skysight-inc/HackerNews huggingface dataset:
They just woke me up during a colonoscopy due to sleep apnea (I did warn them and even bring my CPAP, which they chose not to use.) Highly reminiscent of the “I’m going to go medieval on your ass” scene in Pulp Fiction.

Understandable, but not fun at all.
Question for those who have migrated to Kubernetes - at what point did you look for something bigger/better than what Docker Compose (or Mesos) can offer?
Don't underestimate the impact of US cultural imperialism. We've probably all seem shows or movies where some kid wants to get into Yale or Harvard. How many European movies do people see in the US?

I think another factor is that the admission system is different. I only know about Germany, but you don't have to apply in the same way at a university and your grades from school are what matters there isn't some additional test like GRE or SAT. So it plays less of a role culturally and has thus less opportunity to be a topic at all in shows and movies even if Americans were to drown in European media.
To Compete with Google, Openai Seeks Investors–and Profits
Microdosing: Improving performance enhancement in intelligence analysis [pdf]
There are several huge highway projects in the area that are linked directly to deforestation and other concerns as well.

https://en.wikipedia.org/wiki/Interoceanic_Highway
To answer your question, yes Baltimore is majority black at roughly 64%: https://en.wikipedia.org/wiki/Baltimore

As an FYI, Baltimore City and Baltimore County are separate entities (the city is not part of the county).

I cannot speak on the 70s and 80s, but from present observation OP’s assessment of crack vs. cocaine penalties would perhaps be more relevant to a city like NYC than Baltimore. Cocaine (the good stuff rich white people would buy) is not as common because there isn’t enough of a market that could afford it. Overall, heroin is now the most ubiquitous drug with other prescription meds/opioids used as substitutes sometimes. Heroin has really hit the city hard.

In terms of policing/justice, corruption is a pretty big issue. On an everyday level, the police basically won’t do shit unless there is a crime worth their while (so in a hit-and-run or theft for example don’t expect much help).

The neighborhoods in the East and West sides are high in violent crime from gangs and drugs. There are blocks with more rundown vacant houses than occupied ones. Compared to the gentrified pockets, these areas are like favelas.

Baltimore has its redeeming highlights, but it’s nowhere near the industrious city it once was, and is still trying to find a new direction.
Err, isn't everything you are worried about also served quite well by all server-side rendering frameworks since forever?

I legitimately cannot understand your issue.
> No reasonable threat model says, conducting this attack takes $100,000, and since most people don't have $100,000 in savings it's safe

Sure, that is never the claim.

> And in particular the claims here are in fact about exact amounts: a factor of two

Sure, but that is still a factor of X, an unknown amount.

The bottom line is that for many actors, even nation state, the cost difference of 20M and 40M might mean that they have to seek alternative options. Not every actor has access to infinite amount of USD or compute.
In fact, without a practical attack against SHA256, all of the serial number bits could be zeroed. This is undesirable for other reasons, but the serial number isn't part of the cryptographic security of the certificate except as far as it can be used to prevent the person requesting the certificate from anticipating or controlling what the entire signed data will be.
The problem with stimulants is that you get cracked out really easily and it is very hard to maintain. Physically it takes a toll: you can’t sleep, your muscles’ feel sore, you mind races.

Heroin, provided you have the money, is much more sustainable. You can feel fine, day after day, on heroin (provided you don’t run out).

Moreover, it’s hard for people to notice. If you snorted some coke everyday, people might think you were overly enthusiastic and eventually, people would notice your disjointed and cracked out thoughts. Things like: “we need to replace all of our code because it was garbage!! Fuck that shit!! Lets get it done!! Lets fuck our competition up boyz!”

With heroin it’s more like: I can get this done, and more, I’m just going to work through it. Ans it’s okay, because I feel great while I’m doing it.
Autonomous Vehicles and Scaling Risk
Is there any sense in compiling human-readable LLVM IR, like many compile-to-C languages aim to do?

I imagine doing so wouldn't have much value, as nobody programs in the IR.
Don't leave Jeb stranded on Duna.
Interesting. We share a lot of frustrations and challenges.

What sort of spend levels and data volumes do you typically need to see for the lift studies you do with TV and CTV? Do you typically isolate to specific markets for that?
Mandatory CT does actually solve that: if a browser won't trust a cert without seeing it include a signed certificate timestamp from a trusted log, then the CA has to disclose certs, even if they're only targeting one user.

But most people don't have e.g. Expect-CT set up, so it's not clear it would help on a majority of sites.

(One reasonable option would be to require certs from DarkMatter, and really every CA going forward, to have SCTs in their certs, and enforce that with a flag in the root store. But if there's a concern about DarkMatter specifically, it's probably better to phrase a change to the root store policies that say "We won't accept CAs we just don't trust" instead of waiting for them to misbehave and then rescinding their membership.)
Elizabeth Warren is winning :(
If you're the kind of person who doxxes others, are you going to care if you clobber the wrong person occasionally?
Chirau, our goal is to build more computer labs in more than just Kenya. Kenya was easiest for me because I already had a school there to do the pilot program. As you know with Africa, every country is a whole new market place with its own set of challenges. I will let you when we expand to more countries, it will probably be Ethiopia or Tanzania next. In the meanwhile, if you are looking at a similar projects in other countries, here are a few https://www.iamthecode.org, http://www.gebeya.com/: Ethiopian, https://andela.com/, https://worldcomputerexchange.org/, https://thisisafrica.me/born-to-code-rwanda-launches-first-c....
I've been seeing that for the last couple of weeks, off and on.
A huge value of attending writ elite US universities lies in the network you get to build. While it's nice to have future Nobell Price laureates in your network it's also nice to have heirs to bring late family fortunes that also might already bring very good family connections to the table.
I don't have specific examples but I have read of standard manufacturer tools to do audio analysis of diesel engines to diagnose which part(s) are failing. AFAIK this has been a standard type of diagnostic for decades, although perhaps not as widespread or cheap to do as it is presently.
Aren’t the icons all different?
Good response time nonetheless. Sam Altman recently did an interview where Tyler Cowan asked, "How quickly should someone answer your email to count as quick and decisive?"

Sam's answer: "You know, years ago I wrote a little program to look at this, like how quickly our best founders — the founders that run billion-plus companies — answer my emails versus our bad founders. I don’t remember the exact data, but it was mind-blowingly different. It was a difference of minutes versus days on average response times."
Haha, I ran a straight convolution net as an encoder for asr in a toy project while learning seq2seq. Worked fine in the small datasets I was working with, like the voice commands set...
There's no init and only one process by default in alpine's docker image but you can add them and run more processes if you want.
bizarrely? the point of college is social connection, growing up. the book learning you can buy the text (nowadays read similar work online)
As I understand it, this "guarantees" privacy by embedding the key in the link-- if that's generated client-side, it never gets sent to Mozilla's servers (assuming they don't go out of their way to grab it via JavaScript) and you can have end-to-end encryption.

But, if I'm logged in, it looks like Mozilla's storing that fragment on their servers: if I upload a file from one browser, then sign in on a different browser, I can see the link I generated (including the fragment) from the first browser in my list of uploads, and I can download the file.

Doesn't that negate their end-to-end encryption if Mozilla servers have access to the keys?
I think that’s a good way to put it. When coked out, you get all these grandoise plans and might start to rewrite the entire codebase. With heroin, it’s more like you can just keep on chugging for a long-time.

This is in fact what makes heroin so dangerous. As long as you have the money, you can keep on chugging, while feeing chill and relaxed at the same time.

The problem is when you run out.
brilliant analogy
I recently had the pleasure of using Traefik[0] as my reverse proxy, which similarly handles SSL automatically via LetsEncrypt. Lovely piece of software!

[0]: https://traefik.io
Should Universities Teach Conspiracy Theories as Knowledge?
The Walmart's existence as a crime nexus was because it attracted trashy people from other neighborhoods, not because it was a congregation point. The same problem didn't occur at previous superstores, or high school football games, or the community college.
I think it was just a misunderstanding on my part. It sounded like OP was advocating for a purely paper-driven system. That's why I said it's a Luddite position.

I think the misunderstanding on your part may have been similar meaning I'm advocating for entirely electronic.

To me electronic voting means a machine generating your ballot which avoids spoilage like hanging chads, incorrectly filled out ballots, etc (paper ballots should also be an option). Electronic voting means using counting machines to tabulate everything quickly while creating & retaining a paper trail for auditing. This is literally what Schneier is talking about: merging the advantages of both to mitigate the disadvantages of either.
You just probably know things that I don't know. That's why I am asking.

Which SSR framework do you prefer?
While I think the hygiene hypothesis makes a lot of sense, we need to be careful about assuming it's correct, because we're working from "this is how it is now, this is how we think it was then, what changed (and can we find examples of it not changing to control with)?" not "this is how it is now, if we do this, what do we think is going to happen?"

There's also the next logical followup of "well, if we think/assume/know this is the case, what should we do about it?", and while we're experimenting with a few avenues (deliberate helminth or similar mostly-harmless infection is a surprisingly promising avenue), we're definitely in Early Days of even testing different things, much less suggesting any concrete actions.

Growing up, I knew relatively few people with any kind of allergic response at all, minor or major - two of my three younger siblings (the closest 4 years my junior) developed mild (e.g. even if they got scratched they're not gonna need an epipen) cat allergies as they got older, and a couple of their friends have "no really there was a peanut in this room in the last 24 hours probably and That's A Problem" levels of allergic response.

That said, it's also a retrospective problem of estimating prevalence of something you didn't really note down the same way at the time as important if it wasn't critical (or if e.g. you didn't have common usage of allergen tests unless someone suspected something - for example, I've not had an observed/suspected allergic response to anything, nor had an allergen panel because it's just...not been an issue).
This leads to the problem of letting _other people_ force you to show them how you voted.

This is a real problem! The secret vote isn't just about making sure that you can choose privately, but also about making sure that other people don't have ways of coercing you into certain choices.
Bingo! Wealth == Privilege. That's the way the world works sadly.
Cars have been improving safety significantly over time as well. However, the fatality rates seem to be significantly better for airlines.

https://www.bts.gov/content/fatality-rates-mode

For the sake of argument, assume cars travel an average of only 10 mph, and air carriers carry just 50 passengers (low estimates tilt the comparison in favor of cars). That would mean cars had 1.1 fatality for every 10 million hours in 2015. The corresponding figure has been between 0.0 and 0.6 for the last decade, and airlines come out way ahead even after amortizing the 5.8 from 2001 over the following years. And this is with very conservative assumptions.

On the other hand if you add in non-occupant deaths, the numbers might work out better for cars, even after using less conservative assumptions, once you amortize the non-occupant deaths from 9/11.
I'm not sure what that extra sentence changes. I would still (and in fact, did when I read the release) interpret both sentences together as, "you can enable this today via an origin trial, and in Chrome 74+ it'll be enabled permanently." I certainly wouldn't read it as, "you should sign up for an origin trial and then provide us with feedback so we can continue to evolve the spec."

I realize that to no small degree that's my own fault for not understanding the specifics of origin trials, but how many people reading this article already understand origin trials?

I don't want to derail things -- I just wanted to get clarification that this wasn't going to be HTML imports again. At the end of the day, I don't care how the announcement is worded as long as it's not actually being shipped in the next release as on by default for every site. The spec itself looks really interesting and I'm excited to see it develop.
My guess is there is always a time delay of some sort on files. The transient "something went wrong" errors were surprising.
SHE'S HACKED THE SYSTEM
man fuck canada and the usa. how are we the only ones in the world to not care about safety. even if its a 0.5% chance 150+ people die, isn't that enough to warrant temporarily grounding a handful of planes. sigh common
Totally off topic but I see some of those WWII era piston craft flying and its quite a nostalgic experience.
Sounds like you don't understand Docker or containerisation in general

> Still have to decide on a single OS to reduce maintenance problems.

No you don't, you can run various distros in docker containers. We're using a mix of Debian (to run legacy services developed to run on old Debian LAMP servers) and Alpine (for our sexy new microservices) at my current job.

> Could just have installed all the services (which are all available as packages) and handled the configuration files

Then you would have a system dependent on the volatile state you configured by hand, meaning the system configuration is not declarative or reproducible.
Secret Life of Machines – The Refrigerator (1988)
Youtube was down for a few hours late last year.
The Costs of Downtime
Also Mountain View, but had issues sending/receiving as wells. I'm on Comcast, you?
Yes the previous value was not infinity. It was impractical to solve in a human lifetime, but if they keep trimming off a few bits it very quickly becomes practical. If actually "infinity" then dividing it by any finite number would still result in infinity, which is not the case here.
> Such an attack doesn't exist.

As far as we know.

> Any such attack would also become feasible with twice the budget.

Assuming that the attack yields to parallel computing and scales linearly with more cpu/cores, because linear programming is bound to current compute capabilities and then theoretical limits like Bremermann's limit and Margolus–Levitin theorem.
As a passenger I would feel safer knowing that last information and instructions are not send a day before the flight but a pilot gets actual training?

Maybe that’s just me
Having issues in Sydney :)
s6-overlay [1] is also a popular choice for Alpine-based containers.

[1] https://github.com/just-containers/s6-overlay
Court Rules Star Trek/Seuss Mashup Is Copyright Fair Use
Its probably a little easier to reason about when you're toying around. The article does suggest using the API for any serious project.
The root of this is definitely GCS. We noticed some keys in a GCS bucket go inaccessible since like 19:15-19:20ish PDT, and then we noticed increased timeouts/503's ramping up at 19:30 and plateauing at 19:45. But error rate for us seems to have gone back to nominal levels since 20:10... but the keys that originally went unavailable are still returning 503's.

Fun times.
Oh crud, thank you!

I didn't know that, and there are a few apps that I definitely want to use this with. Why on earth isn't this part of the general settings?
How long for?
Just because I like telling this story: My university taught me every sorting algorithm known to man (or at least it felt like it at the time). After graduating, I traveled for a bit in the UK and got a job at a travel tour company doing odd jobs. One day the finance department asked me to sort a room full of records. Normally it took them 2 weeks to do the work.

"Right! If there is one thing I know how to do, it's sorting", I though.

Finished the job in half a day (shell sort -- which sadly was the only one I could actually remember...) They thought I was a freaking genius :-) Who says you'll never use this stuff?
Doing this permit someone to force you to disclose your vote and force you to vote what they want. The strength of traditional vote is that nobody can know your vote and this is the more important feature of the voting system.
Am I the only one that thinks this kind of service just feeds future-self masturbation?
I've got to wonder if it's as big an issue if patients don't remember the pain. It seems to be like the tree-falling-in-the-woods problem: if a patient feels pain but never remembers, as far as he's concerned, did it really happen?

I have very hazy memories of wisdom tooth extraction. No pain, but very hazy. It doesn't bother me.
Unfortunately you can't deduct the payments. There is some potential legislation around that, but it hasn't been pushed through yet.
Is it time to buy Boeing put options already?
I found microdosing DMT to be a very interesting experience aswell though it is not so common to hear about it.
Hey there -- this isn't right, and I'd love to know more about what happened. Do you mind emailing me with more details? I'm tommy@lambdaschool.com
The signature is over all the data in the certificate. So a hash collision in the signature algorithm makes this attack possible. (And if you can predict/control serial numbers, it makes the attack much easier because then you can generate a colliding pair of one valid cert and one invalid one and get the first one signed, instead of having to find a preimage of a valid certificate.) But without a hash collision, it should be theoretically safe to have no entropy at all. Most commonly-digitally-signed objects (Git commits, software packages, etc.) have no added entropy in the object itself / the input to the hash function.
Bribing an employee to look the other way is considered unspeakably evil.

"Donating" to the owner to to exactly the same thing is considered good business.
Not quite. A Clojure transducer from A to B is
pure function which takes As to lists of Bs. To apply it to a sequence of As you flatMap it, so you apply it to each A in sequence and get a sequence of Bs which you splice into your final resulting sequence. Maps and filters are special cases, for example

const mapTrans = fn => function* (x) {
yield fn(x);
};
const filterTrans = predicate => function* (x) {
if (predicate(x)) {
yield x;
}
};
const dupeTrans = n => function* (x) {
for (let i = 0; i < n; i++) {
yield x;
}
};

Clojure just observed that an isomorphism of these functions under Church encoding looked like f<B> -> f<A> for a special parametric type f, so could be composed with ordinary function composition, albeit backwards.

An RNN transducer is fundamentally three functions:

One takes a list of recent As to some C1.

Another takes a list of recent Bs to some C2.

A final one takes a C1 and C2 to a B.

Rather than mapping over each input independently the RNN-T is allowed to learn something about the relationship of recent outputs to the next output, and the relationship of nearby inputs. Clojure transducers thus have an order insensitivity that RNN transducers are allowed to be sensitive to.
See also, the Darién Gap:

https://en.wikipedia.org/wiki/Dari%C3%A9n_Gap

First crossed overland by bicycle (or I guess with bicycle) by Ian Hibell in 1973:

https://www.youtube.com/watch?v=3ylhWPCekdM
Do you mean the teacher's effectiveness would be improved if slow learners were cut from the class?
IME unwrapping usually comes from the variant of an enum being determined by the ambient invariants in the program. For example, if you have a dependent pair, (x,y), x determines the variant of y. Similar consideration for switching between a array of options of pairs and a pair of arrays of options.

The simplest example of this is array subscripting. A sufficient bound on n will determine the variant of arr.get(n). The API acknowledges this common case by providing arr[n].
What about an official package management tool first
All +$50k?
I like your thought, but if a voter can lookup their vote to confirm it got counted correctly with some form of receipt, then it opens the door for vote buying.

I’m not sure if there’s a way around that, but it would be awesome to be able to absolutely prove all votes were correctly counted.
Except that's not how probability works.
The touchscreens in New Mexico 2004 simply didn't record the votes of Spanish language ballots. Kerry won the state but Bush received the electoral votes.

Fortunately, the NM courts agreed and prohibited the further use of the touchscreens.

What blows my mind is how invalidating (decertifying) the touchscreens has to be done in each state. I still can't fathom why the feds (eac.gov) can't just pull rank and ban them.
So if I'm reading this right, the normal LS program costs 17% of your salary, but this program pays you $2K/mo while you attend and then only charges 10% after? Of is it 10% on top of the 17%?

Either way, good on you guys for trying to do something that helps people that are disadvantaged. You guys should start a charity arm that people can donate to so that more people can get the stipend!
Chickens are brutal. My friend asked me to feed his chickens while he was away and the damn things attacked me and pecked me hard. I tell you I was having second thoughts about giving them food after the beating they gave me.
Analogy implies that people could die. They have died.
Right, which is why the specific claim here is that 63 is not a problem, not that smaller numbers in general are not a problem.

A better way to put this: instead of saying "it reduces the search space by 9 quintillion," say "it reduces 50% of the search space." Sure, that's a lot, but not nearly as much as trimming 8 bits and saying "it reduces 99.6% of the search space."
Objection! There is one such threat model: content protection schemes (like BD+) are that finely-calibrated. The goal is to be secure enough for the new release window, but to accept failure after that point.

You're totally right here, I'm just nerding out on threat models and security economics.
> trimming off a few bits

i.e., reduce it by close to practically infinity?
I am using both a T-Mobile hotspot and Sonic.net DSL.