skysight-inc/HackerNews huggingface dataset:
Not every US company already makes business with Huawei - so in that case they wouldn't have to stop selling/buying things, because they never started. E.g. is Microsoft, Apple or Amazon impacted?
bad news for eu mobile market. i guess we have to buy iphones again? half the features and double the price :(
Pedantry: you can reduce TSP to SAT just because it's in NP. It's the opposite reduction (from SAT to TSP) that you can do because TSP is NP-complete.
I only learn new languages to be able to do something new. I learned BASIC to make my atari do what I want. Then 6502 assembler and ACTION to make it do it faster. Then Pascal to have complete flexibility of data structures. I learned C++ as a Pascal with dumb syntax but never used it before Pascal went completely out of style because there was nothing new C++ could do for me. Then I learned Java because you could do applets with that. Then HTML because you could make the browser display what you want. Then PHP and SQL because you could build websites with that. Then Python because PHP sucked for console programs and JS because you could make things happen without bothering the server. Then some XML and XSLT because that could process a lot of data fast on client side. Then C# because that was the comfiest way to make desktop apps since Delphi kicked the bucket. Then I learned Ruby because I was assigned to project written in it, but promptly forgot it since then because it could do only the things Python could already do. Then I got back to Java since you could make your phone do what you want with that but Java is (was then?) worst language I know so it was short lived. I still retain it though for occasional utiliy, like extrnding Solr or playing with Apache NiFi.

The only language that kind of breaks away from this pattern of necessary imediate empowerment was CoffeeScript. It just exactly mirrors my way of thinking and was just an inch away from pseudo code I used for my notes since primary school. But then ES6 came and gave me enough CoffeeScript to almost be fine without it. Final nail was TypeScript that gave me stuff I wanted, smart, fast code completion and typechecking for places where I wanted types. Now if I could just have an editor that could display curly braces as indented blocks (python and coffee style) I'd be perfectly happy with state of browser coding.

I tried Go, Elm, Haskel, Scala but nothing stuck or even went beyond simple programs. Nim was interesting because allowed you to run code at compile time to transform code (like Racket macros). I might use it for console programs that need speed (although I'll probably just dust off C++).

Rust so far has the biggest potential because it allows you to have code running concurently without crazy bugs by forcing you to specifically track who owns what and for how long. That might be useful for me to make programs faster
at some point since multicore is now firmly a thing.
> I don’t think it’s unreasonable to allow organizations to protect that kind of information.

Why though? As you pointed out, it isn't protected IP, but rather knowledge and skills that YOU have developed and hold in your head. Does the company legally or morally have any license over or?
Don't believil
I believe they cannot, Google demands certification before allowing their apps to be used. It's impossible to sideload google apps.
Sure, but YouTube doesn't have that option. Any of the suggestions given here would almost certainly lose YT their safe harbor status.

YouTube's policies are as Draconian as they are because that's literally the only way to comply with the law. I can't for the life of me figure out why YT doesn't have some kind of messaging strategy around that.
Your phone was manufactured by a front for a foreign intelligence service. It was never secure.
This doesn't affect much of Huawei's Chinese market as Google is banned in China anyway. However, this will have a huge impact on Huawei's overseas market, and it is hard for Huawei to come up with a backup plan. At the end of the day, Baidu (and other Google equivalent Chinese counterparts) has a negligible presence outside China.
The edit window had already expired.
I don't know anything about the supply chain for data center hardware, but it seems more likely that China would intercept shipments of say Cisco and Juniper gear and modify them (something the NSA has done) instead of building hardware with a backdoor in it?

When you buy a Cisco router do they provide a "chain of custody" proving it didn't come from or go through hostile countries? I understand these routers have a Secure Boot feature, but I can't imagine that'd defend against physical modifications.

If security was actually the goal, shouldn't we have a process to verify any piece of hardware; instead of just completely trusting some companies and not others?

This just feels like security theater, but I kind of get it. If the US is fighting China economically, this move makes a lot of sense.
Google have no choice but to comply with US law. This is now going to make a load of existing US owned (Huawei manufactured) devices less secure unless an exemption is agreed for things like software security updates.

Not only that, the ban encourages a long term move away from US-based tech as alternatives are needed within China. This new tech will ultimately be available worldwide, but no longer owned or controlled by US companies.

As someone from neither China or US, it seems crazy. It’s one thing to ban Huawei from your own markets for security concerns, but by making such a heavy handed ban on working with them, the US government seem to be making the US less secure short term, but also US companies will be less competitive and less influential in the world long term.
'Full employment' may be increasing economic inequality
That's good context that I did not know. Thanks.
A 10 second clip of a movie isn’t necessarily fair use; It’s decided on a case by case basis. You can use as much as you need to get your point across; No more. If that’s 10 seconds, you can use 10 seconds. If that’s a minute, you can use a minute.
sony, too, with ps4
Having been to Japan since fully acclimating to my sub-$50 one, it turns out I actually prefer the tap-cold water. Most of the higher end ones heat the water and seem to use a lower water pressure (even on high).
Drugs are artificial modifications of the body with metabolization that has not ever been evolved. They cause problems people can't really fix it seems. It is really tragic. Antibiotics are seeming more and more dangerous by the year with new research.
Many gas hybrid run the atkinson cycle vs the otto cycle, this improves efficiency some at the expense of torque, which the electric motors make up for.

Hybrids are much better in the city due to the stop and go nature allowing lots of braking regeneration and idle savings.

On the highway much of their advantage is lost especially if comparing to say a diesel.
Open in this case meaning open source and open to other people to modify/build upon, like Android is currently. But you're right that the Chinese bureaucracy may not be nimble enough for this kind of move, and might stillborn it by mucking it up with poor decisions.
The British Victorians Who Became Muslims
personally I have JS experience (browser/node.js), as well as asio in C++/Boost, EventMachine in ruby and Twisted/Tornado in python. I strongly disagree that people who dislike asyncio only do so because they don't like the event loop. That just sounds like a typical quick dismissal of criticism. No, its a objectively awful convoluted API.

But if you think you can write correct asyncio applications of any significant complexity, that's great. Doesn't change the fact that a lot of highly experienced developers struggle to do so.
The article is from 2014 and should be marked as such. Can the mods do that?
Please stop repeating this myth. Peddling old outdated information does not help anyone.
Not really true. The whole existence of a “brain drain” indicates that the places the workers are coming from have insufficient opportunities.
I'm sure that based on the amount of copyright trolling going on on YT there would be a lot of money to be made suing YT and the companies/individuals making the copyright strikes
Heh, there will be a rude awakening when they try AOSP or the open-source Android.. "wait, it doesn't have a launcher?"

No, seriously, AOSP is very far from useful. That's before you consider that to run Android on any sort of recent hardware, you need manufacturer support from the chips you are using, which you can't get if you are barred from trade with them.
Seemingly more and more people want internet regulation. Nobody cares about things like free speech anymore, and actively campaign that it’s harmful.
> Kubernetes, S3, Docker, and a whole slew of things that make this task fairly trivial compared to how it was in say 2005.

Agreed, it's much _easier_ to do these things, but evidently not yet _easy_. Handwaving about who deserves credit is irrelevant compared to an analysis of whether executing on it is easy or not, and my (admittedly low-confidence) model,based on the empirics of the situation, is that its evidently still not that easy to reach the reliability and quality of YouTube as a service.
Congress should grow the Digital Services budget, it more than pays for itself
> specifically what it is you think 23andMe is doing that is improper

23andMe acquires, analyzes, stores, and trades in private medical data and does not comply with HIPAA in any way when doing so.

We both know that the DNA data you have is personal medical data. You have a PhD and are an executive at one of the largest companies in the world that is trading in DNA data so we both know you are very aware this is true.

> DNA from the clothing sample was sent to Parabon for analysis in July of 2016

We both agree the Galvin DNA sample was acquired and analyzed in 2002 as CODIS data and yielded no hits.

The article says "In July 2018, the suspect DNA from Galvin’s clothing was submitted to Reston" and then goes on to say "The suspect’s profile was reformatted and entered into GEDmatch". Parabon was not sent the actual original DNA from the underwear. Parabon was sent the DNA profile that was created in 2002. It was then reformatted by their data scientists so that they could do a cold hit search on GEDmatch. It yielded possible distant match on two individuals. They found a common ancestor, and created a descent tree of thousands of people, looking for people with a connection to Seattle. They exhumed one and did a modern microarray on that person, and compared that to the extremely sparse data from the 2002 test. They did not do a modern ~700k size microarray on the Galvin data.

You have professional colleagues at Parabon. Ask them. They will confirm what I have said.

Also as a professional biological statistician, you more than almost anyone know that cold hitting a sparse sample against a massive database, finding a possible remote connection, and then expanding the search from a 1800s possible ancestor to include all descendants who live in a large metropolitan area near the crime in a city many people migrated to over the decades is quite likely to find many matches and this sort of match is far from conclusive at all. In fact, you are even qualified to be an expert witness in such a case and testify regarding the actual odds.

We also both know that there are serious problems with testing amplified DNA samples on clothing that has been stored for 35 years and possibly handled by dozens of people.

We also know that even finding high quality single person DNA samples on clothing of a murder victim which exactly matches a suspect (which we did not do at all in this case here) does not prove that the person it matches was the killer and can not reasonably be deemed so without a trial in which a competent defense is presented and considered.
This $150 includes a power brick, which requires no cooling. Putting that brick inside the case wouldn't change the price much. I personally prefer the external power brick.

I bought the Intel version of the DeskMini for $130 a while back. It's about the same price as a normal case + mobo + psu, which it replaces. I put an i5 8400, an M.2 SSD, and some memory in it, and in 5 minutes you have a working system. No hassle, inexpensive, and small. Highly recommended unless you need a GPU.
You should have published, with source, time stamps, the works.
It's funny, Microsoft used to have a reputation for announcing things but never building them (vaporware) to delay people's purchases of competing products. Google takes it one step further by actually releasing a product, getting everybody on it, then killing it.
Pho, korean and chinese noodles are amazing. Yet, all that people can talk about is japanese ramen :(
Of course, that's China's goal for their 2025 project right? It seems Americans are underestimating the long-term plans and strategies of countries that deny liberal democratic principles.
Why wouldn’t you schedule sessions every day then (speaking as someone who does do sessions almost every day haha)?
since the ability to make copyright claims is required by law and there are requirements as to how platforms must respond to claims then any fix to the system that imagines ignoring the law in favor of its fix is bound to fail.
My guess is that they'll probably just sell off / kill off their computer business. It's not a huge money maker for them, and trying to switch people off Windows is super hard.
Kiwix – a cross-platform offline Wikipedia reader
As i understand, the beauty of languages like LISP and Racket, is that, you can easily compose functions. Basically, as i read source code, i'm reading a "programming composition sheet", just like music sheet.

The only annoying thing, is how to reduce brackets ( and ) from distracting content from its layout.

Of course Python is not the answer (due to its strict identation on space/tabs)

If i could teach newscomer about programming, i would say: Programming = composition of functions.
I recently started remote work for a company I've been working for ~3 years and it's been great so far, I'm more productive and I feel I just have more energy overall.
But the reason I think it's been great is that I already know people I work with quite well, I have a lot of slack conversations with my teammates so I don't feel left out or lonely at all (well, so far at least, it may be too early to say).
I do wonder if the experience is different when you start remote for a new company from the beginning?
Freedom of Speaking Naturally
Europe forced Google into a consent degree. It isn’t allow to forbid manufacturers from selling non Google versions of Android.
The funny thing to me is that the front panel is obviously from an old design which had a mounting point for a slimline 5.25" DVD-RW drive, but re-used for USB ports and other stuff instead.
I love this too. I actually wrote a simple web-app that I use to "pause" my emails throughout the day for this very purpose. Starting at 8AM, my emails batch until 11AM, then again until 4PM. I found the notifications hitting my phone were a big distraction, so pausing them helped me to ignore them during working hours.
Yes, but then it depends on who controls the strong AI, or if it is uncontrollable, what its agenda is. This is an undecidable problem :)
Unless this google certification is stored in hardware, that's not the case. You can flash Android phones with a custom bootloader, use that to flash AOSP (open source core android)/LineageOS, and for most people doing that the next step is to flash gapps on top of that.

Here's a popular gapps distribution: https://opengapps.org/#aboutsection

Google's requirements mainly apply to OEMs bundling gapps into their stock images.
Honestly, I've no idea.

For all I know some Python devs are even more sophisticated about security than the C developers who are maintaining libraries for Linux and *BSD distros.
I chose to find out.
https://bytemyvdu.wordpress.com/2016/09/03/tandy-trs80-m100-...
Would be most, if not all the battle. Might need to run the serial at a lower speed to accommodate the serial buffer on the M100. From there, you can telnet to the localhost and avoid a lot of messing with the zork server if you are unable to hook it directly to the serial port you are using.
What will end up happening is the major content creators, the ones that have massive followings will treat YouTube as the "advertisement" to the other platform they are on. "Hey guys thanks for checking out my video, here's a small preview. To view the full version, check me out at <some_other_platform>.com!" It's similar to what the big ones did with monetization (turned off all monetization, and now do in-video ads or some donation platform). Once that happens, there will be enough traffic on the new platform for enough medium size players to test the waters, then the whole thing will topple down. The only thing YT will have left is existing content, of which the only task remaining will be a race to archive what is currently on there.

Unlike a real desert, everyone can still reach you in your internet desert, and eventually it can become an internet oasis.

Then again, maybe once that happens YT will actually start to become content-creator friendly again.
And this is different than almost all of the sub $100 phones sold through companies like MetroPCS?
There’s no very good reason to read the books of the Bible in order. The order (and even the selection of which books are canonical) is an artificial construct devised long after the individual books were written.
I can buy that. But in the context of climate change, this makes sense only if we solve the strong AI problem faster than we solve the carbon-neutral energy problem, which is extremely hypothetical...
It's a direct translation from the author's (presumably) German native language, where space is indeed referred to as a distincted "das Weltall/der Weltraum" or literally in English, "the space".

It was weird for me, too - NASA, the American space agency, with blatant grammar errors on their front page? Ehhhh...
No I'm not, I was asking the question.

They both require one third of the board to be employee representatives. It might even be half for larger German companies. How does getting to vote on decisions and appointments equate to having virtually no power?

German work's councils, for all their imperfections and flaws, have often been looked at enviously by other Western countries - including US and UK. It is those which deal with conditions, pay and what have you.
Thanks. Is there a similar guide for NAS cases?
Isn't there downtime involved in Aurora's auto scaling?

Does that than really fit the "auto" bit of the term?
I don't really know the history of lead, but I suspect it illustrates the point.

There are no traditional foods with lead in them, because people who ate lead would have died, ensuring that the custom didn't survive.

However lead paint was a relatively new thing. People didn't have painted walls for thousands of years. It was used for awhile (not sure how long), and then the test of time figured out that it was poisonous.

Is there some history you know of where the test of time didn't work? It's almost tautological to be honest. (And tautological does not mean "untrue" :) )

Lead might have been "bad" by modern standards in the past, but there were also hundreds of other things that were worse for mortality, so maybe lead use in certain applications just got noticed in the last century or so.
Works are copyrighted automatically under modern law. I'm not aware of any procedure to "formally copyright" a work.
Lessons from Teaching a Micro MS in Front-End Engineering – The Amazon Way
If this sticks, is there yet a comprehensive analysis of all the implications?
When I read the title, I was expecting a very different article. The title says, “we hear you,” and the article says, “we’re not going to listen.”
https://www.phoronix.com/scan.php?page=news_item&px=Radeon-V...
Personally I'd prefer to work in a company where basic elements of the English language aren't policed with authoritarian fervor and would seek out alternatives ASAFP.
It's possible to rule out some (but not necessarily all) cross-protocol attacks with a simple and cheap tweak. I have not proved that this rules out everything, but it appears to be no weaker than the scheme sans tweak, and proofs shouldn't be too hard.

The high-level idea is to derive a new encryption key from the recipient's signing key, such that only the recipient knows the secret. This is similar to HD wallets[1] and some recent work by Dauterman et al.[2]. It's easy to show, following the work of Morita et al.[3], that EdDSA is secure against (certain) related-key attacks. This means that, even if an adversary has a signing oracle for the derived key, it cannot forge signatures under the original key.

Alas, this is incomparable with giving the adversary a decryption oracle for the derived key, which means it's worth thinking about whether it's possible to prove some extra properties. It's also worth thinking about the other direction: does a signing oracle for the original key let an attacker break the encryption scheme? Again, I haven't proved these things, but it seems like it ought to be possible.

Here's the idea in detail. First, definitions:

- q = 2^252 + 0x14def9dea2f79cd65812631a5cf5d3ed, the order of the Curve25519 group [1]

- (SK, PK) = (s, s * G) is an Ed25519 key pair (base point is G, * is elliptic curve scalar multiplication)

- <PK> is some well-known encoding of PK as a bitstring

- a || b is the concatenation of a and b

- ID is some fixed string that identifies this ciphersuite, say, "age_ssh_ed25519_encrypt_v1"

- I2OSP and OS2IP are standard conversions between integers and byte strings as defined in RFC8017 [5]

Now, to encrypt to the derived key, do the following:

1. Let t = OS2IP(SHA256(ID || I2OSP(0, 1) || <PK>) || SHA256(ID || I2OSP(1, 1) || <PK>)) mod q. In other words, t is a (nearly) uniformly random element of Zq obtained by hashing the recipient's public key.

2. Let PK' = t * PK, where * represents elliptic curve scalar multiplication.

3. Encrypt your message to PK' rather than to PK.

Finally, to decrypt, the recipient does the following:

1. Compute t exactly as above.

2. Let s' = s * t, where s = SK is the secret key.

3. Decrypt the message using s' as the secret key.

Note that in this scheme, everyone who encrypts to the recipient who owns (SK, PK) uses the same key. It's possible to derive a per-message key instead: choose a random nonce, hash it along with <PK> in the first step, and send it along with the message. Alternatively, you could derive a per-sender key by hashing both the sender's and recipient's keys. It's not obvious to me that per-message/per-sender keys improve security at all, and it's plausible that they somehow weaken it (since letting the attacker set the input to the hash allows it to choose among polynomially many PK'). So unless you decide that per-message keys are necessary for security, I wouldn't bother.

[1] https://github.com/bitcoin/bips/blob/master/bip-0032.mediawi...

[2] https://arxiv.org/abs/1810.04660

[3] https://eprint.iacr.org/2015/1135

[4] https://cr.yp.to/ecdh.html

[5] https://tools.ietf.org/html/rfc8017
Solar and wind are carbon-neutral, cheap and competitive, but they can't be used as our only energy sources until we solve the energy storage problem.
My comment wasn't meant to alienate blind people, far from it. To elaborate further, being able to see someone outside a meeting (since this is where most interaction really occur when remote) means things like small talk occur and you get to know your co-workers on a more personal level. This personal connection is what really matters in the long run and being together in person is what drives building those connections.
This is likely going to hurt Huawei a lot more than Google. Losing access to latest Android versions or Google apps will make it more difficult for their phones to gain adoption globally.
This is what 24 of the world's most iconic flags mean