skysight-inc/HackerNews huggingface dataset:
great story- I spent some time watching/discussing piano tuning with the guy that does my yamaha C2. You basically bring it up in 3-5 passes depending on how out of tune it starts in. He started with a tuning fork and then continued with an app/microphone to dial it in. Another cool trick to dial in the harmonics is to play a (13th? my music theory has escaped me for a moment) but basically play a C and then an octave higher E and keep that spacing throughout the piano and you should hear the notes beating in a pleasant manner. If they dont, you need a tune.
Also important to keep in mind that tuning a piano early and often is the best thing for it. Having to make drastic changes to bring it up to pitch is very likely to crack the sound board and or bend/break the harp. If you live in an area with high humidity keep the piano at least 3-5 feet(1-2 meters) from the outside wall of your home.
I have basically zero sympathy for people who enable JS in their browsers and then complain about their privacy being violated. I mean, how can someone expect privacy when doing the exact opposite of best practices?
Note that violinists (and cellists, and others) are not constrained by their instrument and can play in different temperaments depending on the situation.
New Channels for Rust
AWS Searchable Service Glossary
I struggle to keep up to date with the latest AWS Services and wanted a quick view of what all the services did.

I created, and regularly use, https://www.aws-glossary.info - it's a searchable cheat sheet of AWS Services and is auto-generated from AWS official docs.

The intention is to give a quick overview and a link to the full documentation.

Hope it's useful to others!
I used to pay for GrooveShark (which clearly was sketchy lol) and then Spotify, since I subscribed to Google All Music Access I have never had to pirate music just to get access to it. I can cache all the music I like (download it for offline listening) and it works on my iPad too. I wish they had an official desktop client for offline sync, but Google seems allergic to non-web desktop solutions.

I try to avoid getting sucked into Google's Ecosystem, but GAMA is pretty damn good. Sadly I don't know what the situation for GAMA looks like outside of the USA.

Edit:

But my point is, I hated Spotify, I still found myself forced to "acquire" music. This is the digital age, sell me digital music I fully own. People who don't want to pay for music will not pay for it no matter what you do. At least with Google when I buy music I can sync it to my local machine, but with GAMA I don't have to. The other upside is I get no ads on YouTube since I got grandfathered into YouTube Premium. Yes, I know, AdBlock, but I got grandfathered in to no ads, why would I care about AdBlock?
That article was a curveball!

I'm not even mad that it's basically a pitch to get readers to give problem/product feedback, I'm just pleasantly surprised this wasn't a total fluffpiece about todo list apps.

My favorite takeaway is the idea of asking users how they would convince their friend NOT to use a product. Excellent way to get users to authentically pinpoint the parts of the product they find the most painful.
>In both cases, the related tooling is also a significant factor; engineers favor particular tools and are drawn to repo management systems that support their desired toolchain.

>Like virtually all choices in computing, the choice of whether to use a monolithic or multi-repo model is a comparison of tradeoffs.
...still waiting for the google maps to for instance counterstrike map generator that must not fit on a business card...
We increased (SaaS) signups 175% with an email remarketing hack
> AFAIK Intel, ARM and AMD all have shipped chips that are vulnerable to a handful of speculative execution attacks.

Some ARM CPUs, and IBM, both POWER and mainframe CPUs, have Meltdown bugs. All 4 of these vendors of high performance out-of-order speculative execution CPUs including AMD have Spectre bugs.
Mystery as Quadriga crypto-cash goes missing
> Any random billionaire is more likely to have a charitable foundation than not.

something something tax avoidance
Hey I just got a crazy Idea.

Give me 18 billion dollars, and I'll pay people to drive other people around.

"How will we make money?" What? This is Silicon Valley, nobody makes money, we just burn capital ($18B) from people who invested in one good thing 20 years ago until we can sell the remaining capital ($7B) to braindead retail investors for 10x it's value.

The company only has a year and a half of runway left, so we have to move quick.
Hitting 0.07% of the market with a free service in a few days is not impressive, do you really need a source for that?
Please correct me, they called the police to arrest a teenager because are horrible programmers? I won't justify the girl, but in that case I should say, do a favour, debug it and shut up.
That's not enough. You have to disable speculative execution on untrusted code, not on sensitive data. There is no solution on shared infrastructure because the untrusted code is another VMs trusted code.
Update - I listened to Kraken's 'podcast' https://www.youtube.com/watch?v=QB0OQae4fWo and they think the most likely is Quadriga lost some ETH, gambled to make it up, lost / stole money in the previous year, then Cotten dying was a coincidence - the money was already missing.
Interesting. Thanks! I was under the impression that most Indians can't get broadband at home.
Only AMD has avoided Meltdown, both ARM in some CPUs, and IBM, both POWER and mainframe, have Meltdown bugs.
Digital Health Business Guide to Data Protection Officers (DPO)
Ask HN: Is Google's oauth2 changes break on Firefox?
Several weeks ago, I developed my own service that uses Google's oauth2 for authentication. It used a popup window method to reach Google's oauth2. It worked for both Chrome and Firefox. Then, I noticed that oauth2 UI has changed a bit and the popup on Firefox is no longer work, yet it still works on Chrome. This happened exactly on 17 Dec 2018. I fixed that by changing the method to reloading the callback in the same tab/window without popup and it's fine on both Chrome and Firefox. Since then, I found more services that use the popup method against Google oauth2 were no longer work on Firefox. Some of them fixed it by moving to reload method.

I'm not sure whether the Firefox update or Google's oauth2 update that has caused this.

Is there anyone experienced this? If your service uses the oauth2 + popup method, you may check if it still works on Firefox.
For me too, got one for my 10th birthday (and got it working again a couple of years ago). For me it was my father who "forced" me to read the Basic manual before I was allowed to use it by my self.
will make existing Rowhammer and cache attacks easier

I've said it before and I'll say it again: Rowhammer is a functional correctness problem that the memory industry has been trying to hide ever since it was discovered. Authors of memory testing tools have been convinced to ignore it, with the rationalisation that "almost all memory would test as defective." AFAIK it's only after ~2009 that RH became a problem; anything older is not affected due to its lower density.

On the bright side, since the first Spectre timing in JS has been so reduced in resolution that the last time I read about it, the rate at which you can read memory (keep in mind that where you read is random, and how large the whole address space is) was extremely low --- something like a few bytes per hour; and that was after the researchers had already done a ton of preparatory work to set up everything just right. (Otherwise, because like with anything timing/cache-based, simply running something else may already change the timing and possibly invalidate some of those bytes being "read". Then comes the question of where in memory you're actually reading --- a 64-bit address space is huge --- and what significance those bytes have. It could be a private key, it could be random bits; the point I'm trying to make is, being able to read memory is just one of the requirements to an actual attack, and there are many more hurdles an attacker has to overcome.)

IMHO it's something to worry about if you have JS on by default and are being subject to a very targeted attack. If you have JS off by default and aren't someone of particularly high interest, there is much less to worry about.
Especially ironic given that Rust's default package/project management tool is named 'cargo.'
Slavery dropped due to European Enlightenment values in the inherent dignity of man finally taking root among educated people in power. The cotton gin and the steam engine only made slaves more efficient and ramped up their quotas, not reduced the worth of their labor.
use a second process and IPC to communicate, done
Definitely possible, but I think that's something you could engineer your way out of by being very selective with materials, building in strain relief. Then of course test test test.
What I mean by black market price is total amount of money that you can make on that bug selling it on the black market.
> That's not `\n`. That's how acme displays long lines.

Oh, yes, sure. I just didn't know how to show the line break,
so just "embedded" \n-s. I realize that there are no \n-s
there.
> if I just know the secret

Sure if one is minimalism (using a few services)
Once a storage needed (load of brain, password manager, paper etc.), the "just" goes away.

> without any entanglent to some app, device

Again If said storage needed, this is not advantage anymore.
The title and opening paragraph are misleading; this only leaks physical page mapping information, not data. So this can allow ASLR to be bypassed, but isn't a vulnerability in the same class as Spectre.
Indeed, if one tuned a piano like the article describes it wouldn't sound good.

As far as I undesrtand it has to do with the thickness (i.e. the real world physicallity) of the lower octave strings.

The strings are not trully one-dimensional. this makes their timbre deviate from the ideal harmonic series. This is specially true for the thicker strings of the lower notes.

If we could make a piano using very thin strings we could get away with a less stretched tuning.
This team sold tools to help people take others' lives and livelihoods, to people known to do so. How long should the consequences follow them? For what reason should anyone else give them a "reset"? There's no evidence that I can find that they even expressed regret about what they were doing, just moved on to a new scam. Coinbase is late but right to fire them.
Browser extension to grab any site's logo in a click
Tool for partial deblobbing of Intel ME/TXE firmware images
I like the async hook idea. But I’m having a hard time imagining his unit tests would work?
For files we use Google Drive, while shared access keys/passwords (where they can't be avoided) are kept in 1Password, where we're able to create vaults with different access rules so that only people who need them have access to them.
“Elderly” is now someone in their 30s!? Talk about age discrimination.
Swift-Keylogger: Keylogger for Mac Written in Swift Using Hid
Or like the good ol rca cables: color, or . Add some stripes in the head of usb or similar and add some stripes with meaningful color.
Hi Evan. Thanks for the kind words.

These questions are doing wonders for me. It's even crazier when asking the client face-to-face, why "something is 'add negative here'"

If we ask positive questions, people that don't like the product, will never answer. The ones who do, will maybe give a vanilla answer back.

With the 'negative' approach I think we give the nay-sayers a chance to vent and say "THANK YOU FOR ASKING ME THAT! Was hoping someone points out this product is crap for x/y/z reasons" // something along those lines...
Divergent Thinking Will Make You More Creative
Some people need most of the internet to work correctly. Like it or not, JS has become a core requirement for modern web functionality and that is unlikely to change any time soon.
"We've sent out personalized spam, and it works"
Thus is about adding trace ids to the log statement. This is definitely helpful, but from the title I had expected something else.
SEEKING WORK - London - Remote Only I am a highly experienced (10+ years) Deep Learning and full stack developer.
I built a Drag and Drop Deep Learning product from scratch, and a Video Analytics and LIDAR security platform from scratch:

Technologies:

TensorFlow, Cuda, RabbitMQ, Celery, Django, AngularJS, Numpy, Numba, Pandas, scikit-learn, Thrift, GRPC, Postgres, Cassandra, Hadoop, Cython, PyPy, Postgres,

Highly experienced in Fully Connected, Convolutional, GANs, Time Series, Reinforcement Learning, objective function optimization, explore exploit, topology optimization as well as deploying high performance and horizontally scalable models and infra.

I'm happy mentoring juniors and doing code reviews too. I have previously led teams of up to 25 developers having grown the team from a starting point of 3, myself included.

If you would like to see examples of my work please reach out to me, and I can show you entire platforms I have written myself functioning

Looking for full-time / part time work to extend my runway

alainr.richardt@gmail.com
I've enjoyed my Google music subscription for years as well, but I think it's pretty shady that lately they keep trying to bundle in a free YouTube subscription.

I still buy movies, and I have a fair bit of purchased music from before the subscription, so I'll be more than annoyed if I end up with my media library sitting in YouTube Red if they try to converge the products. Spotify would be high on a short list of alternatives if that happens.
Looks like one of the addons that can be used with Heroku accounts.
Magnonic devices can replace electronics without much noise
Chirality Yields Colossal Photocurrent
Lie as much or as little as you’d like. Employers assume that every resume they get is padded with fluff. If you need to bullshit to get your foot in the door have no qualms about it. All that matters is if you can walk the walk once you’re in.
Ah, that makes sense! I was stuck in an "article" mindset - what if it was only used for reader mode? That might simplify the implementation and still be beneficial for what I expect to be the most common non-developer case: seeing if and how an article was changed since publication.
There's no shortage of plausible explanations but I would like to know what's really happening. I wonder if some of the vendors have confidential internal reports that explain what's going on.

Perhaps a significant proportion of women don't even look at the price, thereby encouraging shops to concentrate on exploiting those people rather than providing good-value products for the rest of the population. If that's the case, why does that group exist and why is it female? Is it because they are innumerate? Or because they're spending someone else's money? It's all just speculation until someone provides some evidence.
"Henry Cabot Lodge’s article “Does the Republic party have a future?” proved to be oddly poignant, given the present state of affairs."

That's the kind of 'journalistic content' that's brought journalism down. The article has many fine points, but that one sours the tone for some readers (while probably bringing delight to other readers, but they are being short-sighted.) It's not necessary content. It doesn't add to the net worth of the article. It just shows that the author of the piece has some political biases, something the reader should not know (in proper journalism.)

Journalism is best when it presents a story clearly, without opinions from the writer. I fear it's quickly becoming a lost art.
So which provider should a US based start up use? If they use a colo which country do you think it’s going to be in?

Seeing that all of the most valuable tech companies in the world besides the ones in China are based in the US, do you suggest they host with Alibaba Cloud?
Yandex Mail's Succesful Migration to Postgres [pdf]
Decreasing the likelihood of being compromised is still one layer of security. It's only bad if you depend on it.
I have been browsing with JS off by default for over a decade and a half now. The list of domains for which I allow JS on has accumulated less than 100 entries. I do not use "appsites" much, and the rest of the document-centric Web is perfectly usable without any scripting.

The more who turn it off and complain about useless appification, the more likely the trend can change. There are already plenty of reasons besides security to turn it off.
I have never seen a USB-A connector become loose. It's been over 20 years. The USB-C connector on my 2016 touchbar was loose within months.
No actual MySQL server is involved in this...
So, does it actually have CRDT operations? Doesn't seem like any of the interfaces expose them. Can you use a convergent counter, for example?

Also product page [1] has some weird claims. There is no such thing as "Strong Session Consistency", this is just another name for weak consistency guarantees. And Strong Eventual Consistency, which is a thing, requires using mergeable conflict-free operations that you don't seem to expose? The "smart operation ordering using intent prioritization" is also neither strong eventual consistency nor strong consistency.

[1] https://www.macrometa.co/product
Sure ! You still need client side javascript though
I worked on a codebase that used the old "domains" this way, and it was very kludgy. We could get unit tests working, but we essentially mocked calling that 'set' method before the function we were testing used it. We eventually ripped it all out in favor of explicitly passing arguments down the async chain because we found that for some reason those "magic" variables were leaking across requests. Could have been another factor that caused it, but the magic was too much for us.
Carmakers seek electric car sounds for post-petrol era
Tough shit. Some people just don't manage to attach names to faces, and it sucks way more for us than for you.
No. I don't buy this. The correct action would have been to overprovision the battery such that it is capable of advertised performance for the expected lifetime of the product instead of making the product 1 mm thinner.
I'd expect something like "Metafont." :-)
You mention 'no national boundaries anymore'. But robocalls are extremely rare in Europe. Presumably both for legislative and commercial reasons. None the less this is an existence proof that they aren't some kind of inevitability of mobile technology.
I have a natural tendency towards divergent thinking and often it is making me nuts. Where other are barely able to come up with one solution for a problem and then go implement it, I generate many solutions and often cannot decide which is the best. Often, I have a hard time explaining the solutions as people are not used to thinking in solutions and think that the solution they have found is the only one.
Also, solutions, often lead to other questions, with more solutions, and before I know it, I find myself daydreaming about all kinds of hypothetical problems and their possible solutions, not making any progress at all at finishing the task I have set my mind to.
Thanks for your input.

"What is the merit of a rectangular window"
Marketing gimmick? Square panels = easier construction?

I was just trying to think of practical applications (planes), that led to trying to reason about whether this would solve the problem of fractures in this situation.
Not with that attitude, no.
Unless its an essay, I which case it's supposed to argue to a conclusion. And would be perfectly correct in doing so.
I think if it does happen I may not bother anymore, it'll just save me $14 a month (I pay for my wife to have it too, apparently I can add 2 other family members or something at no extra cost).
Making the strings (and therefore the piano) longer helps, hence the size of concert grand pianos.
Raspberry Pi devices can be hijacked via Windows IoT hack
I think you might be thinking of the Wallstreet, not the Pismo.
That's no different than saying the English alphabet is just a modified version of the Anglo-Saxon futhorc runic alphabet, and that with a dictionary and a bit of training you could use that too.

'ȝ' becomes 'g', 'Ð' becomes 'D', and we still use 'æ' today, which is also a rune, and they even used 'W'!

Also, the number of characters in Chinese has also drastically changed over time. So while many characters have a 1:1 lineage, far more characters simply did not exist 1 or 2 thousand years ago.

The only commonality is that they are based on pictographs and have a traceable etymology, although that's true for all languages.
In all tier 1 cities, which are at least 10, you can get 100Mbps broadband with about 750GB to 1TB data for close to 20 dollars a month. In villages (at least 100 thousands of them) and small towns (roughly 8 thousand of them) where most population resides, the story is different. Only wired broadband provider for them is govt. owned named BSNL whose service is quite unreliable.
4G high speed wireless is accessible everywhere for cheap though.
>implying there is no tracking when watching a video on a Google owned platform
Build Satellite Applications with AWS Ground Station
It is sad. Even sadder with this news, Europeans will have to find another way to get Africans off of the mineral rich land they want in Africa.

Preparing for HIV/AIDS 2.0 or (Ebola + AIDS)^2
What does this give you beyond what nearest neighbor libraries like flannel already do?
It's called the "west" in opposition to the eastern block during the cold war. And yes it's a useful concept because it exists and is well defined.
As others have noted, setting it up isn't so straight forward. There's even Wikis for installing it on a VM that don't seem as straight forward as just mounting an ISO[0]. Also, getting internet to work / websites to load seems problematic. I want a OS that is as usable as installing any Ubuntu derivative or Debian for that matter!

[0]: https://news.ycombinator.com/item?id=19305312
How is he a liar and a fraud? I can understand if you disagree with his methods, which are extremely confrontational, but he seems quite honest about what he does and what his intentions are: he doesn't want whales to be die. He doesn't want people to die either, and doesn't use deadly force, but is willing to cause material damage if it stops people from killing whales.

But the liars in the story are clearly the Japanese whalers who claim to be killing whales for science, which is obviously a lie. It's tragic that the moratorium on whaling is so easily ignored.
Async Hooks? They are insanely slow. If you are using many promises (lie graphql server) then it will result in x100 performance penalty.
Ask HN: Git work and commit flow for iOS and Android development in teams
Should a developer commit early and often and push to feature/develop branch? Multiple story boards for each view? Git-flow? From the perspective of a Han Solo developer used to working alone, what are some best practices to commit and work together as a team on mobile apps?
I suppose it's different for different people - not everyone is using Spotify for 'background music', they might want to sit and listen to Taylor Swift (per above example) and if it's not on Spotify, it's just like Netflix not having the film we want to watch.

Also, I'm not sure if it releases everything as matter of routine, but Netflix certainly releases some of its original content on DVD/BD.