skysight-inc/HackerNews huggingface dataset:
That is interesting, I wonder how many people do buy appliances on credit.

I recently replaced a refrigerator, which was over 40 years old and which I'd done multiple overhauls myself on over the years.

Appliance store had lots of refrigerators in the $3,000-$16,000 range. With lots of features and compartments, multiple icemakers, LED zoned glow lighting, exotic hinges, internet connectivity, etc.

I got a good fridge for $500 for cash. No icemaker and a single fridge and freezer door so it had the highest energy efficiency rating, higher than all the high tech fridges there with exotic energy saving features. And plenty of room inside because it wasn't taken up by compartments and drawers and icemakers.

So... if most people are financing as you speculate, maybe it is because they are going for these $5000 refrigerators that don't work as well as the $500 refrigerators.

Also I just know that all the internet, digital stuff, and touchscreens on the $5000+ fridges is going to break down in a few years and cost a fortune to repair. No thanks!
Testosterone is a weak criterion for sex determination in sports
So you're still storing part of the plaintext... That's still insecure

Plus, the keylogger could just collect a few logins and it completely defeats the whole thing, so it doesn't help anyway. It's just terrible, it makes everything worse
> My friend was working on a chess variant for years, and it was very easy for him to make the AI be very, very good but that isn't fun at all! It would always win.

Oh yeah, I can relate to that experience. My chess app had an "undo turn" button, where you could jump back an arbitrary number of turns. The most frustrating thing wasn't the AI winning, but realising that the AI had already won several turns ago and you're just a dead man walking, with all remaining options leading to failure.

I never hated A* as much as during those games.
Also, if all those combinations were stored would the software use separate salts for each one? Well designed software would but I suspect anyone intelligent enough to consider that would also raise a loud voice at the meeting where this feature was being discussed. They probably use a common salt and if it's known how long (at most) each partial password is (say 5 characters) it's super trivial to generate a rainbow table to break it.

Honestly, even if the salting was done independently per chunk, the fact that you know each chunk is under 5 characters long massively reduces the time to generate a rainbow table to verify the password, even more so if the entry field only allows 36 character entry.
Network hubs show potential for predicting drug responses
A better way of stating it, "It goes to show how few folks truly value testing in isolation" that is, having good tests in isolation is seen as a nice ideal to pursue, but delivering working code first trumps all.

"How do you know it works?" is a common reply to this line of reasoning, obviously we all have an idea of what "working" looks like, it's just whether or not we have gone the extra step of formalizing it in the form of tests.
Binary-Ninja and IDA are a completely different class of tool from Radare. Don't get me wrong, I'm happy Radare exists. And I occasionally check it out and play with it -- I think "the vim of RE tools" is a cool point in the design space. As a Linux person, I find that attractive, especially for certain kinds of automated stuff (vs loading Python scripts in through a UX or whatever). But that kind of aesthetic is an extremely small part of these tools in the whole, and it simply does not matter if the tool cannot "keep up" with your work. All of that comes later on. You're comparing a Jalopy to a Prius -- and that Prius is already going up against a Ferrari.

When I use IDA, almost all of my actual work in the tool itself is very "boring" RE stuff, because it does its job. I am not constantly fighting with it to get basic things analyzed propertly, or fighting a lack of supported features that prevent it from opening something, or a bad analysis engine that misses 80% of things I later reverse by hand. You could comparatively stitch something together with the tools in Radare to patch over this for the cases it doesn't handle. You might even call those "edge cases", but reverse engineering is 90% edge cases and 10% easy stuff. I'll already be done by then.

I should also be clear that part of the issue is that reverse engineering is a money game, one where money is easy to come by if you have the clients -- and as a result and a lot of the developers of those tools have more money/labor available than the Radare developers. That also means people who need this can simply throw money at a problem, like an expensive IDA license, and move on. That doesn't mean Radare developers are incompetent. If you gave them a lot of money -- like, enough to fund 5-10 core developers for a couple years -- Radare would dramatically improve extremely quickly, I'm sure. (This is one of the reasons why I suspected a true competitor to IDA would never come around as FOSS -- it takes a shitload of money to do that, and it's also something you can make a shitload of money from.)

But I'll say this: if you put me into a situation where I had to reverse something, I'd pay for an IDA license 10/10 times even if every Radare developer was at my command, and I'd probably still get it done faster (most RE tools I know of lack even the most basic, fundamental features IDA has had for years -- such as FLIRT -- that can dramatically improve reversing speed.)
... so far as we know. I can't say that I trust the NSA to follow court orders. At worst, I would expect them to just spool up another, similar project with higher levels of secrecy.

Is this paranoid/conspiracy-theory-esque? Maybe a little, but I honestly think it's reasonable to consider this in-character for the NSA.
https://en.m.wikipedia.org/wiki/Security-Enhanced_Linux

https://en.m.wikipedia.org/wiki/NSA_Suite_B_Cryptography
I can't deny that SimCity was quite an awesome game at the time. I can see how it might have inspired some architect.
> What's more likely - that the bank gets hacked, or that you install a keylogger?

Given the (apparent) lack of security for the bank, I'd say the former. IF the bank was actually secure, then sure it'd be more likely for me to have a keylogger.

> Also there are ways to implement this without keeping the whole password in plaintext/reversibly encrypted

Maybe.

> One example I just thought of: Ask for 75% of the password each time, remember random 1/3rd of that (25% of full password) till the next login together with the hash, and on the next login ask for all the letters you haven't remembered (and fill the ones you remembered, then hash everything and compare).

I challenge you to really think about what you're proposing to do. I think it's far more convoluted: it does not solve the keylogger problem and adds complexity to both the client and the server. If you think I'm wrong, then write it up in a spec and show us.
> I have been toying with the idea that travel is the ultimate expression of selfishness and narcissism.

Really? Because although I may not have travelled much, I can't say it's ever been "about me". Quite the opposite. For me travelling is about where I'm going, what I'm experiencing, who I'm meeting. I think your applying your perception of a subset of travellers on the body at large.
Thank you. I was trying to figure out what language this is, because there's some weird syntax in the .h and .cpp files that I don't recognize as C++.
You can click anywhere on the image too; not aiming for that tiny [next] does help a bit.
This is a smart move that will drive more traffic to the Windows Store. They should have done this ages ago!
One of the nice parts of NNs is that it takes some maths education to understand what's going on. My initial thought when reading the title was: "uh oh, are AI tutorials going to be the next PHP/MySQL tutorials, with god awful code all over the internet?" They haven't yet insofar as I'm aware. I hope the maths involved will prevent them from becoming that.
Security flaw found in shared hosting providers
I have never met a scientist that came across a discovery and said, "Wow, this is a huge discovery and we're not even close to being equipped enough to process it correctly, lets just seal it up again and wait." But that was what happened here. It is so amazing to get the chance to look deeply into these things with more capable technology.

Yet, I read a lot of archeology books in my former days and almost all of them said modern archeology is founded on digging test pits and strips, to avoid complete site exposure unless circumstances demand it, since future science will be able to exploit the un-disturbed state of the site to do better science.

Archeologists do the LEAST digging possible nowadays. Its the norm to leave it the hell alone, not the exception.
> Starting salaries for recent grads from decent colleges are $90k now on average.

I graduated ~7 years ago. Besides this figure being far higher than I experienced as a starting salary,

1) These salaries are for high cost of living areas. Rent can and often is $25,000 or more a year.

2) These high cost of living areas, homes can and readily list for $1,000,000 or more, which is, in your estimate, 11 times the starting yearly salary, ignoring every and all expenses.

3) These 'decent colleges' can put you in several hundred thousand dollars in debt.

4) $180-$400k is not in the salary range for most software developers. This is well above average.

There's no way I'm buying a home when I'm 30. When I do, there is no way I will own it outright. And I feel like I make a good living for myself.
No offence taken.

As next steps, I've installed Yomichan and I plan on purchasing a copy of Genki I.

Thank you very much for the pointers!
Well, it was worth the try .. sounds interesting though! There's a resurgent interest in Hypercard these days .. if you ever get the druthers to go look for your old stack, I'm sure it'll be of interest to some of us. :)
I'm impressed with what they've been able to do, and happy to see that they're developing in-house. When I was an intern there in the mid-2000's they were still working on fly-by-wire and most (all?) of their programming was done by a separate company.
Depends on the game. The entire genre of strategy games could probably benefit from smarter AI. More so for 4X style games. Mostly, the current AIs act like players, but make terribly inefficient decisions that get 'balanced' at various difficulty levels by throwing more resources at them or other advantages. So the games vary between being absurdly easy, to being difficult simply because the AI cheats, and even then, it doesn't usually leverage its advantage well. As an alternative, people play against other players, but with long-running strategy games, this adds real life logistical problems. An AI that plays like a human, and can be adjusted for stronger or weaker play would be amazing for the 4X genre. Perhaps difficulty adjustments could even be reverse to giving the player 'cheats' or free resources on lower difficulties if that's easier than throttling the AI.

Outside of those games, I'd say any game with competitive multiplayer could benefit from smart human-like AI. Some people play games for a challenge. The unpredictability of other humans is most of the fun, whereas playing against a typical game AI is just a matter of figuring out how it works, where it fails, and then taking advantage of that failure repeatedly. Considering the market for competitive online games, there's likely a similar market for competitive AI games.

I suspect the real barrier that is that it's a lot cheaper and easier to sick players on one another than to make a challenging human-like AI.
Show HN: HN front page sorted by vote:comment ratio
Theoretically AMD has done at least some of the work via ROCm. I have not tried using this so I don't know how tested it is.

https://rocm.github.io/tensorflow.html
The answer my girlfriend has taken, get a good insurance.

$250 pair for $35. Done.
They might have backdoor negotiations on the revshare any ways.
What you have written doesn’t look at all symmetrical but d1 | d2 looks very symmetrical. Operators being symmetrical around a vertical axis tends to imply being commutative (although there are many exceptions e.g. a divide symbol (but note fractions aren’t symmetrical) or a minus sign or using ^ for exponentiation (but superscripting is not symmetrical) or matrix multiplication (but maybe one could argue this is an abbreviation of function application))

Secondly I claim that the issue with using | is that it is not a new operator. It is a new, incompatible meaning for an old operator. Old code might not bother checking that its arg is a set because of it weren’t a set then | or in would fail. New programmers might see dicts as being basically sets and wrongly assume functions for sets would correctly work on dicts.
This website is a useful resource, but it has some limitations. The algorithm used does not take into account the frequency response of the human ear. If a track contains a lot of very deep bass, it's possible for it to have a low DR score but still sound like it has a high dynamic range. The measurement can also be fooled by surface noise and filtering when measuring vinyl:

https://wiki.hydrogenaud.io/index.php?title=Myths_(Vinyl)#Ef...
How about Xamarin?
Lyft IPO: A Favorite Financial Metric Is Messy
Live of the momentum, I don't think so.

I see a lot of Google ads going to apps and once they are there. Stop the ads.

Smart move
>And low karma-to-comments count depresses the rank noticeably.

Which is unfortunate. Merely having a civil, thoughtful conversation in a thread that doesn't generate enough karma implicitly flags it as low quality.
Tell HN: Thank you for this community
Shout-outs to everyone who contributes high-quality submissions/comments.
Despite the large userbase HN has today, it's still one of the most informative communities I've come across. Also thanks to the mods for their effort in keeping it this!

I'd only wish something like HN would exist for every interest/discipline (So many of mine don't have valuable online communities)
Range anxiety absolutely exists. It's the fear that you'll run out of power on your trip. It's the same anxiety you get when you're low on gas an unsure if you can make it to a gas station.

You do get over it. It takes a while to realize that you generally will have a full charge every day and you stop looking at the gauge.
I think this system would work well for game platforms too, such as Steam. A big point of contention for Steam is, how much the platform does for advertising your game. By having two separate taxes depending on how the game was found, you can have the best of both worlds. If you do your own brand building and advertising, then those sales get a better cut, while the platform can also get their cut for the advertising they do.

This also aligns the incentives on what the platforms advertises, to some extent.
> You mean, "valid, according to the latest 2017 RFC". Such young RFC is still to raw, too immature to adopt, especially if it concerns data interchange formats. IPv6 was created in 1995, and it apparently still too young!

No, I mean valid, according to the oldest, 2013 RFC and all later standards. Non-ASCII characters, encoded directly w/o escaping, have always been supported by JSON. (JSON comes from JavaScript's syntax, and it's legal there, too.)

> I fear, that a proper full-featured JSON spec, with comment support

Many of us use JSON as a language to exchange data, service to service. Comments do no good in that regard. JSON, even w/ comments, is not terribly friendly. I'd recommend TOML or YAML, depending on the situation.

> mandatory UTF-8

JSON is required to be encoded in one of the Unicode UTF encodings. So, it's not required to be UTF-8, but it's pretty close, and I don't think I've yet run across a JSON document that wasn't UTF-8.

> strict prohibition of hex-encoding

I don't think you'd really want this. (Particularly if you want human-friendly features, like comments…) In debug situations, certain non-printing characters are just easier to deal w/ if they're not printed, for example.
This would be illegal in California I think. Tips can't be used for wages and the employer is not allowed to touch them.
It's used by almost all UK banks as well, sadly. One of my accounts (First Direct) has max length of only 8 characters.
Looks great :-) You should charge for it. Maybe even in the interest of your users, to keep the service alive. You could leave it open source so people can self-host, or use your server for a fee for convenience.
There was this story from awhile back: https://www.washingtonpost.com/local/traffic-weary-homeowner.... Below is the key part:

> When the traffic on Timothy Connor’s quiet Maryland street suddenly jumped by several hundred cars an hour, he knew who was partly to blame: the disembodied female voice he could hear through the occasional open window saying, “Continue on Elm Avenue . . . .”

> The marked detour around a months-long road repair was several blocks away. But plenty of drivers were finding a shortcut past Connor’s Takoma Park house, slaloming around dog walkers and curbside basketball hoops, thanks to Waze and other navigation apps.

> “I could see them looking down at their phones,” said Connor, a water engineer at a federal agency. “We had traffic jams, people were honking. It was pretty harrowing.”

> And so Connor borrowed a tactic he read about from the car wars of Southern California and other traffic-weary regions: He became a Waze impostor. Every rush hour, he went on the Google-owned social-media app and posted false reports of a wreck, speed trap or other blockage on his street, hoping to deflect some of the flow.

> He continued his guerrilla counterattack for two weeks before the app booted him off, apparently detecting a saboteur in its ranks. That made Connor a casualty in the social-media skirmishes erupting across the country as neighborhoods try to contend with suddenly savvy drivers finding their way on routes that were once all but secret.
I've found that lots of people from math backgrounds are comfortable with non-descriptive variable names. Most variables in math are Greek letters, or "i, j, k" and things like that.
Yeah. I ask this because I want to be able to understand the personality of whomever is writing these comments, before deciding if I should consider or simply dismiss them.

If the person will just say "year, clearly Netflix is just as negative for society", then that will be enough for me to completely dismiss this person's opinions on the entire matter, since Netflix, just as Facebook, has provided me with massive positive value, even if, at times, it made me jealous of seeing the life of other people as presented in some TV shows, again just as Facebook.
Reify Health | Data Engineer (Semantic Knowledge Management) | Boston or Remote | Full-Time | $100,000 - $150,000/year

>> About Us <<

At Reify Health, we are building a more creative healthcare system. We envision a world where every potential therapy, if safe and effective, is available to the patients who can benefit. Our healthcare system relies on clinical trials to develop new, potentially life-saving treatments for patients. But clinical trials continue to be slow, unpredictable, and expensive. Reify Health’s product helps both the research leaders driving forward clinical trials and the doctors and nurses who care for the patient participants.

>> What You'll Do <<

You'll work with our new data team to support the development and expansion of our structured knowledge management system for temporal/atemporal data and integrate this system into a customized clinical ontology. You'll work within a functional programming environment (Clojure!) using Kafka, Kubernetes, PostgreSQL, and more. Additionally, we'll be scaling our systems internationally while respecting both regulatory requirements (GDPR, HIPAA, etc.) and patient privacy.

>> How to Apply <<

To learn more and apply, visit: https://jobs.lever.co/reifyhealth/d4d1bd8c-c82b-47e7-9e15-f5...
This is really cool and well presented! Lots of interesting ideas as well.
How did they crack the Laptop? Just Bruteforcing a bad password or 0Day-ing the Encryption?
But “sounds worse” in this case is relevant only to your preferences and to the preferences of some N of listeners, where N is totally unknown. The parameters you believe amp manufacturers should measure are therefore only relevant to your idea about them.

THD, SNR, frequency response and many other metrics are easy: they define either accuracy or precision. If you want more than that, add external affects hardware or DSP. The purpose of the amplifier is to amplify.
Either way, it's better than 30% commission.
Uh, first question: None of your business?

Second question: https://www.forbes.com/sites/theyec/2018/05/30/the-importanc...

I find having some sort of routine and dedicating time for me, rigidly, and sticking to it tends to help break that cycle. It doesn't have to come at the expense of work, but work shouldn't completely dominate your ability to set aside that sort of time to do anything but think about work. Not even ponder on that one bug in the latest feature branch.

For me, as to why I linked the article above, it's morning time. As with all things, YMMV.
The short answer is that the existence of multiple dispatch isn't motivated by the visitor pattern.

Moreover, multiple dispatch isn't obscure at all.

C++ has it, but only statically, for instance, in the form of overloaded functions. C++ chooses a function overload by looking at the types of all parameters and arguments.

Multiple dispatch is similar, but the run-time types of the arguments are used.

This is broadly applicable in making all sorts of situations nicer.
25% of the password. Shouldn't matter that much. And you can change the percentages to for example 10% (asking for 90% of the password each time). Demand slightly longer passwords if that's a big problem.

Hm, actually instead of masking the password to defeat keyloggers they could also just permutate the characters. So that you have to enter password in different order each time. But usability would suck so much :) I prefer the masking.

Also - universal keylogger wouldn't know which characters of the passwords you were asked for. They would need to make a keylogger designed for this bank website so it can understand which characters you provide. And they would need to update the keylogger with updates on the login website (which preasumably would be written in a way that makes it hard to know which characters these are - for example with randomly generated ids of the input fields and provided in random order then positioned with javascript).

I know - security by obscurity. But it does help.
Compared to the massive cut Apple takes on their app stores Microsoft's revenue split seems pretty generous.

I downvoted your comment because you aren't being intellectually honest to suggest it makes sense for them to provide payment processing, update management and DRM for free to app developers when at the very least they'd be losing big on the credit card processing side. So your comment reads as an elitist jab against Microsoft and not actual constructive criticism.
It isn't open source, but you can still play it if you have Flash installed: http://www.kongregate.com/games/thegrandestine/chess-evolved...

Imagine chess but with 100+ different pieces and an element of collecting/upgrading pieces.
As someone who both tinkers with cars and bikes, and has designed and tested drives for various kinds of electric motors (brushless, AC,...):

- The perception that people have of how dangerous gasoline is, is greatly over exaggerated.

- The perception that people have of how dangerous high voltage drives and lithium batteries are, is greatly under exaggerated.

With 15 minutes I can give you enoguh pointers to have you tinkering your gas engine safely.

No such confort exists if you are going to tinker with your EV