skysight-inc/HackerNews huggingface dataset:
> Not all girls want to code, and not all girls want to take a STEM path, and that should not be see as some failure.

It's also true that not all boys want to code, and not all boys want to take a STEM path.

But what if a larger percentage of boys want to code or take a STEM path? If this were so, it would look like a pipeline problem, and it would look like a pipeline problem that's quite hard to fix. It might actually look like the reality we currently see.

But wait, it used to be that computer science was almost evenly split between men and women, right? Where did all those women go?

This is a reasonable question to ask, but it's not the only reasonable question to ask. Another question to ask would be: 50 years ago, what percentage of the overall population had computer science degrees? And is that percentage larger, smaller, or roughly similar to what it is today? I don't know, but I think it was likely much, much smaller than it is today. It might be the case that there are more female computer science graduates today as a percentage of the total population than there was 50 years ago. But how could that be true, if (as we know) men with computer science degrees now way outnumber women with computer science degrees?

This isn't really a trick question, the answer is pretty easy: Today there are a lot more people with computer science degrees. That increase was disproportionately men, and that's a consequence of a pipeline that is disproportionately men.

So what's the difference between the pipeline 50 years ago and the pipeline today?
IMO this is part of why Facebook's user base is so resilient. From what I see, younger people experiment more, looking for something that fits their identity, what their friends use, what's new, etc. They also have more time and incentive to explore new apps. By younger people I mean teenagers, high-school and younger.

Older people, it seems to me, are more utilitarian. By older people I mean college and up. They use Facebook for events, or because the social world is harder to navigate in college/later in life than when you're in high school and your friends are neighbors or classmates.

Perhaps this is just my experience, or maybe I'm just very off on how I read this, but it's a thought. I don't think Facebook is trying to be interesting— I think they're just shooting for useful and
"sticky".
I suggest that the most expedient (cheapest) language to migrate the existing code base to would be a memory safe subset of C++ [1]. In practice most of the safety benefit could be obtained from a just a partial migration. Specifically, just banning raw pointers/views/spans and non-bounds-checked arrays and vectors. From a quick glance at the code in the (quite small) patch diff, the code in question includes:

DOMArrayBuffer* result = DOMArrayBuffer::Create(raw_data_->ToArrayBuffer());

...

raw_data_.reset();

...

return result;

I'd imagine the effort/time/money it would take to replace those raw pointers with memory safe substitutes [2][3][4] (and enforce the ban going forward) would be relatively modest. Performance shouldn't be an issue [5].

[1] shameless plug: https://github.com/duneroadrunner/SaferCPlusPlus

[2] https://github.com/duneroadrunner/SaferCPlusPlus#registered-...

[3] https://github.com/duneroadrunner/SaferCPlusPlus#norad-point...

[4] https://github.com/duneroadrunner/SaferCPlusPlus#scope-point...

[5] https://github.com/duneroadrunner/SaferCPlusPlus-BenchmarksG...
Errant pasted data sounds like a bad thing to log.
Alas, such is the life of those not blessed with Apple Internal tools…
It doesn't always have to be explicitly intentional as you described, but the simple fact is that they are incentivized to gather this data and they will not, in fact, suffer major repercussions commensurate with the amount of data that is collected/gathered. Look at all of the penalties that have been levied at all the other data breaches and how negatively affected those business were. [1]

[1] Very little to not at all.
Want to Get Involved in a Cool Project?
WANT TO GET INVOLVED IN A COOL PROJECT?

If you're interested in working on a great new project, you may want to here about the non profit open source tech studio that we are building.
We are building multiple bots this month with MySQL and Javascript. We are looking for developers designers and anyone that can help us with writing and marketing to join our new project.

Drop a comment, or tweet at me http://twitter.com/davecraige if you would like more information. Thank you
Games are still 30%, so no.

Apparently Microsoft believes that there is demand for a Windows Store and its apps, but games on the Windows Store are so successful that they don't need the cut.

I would not have thought that possible, but I don't have access to Microsoft's business metrics.
> it might sound better cut to vinyl

There's nothing extra in a 192kHz signal that would help with the vinyl mastering process. You could make a technical argument for the benefits of a 24-bit source, but in practice even those benefits would be utterly swamped by the SNR of vinyl.
Show HN: Pipe To Me – Stream data over HTTP using curl
>The fact that they were able to access those wallets means they "cracked" the security measures on that laptop

Incorrect. Experts were able to trace funds back to the cold storage wallets addresses using analysis. But the private keys have not been located and no, the laptop has not been "cracked".
Show HN: GitHub Pull Request Bot
Traffic signals. We shouldn't have to wait at a red light if there aren't cars coming the other way.

Much cheaper cameras may be fine for that though...
Sounds like typical stuff for the cryptocurrency world.
How to build an Android chat app using a chat API (Part 2)
Crypto me outside
No, I just posted it for people who want an additional source for the same story.
‘’’In a brightly lit but still somehow nefarious meeting room two devs discuss their latest findings:
Dev1: “These users searching for ‘transfer bank savings’ also have a 15% chance of pasting these long invalid numbers into the calculator. Look at all of them.”
Dev2: “Odd those look like bank accounts numbers...”
Dev3: “I think we may have an early retirement opportunity...” ‘’’
My bank has been hacked (affecting my account) twice since I started using it, but I'm yet to see any effect of a successful attack against my machines...
I think it’s hard to actually pay journalists well and run a business predictably when we just hope people will donate though I do think the membership puzzle project is doing good work and a few businesses have made this work. This is definitely a model for us to consider!

The people who pay us now do believe we’re doing good work. I have been paying for books and health since I have been little and I do think both allow me to support great writers and health practitioners to be better at what they do. That said I do believe everyone should have a right to access information and health and one day we’ll be able to accommodate that business model. Right now all our revenue goes directly to our journalists.
Sorry if I was unclear as I was trying not to malign baby boomers but I was referring to the 50+/not tech savvy crowd on Facebook, not the young internet users of today.
Nintendo Just Announced a Labo VR Kit for the Switch
I can't believe y'all aren't taking advantage of using MongoDB's data loss feature as an opportunity here in true HN taste.
It's comical.
Facebook’s pivot to privacy has implications – if it’s real
We used to call it Permanent Head Damage - it certainly rings true many times during the course.
Did it make them happy, or make them think it made them happy? (only said half teasingly, with thoughts of what the game industry actually optimizes)
Schumann Resonances
> This is a bit of a simplistic view tbh.

It's a very literal one.

I think I've been very open about what an accomplishment they've made, and how proud they should be to have kept Chrome users safe for all of these years.

It is exactly because their efforts to secure Chrome are so impressive that I think this event is interesting.

None of what I've said is about Rust or even a suggestion that they shouldn't keep doing what their doing. One ITW exploit in a lifetime of a product is a great track record.

It is merely interesting to observe when herculean efforts fall down.
To play devil’s advocate, to me plaintext means I want to finish quickly because you haven’t asked and are paying too little, while any solution other than bcrypt/pbkdf2 means I don’t know what I’m doing.
> One argument I can see in principle for 24/192+ sound (not music) recordings would be if someone was a serious transhumanist and honestly did anticipate that some humans will move beyond baseline human sensory limitations in the foreseeable future

True, except that few microphones provide a useful signal over 20kHz, and in the case of produced music, that segment of the signal was never heard or "signed off" by the original artists/engineers and therefore can't be considered part of the artist's intent.
> I do think the distinction between "services" and "microservices" is a bit overblown.

I just realized that adding micro- or nano- or -oriented is a great way to create a buzzword in the current climate. Say, microsecurity, nanolearning, or anger-oriented user interface.
Huawei suing the US, claiming it shouldn't be blocked from selling to government
My take on it isn't that strong, but perhaps it will give you an idea where they're coming from.

Part of rent pays for goods and services: construction costs, upkeep costs, administration costs, insurance costs, etc. Insofar as it does that, I believe that it is a healthy net-positive economic exchange.

Rent also partly goes to pay an individual or company for the service of everyone else staying away from that particular chunk of space. That's the problematic part.

See also: banks selling mortgages are financial arms dealers profiting off of exacerbating all of this.

The real trick is figuring out what to do about it and how, of course.
Great feedback - we will definitely be more neutral in linking out in the future
This solution is just begging for side-channel attacks.

Firefox had better make sure its timing is not affected by such shenanigans, for instance.
They're already operating at 103% of official capacity.

http://www.prisonstudies.org/highest-to-lowest/occupancy-lev...
I'm curious as to why they only said 3 of 17 used salt -- most bcrypt implementations will automatically generate a random salt (since the salt is visible in the generated hash), and 7 people used bcrypt?

Literally bcrypt and you're done (for now).
Fiat new modular customizable electric car concept
Because their entire history will be a matter of public record, and as we have seen repeatedly over the last few years, a wrong tweet from ten years ago can break an entire career, and I only see this getting worse. The kids who take care of what they expose to the public will spare themselves a lot of potential trouble.

Obviously this should not only be an issue of the kids. In an ideal world parents would be conscious of their kids online behavior.
In the context of the equation, having long/non-matching variable names ads to the overhead. I find it orders of magnitude easier to read some Julia code examples that use matching symbols than I do the equivalent thing in python with full variable names.

If I'm implementing some complex equation I try to match the symbols as much as possible and keep the representation compact because it means when I (or my teammates) come back to the code they can see the whole complex thing in one go and easily recognise the equation it comes from.
SaaS Conversion Rate for Free Trials (2018)
> there's zero reason to blame C++

Seems like UAF in C++? So, yes, I feel comfortable blaming C++.

Anyways, I didn't mention memory safe languages in my post, and I'm not even suggesting that Google did anything wrong, or should change their posture in any way. They've been extremely successful.
And yet, wouldn't any sane verifier just call up the school...?
I don' think that is a terribly good example to bring up. While there are certainly a small number of well paid butlers, there is a veritable army of contract cleaners who roam our offices and homes during the night and day. Most of them are making in the vicinity of minimum wage. I'm not sure if servant is the right word for them, but gosh it seems unfair just how badly paid they are.
It's not just the cost of changing, but even having that as an option.

As one of my wise mentors put it, having things not work out with an advisor, even if people have a sense it was the fault of the advisor, marks a student as both "having had their chance" and also "damaged goods".

Unless their department/university facilitates the move, or they already have great publications (great enough to get past the "damaged goods" suspicion).
> and the author doesn't address this

No, it's literally excluded from consideration in the article's title. This is about music downloads, not music production.
I am kinda curious, what far left things you hear on Facebook? I can't remember every meeting anybody of that political ideology in the US, it would be such a taboo. The most liberal person I can think of is basically a centrist, almost everyone else I've met is center-right.
No, sorry but that's nonsense. reCAPTCHAv2 doesn't do the tile fade in unless your v3 score is low. The fade in I'm talking about can take one to five seconds per tile, plainly designed to annoy the user.

Here is a video of the fade-in in action: https://youtu.be/zGW7TRtcDeQ?t=89

(Note that you do not need to be on a shared IP to experience this. Merely using firefox with resist fingerprinting and a adblocker is enough to trigger this behavior on an IP google normally 'trusts' when using chrome.)
This would seem to be a private problem. If people choose to park their money with a non-transparent, unaudited random crypto startup, that's their decision and their problem. I'm not interested in paying for "regulators" in such cases.
Hey! It means something now!</titlesnipe>
That's something a student may learn. But there will be plenty of people reading Python code that don't know how "+" works on dicts; and it is difficult to find out what it does because you can't easily Google/grep for the function name. Doing experiments with dicts is not something you want to be doing while you are reading other people's code.
The semi-ring described at the end on Z_2 = {0,1} with the 'interesting' addition function where 1+1=1 might be more familiar here as Boolean logic, where:

0 -> False

1 -> True

x -> AND

+ -> OR

(a AND b)=True iff a=True and b=True; (axb)=1 iff a=1 and b=1

(a OR b)=False iff a=False and b=False; (a+b)=0 iff a=0 and b=0
Mark Zuckerberg Pivots to Privacy
AFAICT, Facebook consists solely of one’s baby boomer-aged aunts sharing ridiculous memes and other such factually-challenged posts.
HTC consolidated revenue in February drops to 18-year low
I agree. I am moving on, I am hoping no company gets harmed because of these incompetent people.
> only 3 of 17 participants, who used other hash algorithms, implemented salting.

Emphasis added.
Sorry. Until Go gets its head out of its ass and gets proper generics Go will still be painful to use and slow. Not to mention with all the extra code complexity from writing everything with interface{}{} and reflection there are bound to be plenty of exploitable vulnerabilities. I honestly think it is worse than pre-generic Java because switching over the type of the variable is encouraged. Most sane type-checked languages kinda expect you to know what type you're working with at compile time.
This is why I liked Reddit so much when I have discovered it.

You get thematic subreddits for these kind of discussions, and you didn't even need a full-fledged account. Just a nickname. No email confirmation, no phone authentication, no anything.
I also have been cutting things and people out that interfere with being physically and mentally healthy. e.g., when I catch myself engaging on Twitter about political or social issues I don't agree with, I give myself a "Social timeout" for 3 days.

I found HN to be a healthier place to engage. I think it's because HN doesn't poke you with every reply someone does and it allows you to comment and move on. I enjoy that.
I think Amazon doesn't need those pop-up stores now as much since they could easily use Whole Foods stores to display and sell their hardware devices. They also have other options as well to sell devices such as their Amazon Books physical stores.
It's point and click with Foobar 2000, though there might be a plugin needed. Certainly not anything that isn't on their download page. You should be able to populate the playlist, right click, and convert to whatever format you'd like. I've done this for batches of thousands of tracks without much difficulty.
Oh another cool thing about vinyl is the needle can couple to the environment too, try driving its case with another speaker or putting it in front of it's own big amp for feedback.

Also, I'm a little bit surprised that nobody focuses on more "out of the box" perception of sound. One can absolutely sense hgh frequencies, personally feel kind of like pressure where you can't pop your ears to equalize. Playing around with this feeling adds emotional tension and color to tracks.

Also, interference patterns are perceptible, and they sound kind of... Different from pure tones, idk.
> Rent also partly goes to pay an individual or company for the service of everyone else staying away from that particular chunk of space. That's the problematic part.

That sounds like a general aversion to any property rights or right to privacy at all, if you mean that you're paying for nobody else to come and be in the property at the same time as you. Not sure how it's specific to rent?
Ah, I misunderstood.

Please be careful with the "50+" comments, ha! Not there yet but closer than I'd like to admit, and I grew up during the sweet spot of modern computing. My biased opinion is that Gen X had it best in this regard.
You raise valid issue, but that issue has nothing to do with the telemetry itself, but with the brokeness of US banking system. Essentially everywhere else the bank account number is simply an public address that you can use to send money there and nothing else.
Which VPN should you trust? That’s tougher to answer than you’d think
Depends on if you mean Java->Bytecode compilation or JIT. For the former, I don't recall ever seeing one, for the latter I've gotten one fixed.
Yep.

I sat through a Dave Ramsey course several years ago. I don't remember most of the specifics, but I'm pretty sure that the "$1000 emergency fund" is just the _first_ step, for those who don't have _any_ existing savings yet.

Looking things up... yeah, these are the "7 steps" he suggests [0]:

- Step 1 – $1,000 to start an Emergency Fund

- Step 2 – Pay off all debt using the Debt Snowball

- Step 3 – 3 to 6 months of expenses in savings

- Step 4 – Invest 15% of household income into Roth IRAs and pre-tax retirement

- Step 5 – College funding for children

- Step 6 – Pay off home early

- Step 7 – Build wealth and give!

So, the idea is to get _something_ in reserve now, then build up that fund once you've eliminated debt.

[0] https://www.daveramsey.com/dave-ramsey-7-baby-steps
Genuinely curious, how is WhatsApp spying? I thought they were encrypted? Are they not end to end encrypted like Keybase or signal?
Ask HN: What's the most important thing that has helped you to grow as developer
If you're working in a domain, is it really that much to ask to become familiar with it? Especially if the domain has a large theoretical component.

When we teach people software engineering we teach them concepts like "give your variables meaningful names". Now that we're in sub-domain of implementing some mathematics in software, I'd argue that matching the variables and functions to their source (more or less) _is_ exactly "giving your variables meaningful names".

> A great deal of complexity could be removed from machine learning papers by notating algorithms as algorithms rather than formulae

And you would immediately lose the ability to quickly and easily recognise similar patterns and abstractions that mathematical notation so fluently allows.
The author seems unaware that RMS has continued writing, on "Services as a Software Substitute" among other topics. See https://www.gnu.org/philosophy/who-does-that-server-really-s...
Oh, golly, that hot yellow mess. I bought one and it's still in a desk drawer somewhere. The audio sounded great, but the device itself was rather dire. Here's my notes on it at the time: https://tenfourfox.blogspot.com/2015/01/and-now-for-somethin...
In Europe Stripe offers 1.4% + 25eurocent for EU cards, with the same 2.9% for non EU cards. Stripe actually charges US customers an extra 1% to process EU cards (3.9% total), plus a hefty forex fee. For a company like MS with a major EU presence the average rate will be skewed lower than what the market looks like.
I read your post as you were some sort of event planner or something, not that you were using it in a personal group of friends. Please forgive the misunderstanding. I see a lot of groups/businesses that use facebook exclusively to communicate and organize events (like the local paintball field) and they are missing out on some people (I have no idea how to quantify how many). I'm sure they're reaching more people now (using facebook) than they were using whatever old method they were using.
You know, the Big O notation is all about relating number of operations to input size. Ghz is, roughly, proportional to number of operations in a fixed time frame (let's not worry about memory bandwidth for a second), HDD size is proportional to input size, so this comparison makes sense.

See it this way: for an O(n) algorithm to continue being usable, GhZ/GB ratio needs to stay constant over time.
For reference, this is the sort of thing Ajay is talking about:

https://thewire.in/media/cobrapost-sting-dainik-bartoman-dai...

https://scroll.in/article/880384/cobrapost-expose-shows-indi...
AI is whatever hasn't been done yet. - Douglas Hofstadter (1980)

A view perhaps exists that "true AI IP" is perhaps only algorithmic. However, let's be frank: it's rare that a new algorithm is the best, fastest, cheapest, only, or most appropriate solution for a problem.

Remembering that most inventions (AI or otherwise) aren't fundamentally enabling new ("green field" / "blue ocean") areas (they're just competing with existing approaches which are more costly, slower, less convenient, less reliable, less available, or less accurate than they might be - eg. after the invention) we should perhaps expect applications of existing algorithms to new datasets or domains to be the most numerous 'AI' applications in the marketplace.
Missing ? at the end of the sentence.

OCD, sorry.
Having once run my own freelance web dev company, I feel very comfortable saying that I would not take a project where I wasn't getting paid enough to bother hashing passwords. That's beyond justification. Either reject the client or protect their users.
They just launched project zero, so at least they seem to be addressing the issue.

https://blog.aboutamazon.com/company-news/amazon-project-zer...