skysight-inc/HackerNews huggingface dataset:
I have plenty of friends who took out student loans, attended college with me, and ended up dropping out and not having lucrative careers for plenty of reasons. They would have been better served by something like this, since they wouldn't ever have to pay it back.

In a way, this is a pessimistic bet, and either way you're a winner. If you don't get a good paying job, you win because you don't have to pay; if you do get a good paying job, you win because you have a good paying job, so it's OK to pay a little more.

The details matter though; if the program is really restrictive and everyone who gets funding ends up with a good paying job, the borrowers are being exploited and there's likely an opportunity gap: people who could have done well with the education, but weren't able to access it because the funders risk model wouldn't let them.
Tips on Writing Code for Data-Oriented Design
Education has value independent of any increase in earning potential. Society benefits as members learn a wide range of things. I believe society would be better if there were periods of time throughout ones life to go back to school and learn without worrying that it is useful, practical or will lead to higher salary. Imagine in every member of society learned about John Rawls theory of justice as fairness, or how to weld and make beautiful art or fix their house. Sure some people seek this out but imagine if we removed the instinct to value education or a degree only on its financial impact. Imagine if we removed financial pressure.
Is this based on a hardware security module in the phone? I don't see this written anywhere in the blog post.

For something like this, especially with your phone, putting the private keys out of reach of the CPU/memory and hardened against side channel attacks is table stakes.
Off topic:

This is the state of web we are in, and this is coming from Google. [1] I have literally 20% of the screen displaying useful information. The others are all useless navigation or related crap. Just seeing it nearly got me to puke.

It is one those problem in general where the web page is responsive and mobile first.

[1] https://ibb.co/fCfmW6h
> This and the parent vendor-lock in comment are so over-played out it's tiresome.

It's also tiresome that I'm losing access to my preferred music streaming platform that I pay $20/month for. No other platform lets me seamlessly put up a playlist with music from their streaming library and my own uploaded music[0].

People aren't dredging up the past here and being needlessly cynical. It continues to come up in discussions because it continues to happen.

[0]: Any streaming service that doesn't let me listen to Neil Cicierega is inherently flawed.
Digital thermometers usually have triple digits to be able to display numbers in the low 100's. I could see one of them failing in a weird way and displaying 452.
How does the device work and what does it do?

https://www.powerbreathe.com/powerbreathe-k5

On the Powerbreathe website it says

>The POWERbreathe K-Series uses Electronic Variable Threshold Resistance Training to overcome this. This type of training offers a tapered loading resistance to match the contraction curve of your own breathing muscles throughout your entire breath.

Is it restricting the flow of air so you have to breathe harder?
The work itself is poor quality, even in the high budget projects. https://www.marketwatch.com/story/new-yorks-super-mall-hudso...
Lots of people are, that doesn't mean they aren't armchair quarterbacking. I know how to fly airplanes and helicopters, does that make me an expert on the flight dynamics of 737 MAX?
BBQ lid? Many have thermometers that go higher than this (say, 700F), and they're often outdoors.
what a short-sighted, absurdly entitled criticism, that fails to see the forest for the trees, because all it cares to see, and know, is its own trunk -- the irony here is too real.

to immediately address your gate-keeping, i'll leave this as a response: (John Cleese on Creativity in Management - SFW) https://www.youtube.com/watch?v=Pb5oIIPO62g
A rephrasing: How does the gravity-information about what's inside the event horizon get out?
Which is also where the term "selling the shirt off your back" came from. Back in the days when clothing was worth a lot more, you could actually trade your clothes for stuff in a pinch. Nowadays clothing ain't worth much.
Yeah why do they need it for. Amazon.com is enough.. And maybe they can have amazon.amazon
The thermometer sensor and circuitry might be perfectly ok, still the 452 number might be a single digit gone bonkers in the panel, so that data being transmitted (maybe also recorded?) is ok while the readout is plain wrong. A human acting according data being shown there might react very differently from someone reading the temperatures log. Sometimes software problems can be awfully subtle.
I am interested in how frequent travelers manage these security measures (especially abroad). For SMS: quickly obtain a burner phone, log in to Chrome, something something SMS or Authenticator? For Authenticator: log in to Chrome on any machine you can locate that you can trust? For the printed backup codes, you carry them with you as you travel, and through security?

I am trying to develop a security process that I can rely on. It only has to be better than what I have now, it doesn't have to be bulletproof.
I know what AoA is and yes, the calculation of AoA by itself is simple, but the corrective measure is not.

Classic 737s climb via trim, not constant stick inputs. This has changed slightly with the MAX but now you have automated AoA correction (involving trim). That's a nasty combination.
That is a ridiculous notion. People like myself escaped to free software in order to avoid the imposition of a vision by a single corporate entity, like you have with MS/Apple.

People are not uniform, they don't all like the same music, books etc. so why should this not be true for tools?
Usually google is good in the initial release of a product, but they lack good customer care and support. They have non transparant pricings and they disrespect privacy. Those are something's you can differentiate on
I accidentally copypasted my one time login code into the amount of bill payment and my ebank didn't refuse the sixty seven million dollar payment (I caught it before sending it). Needless to say, I don't have and never had even one percent of that money.

My brother one time actually succeeded in wiring ten million euros instead of ten million forints. The exchange ratio is 1:320. Obviously the account didn't have 10M EUR on it.

I just entered 300 USD as a courier tip into the food order app I just tried for the first time because I expected it'll just do 3.00 for me. I caught it before sending it.

All of these are lacking this kind of defensive validation. I recognize the irony of not even knowing the terminus technicus for it despite I am a senior sw developer with decades of experience.
One of his earlier stunts (from 2005) was to smuggle a fake cave painting into the British Museum in London. It remained
on display for three days before staff spotted it and removed it. What was the tell-tale sign it wasn't authentic?

https://ichef.bbci.co.uk/news/660/cpsprodpb/7CA5/production/...
Where can I buy hardware for this?
Management have ultimate responsibility for your team - staffing, training, resources, workload and everything else. If one of those is wrong, it's their fault. The alternative is pure scapegoating. Blaming a team or an individual doesn't get to the root cause - why did that employee underperform, why was that team badly led, why did nobody identify or report these problems until it was too late? The answer might be as simple as "we hired a complete moron", but management have to take ownership of that error if they want to prevent similar errors in future.
I'd turn it around: What does open sourcing it buy them?

The number of community contributions/involvement in this type of thing is small (in most cases), it also requires a lot of work upfront to integrate well with the OSS community (or you just end up pissing people off), and in practice you want to control the experience and product direction anyway (since it is part of your baseline experience for your platform), so you just piss off the community.

What is the net positive? Not just for Google, but for anyone?

I don't think it's about lock in so much as no perceivable benefit for trying to get this particular thing off the ground ATM.

I don't think anyone is going to succeed with locking someone in with IDE plugins, and i don't think anyone is trying (even MS).

(I'll make the disclaimer that i actually could have changed this decision but chose not to and i'm even a card carrying member of the FSF)
Show HN: Kyros.cloud
Here's today's xkcd comparing it to the size of our solar system: https://xkcd.com/2135/
Explicitly posted for the potential for discussion - I felt myself bristling several times while reading. On the other hand, there a lot to be said for data-first and simple design...
Most people who drive from SF to LA take more than one break, and if it is only one it will be long with a meal and bathroom breaks, plus some walking around to overcome having sat for so long.
They're both domains, I'm asking why should they be treated differently, just because they're at different levels.

The reason given was that the context was too broad, but so is the "commercial" context across the whole world.

If Amazon should have the second level domain because it's the most well know association of the word at the commerce level, then why shouldn't it be given the top level domain if it has the most well known association of the word, period?
>AF447 was an Airbus 330 which does not have a physical stick shaker. It has a "Stall Stall Stall" warning that sounds and was likely drowned out by the other alarms that were filling the cockpit.

Just to be clear, an Airbus 330 won't let the pilot maintain an attitude that could lead to a stall, so it has a much higher degree of protection than a simple stick shaker. The situations in which these protections are turned off are situations in which a stick shaker would also fail to function reliably.
I'd settle for the previous generation which could afford to buy a house and own it in full before their kids became adults.
DataScience Digest (Telegram Channel)
Well, I hadn't installed any antiviruses myself. I think Windows Defender was running, though. It's possible that my computer came with additional crapware on it.
OK, but wasm is a pretty "boring" VM; it's a reasonable design you could easily arrive at by only considering native code. People are acting like this result indicates that wasm is fundamentally misdesigned, rather than that it simply doesn't yet support SIMD and has a relatively immature compiler compared to GCC and Clang.
Sollasina cthulhu – A new ophiocistioid from the Silurian
TLS DNS and DNSCurve perform essentially the same function, so it doesn't make much sense to compare one with DNSSEC and one without. What blurs the line a little is that DNSCurve is explicit about its goal of providing bottom-up DNS security --- in a world with near-universal DNSCurve deployment, the need for DNSSEC would be minimized. But that's in fact true of TLS DNS, as well --- it's just not something the IETF is explicit about.

Both DNSSEC and DNSCurve are basically dead-letter standards at this point; interestingly, the stake through both their hearts is DNS over TLS or HTTPS, but for different reasons: DNSCurve, because DoTLS essentially replaces the entire protocol, and DNSSEC because DoTLS reveals (through its rapid adoption, among other things) how marginal DNSSEC's contribution actually is.
I'm giving this basic one a shot for $27: https://www.healthproductsforyou.com/p-respironics-threshold...
It's not well sourced. It's a speculation in an old Popular Mechanics article published before the official accident report. The official accident report does not identify the sidesticks as a factor in the crash (because they weren't).
What Engineering Testing Assessments Are Out There?
My recruiting team is looking for assessment tools that we can use to assess the technical abilities of engineering candidates at all levels (jr-senior). Can anyone recommend tools that my team should look into? Price is not of a concern to us.
To add to it - the driver was ALSO drunk (well, above the legal limit) and also, get this, a nurse.

I was told by my lawyer that the police investigation concluded that she was guilty of DUI but that due her statements the cell phone was implicated as the reason. She was above .08 barely, but she was presumably not drunk enough to drive for a quarter mile or more without looking up at the road.
Blocking RF is illegal if it's done with the intent you describe. It's fine if your building gets terrible or no reception but if you purposely design it that way you're not protected.
Do you mean that your application you 'write' should support SSO early or that the applications you 'use' should?

That is are you talking about integrating your product with SSO or integrating your IT systems?
While I was replying in a thread that started about wasting frames for glasses, the parent poster seemed to have gone on a tangent about resource waste generally being insignificant next to human time costs. I did not mean to contend that saving the wasted glasses frames was needed.
When working on my PhD in mechanical engineering, I created fairly large data compilations and I would include some assertions like this. I'd make them assertions because I considered data that had these faults to be not worth adding, so if the data wasn't a typo then I'd just cut it.

It can be hard to think of good tests for data like this. Sometimes my assertions were wrong, e.g., I thought R^2 couldn't go below 0. That's actually false.

One I've found useful to spot typos was to check whether a column which is incrementing is in fact incrementing. E.g., if a table is ordered by the pressure tested at, then obviously there's a typo is the pressure is not increasing.
Privacy Badger and ABP. Also uBlock Origin.
Yes, if memory serves in AirFrance 447 that upon finding out the co-pilot had been pulling up the whole time the other pilot is shocked to hear this and realizes the problem. I remember being really affected by this so I went out and found the transcript:

02:13:40 (Robert) Climb... climb... climb... climb...

02:13:40 (Bonin) But I've had the stick back the whole time!
[At last, Bonin tells the others the crucial fact whose import he has so grievously failed to understand himself.]

02:13:42 (Captain) No, no, no… Don’t climb… no, no.

02:13:43 (Robert) Descend, then… Give me the controls… Give me the controls!
A lot of people put a lot of money and effort into creating the appearance of a business without ever making an actual business. You can develop some basic groundwork without an LLC, business cards, an office, staff, debt, liability, etc. When you need business-y stuff like deposit slips, staff, office space - look at it then. Probably not while you are alone in your garage with no revenue.
> Because management doesn't want us to spend several years engineering for multiple platforms.

Yes and that's fine. It's okay to end up with an RCA like that and note that as a known risk. If a cost-benefit analysis shows that the risk is dwarfed by the solution, then it's not worth fixing. Knowing the existing risks of your system and reevaluating these risks in the face of changes (more people available, inefficient context switching, etc) is a key component of making progress.
There is a lot of overlap in the Venn Diagram between the two. I would say read the first 80-100 pages of Black Swan and decide if you would like to complete the book.
Which is pretty much what happened. The pilot fought the plane into the ocean.
That is definitely not what "Net neutrality" means. It might be an admirable goal, but it needs a different name.
Chicago Has Become the Nerve Center of Competitive Pinball
So you know how in Refactoring you're supposed to be doing bottom-up design, but when the problem gets big it turns into top-down design masquerading as bottom-up? (aside: the Mikado method allows you to fix this)

Quite often when I'm doing 5 Why's I find myself socially engineering Why 3-5 to lead us to an action item we can do something about. There are any number of Why #5's someone can generate but a lot of them do not represent progress the team can get behind.

The fact that this happens with so many different teams and managers makes me wonder if it's me or there's just an obvious pattern of misuse going on with 5 Whys.
Yes. You need an alternate backup mechanism, like pre-generated one-time codes, or (shudder) SMS.
https://www.pprune.org/tech-log/539756-af-447-thread-no-12-a...

https://www.ainonline.com/aviation-news/2012-07-08/final-af4...

https://www.flightglobal.com/news/articles/stall-warning-con...

https://www.quora.com/Why-did-the-pilots-of-AF447-pull-up-in...

And an explanation why bonin did react as he did:
https://www.flightsafetyaustralia.com/2015/08/without-warnin...

Downvotes are so cool, right? Just post your better informed opinion and enjoy the upvotes. This has the side-effect of not just informing me but others about your more correct opinion.
I had a similar experience. It was a while ago so I don't remember the exact details, but the long and the short of it is the three founders started a new company, moved all the company's assets over to it, then dissolved original company.
That, too! Especially if you have support personnel interacting with in-house applications, though putting those behind a VPN also goes a long way towards preventing account takeover on those applications.

But in general, the idea is that you want an SSO early so all the random SAAS applications you subscribe to can have a coherent security policy.
Yes that’s correct, I don’t think anything nefarious happened. The big bummer, though, is I had $0.01 shares and paid AMT at a much higher valuation and expect it to take a few decades to claim back the loss. Was my first time working with ISOs and didn’t know about 83b’s
It’s time to learn incorrect things about someone you’ve never heard of
oh. I love these questions. Handshake author here. Handshake provides a way for Alice and Bob to generate a large pool of one-time pre-shared keys as well as a set of one-time lookup hashes to go with these keys. Both the lookup hashes and the pre-shared keys are generated using separate KDF processes and the input bytes are destroyed upon generation. This pool of "lookup hashes" are unique to both Alice and Bob and can be used in any order. There is no further coordination of future key generation, so this is very much the "impractical One-Time Pad" pattern. In fact, there is no reason that a true XOR based OTP couldn't be implemented as a "strategy" for Handshake.

So, no ratchets, just a bunch of "dumb" one-time-use symmetric keys with a lookup table for each chat participant. The value prop here is that, for some reason, you suspect that Eve is capable of cracking assumptions of difficulty or implementations of PKI at a level in which you want a symmetric-only crypto alternative. This puts Handshake squarely in "cyber-punk vanity project".

Operationally, the biggest known risk with Handshake is device security. If Eve was able to get a hold of your device, she'd be able to decrypt all future messages related to that chat conversation (though she wouldn't be able to decrypt messages before interception, since keys used by both the sender and receiver are aggressively destroyed upon use).
(I haven't watched the video, but I do have professional expertise on this topic.)

With interferometry, you're getting an incomplete sampling of the Fourier transform of the sky image, and if you just invert the samples, you get what we call a "dirty" image.

But you know your sampling of the Fourier plane exactly, since that's just a function of the projected baselines between every pair of telescopes during the observation, so you can create a "dirty beam" - now all you have to do is remove the effects of the dirty beam from the dirty image. Of course, that's a deconvolution problem, and given that you don't have all the information - you sampled it - it can never be exact.

But it can be very good! There are very sophisticated radio synthesis image deconvolution algorithms, including CLEAN and Maximum Entropy. For Maximum Entropy methods, you can apply a Bayesian prior on your images - most of the time, the prior we apply is a blank sky (seriously!) but if we have other constraints that we can use (e.g., the approximate size of the region with extended emission), Bayes tells us that we would be remiss not to use it.

If you look at this image [1] from Paper IV [2], we show the image results from different techniques on different observing days. Those are the inputs to what is the "consensus image" - you can check how close they all are to each other.

Does that make sense...?

[1] https://iopscience-event-horizon.s3.amazonaws.com/2041-8205/...
[2] https://iopscience.iop.org/article/10.3847/2041-8213/ab0e85
>so you are left with keeping a paper with backup codes.

It's not magic, there isn't any other way.
Have you considered CableOrganizer.com? :P
Have you had to fight your lane assist yet ?

I am all for the sensors to give me information but when the systems take over control I am not a fan.

Cyclists in the EU have learned that the car sensors will slam on the brakes. Quite irritating when the car slams on the brakes and they are laughing at you.
> Application Firewall that detects this hijinx (haven't explored this yet - anyone know of a good one?)

1. Make sure your app requests are logged with the source IP and configure fail2ban to block the really bad offenders.

2. Set up `actionban` and `actionunban` commands in a custom fail2ban banaction.conf file.

3. Use ipset (an iptables extension) for O(log n) lookup against banned IPs in iptables (which affects all input/forward/output network requests).

4. Tadaa!
If Wonder Woman is just human how was she born with superhuman powers? Those things are mutually exclusive.

> All Themyscirian Amazons possess various degrees of superhuman strength, speed, stamina and extraordinarily acute senses and the ability to glide on aircurrents. ... Themyscirian Amazons also possess immortality that allows them to live indefinitely in a youthful form.... Themyscirian Amazons also possess the ability to relieve their bodies of physical injury and toxins by becoming one with the Earth's soil and then reforming their bodies whole again.
Oh boy do I have news for you! Xamarin [1] does exactly this. You write your app logic in C#, which is then AOT compiled to native code. You the write the UI for each platform using native APIs (although you can use Xamarin.Forms if you truly want the same UI across platforms). Xamarin supports Windows, macOS, Linux, Android, and iOS.

[1] https://visualstudio.microsoft.com/xamarin/
That's a narrative that one was unlikely to hear about a decade ago in highschool. My parents & teachers essentially preached that you went to college to succeed in life. You _could_ not go, but you wouldn't have nearly as many opportunities to succeed.

That said, if I went back in time, I'd still attend the same school. It was a (expensive) life-changing experience.

(moral of the story: predicting the future is really, really difficult)
How are mechanical components tested against requirements in critical systems? What is the process for changing those components, like upgrading pipes to a fancy new composite?

In my mind, we'll start treating silicon the same way... formal verification, rigorous real-world testing, trusted suppliers, and an expectation that change is slow, expensive, and risky.
There's a long tradition of political messaging in open source. Vi has "Help poor children in Uganda! type :help iccf<Enter> for information", for instance.
I'm a simple man. I see Banksy, I upvote. And I recommend that everyone watches Exit Through the Gift Shop