it would be easy for the NSA to just ask for a copy of _KEY such that nobody would notice. The conspiracy theory makes no sense - it's like saying "$politician is trying to take away our freedoms by pouring mind-control agents into the water" when $politician is just straight-up signing bills to take away your freedoms.
There are bitcoin tumblers, essentially the idea is to split up the transaction into multiple transactions of varying sizes to various addresses and to keep doing that in such a way that it doesn't look weird...

Basically they try to hide the transaction among the huge volume of transactions going on, kinda like a VPN or Tor?
10x worse is pretty bad, even though it is only 10 seconds total.
I'm a ROS user (~7 years) and occasional contributor. One interesting wart you find in the ROS community is that there are two main supported ways of testing your ROS code:

- Unit test the individual functions and classes using gtest or nose (this is built into catkin, this buildsystem).

- Integration test your ROS APIs bringing up an actual ROS multi-process system and having a designated test node which exits to deliver the pass/fail verdict (this is managed by the "rostest" package).

The much-touted advantage of microservices is supposed to be that you have these obvious service interface boundaries at which to test, but the reality in ROS land is that it's a lot of work to test there. It's work to generate the binaries or playback data, failures are harder to understand, and because you're at the mercy of RPC timing, nothing is deterministic, so your tests end up full of fudge factors and tolerances.

And on top of that, the tests themselves execute way slower, since there's so much more set up and teardown.

Is that a failure in the framework? Not sure, but the end result of it is that you only test at the RPC boundary that functionality which can only be tested there; everything else is stuffed into library functions that can be verified with gtest.
How would you hide these targeted updates from foes? I’m sure they can at least check the hashes of the updates, if not more. Presuming we’d be targeting their military industrial complexes who one might presume monitor for these kinds of things.
I think this a form of normalizing a normal distribution into a standard normal distribution
( a normal distribution has two parameters \mu and \sigma which in standard form gives respectively 0 and 1.
Any normal distribution is a special case of the standard normal distribution N(0,1)
I strongly recommend, if possible, to have a single homeowner and set everyone else up as renters. The only exception is married couples who already have shared finances.

Around here, finding the money for a 20% down payment is the biggest impediment to buying a house (it can be hard to scrape up $100K - $200K), so that's easier if you can pool your funds among friends, its easier to do. So that pretty much precludes a rental arrangement. I think it'd be hard to get a loan on a property if the down payment funds are coming from your friends -- and you're treating it as an investment property because you need their rent to afford the mortgage.

This kind of arrangement is typically structured as a Tenancy in Common:

https://www.investopedia.com/terms/t/tenancy_in_common.asp
Wow, this is super ugly. Not to hijack the thread, but we just launched yesterday at https://www.privacymonitor.com - The stuff we find about what companies bury in their privacy policies is pretty frightening.
The India-Pakistan Conflict Was a Parade of Lies
I think this is the $137 million dollar question.
I tried this! Eerily, I'm able to convince my ear/brain that this 12th interval is an octave-like relationship; that the two notes have a sameness (that I don't perceive in the case of the perfect fifth that we normally consider enharmonic with the 12th, giving it the same letter name).

Come to think of it, a lot of western harmony is based on a two-octave "gamut". Like for instance alterations to chords such as dominants take place close to this "3f octave" (dodecade?) 12th interval, like the like 11th, 13th.
The usual explanation is that if these alterations are in the higher octave, it prevents certain dissonances. But from the "3f octave" view, we can just regard them as different notes; that the 13th is not simply the 6th, only one octave higher, but rather an "augmented dodecave" interval.
> Doesn't every component in an aircraft have a random chance of failure? There's even a name for one critical component, the Jesus nut.

Two things;

1) This might be theoretically true, but Boeing and other aircraft manufacturers monitor data on every component at a very fine-grained level and they use inspections to predict what will go bad and when. They're even adding real-time capabilities to it so that parts are replaced immediately after a flight if imminent failure is predicted; https://www.boeing.com/commercial/aeromagazine/articles/qtr_...

2) The core issue over here isn't that a component can fail. The issue is that when it fails can we trace the error and forestall it in the future? If the error is something that's unreplicable and unpredictable then that's quite literally impossible and it makes the machine by its very definition untenably unsafe as you don't know when or why it won't work.

Someday neural networks will become a part of safety-critical systems, but this generation of neural networks probably won't be it.
Mental health during your Ph.D.
Long before trade war with China, Huawei’s activities were secretly tracked
The best offense is a good defense, so the sooner they start patching software, the better. The sooner they get developers to use safer languages, the better. But that's not gonna happen, it's apparently too costly to develop safe and secure software, but the damage caused by poor cybersecurity is somehow an externalized cost which means it costs nothing in the current equation.
So they are storing length and hashes of subsets of the password?

You could brute force a subset of 4-5 characters way easier than a 20 characters password.

How is this secure? Anyone care to explain how this adds security?
I would love to see mshtml/trident spun off. While it is not the most modern design, of course, it does have some advantages for embedding and extending with everything having native COM interfaces.
> Homes have electricity. It can easily kill you if you're careless

Unless you're playing on the input side of the meter-box, it's extremely unlikely you'll be killed in any kind of modern building with a mandated-by-law earth leakage device.
This is really helpful article, and I think the concrete questions they lay out are ones all PhDs should answer explicitly when starting a new project.

That said, I think the biggest risk to PhD research is not just project, but product management. That is, many PhDs will set up meetings, TODOs, and communication channels, but they won't explicate...

* why the project is being done

* an ordered list of desired outcomes

* acceptance criteria

* who they'll communicate with, how, and how often

* some kind of list of risks

Not locking down acceptance criteria with an adviser is, IMO, the biggest thing that keeps people from graduating (and is generally what a dissertation proposal is for).
Whilst that's true, there are some potentially sketchy practices which it theoretically permits (in reality if the lender is regulated it's unlikely they'd risk them these days but in the small business lending sector you can find examples by googling "RBS GRG West Register").

This classic example is lenders forcing an auction into which they know the only likely bidder is a related company of the lender.
Out of the question, go away with that cursed JVM and never mention it to me again!

I don't and never will do bytecode on a virtual machine!
The Servant Economy
30% take is pretty standard across a lot of industries when dealing with affiliate arrangements.
> Telemetry is disabled in development builds by default

So it's not ideal from a privacy perspective to have to worry about usage telemetry in a calculator. But at least there is the silver lining of having telemetry disabled by default _somewhere_, even if it is only for dev builds.