skysight-inc/HackerNews huggingface dataset:
Maybe I am in the long tail of car users, but so is everyone else where I live. Driving longer distances is the norm here.

EVs are getting closer and I've been waiting for them to get to where I can use them. I only have one vehicle, and don't want to buy another one just to drive around town. But getting stuck somewhere in the middle of the forest because I misjudged the range is not something I want to have happen.
I actually prefer JWT with an asymmetric key. Anyone can confirm the payload's providence. HTTPS takes care of encryption for the payload. Of course with JWT, only allow trusted keys or signed keys from a trusted CA.

There have been some poor implementations, but the method is pretty sound.
Your first sentence:

> I am learning Python.

Your second sentence:

> I want to quit my current job and start a business.

Later in the thread:

> I am not good at sales. Should I learn selling...?

Advice - pick one thing, get really good at it and take things slowly. You can't go from having no engineering experience, no business experience and no sales experience to all of sudden doing all three successfully.
It seems to me that the properties of consciousness would naturally follow from any generally intelligent system. An intelligent agent must be aware of phenomena in its environment, it must be able to distinguish phenomena (qualia), its experience is subjective to the extent of the limitations of its connectivity.

> The problem is that there could conceivably be brains that perform all the same sensory and decision-making functions as ours but in which there is no conscious experience.

I think before this can be said to be a problem, it should be explained how such a brain (with human-like intelligence) can exist without mechanisms corresponding to the properties of consciousness.
> Helpful

> Browse your packages and read their documentation just like on the public Python Package Index.

I don't remember the last time I read package information from pypi. It's all on Github or readthedocs or similar. And given that it isn't especially difficult to host your own index [0] or make docker images with all the dependencies pre-installed, I don't see how this justifies the price.

If it were available as an extension on Github or a self-hosted git server solution like GitLab, Gitea or Bitbucket, then that would be more interesting to me.

[0]: https://packaging.python.org/guides/hosting-your-own-index/
Simpler: just let everyone download an encrypted version of the files. Then only allow your client software that you control to decrypt the downloaded files.

Encrypt the files using AES-GCM. If you trust that your own client software is distributed securely and won't run in hostile environments and be reverse engineered, just ship that AES key with your software. Otherwise it will get complicated fast.
Apparently, after their hibernation, bears can have heart attacks too https://youtu.be/wT6GeJ9TsUw?t=52

But that would be from malnutrition, not atherosclerosis.
Key escrow has a number of problems, not the least enforcement that keys are valid and validated. (something that there's not a good history of, and international issues come up)

Back doors are worse though - build a back door and it will be used, just not necessarily by the agency it was built for. There are a lot of groups with a lot of resources oriented around taking advantage of this, and few are legitimate. (and some are enemy nations).

There's a third problem - doing it in such a way that it can't be blocked from monitoring. (see "clipper chip" for more on that).
>Cruise cars drive like a drunk grandma...

Don't forget the part where said drunk grandma's proponents say she's a great driver because she has so few at fault accidents. ;)
The other side of the coin:

* Why waste development time on something that is only executed once a month, or once a quarter, or even once a year? If you don't need to iterate on the reports, waiting a while for something that is almost never done is fine

* Often simply adding a new index can reduce a query from hours to seconds. But why bloat your DB with an index and potentially reduce insert performance for something that's almost never needed?
If one wants to have a glimpse how much "fun" it was,

"PC Intern: System Programming : The Encyclopedia of DOS Programming Know How"

https://www.amazon.com/PC-Intern-Programming-Encyclopedia-De...

With examples in Assembly (MASM and TASM), QuickBasic, Turbo and Quick C, Turbo and Quick Pascal.
early twitter had a really great xmpp bot (official!) that was super easy to use and amazing to consume twitter. it really felt like a huge IRC room.

i kind of miss that.
We're not talking about concurrency, but actual parallelism.

Anyway, if by data parallelism you mean simd, then that is already available and widely used in Julia. Multithreading comes on top of that.
> I honestly believe everyone is trustworthy.

There's another point to make here: Not giving individuals the keys to the kingdom protects them from being targets.
The bytecode format of eBPF is Turing complete, it's the verification pass that makes sure the code flow graph is a DAG for instance.

cBPF was different, and only allowed you to jump forward (guaranteeing termination), but eBPF is a much more general VM.
It's amazing to me that the whole article glosses over issues around key storage for symmetrical encryption, not to mention now you have an O(n) liability issue with all of your readers.
They do explain it very clearly though, and give a reason why that is what they are interested in for business purposes. Benchmark and optimise for what you're running, right? Better than a Mandelbrot?
I've spent time in a lot of countries, and:

You tip in the US because the employees are paid a sum that assumes tips are coming. You can pay less than minimum wage because the actual compensation comes from tips.

Of course, this is different in other countries...

And yes, 15% is standard for "acceptable" service and food. You can tip less if you really have a complaint, but with the proliferation of Yelp and Google Reviews, it's easy enough to avoid bad places.

On a road trip, that can be a little different, but...
Speed is important. But what can be more important for the end user is the perception of speed.

A decade or so ago I was looking into reporting tools. Crystal Reports was getting expensive and I was looking for an alt. Some of them were faster at generating a several hundred page report but CR did something the rest didn't do. Instead of making me wait for the entire report to generate (several minutes) it would allow me to view the pages as they were generated. This meant I could read the first few pages while the rest were still in process. This made CR feel many times faster than the others.
Seattle increased the minimum wage to $15 and didn't exempt wait staff.

There was some talk about if people would stop tipping. Nope, people still tip!
Beyond that, hand-rolling JWT isn't so hard at all. When I read about some of the exploits in certain libraries, I didn't have to worry about it, as I only supported the known authority's public key in the system I was working on.

Of course, that makes the header effectively useless in practice.
I have the same rule. Although the actual multiplier I use is 5 based on my experiences. ymmv.
So back in the heyday of Fortran II, it did work on smaller computers.

One key frustration I had with Fortran II was that you couldn't put expressions in the elements of a DO loop. Nobody could tell me why.

So I bought a book on compilers https://www.amazon.com/compiler-generator-William-M-McKeeman... and dove in. I ported got the XPL compiler to run on our SIGMA 5 and actually used it in some production jobs. Then, I got a job at Sycor on a team of 3 writing a compiler for a derivative of PL/M targeting the 8085. The compiler was written in Bliss 36. Was serious fun and had major impact on how they developed their software.

I have long left Fortran behind. I have many other languages under my belt now, and no desire to revisit.
Big O – The Ultimate Gaming Machine
"Predictions are hard, especially about the future."
—Yogi Berra, MLB HoF & American Philosopher :-P
Maybe due to the fact that on the internet at least, vegans tend to be the preachy moralistic types that call you a monster for eating meat.

I don't know about IRL, as I haven't met many people that I know to be vegan, as with most groups on the internet, the worst squeaky wheels are over-represented and their brand of squeakiness really gets under many people's skin.
Show HN: Eigensheep – Run Jupyter Cells on AWS Lambda
Did you read the entire FTC write up? Facebook essentially doesn't have control over how they handle privacy data anymore. I'd argue the fine is the least damaging aspect.

"As part of Facebook’s order-mandated privacy program, which covers WhatsApp and Instagram, Facebook must conduct a privacy review of every new or modified product, service, or practice before it is implemented, and document its decisions about user privacy. The designated compliance officers must generate a quarterly privacy review report, which they must share with the CEO and the independent assessor, as well as with the FTC upon request by the agency."
UPS adds Sunday service, forms drone unit and files to expand operations
Very reminiscent of http://www.jpaerospace.com/
Deploying into Production: The Need for a Red Light
https://www.businessinsider.com/gusto-headquarters-office-to...

https://www.businessinsider.com/gusto-ceo-joshua-reeves-
A fatally flawed post that dooms it to the category of SEO rather than what should be useful information. I did especially like:

> Canonicalization is a quagnet, which is a term of art in vulnerability research meaning quagmire and vulnerability magnet. You can tell it’s bad just by how hard it is to type ‘canonicalization’.

The flaw?

There's nothing here not already well known, so this isn't an insightful piece for those already well versed. Therefore, this is a piece written for those that aren't so practiced, for the sake of discussion: junior dev or devops, or non-security devs.

The content itself is a good discussion, and digestible (lol).

But, as a piece that junior folks are expected to get a takeaway from, the introduction is a disaster:

> This post is mostly about authenticating consumers to an API.

ie, not service-to-service auth.

> Unless you have a good reason why you need an (asymmetric) signature, you want a MAC.

A MAC/HMAC requires the signer and all verifiers to have the key. As stated just prior, this is about "frontend" signing. A novice reader might not realize they have to guard the key very well, and might even send it to the client browser. "Unless you have a good reason" is not a sufficiently strong warning for a post that is written as an instructable, more or less.

More architectural introduction (bonus with diagrams) is required. As is, this post is a footgun.
This seems high. Is it that 2019 model is worth 30% more than a 2000 model was at release? Or is it more a matter of refactoring mechanical linkages/interfaces into software?
I agree. There is also a learned mindset; to treat desire as a lack or as a vision of fulfillment.

Personally, I think the role of meditation and happiness is in creating emotional/cognitive distance between one's self and the observed desires, not the lessening of desires, per se. Though it depends on one's path, I suppose.
It's definitely Mac-centric. Mac in all the screenshots. Mac link in the menu has a blue border to make it stand out and the Windows one doesn't. Like you said, the bottom of the homepage is a link to download the Mac version. Release notes are all for Mac, no Windows. The blog talks about "Fork", which is a Mac app, and then a separate "Fork for Windows".
I don't. The available evidence, if you look at it with a preconceived bias towards some theological origin, seems to indicate either a single, quixotic or even malevolent god, or a pantheon that includes tricksters, weirdos and haters.

A matrix/simulation origin allows goofy things like ring species, parasites and molluscs with lots of different eye paradigms - they're either glitches or leftovers from the last run, or exercizes in imagination for the matrix runners.
Vuetify v2.0 released – components updated to MD2 specs
Not sure why this is downvoted. After spending several decades on earth you start to see how govts are designed to protect the wealthy
We have been trying different things since at least the 1980s and the Clipper chip debacle.

At _some_ point, this quits being a failure of the tech community. _Some_ people simply are not teachable, because they refuse to listen. No "something different" is going to convince someone of something they don't want to believe.

P.S. You didn't say "issue" before, you said "failure." That it's an issue is indisputable. Assigning blame seems counter-productive at best.
+1 on this. With asymmetric signing, you don't have to spread a secret far and wide. You could go a step farther with client certs, but still would need a more heavy management interface and a CA setup against your applications which means quite a bit more complexity.
I bet they A/B tested that feature and decided users loved it because their metrics did not reveal how many users were muting their televisions. Maybe on Smart TVs they know, but perhaps not if that smart TV is hooked up to an external sound system.
Yeah, my last job wanted me to install their rootkit/spyware on my personal phone for the privilege of being able to check my work email at night. I resolved this by letting my manager know how to contact me after hours in the event of an absolute emergency, and that otherwise I'll check my messages at the office when I get in to work.
We are able to report our own consciousness, so it obviously has "classically" physical effects that can be measured.
We should separate what something does from its intended effect when having these discussions. Laws exist on the books, laws can be added, etc but that is unrelated to enforcement and credibility and continued sector/business growth.
"We make that assumption because other people are like us."

Then how do we know that we ourselves are conscious?
How so? Couldn't we come up with a way of disguising encrpyted message streams so that they did not stand out? It would be more expensive, and given enough analysis they could probably detect them anyway, but it strikes me as an arms race.
> That being said I still don't think it'll work. Just pointing out the thinking that's going on here.

The problem is that this either shows a stunning amount of ignorance or deliberate malice.

Let's just go back and consider that the government does not want the average user to have strong encryption. What is the play here? The average user is almost by definition not the bad guy, unless we consider the population at large to be criminals by default. Is the government trying to dragnet the entire population and keep everyone under the thumb for minor infractions? Because that's the only feasible target here. Barr can froth at the mouth, mad as the dickens, it won't prevent Bad Guys from using strong encryption. So his only feasible target is the (mostly) law abiding population.

The other point, preventing the likes of Google, IBM, Apple, et. al. of selling devices with strong encryption to blacklisted countries again shows either ignorance or malice. As parent wrote, encryption is just math. Are the government agencies so shockingly uninformerd that they think that in absence of secure IDevices, north korea will be forced to use backdoored technology?

The spread of physical goods can be controlled (to some degree), but the spread of information can at best be slowed down, but not stopped. Doubly so if there are already existing methods of secure communications that the government cannot efficiently crack.

The only conclusion I can come to is that they are well aware that they cannot catch any serious Bad Guy using mandated backdoors. Serious Bad Guys will use strong encryption anyway, they will cover their tracks and won't care what is legal or illegal (in the US). Furthermore, against targets like these, there are already time proven methods of infiltration, social engineering and good old fashioned bribery.

This only leaves the option of taking secure communications away from the population at large, perhaps because the government feels threatened from too many people being able to share ideas? I was never one for tinfoil hattery, so my hope is that I'm wrong.
> No matter how much money you pay, you're not entitled to a lot of service (whatever that means to you, personally). You're entitled to the service you purchased.

The service he purchased was "unlimited flights." In this case, by definition and by contract, he was literally entitled to "a lot of service."
CircleCI processes over 30M builds per month
And yet you're referring to flappy bird by name. Exactly how many flappy birds are there?

Most people who make games aren't trying to make connect3-like games, but rather something more fun/interesting. There isn't much point competing with medium to large studios that churn out games like candy crush anyway.

Stardew Valley, a 2D pixel art farming rpg-lite, was made over the course of ~4 years, by a solo developer who learned how to program in the process.

Undertale, a 2d pixel rpg-like, took ~2.7 years to make according to Toby Fox, the sole developer afaik.

Terraria 1.0, a 2d pixel art mining/building/fighting game, was made by a small team over ~4-5 months. After ~7 months, 1.1. After another ~9 months, 1.2. (They were big content updates).

Starbound, a 2d pixel art mining/building/fighting game, took ~1.5-2 years and launched in beta, with a small team.

Cuphead took 7 years with two brothers and a part time animator iirc, because they were absolute madmen and wanted to make a game with 60fps watercolor animation. Did they end up making a lot of money? probably, but that was quite the gamble.

Making games is tough when you consider it can require programming, storywriting, composing music, designing art, etc. And that's not including the business/marketing side. It -is- true that a lot of beginner indie devs spend way too much time polishing their games and end up not publishing them, but that doesn't mean compelling games are necessarily easy to make.

It seems to me that the parent comment blithely assumes most indie devs are trying to make games solely to earn income. A lot of indie devs are trying to make games they wish existed or just seem like a cool/fun idea that other people might be interested in, too. SWORDY is one such indie game that doesn't seem like it was thought up purely to earn cash, Gang Beasts* is another, and so on.

* Gang Beasts is actually made by Doublefine Studios but it sure feels like an indie game.
Well as long as even well funded companies come up euphemisms like "business imperatives", "strategic direction", "quick execution" etc to peddle sub-par javascript software things are not going to change.

What makes it worse is developers keep harping on CPU/RAM being cheap and software on newer hardware is plenty fast to not only justify but promote bad software.
2. The best servers usually want tips, because they can make more at a tipping establishment.

It’s not the “best” servers according to studies, it’s often the most attractive and non minority servers.

I don’t have any opinion either way about his conclusion/opinion but this is the first article I could find. I first heard about this on Freakonomics

http://www.opportunityinstitute.org/blog/post/im-going-to-ti...
It completely changed the way I write Go. This is editor specific though.

I use Vim for programming Go and have a few custom scripts built on top of https://github.com/fatih/vim-go.
Thanks for this - I was using life expectancy at birth. Looks like it was around 55->60 from 1850->1900 if you lived to 5 looking at this chart: https://ourworldindata.org/uploads/2013/05/Life-expectancy-b...
The Cache and Multithreading
I totally get what you are saying, but it is quite the rabbit hole if we determine that 'we can't have any illegal number... everyone should be able to share any number with anyone else'

That basically means we have to entirely get rid of copyright, since all data (books, movies, software, corporate secrets, state secrets, etc) are just very large numbers.

Do we believe that there should be no restriction on the sharing of any data? I can see the appeal, but there are far reaching consequences if we say that.
Has any American newspaper or person or politician on twitter been forced to retract exaggerated claims?

Seemingly.

https://digitalcommons.wku.edu/cgi/viewcontent.cgi?article=1...
It depends on the terms agreed with investors.

Typically this agreement says the board seat is allocated to the CEO role, not to the individual. So, if the CEO leaves the company, she loses her board seat. She could be appointed to a different seat, e.g. as an independent director chosen by the other members of the board, or as a board member voted by shareholders.

But which of these outcomes is possible likely depends on her negotiating position at the time(s) she raised funds.

The book 'Secrets of Sand Hill Road' has useful guidance on this. See the first 10 pages of chapter 10.
If this happens companies will flee the country who does this. They have no choice.
Well that would still technically be a designated parking area - if an overlapping one. Cars have them as well.

The main reason why not is if there are other non-disruptive locations for it they should be parked there first. Better to have bikes on bike racks before they start taking street spaces for instance.
A Robot Hand Helps Amputees “Feel” Again
Thanks! This particular article went through pretty extensive feedback with colleagues where I'd print the article out, share it, and get hand written feedback. This necessitated investing in print formatting. :)
How to hire the best talent in the world without the visas
MixNet: Mixed Depthwise Convolutional Kernels
Kind of weird to use a picture of the East Side Access project in New York as the lede. New York is a whole different case from the rest of the country. We do know why infrastructure in New York is so absurdly expensive. Outright theft and fraud is a big culprit: https://www.nytimes.com/2017/12/28/nyregion/new-york-subway-...

> The budget showed that 900 workers were being paid to dig caverns for the platforms as part of a 3.5-mile tunnel connecting the historic station to the Long Island Rail Road. But the accountant could only identify about 700 jobs that needed to be done, according to three project supervisors. Officials could not find any reason for the other 200 people to be there.

> “Nobody knew what those people were doing, if they were doing anything,” said Michael Horodniceanu, who was then the head of construction at the Metropolitan Transportation Authority, which runs transit in New York. The workers were laid off, Mr. Horodniceanu said, but no one figured out how long they had been employed. “All we knew is they were each being paid about $1,000 every day.”

> The discovery... occurred in 2010 and was not disclosed to the public

This sort of behavior is unfortunately commonplace.
Yes, but the key ingredient for human lying is a theory of mind, and a theory of mind is difficult to formulate without your own consciousness to generalize from. To get to even the motive for lying in the first place, you'd need awareness.

For a philosophical zombie, you'd need this behavior to exist independent of the zombie having a theory of mind and conscious awareness which they can use to reason about the state of another's awareness. That's a lot leaps of faith to take.
If you get a malicious update from a compromised update server and then ask said server if the hash you got is correct, you might as well just roll a dice. You'd need a pinned certificate (e.g. for HTTPS) to prevent MITM and thus asymmetric crypto anyway.