skysight-inc/HackerNews huggingface dataset:
Full disclosure , I work at Red Hat, but IBM buying red hat is a big deal. Just go back 40 years and IBM vs Microsoft. Microsoft bought QDos (which became windows). Now IBM bought red hat, which has openshift and is the leading cloud OS
Letter spacing seems like an arbitrary distinction. IF you design a neural net that contains operators that make certain things invariant (e.g. size) then of course it would perform better than a neural net without it.
Americans don't need to get masters/phds to get high-paying jobs in the US, because we don't need them for the immigration benefits.

In most STEM fields, an MS has very little functional benefits. Oftentimes, it's the same with a PhD. In fact if you account for the tuition cost (of an MS) + opportunity cost (lost income and lost advancement) they can be net negatives.

> really don't think that there are any actual jobs that require nothing more than a BS degree and can be honestly considered for an H1B

Uh, software engineering? I know many people with only BS's in CS, Math, or Physics who are better than most people with MS's or even PhDs. I think nursing might also be valid (though that is more credential-based, we still need BSNs).
Yeah, that sounds just like the conspiracy that Yelp shakes down restaurants if they don't pay. Yet still waiting to see actual proof of this.
> Flag anything that isn't obvious plaintext or already being MiTM'ed for analysis follow up.

The failure being that the long tail of uncategorized data would be large.

Do you have a good reference for what game state updates look like for every game on the internet? What about custom IoT device protocols? Every type of DRM used for media streaming? Document attachments of spreadsheets or database images containing arbitrary numeric data?

How do you distinguish data like that, which outside of some headers may be indistinguishable from random numbers, from someone using the same format or protocol for encoding arbitrary encrypted data?
Takeaways from the Facebook Libra hearings this week
One solution is to use Name Constraints. The organizational certificate authority could be issued with Name Constraints limiting its power to a certain domain name only, e.g. *.example.com, using Permitted Subtree.

If I was setting up an organizational CA for internal websites (not MITM), I would consider using Name Constraints to limit the certificate's scope and potential for abuse or compromise.
Why not get an investor visa? It's easily convertible to green card according to several people I know who did it. You only need $500K or so for the whole thing. And investment money were returned even with some profit.
With the new Twitter in Firefox it logs me out immediately after I close the window (no, I'm not incognito.) Also if I sign in using a different browser none of the options are saved. It's pretty annoying. It is a bit snappier, but it has a lot of annoyances. I can no longer go back to "old Twitter," either...so, it's a mess.
>There are many reasons New York might be shrinking, but most of them come down to the same unavoidable fact: Raising a family in the city is just too hard.

Harder than in the 20s, 30s, 40s, 50s, up to 80s? Millions of dirt poor immigrants raised children in the city just fine, and tons of working and middle class people were born and raised there.

I seriously doubt it's "too hard" in any other sense, except job/rent wise.
> I think people refer to memory safe in general as "not being able to override memory that is not currently owned by a referred object in the program" - which certainly applies to all GCed languages.

This is absolutely false. Race conditions in native structures can very easily invalidate any memory safety guarantees provided by the language, causing issues such as buffer overflows.

In other words, the presence of any memory unsafe operation leads to a total and immediate loss of all memory safety.

See for example how races in Go can lead to type confusion for interface types (fat pointers) through store tearing (non-atomic writes): https://research.swtch.com/gorace or https://groups.google.com/forum/#!msg/golang-dev/mXjFejQ5A3Q...

The former has a detailed explanation, the latter has a code example that shows more clearly what the technique can be used to do (cast a struct A to unrelated struct B with different length, thus allowing out-of-bounds reads/writes).

If on the other hand you were just saying that these languages are just called memory safe, even though they aren't, then yes. That's what I said.
What makes everyone so sure this isn't happening everywhere already?

The problem Kazakhstan had was that there was no existing CA they could already force to issue certs. So they had to make a new one. It would be foolish to assume that none of the many trust anchors your browser already trusts haven't already been compelled by your local government to do exactly this.

Also, DANE and DNSSEC solves this problem.
It used to mean something better than that - a "grinder" was someone in old-school parlance a "wirehead".

That is, they were someone who uses or tries to use technical and/or electronic means to "hack" their brains, for stimulation, improvement (memory or other cognitive function), etc.

A mild version would be something like using a tDCS system (especially if home-brewed). A hardcore version (I do not know of any real-world examples) would be some kind of homebrew brain implant.

Note: Such individuals are not the same as those who implant things like magnets or id chips under their skin for various purposes - though there is overlap of the two communities.

I'm not sure what - if anything - "grinders" call themselves today, or if there isn't any issue at all (part of me suspects the latter).
What's the case for building these kinds of systems in 2019? I would love to hear your perceptive on this.

If I were to play devil's advocate to this article, (and this isn't necessarily my perspective) I would say that FB/Google have already carved up the ad market, and even their businesses are under pressure from native ads on Amazon.com, which is where a huge portion of e-commerce takes place.

The twist though is that this is the Washington Post we're talking about, so this plan may have benefited from the business mind of Jeff Bezos himself who knows these businesses very well.
Sounds like a bold claim .. and yes it is. Only the "main parameters" must be published.

From your source (emphasis mine):

> Providers of [..] online search engines should not be required to disclose the detailed functioning of their ranking mechanisms, including algorithms, under this Regulation. [..]

> A general description of the main ranking parameters should safeguard [against bad faith manipulation of ranking by third parties]

Main parameters being defined as:

> The notion of main parameter should be understood to refer to any general criteria, processes, specific signals incorporated into algorithms or other adjustment or demotion mechanisms used in connection with the ranking.
The last time I looked into it, a few years ago, everyone except Apple had some basic amount of support. (That is, openssl, firefox, windows, and android — that's all I looked into.) I set up my private CA with name constraints, but I had to mark them noncritical if I wanted iDevices to be able to use the CA at all.

But the other systems did at least appear to honor the constraints.

I've asked Apple security folks about this a few times, but they just look uncomfortable and change the topic.
I tried to use CockroachDB for a side project. Gave up after a month on and off of trying to migrate a x00 GB MySQL database to it.

If you are starting a new project and willing to build on it, it looks pretty awesome. But there is zero migration capabilities, which in my mind would be the core focus of a product that pitches drop in scalability.
AI turns your headshot into a portrait painted by a master
First they need to change the name. Number two - only Google has an atomic clock - the concept of around atomic clock. If you don’t have it - this is useless. Number three - spend 3 months trying to make it work. It is unmaintainable. Four - support is very general - nothing specific. Five - I suppose their game is to go for hosted solution. If that is the case better go to Google cloud. This is a big waste of time.
Looks like NYC one might be dead?
Not all tech workers are created equal and not all companies need tech rock stars. Joe's Tech Corp would be priced out of the H1B market but could still compete for talent in the citizen pool. Different talent levels come with different compensation requirements.

I'm trying to come up with the most charitable interpretation of your last sentence but am failing. Was it meant as a "let them eat cake" statement for not being a coastal dweller? Given the many negative effects tech centers are having on local populations, deconcentrating tech across the country seems like it would have positive benefits for many not in the tech industry, which is most people.
Their Kazakhstan endpoint is fake; it's a 'virtual' exit node that's actually in Singapore. This info is buried in their help pages: https://www.expressvpn.com/support/troubleshooting/virtual-s...
Your attack on my integrity here is unwelcome and entirely unwarranted; that does make me angry. I regret having given you so much of my time in this thread and having assumed good faith on your part.
Businesses have the goal of generating money for their owners. That's what capitalism is. Capital puts up money to start a business expecting a return on that money. Businesses are formed when the expected (in the probability sense) return on the business is considered a good deal.

There are some theories that this magically coincides with creating value in an ideal model, but no period in history has actually worked that way. There are many proposed explanations for why it doesn't, but I'm not much interested in why. All I care about is that those models don't describe reality.

So businesses are all about generating income for their owners. But society is about all people in it, not just those who control the capital. It is necessarily true that there will be cases where the best thing for society is not the best thing for businesses.

Business has pushed the public narrative too far towards blind support of "business is a good thing." Your post even seems to just assume that as a given. You claim that a goal is "selfish (from the perspective of society)" when the only thing you can criticize about it is that it isn't maximizing business value.

Business isn't everything. Sure, a society needs a functioning economy in order to survive. But that's a far cry from assuming "good for business" is the same as "good for society".

The latter is certainly more nebulous, though, and I can understand why you might wish they were the same thing. It would allow you to optimize society with simple quantitative measures instead of complex qualitative discussions about which sets of opposing goals have the better overall outcome. But the real world doesn't cooperate with such things. There are always going to be conflicts over goals, priorities, and even values. Resist the temptation to believe in an easy answer. Reality isn't easy.
Yes. Not the biggest, but a huge pain.
An Introduction to Life after VC funded cycles of disruption and consolidation
Haven’t used reddit in over a year and hardly visit YouTube. #1 competitor for my time is reading a book. The freedom and clarity I feel now that I’m not plugged in to these types of social networks makes me believe reddit is also “disgusting trash”.
For $15K, He’ll Fake Your Exchange Volume – You’ll Get on CoinMarketCap
>The paying of creators definitely anti-competitive

It's really not any different than what Netflix is doing now, right?

Discounting SEO, the major issue was that they didn't build their own ad network. You set up business in Google's front yard and didn't like it when they told you to get out.

The ad network (or rather the monetization model) is the hardest part of building a video sharing site. If that part wasn't figured out then it's hard for me to believe you were actually serious about building a content network.

Given how much this guy cried about how much money he is "owed" I'm less likely to believe he was slighted and more likely to believe he was a greedy exec who was in over his head.
FogBugz Rebuild Spec – The ultimate software development tool
I wonder if a standard library or service could be written that detects search engine manipulation, in order to provide a mathematical confidence that it occurred of some kind.

So for example, you make metube.com and it shows up on all the search engines. Off the top of my head, maybe it watches the rank over time, kind of like a stock ticker. If Google detects metube.com and buries your listing, but the listing stays the same on more egalitarian search engines like duckduckgo.com, that would show as a divergence in the historical rankings.

So you could get answers like "there's a 77% likelihood that Google buried your link" or "Google's result diverges 23% from other search engines" or something like that.

Then an overall measure of the top million sites or whatever could be used to generate an overall fairness/bias rating.

If it showed enough manipulation over a long enough time, maybe that would be grounds to regulate or break up the largest search engines. Or maybe the law wouldn't be necessary, because a browser plugin could say "there's a 95% chance that this search result has not been manipulated" or even request results with a high degree of manipulation as a way of finding the canonical truth.

Hmmm that gives me an idea for a search engine...
Yes, https://blog.cloudflare.com/monsters-in-the-middleboxes/
You might be able to make intranet.company-name.tld and have a parking page on the company-name.tld and use that to get a wildcard cert that can be used for the internal pages.
Those iframes :-)
https://www.cartalk.com/radio/puzzler/string-series-number-1
At least public universities have some accountability to the law.
And even if they were, Google and Amazon (maybe Goldman Sachs too) have talent spread out across the country, even in what is dismissively called flyover country. Certainly these locations aren't their main wells of talent but they're still important to the companies.
> I've _never_ heard of a 10x salary difference for engineers.

A Netflix engineer was on HN the other day claiming they make 800k and work from home.

> But there is almost literally no way that you are being fairly compensated if you really are 10 times as productive as your average engineer.

(Assuming they exist, of course) I'd wager if a 10x engineer was involved in a mundane business, they would be 10x without giving 100% of their time. Or rather, they'd give 100% of their time sometimes, and 20% of their time more often.
Man and the Moon
> Other species are intelligent, but none of them have our innate ability to communicate using complex language.

That isn't proven. There is plenty of evidence, that "complex" is relative and humans have limited sensory organs, compared to other species. Naturally our vocalizations have had to diversify.

It's important to remember that the vast majority of all interspecies communication is non-vocal (this includes non-written). The ability to write is unique to humans, as far as I know. There are more, but they aren't related to vocalization (or communication at large).
We have used it in production for over a year in a highly threaded environment, with multiple terabytes of data, and have had virtually no issues. The support is excellent, but it practically takes care of itself. The Postgres compatibility is very good, and we rarely run into compatibility issues. If you have a highly concurrent OLTP workload, I would suggest using CockroachDB.
Wow, I just googled for a youtube video of gameplay [0] and I'm genuinely at a loss at how they pulled off that 3d engine. The sound fidelity is still pretty high given the lack of dedicated sound hardware on the GBA, and somehow they still have time left over for texture-mapped polygons.

I love reading about how programmers pulled off these tricks on such limited hardware, hopefully there are some notes about it somewhere on the internet.

[0] https://www.youtube.com/watch?v=K-AZQKTlUMs
I don't think this non-uniform, flammable rope would be allowed in the EU. Even then it's hardly the right tool for the job of measuring time.
> Going to the reference guides to learn an API is like reading a dictionary to learn English.

That doesn't necessarily have to be the case. Back when I was at an IoT startup I structured the reference docs based on the order that a developer would typically use in order to get common tasks done. E.g. call this method to get the device's identifier, and then here's a list of methods that let you do stuff with the device. Chris Bush presented a similar idea [1] at this year's Write The Docs conference. His main argument is that the organization of reference docs is usually implementer-oriented. E.g. alphabetical. In many cases it may make more sense to have a user-oriented organization, one way or another.

[1] https://youtu.be/4OtdFEp88VI
How evenly would that $78 billion be distributed. Would some countries or groups end up as net losers?
No. we just feel better because it just sounds so obviously reasonable doesn't it?

Kazakhstan's low-tech approach is just that, low-tech and low-effort. They could have used tons of vectors besides simply saying "install this cert."

A tiny shred of effort would have been to package an "updater" that did the install without explicitly saying that's what it was for. Or better yet: Kazakhstan is committed to a greener more ecologically friendly future! All tax documentation will go paperless! Just use the provided USB Key to access your documents in electronic format!

A small morsel of effort would be to force it on OS vendors through regulation/licensing/threats/money for localized copies. A good deal of effort would hijack CRLs, pinnings, et al while demanding/sneaking the private keys of the CAs.

Public Key Infrastructure is fucking pointless when the infrastructure is precisely what you can't trust.
A what? Do you mean one of these things? https://en.wikipedia.org/wiki/Heat_diffuser

If so, then I don't think you'd ever need one? None of the use-cases for them seem like they would apply to a good induction stove.
And he posted his video to YouTube. The irony.
Silicon Chips Take Man to the Moon
Please optimize your blog for mobile.
Are there any open source alternatives that are competitive in this space?
Probably. Another approach would be to cap the percentage of H1B employees you have.
There was a time when lawyers charged by the word for contracts.
Fortunately you can still go to realtwitter.com (which is just a redirect) and click latest. Two clicks, but it's easy to make it a habit.
Online Freedom of Speech Threatened by Silicon Valley Elites
They don't need to.

In an authoritarian state, you just start blocking and breaking things.

Everything you don't understand, you block. And then you make the user explain it to you and then if it's a use case you care about, you do the work to either decide it doesn't have any danger of carrying traffic you care about or build an intercept scheme for it.
Maybe someday we can find the middle ground between railroading undergrads with no evidence and taking decades to stop predators like Jeffrey Epstein and Bill Cosby and probably countless others.
I know a lot of people here already know this story, but it's worth mentioning: while in college, I was railroaded through the judicial system in political retaliation after winning the Presidency of the Student Body. This was 13 years ago now. Crazy story.

Here's a documentary that a bunch of us put together about it:

https://www.youtube.com/playlist?list=PL11F04BB4661C2CC3

Some aspects the Purdue case resonate with mine. Others not so much.

I did learn a lot about how little oversight there is over these processes and how much corrupt officials count on the qualified immunity doctrine.
> Cert pinning does mitigate it for apps, doesn't it?

Applications where the developer has pinned to their own certificate will stop this attack.

Chrome and Firefox will ignore pinning for locally installed CAs. This is a very common use case in the enterprise where, for example, a bank has audit requirements to decrypt and store all workstation traffic.
NTP is plenty accurate for Cockroach to work correctly.

> What happens if I'm monitoring and see an elevated clock-skew?

If you have monitoring that can detect that, NTP should also be able to run and correct it, apart from some very weird failure modes of the network itself (like traffic dropping in one direction).

> I think CockroachDB will be amazing when cloud providers start offering APIs for High-Resolution Clocks as a service

With the hybrid logical clocks that cockroach uses (basically wall time + vector clock), they don’t need to be all that precise. The trade off it makes is giving up linearizability (aka external serializability).

Spanner gets that by making every transaction wait for the maximum clock skew (7ms, with their atomic and GPS clock systems). But in order to run on commodity hardware Cockroach forewent it, in favor of allowing more acceptable skew.
Does anybody know what song is playing in the background? Or think it was custom recorded for this video.
Is there an optimum somewhere between a fully-mortared wall and a drystone wall? i.e. mortar which gives some reinforcement but also allows rain or groundwater to run out?
It's just as ridiculous to do so in AI.
There are lots of heating systems (steam boilers, for instance) that don't require blowers. And your gas-heated hot water will also let you continue to take hot showers.
I'd argue "less worse" not "better". You're a fool if you think management at Apple is someone any less lacking in virtues than google.
After two decades of research and development, WA 38 lands this fall
“How many other [rape] cases have been closed and locked away?”
AFAIK, Chrome on Windows doesn’t manage root certificates, it just utilises Windows’ own cert store (certmgr).
A first suggestion is to ban the cert in chrome/firefox and then keep banning certs as they issue them.
They got 1 code base. I got a UI that I don't like.

1. There used to be a drop down for "copy link" to a tweet. So I could tweet then paste the URL across other platforms. Now I need to click the link, and copy the URL manually, and it's laggy.

2. The darker dark mode dims the text too.
3. The font size setting has no affect on making a new tweet...

As usual, company degrades experience for users on UI upgrade...
Is there a non ranty description of what happened ?

I read the first couple of paragraphs and between the rantings how he should be a multimillionaire and how Google will destroy all of his projects, I gave up.

It is obviously a very emotional subject for Trent, but that's just not the best way to present what happened to a third party.
Pornhub probably could. They've got the tech, the traffic, the money, the advertising infrastructure, they've got everything they need to launch a youtube competitor because the big tech companies don't really touch porn.
>but it'll as popular as you seem to wish it would be.

...it'll never be as popular...
Amazing how wildly different these works of art are, but still they all have one thing in common - they are utterly devoid of beauty.

As much as modern art likes to break rules, it has an iron-clad rule of its own - beauty is taboo. How else to explain so many so very different artists all deciding to forsake it?
somehow any less, not someone
"The modern self is the product of this subjective turn, when the real self becomes internal (the mind in the English language; the soul in French, which has no word equivalent to mind), not some external thing embodied in robes of office or tools of a trade."

The parenthesis could have been avoided entirely because it is absurdly false. Luckily, that's irrelevant to the argument.

But no: the French language doesn't have to fallback to the soul by lack of a word for "mind". There is one.