skysight-inc/HackerNews huggingface dataset:
I, like many people in this thread, learnt about algebraic effects for the first time from the posted article. However, many commenters seem to be mislead by the explanation based on an example with exceptions. What I learnt from [1] linked below is that algebraic effects is a generalization of which language constructs like try/catch, async/await, or generators are just particular cases.

From that perspective, algebraic effects make sense and look very interesting.

[1] https://github.com/ocamllabs/ocaml-effects-tutorial
Apple's Rainbow Logo May Return to Some New Products as Early as This Year
Germany's tech illiteracy is a self-inflicted consequence of its pitiful salaries in this field, treating IT like a cost center that has to be outsourced to wherever is cheaper and companies' tradition of rewarding management incompetence over technical competence.

Consequently, Germany's most brilliant tech minds leave for The Valley, Zurich or London.

You reap what you sow.
John McAfee Is Missing
Since this is tarnishing your brand, maybe ask Ubuntu to cease shipping "VLC" if they do such a half-assed job (enough effort to replace integrated libraries with system packages, not enough effort to maintain those packages)?
it also runs from cron...
I’ll give you a dollar if you can name a major company that could survive more than an hour if it woke up and found out all its spreadsheets had been deleted.
Many things appear "creepy" but that isn't any reason to think they're bad. In fact, creepiness can be good. Would you say a horror movie has done a good job if it failed to creep you out?

Are you sure that you aren't just using "creepy" to shut down non-traditional forms of private sexuality?
The paper suggests it can be accessed on the site [0], however certain parts of the site only appear if you run through their questionnaires.

> The source code to reproduce the experiments is available at https://cpg.doc.ic.ac.uk/individual-risk, along with documentation, tests, and examples.

As far as I can tell, the source code is not available, at least not from where the authors suggest.

[0] https://cpg.doc.ic.ac.uk/individual-risk/
What's the Use of Dynamic Analysis When You Have Static Analysis?
It looks like I was wrong: the macOS version has lots of Swift frameworks inside of it and no hints of Xamarin, they appear to be two completely separate apps
>My guess would've been like 30 mpg, but I don't know how much of the population has a new car. //

I just ditched a 15yo 7 seater (Opel/Vauxhall Zafira) with engine troubles (burning a lot of oil - maybe a piston compression problem; leaking exhaust manifold), and having a roofbox, and it was still doing 34mpg (UK; that's 15km/l) with primarily short journeys.

Newer cars must do 40mpg as a minimum, surely?
I went to see the launch of the Rocket and it was amazing. The chandrayaan 2 will explore the south pole of the Lunar surface. There's also a rover and lander inside it which is named after Vikram Sarabhai, the father of Indian Space Research.

Here's another update : The second orbit raising maneuver is scheduled on July 26, 2019, at 0109 hrs (IST).
Because everyone uses CVE. And then, it gets in the press...
If VLC was a commercial product, this would be a lawyer time for effectively damaging reputation based upon lies and would see many media outlet dragged over the coals.

VLC is not a commercial product, but equally still took the same impact from this and as we know, many end-user will be oblivious of any retraction as the case with many media retractions/corrections that get buried and do not traction.

Maybe we need Open Lawyer as well as Open Source!

I'm of the thinking that the only way media would get any education would be litigation. Sad I know, but that is the World they operate in. Why else do media outlets have lawyer departments.
That's my personal comfort zone, but I think it's far too late for that now. I think Musk has talked both investor and consumer expectations into the stratosphere. That has given him low cost of capital and extremely low marketing costs relative to other car producers.

But now he's in the position of Wile E. Coyote running himself on thin air over a chasm. If he keeps running, he might make it to the other side. But it not, I don't think he falls slowly.
Would differential privacy fix this problem? I heard that new US census will use it.
Li Peng: Former Chinese Premier Known as 'Butcher of Beijing' Dies at 90
IBM Z/OS V2R4
Use plaintext email
Farm – A New Framework for Transfer Learning for NLP
Current Senior Google Engineer Goes Public on Camera: Tech Is “Dangerous”
Substack is cool - but it's kinda expensive.

I wrote a short blog a few months ago about how to get most of the benefits it offers with way less cost (and without being tied to a single platform) - plugging together Mailchimp and Trolley with a static website and a l'il bit of Zapier.

https://trolley.link/2019/03/03/paid-email-newsletter.html

(Disclosure: https://trolley.link , which I've used for the payment elements in this example, is my product)
It's literally just futures. (Still very hard to implement, of course, and in particular IMO this kind of implementation (M-to-N threading) is much better than the async/await implementations) but CS is pretty settled on futures being the "best" model, even C++ has them!)
It does work better in the dark than cameras?
Why tech might be better. At best: Immediate direct feedback to a student when doing exercises that consolidate understanding. Video is a powerful tool, animated explanation, difficult demonstrations, historical footage are all available and you need get the delivery right once and it scales up to millions of students from there. Psych tricks along the gamification line can be useful in providing additional motivation.

MIT's probability course is amazing. So it can be done, for a given audience at least.

I have my doubts about a computer convincing someone who lacks confidence that they are easily smart enough to excel at this task or learning in general.

What do you use a screen for? YMMV. If they're ever going to work in a school some teachers are going to be doing amazing things to make that happen. How would they know what to do? Easy to see good teachers failing at that too.
That's a totally broken culture / machine. Unfortunately, they're out there.
>Also, Chronic Lyme is notoriously difficult to diagnose conclusively.

That's probably because it doesn't exist...
> Unfortunately, academic and commercial incentives don't really align here. Most commercial entities don't want to share their data because it's valuable to them, and if they let researchers in, they want the output of the research to remain proprietary to their commercial enterprise... I wonder if there isn't some sort of governance solution to this.

You're commenting on an article in which a commercial entity is sharing their data despite it being valuable to them. Maybe they are the outlier but I've seen plenty of companies share data, especially in the ML space. Here are some datasets[0]. Maybe you would prefer more, but compared to other fields there is a lot of sharing. A "governance solution" could make things worse. If there was some mandate that companies that collect this data have to share it in a costly way, then it would discourage collection.

[0] https://blog.cambridgespark.com/50-free-machine-learning-dat...
[Edit, see below.]
Time for some algebra of sets?
Do you only own the intersection? Do you own the union?
> "I think..."

Yet, many studies show how poverty and decision fatigue (or some variant there of) goes hand in hand, often in a negative feedback loop.

_I think_ it's likely that poor people don't read these studies, and, thus, are not subject to your nocebo effect.

Note. I didn't say it explained all behavior.
I moved to Fork from Sourcetree a few weeks ago.

- This really is much faster than SourceTree (I have a surface Go and CPU is important to me). My entire machine feels faster. It's entirely possible this is due to ST doing a whole bunch of unnecessary work rather than Fork being good though.

- Unlike Tower (and like ST) it has a separate staging area

Didn't try anything else asides from ST, Tower and Fork because the rest don't even seem to be capable of interactive rebase, which is essential for a good commit history.
Google cancels A.I. ethics panel after uproar
JuliaCon 2019 – Scientific AI: Domain Models with Integrated Machine Learning
Slightly offtopic, but are vulns related to overflows no longer pocced publicly or are there mitigating factors which make exploitation impossible (eg K/ASLR etc)?

The specific CVE listings I'm referring to are:
https://www.cvedetails.com/vulnerability-list/vendor_id-5842...
https://www.cvedetails.com/vulnerability-list/vendor_id-26/p...
It looks like this is not dependent on Gnome at all, it's simply pretending to be a Gnome shell extension in order to hide. I don't think disabling shell extensions will do anything at all.
Maybe everyone here could stop asking this person to edit their comments? People have been banned by dang and co for much less...
Yes considering hotstar which offers english tv serials like GOT, originals and live cricket matches for 999 / yr it's about time Netflix did something similar
What's Blocking Your Data Scientists: Customer Empathy
I agree. Main issue seems reasonable. Still, the environment that VLC lives in includes Debian oldstable, and this exchange feels to me like not hitting the right balance between accepting that and moving the justified blame to the distro. The reporter was not unreasonable after all.

> Especially, since the very very large majority of VLC users are not on Linux, but using binaries.

It's also apart from BSD pretty much the only OS where security issues like this matter, since closed source OS like Windows are insecure by default. I'm aware this is an ideological standpoint and not universally accepted.
Is your business ready for digital transformation?
Zorax Talks: Klyaton Review
Has Dyson ever looked into that?
> The whole article is made up like the NYTimes interactive articles are.

Not him, but for me: yes and thats the problem.

I don't need Infotainment wrapped, information wrapped in some storytelling timeline with broken scrolling. Just give me a well done article without the nonsense, Jesus. These animation, hex code dumps etc. add ZERO value to the article.
It is possible to "import" other data into OSM. However it's very tricky. Licencing/legal issues aside, it can be very technologically challenging to merge another database into OSM.

I suggest posting to the OSM talk@ mailing list, or if there's a local estonian one too
VLC is open source, distributed by VideoLAN non-profit and is totally non-commercial. The only money received by the non-profit is through donations.
Most / all software has a disclosure policy, send your vulns privately and provide/negotiate a public disclosure date.

Not doing so is an asshole move.

In this case, the solution would be to track down distributions which did not package the software and (privately) disclose to them that the relevant lib needs updating.
That's the case for some ancient civilizations (it's definitely one of the more plausible entries on the great big list of reasons Rome fell, say), but not all.
Since we are talking about debian, what bug numbers is involved and which package does it belong to.

The nature of dynamic loaded libraries and package management system is that bugs will end up at the developer who manage the code that has the bug, rather than the developer who has users that get effected by the bug. It look like blame shifting but I don't see how you could have it any other way.
This is the point about OSM. Local people can just fix it. We don't need _artifical_ intellegence, when we have real intelligence.
How do you define controlled? It seems one exec left because he had enough money, maybe others left for similar reasons.
I haven't kept up with British politics, because- as a Canadian- it's hard enough to keep up with my own and the American's.

What's the appeal of this guy? He seems like a buffoon. Is he the British Donald Trump?
They want to be seen to be doing something with computer vision/AI.
Pseudo and psuedo are derived from the greek work ψεμα psema, which literally means lie. It's synonym is 'untrue' which indicates that your term is the right term to use when anonymizing-but-not-really-anonymizing
None of the Belfast[0] codes are returning as valid; same for the rest of NI.

[0] - https://en.wikipedia.org/wiki/BT_postcode_area#Coverage
In Linux distros, the Distribution is responsible for packages. DLC can't patch them themselves. So not DLC's fault.
As a Maltese, I can confirm :) Sahha!
Affine types to represent futures would help here.
For profit companies can't spend funds on doing foundational research. There's no financial return on that. So foundational research is left to the universities and foundations. Biotech ventures only can focus on treatments.
Speak for yourself. I find declarative programming to be far more intuitive, as it lets me think about how I should go from the data I have to the data I want. Thinking about programs in terms of the steps they're taking to do something generally bogs people down with irrelevant implementation details.
This is a well-written article, and I do love good journalism. But I am personally skeptical of The Information, because the person who owns it is literally in bed with a founder/VC: https://www.theinformation.com/reporters/sam-lessin

My skepticism is compounded by the fact that his startup repeatedly spammed me at an address I give only to friends, and I definitely never gave to him. I presume he pulled it out some mutual friend's address book when they signed up for his startup. But despite many rounds of discussion, they'd never tell me how they got that address. And after all that discussion, he then started spamming it from his VC fund.
AI’s new workforce: the data-labelling industry spreads globally
This is one of the hardest systems effects to explain to people every time there is a deer cull; the population doesn't stabilize, it grows until the food runs out and then crashes with vast numbers of deer starving to death.

That a fair number of people still believe that it's more "natural", and thus better, for the bulk of the herd to starve to death rather than a percentage of the herd being hunted is one of the more curious animal rights positions.
Problem is that you are forced to pay three times the price of Spotify/Netflix per month for this stuff in Germany, as this website (and many others) is financed by a mandatory fee.
>If female babies started dying, for whatever reason, the chance the average baby is female would gradually increase until the ratio of sexually mature females to males balanced out.

Perhaps I'm missing something, but how does the human body have internal knowledge of the current gender ratio in society such that it will attempt to fix the ratio to balance?
Is it now the responsibility of every piece of software to check the versions of every library they're linked to for security patches? Shouldn't that be the responsibility of the distribution?

edit: is there even a common method for the developer of a library like libebml to flag an update as a security fix to increase the priority of it, or is that up to the package maintainers of each individual distribution to determine? edit2: Or is that common method "file a CVE"?
I look at oop as a DSL. A robot that has a method to raise hand is infinitely better mental model than a function from robot to new robot whose hand is raised.
Yes, in the sense that the output of a differentially private protocol has mathematical guarantees against re-identification, regardless of the computational power or side information an adversary has.

There are caveats. The exact strength of the privacy guarantee depends on the parameters you use and the number of computations you do, so simply saying "we use a differentially private algorithm" doesn't guarantee privacy in isolation.
I would like to read more details about "The former is strongly preferred". Why is plain text preferred and by whom?
This is all true, but short sellers can (and do) depress the price of a stock in the short-term through the act of selling.
Electric ovens generally run on level 2 sockets. They're usually 30 amps but some run as high as 80 for dual chargers and whatnot. You can also find really low ones too, it's all over the place.
He backed brexit and now he's going to deliver.
welcome to the fold. Python -> Go dev here and what a refreshing change of pace strong types and a super opinionated language are.
Until things like this happen:

https://en.wikipedia.org/wiki/Tsutomu_Miyazaki
AI ( neural networks) is sadly a "winner takes it all" markt...

Even if you create an algorithm five times better and faster, you still lack the data to feed it..
As a media student I enjoyed this article regarding synthetic media and the impact it holds on our global community. technology updates so quickly it is sometimes difficult to stay up to date.
You just made the same point as the post you're trying to argue with.
I think raganwald made the same point here: https://www.reddit.com/r/javascript/comments/cfz8lo/algebrai...

And the author (gaeron, aka Dan Abramov) replied:

> As far as I understand, the difference is that effects are actually typed (as part of your function signature), which I didn't go into — and so you have a lot more guarantees about what a function can or cannot do.
In Praise of Halvings: Hidden Histories of Japan Excavated by Dr D. Fenberger
Yep, we used a dataset by the ONS, which includes only England and Wales. This is indeed not clear on the website, we'll fix that.
That is the default path we're on. All the models for things not going that way involve the emissions rate plummeting over the next decade and then going negative for several decades.

Essentially the IPCC and scientists in general have baked in the assumption to the models that we are smart enough to avoid collapse by changing our behavior. TBD.

Or to put it in P.G./HN jargon, (our current) civilization is "default dead" if we stay above 10Gt/year for the latter half of the century.
CVSS is an insane rating system made for a simpler time by antiquated practices which doesn't account for many factors either well if at all.

Hover your mouse over each button https://www.first.org/cvss/calculator/3.0 . There's Attack complexity 'low' and 'high', for instance. You're either a script kiddie or have a two billion dollar exploitation budget and all the human resources you need, but nothing in between.
https://useplaintext.email/#why-plaintext
Pseudonymization already refers to reference by pseudonym.

Pseudonimization is bad terminology in that it's indistinct from the above, to the point that parent has already mixed the two up while in the process of recommending it. And it'd be worse verbally.

"Pseudo-anonymization" could work, but something like "breakable anonymization" or "partial anonymization" might be better in that it's more obvious to a reader and doesn't rely on familiarity with technical terminology to convey the idea.

I'd go with breakable, myself, since it's most to the point about why it's a problem.

Pseudo is etymologically correct, but that doesn't necessarily help us much when the goal is ratio and ease of understanding by a wide population of readers.

Partial could work in the sense that you did part of the job, which people would hopefully understand is a bit like having locked the back door for the night while leaving the front propped wide open.

And there are probably other good options. If I was writing about this topic often, I'd strongly consider brainstorming a few more and running a user test where I ask random people to explain each term, then go with what consistently gets results closest to what I'm trying to discuss.
I'm very surprised to see that this malware hasn't been stripped of symbols and metadata, or disguised them in some way. It makes me wonder whether this is an amateur operation, or deliberately designed to give the impression of one.

Although it could be a diversion, I wonder if the mention of Rostov (a city curiously close to Crimea) has any significance.
To me, this story is a great illustration of how we humans will always try to become fat cats by clinging to and expanding upon any privilege we may have or comfortable situation we may find ourselves in. Be it something small, like free snacks in the breakroom at work, or something big, like free unlimited air travel, or something vast, like cheap abundant fossil energy, if there is any way whatsoever to externalize the costs of our privileges and benefits, then, naturally, that's what we do. And should this privilege that we have now come to consider our right ever be taken away, we are of course duly offended.

So I find this guy's reaction pretty understandable. I would love to think that I wouldn't so unreasonably take advantage of a playing field so absurdly tilted in my favor, and that I wouldn't be outraged when such a tilt was corrected. But such situations twist your perception of the world and it's hard to even know you're doing it.
I had the same reaction and at the bottom it goes more into details of the reasoning why plaintext is better. I, however disagree on pretty much all the points.
The article says that the spreadsheets were protected by a password that the contractor did not initially hand over. So yes, that was a oversight of Siemens.
Except if I missed something in my quick research, there doesn't seem to have been a CVE for libebml when it was fixed 16 months ago. So it's really not surprising that LTS distros don't have the fix...
Why is this a Show HN? It's just a web page, isn't it?
There is info about it. "4. Why is plaintext better than HTML?"
Keep reading the article:

HTML emails are mainly used for marketing - that is, emails you probably don't want to see in the first place. The few advantages they offer for end-users, such as links, inline images, and bold or italic text, aren't worth the trade-off.

and more at https://useplaintext.email/#why-plaintext
FYI given a CVE or package name, you can view the state of a particular issue across all Debian versions using the Security Bug Tracker. For instance

https://security-tracker.debian.org/tracker/CVE-2019-13615

In this case, this hasn't yet been updated with the info from the VLC team, I expect it'll be marked ignore or not-vulnerable once that happens.

I don't know the real CVE for the libebml issue but it doesn't appear to be listed at https://security-tracker.debian.org/tracker/source-package/l... which means that the Debian security team aren't aware of it.
Project Habbakuk: Britain's attempt to build an ice warship
They also claim its for security purposes, which I think is almost a complete lie.
Getting Started with Image Processing in Mobile Devices Using JavaScript
Supermarket chain Lidl had a promotion over a decade ago where they sold Air Berlin flights for 20€, the vouchers could be exchange for open seats in any flight for a year after the promotion was on.

I bought dozens of them, and basically spent a whole year travelling for essentially nothing, and like the author in the story giving away air tickets on a whim.
This is the reason I use the curses-based gui named tig.

I think it would be nice to have a UI where all input or manipulation of data was done through a CLI with autocomplete and a well-written tutorial, but which presented read-only graphics to represent the data model.
Scotland is part of the UK, you know...