skysight-inc/HackerNews huggingface dataset:
I'd be interested in seeing data on this claim. The only people causing fender benders by panic stopping at every yellow light are the same people already paying attention to traffic signals to begin with. Major accidents are caused by people who blow the light entirely (e.g. drunk), not the folks who run a "pink" light.
is that a good tutorial? looks really good on the surface!
What's bizarre is that anyone would use software AES. AES-NI has been around over 10 years, and tons of other platforms have instructions or hardware acceleration, plus lots of libraries implement it. It's crazy that NetBSD is vulnerable, but I can't see how OpenSSL FIPS is vulnerable unless it's versions <1.0.1?

On second glance, it looks like NetBSD is only vulnerable if you aren't using hardware SHA-256, so still unlikely to affect anything but legacy. (Also, seriously NetBSD, CVS? It's 2019, even grandma uses a DVCS now)

Do you think it's possible to force software AES? That would be a cool attack. Probably wouldn't affect compiled code, but still..
> It will silently fall back to a very slow transfer.

Why would it be silent? The computer would hopefully show a small notification that the transfer is happening slower than it would with a newer cable
I tried for my company, results were extremely poor and I did not like a single logo.
No, "fingerprinting" was the issue the City marketed.

The actual scuffle was because the City of Austin wanted ride-level trip data and a larger fee from the individual rides. Further, Mayor Adler's goal was a tax+security screening system for anyone who wanted to transact online. Those are his words, not mine. Quoted in the post below.

I detailed some of it here: https://medium.com/@CaseySoftware/mayor-steve-adler-is-scamm...
Oh, it's very simple.

USB 3.0 was renamed to 3.1, but that was confusing, conflicting with USB 3.1, so it was rerenamed to USB 3.2 Gen1, so that people understood that 3.0 was ACTUALLY the first generation of USB 3.2

But that caused problems with USB 3.1, which was faster than USB 3.2 Gen1, so it was renamed USB 3.2 Gen2, so that it crystal clear was faster than USB 3.0/3.1/3.2 Gen1.

But that caused problems with USB 3.2, because 3.2 is just two lanes of USB 3.2 Gen2, so 3.2 was renamed to USB 3.2 Gen2x2 so people knew it was TWICE as good as USB 3.2 Gen2.

The problem now is that USB4 eliminates all that clarity, so right now the big marketing push is to clarify it as USB 3.2^2 Gen1: The Reckoning.

To resolve the conflicts of historical naming with USB 1 and 2, those will be renamed USB 3.2 Gen √0 and USB 3.2 Gen √-1/pi.
I love Rust as much as the next guy, but not everything that was a good fit for C is necessarily a natural transition to Rust.
Is it compatible with my Microsofts?
If ios is more secure, then there are less exploits. However higher payouts incentivise more researchers to find bugs, leading to more exploits. The free market in action.
There is an entire ecosystem of tooling that will shit itself and wake up half the company if you assign a public IP address in the wrong VPC

Stuff like this is pain in the ass, it was a major problem
This is particularly the case when taxis are so painfully awful. Every time I ride one I vow "never again." Its always a horrible experience and costs 2X as much as anything else.
Many times, you know the input and output of a procedure that you know must exist, but can't remember the name.

Methodfinder finds the name. Let me know if you find it useful!

>>> import methodfinder
>>> methodfinder.find([]) == 0
len([])
sum([])
>>> methodfinder.find([]) == False
any([])
bool([])
callable([])
>>> methodfinder.find(3) == "3"
ascii(3)
format(3)
repr(3)
str(3)
>>> methodfinder.find([1,2,6,7], 6) == True
6 in [1, 2, 6, 7]
[1, 2, 6, 7].__contains__(6)
Don’t make your developer experience improvement a tax the user pays
Okay, obviously I've never worked in an enterprise enough company. I've always assumed a DBA was just a member of a backend team who likes thinking about SQLy stuff. Or a sysadmin who upgrades the computer the db runs on. Basically, a hat someone wears.

Do I seriously make the correct assumption that the people who are writing the backend of many apps are actually separated from the people who decide how the data those apps process the data, and you may have no direct say about the database schema? that effectively just a client - perhaps the only client, but nothing more than a client.

Obviously you've described the disadvantage of this approach; what advantage does it have?
I think you are posting on the wrong thread.
“Unique niches” of the job market that exploit the people filling them must be regulated out of existence. Uber drivers who very carefully manage their overhead generally still earn a pittance, near minimum wage or even below it. Uber mostly relies on the ignorance of their drivers who essentially accelerate the conversion of stored value in their vehicle into short-term earnings. Then when the first bill comes for brake pads, tires, shocks, CV joints and tie rod ends they pack it in. This is why their driver turnover rate is astronomical. The other side of the issue is the drivers who ignore such things and drive all over the place in under-maintained, under-insured cars, converting a public nuisance externality into Uber revenue and prolonged starvation wages.
I apologize if you didn't like the logos. We have a feedback loop in place that takes care of this. Since we just launched a week ago, there are some logos that users don't usually like. Could you please tell me your company name so that I can have a look at your logos and improve the product? This is by no means perfect right now but it'll get better with time. We already have 118 logos that users have ranked using the "like" and "dislike" buttons. We'll soon be using all this data to create better logos.
Can anyone see if you can put an ad for DuckDuckGo for looking up "Google"?

If not, this is Google not playing by their own rules.

Edit: looking up DuckDuckGo on Google, it's weird to see a DDG ad top result and DDG organic as second result on Google. There's no competition but money will still go to Google.
At a certain point they tend to start taking it seriously and cracking down on the bills. Disney had to ask Amazon to find all accounts linked to a Disney corporate credit card in order to track them all down, as I recall.
Better build two; a backup of a special cable is always nice to have and it's much more convenient to order the parts and build both at the same time.
> {university|coach} will maintain the facade that money did not have any influence

That's not really true though. For the coach, sure, as the payments happen is secret. But for the school? If I buy Harvard a new building and get my name put on it, everybody knows about it, and nobody is surprised when my kid gets admitted.
I would definitely recommend watching the TED talked linked above to get a glimpse of the impact that this work can have. I watched it for the first time after last months' Who is hiring thread and it opened my eyes to what is going on.

Major props to the Thorn team for tackling such a dark problem head on.
What they should be saying is, "No, what Google is doing is Wrong with a capital WRONG and we're not going to accept their wishes in closing off what's left of the open Web."

But then they'd have to give up all their Google funding. And they're way too cowardly and corporate to do that.
Computer aided statistical analysis to give a small but profitable edge. Place a huge number of "smart" bets where the statistically likely winnings exceed the cost of all the bets.
Yep, I've been getting Russian events in my google cal that just reappear the day after I report them as spam (which does what?)

Unfortunately, it's pretty inconvenient to just not show calendar events that I haven't accepted. If you have a busy calendar, it can be helpful to prioritize events - some will inevitably be declined or left hanging, but those are useful to see.

It's pretty crazy that calendar invites that are already filtered out to my spam email folder show up in my normal google calendar. Seems like a quick solution for google to go fix.
On the one hand the article itself is offering a anecdote about being unhappy with ORMs. On the other hand you have an experience in which you were unhappy with views.

That would leave us at an impasse (he said / she said), unless we get more nuanced. So let's.

It sounds like some of your frustration is at some DBAs you knew. Firstly I've never worked with a DBA, I'm just a senior software engineer / DevOps and to me that includes an intimate knowledge of SQL perfomance, so maybe this is why I don't mind an in-database approach.

I'm fairly sure that whatever SQL Alchemy could do with a monstrously complex data-relationship views can do with better performance (the further the abstraction gets from the engine the less performance optimization it can do).

Now maybe you agree with that, and see ORMs as a tool for the kind of job where the dev is locked out of the database. If so then I can't really disagree as I haven't worked at such places much at all.
Only if its not Bill Gates plugging it in!
If oil demand falls a lot of tar sands and offshore and fracking and other hard to get oil will become uneconomical to extract, causing (paradoxically) supply to appear to contract too. The oil age could ratchet down via a series of price spikes and contractions just as it ratcheted up via price spikes and expansions.
Quotes from the linked article:

> The city responded to what is truly a life and death crisis by erecting small yellow signs which read: Seniors Safety Zone: Drive Slowly. One more piece of city signage for drivers to ignore as they race to the next red light.

Cyclist here. There are a few crossing I go through every day where drivers need to yield to cyclists. I started keeping statistics on how often drivers yield to cyclists at these locations, and it's only about 62% of the time (N = 58). This is despite the TWO signs at each crossing saying for drivers to yield. I've talked to a few drivers at the next stop light and many of them see me but choose to plow through the crossing anyway because they are unaware of the law and the signs.

I think these signs exist as a CYA measure for the city. The city will then blame the driver if something bad happens. I regard signs saying to yield to cyclists or "share the road" or whatnot as evidence that a particular location is dangerous to cyclists because they city wouldn't spend the money on the sign if they didn't have to. Since the signs don't work, they mainly serve to mark dangerous locations.

> Drivers of high-end cars are the worst: BMWs, Audis and at the top of the list, Porsche drivers.

Yep, as a cyclist I've noticed that luxury car drivers are particularly bad on average. Pick-up truck drivers seem to have a worse reputation among cyclists but I'd say they aren't worse drivers specifically than luxury car drivers on average. Though trucks are larger so they perhaps should get more attention.
Objective-C uses a hash table cache for all method calls. It's a bit different in that Objective-C deals with collisions by just not handling them: since it's only a cache, collisions will result in going through the slow name lookup path.

Mike Ash has a nice series that goes through the disassembly of objc_msgSend: https://www.mikeash.com/pyblog/friday-qa-2017-06-30-dissecti...
Interestingly, no one has done a deep dive on what Android exploits were hosted on the site that Google discovered and talked about last week with the iOS exploits.

Google has been utterly quiet about it, and kept only talking about iOS exploits.

Certainly lots of security PR happening and this article is interestingly timed also.
It certinally is. Please take a moment to listen to the decision:

https://s3.amazonaws.com/oyez.case-media.ogg/case_data/2007/...

Consider the future. We can print these. It's only going to get better. Are you going to ban non-DRM'd printers? Printer registration and therefore confiscation?

Weapons are the ultimate form of equality. Without them the strong rule the old and weak.

It's also the easiest way to tell if you live in a class system.
If you figure out let me know ;) no solution is without drawbacks!
I didn’t say it wasn’t debunked, I said that it is what GP was talking about. I didn’t think the “debunked” part was relevant to the question asked that I was responding to. I guess you think it is, so my apologies.
My Experience with Apache Zeppelin
What are some heuristics to determine which way fits the current business problem (and future business problems)?
Apple has shut down the Safari Extensions Gallery in favor of native apps
Try out Pale Moon or Waterfox.
It's a good question. Along with oil came a tremendous amount of dependence. See railroads 50 years before that. Everyone who remembers those battles is dead. But that bargan with the devil is still with us and is likely heat back up as governments try get out from under it.
The article: http://cityobservatory.org/2019/09/

Text:

We’re killing more people because more people are ignoring traffic signals

We’ve charted the ominous increase in road deaths in the past several years, and now there’s a new bit of evidence of just how bad the problem has become. In 2017, according to an American Automobile Association analysis of NHTSA data reported by the Los Angeles Times, we hit a new high for the number of people killed by cars running red lights.

> In 2017, the latest figures available, 939 people were killed by vehicles blowing through red lights, according to a AAA study of government crash data. . . . AAA isn’t sure why the numbers are on the rise or why they have increased at a far higher rate than overall U.S. roadway deaths. Since 2012 the number of highway fatalities rose 10%, far short of the 28% increase in red-light running deaths.

There are likely many causes for the increase in fatalities. Some of it sure has to do with the increase in driving, prompted by cheaper fuel.

Red-light running is also likely another indication of the growing problem of distracted driving. Drivers who are texting or distracted by in-cabin technology are more likely to miss a red light.

It also has to be mentioned that our efforts to use “smart” technology to improve compliance with traffic laws is woeful. Traffic engineers invest untold millions in efforts to automate traffic lights to provide motorists with a green wave, but spend little effort to promote greater compliance with red lights and speed limits. For example, despite its official policy of trying to achieve Vision Zero, for example, the City of Portland has just eight fixed speed cameras. Several states, including Texas have banned automated red-light cameras. Automated traffic enforcement is a technology that’s been shown to reduce speeding and red-light running and save lives.

We’re all enamored of the prospects of technology to make life better, but in one of the few instances in which we have a proven technology that’s been shown to save lives, we’ve limited or actually prohibited its deployment, with predictable results, in the form of an increasing death toll.
Does the person who scanned the QR code have access to the wifi password after the fact on their phone? From what I remember, there is no way to access saved wifi passwords, you can just modify it but can't see the stored one.

This way, if you just have them scan the QR code on your phone (and don't let them photograph it), technically you have securely given the password without them knowing it, right?
Do you really think a Chinese manufacturer of cheap cables cares if they’re displaying various logos with the proper license or not otherwise misleading customers? Look up the whole “CE” vs “China Export” thing...
Flip (https://flip.lease/jobs) | Frontend Software Engineer | New York | ONSITE & REMOTE | 140k-160k

Flip is making moving into and out of a space as easy as deciding where you want to go. We'll take on your apartment lease and pay your rent so you can leave as soon as you need to.[0] We’re backed by USV, Collaborative Fund, and Tusk Ventures.

We're hiring talented engineers to join our engineering focused team. At Flip, you'll find private dedicated workspaces, a quiet environment, and a distinct lack of regular meetings. We're flexible on in-office employees working from home, and you can work whatever hours are optimal for you. Our team is intentionally small and experienced.

We're hiring:

* Senior Frontend Engineer

* Senior Data Engineer

* Senior iOS Engineer

* Mobile Lead

Apply here: https://flip.lease/jobs

Cultures we look to emulate are Stripe, WhatsApp (pre-FB), and Netflix. If you like and respect how those companies operate give us a shout.

[0] https://flip.lease/instant
Actually the basic USB fallbacks and simple charging are all handled through passives (resistors) and 100% of Type C cables will support them. Sadly that's the only thing you can depend on by inspection.

Communication of port capabilities are described in the spec; not sure about cable capabilities though.
Not using the mouse
I have a Microsoft Sculpt keyboard and it's probably the best keyboard I've used in a long time. The hand position is really comfortable and the keys have a nice response that isn't too laptopy (I prefer low travel keys). My only complaints are:

- No caps lock indicator
- Fn keys are a bit small, and I prefer a Fn button as opposed to a switch
- Uses a proprietary dongle instead of Bluetooth

Maybe one day I'll get an ErgoDox, but I need to figure out what switches I like first...
Komodo Health | Data Science & Eng Managers, Sr. Engineers, Data Scientists, Product Managers | NYC & SF | Full-time, Onsite

Komodo Health builds data-science and AI-powered products to improve decision making in healthcare. Our mission is to reduce the global burden of disease through big data analytics. Our "healthcare map" is where we process data and stitch together information about patients (over 300M in US), doctors, hospitals, payers, etc.

We are a data-first & eng-driven (75 engineers out of 160 employees) company and growing fast. We have significant revenue and are in hyper-growth mode.

Career Page: https://grnh.se/5ccd0c0d2

Stack: Spark, Airflow, Python, React, Scala, Kubernetes, Docker, AWS, PostgreSQL, Flask, Django, Snowflake

Engineering / Data Science:

* Data Science Manager

* Data Scientists - multiple Levels (DS is central to all we do)

* Data Engineers - multiple levels

* Sr. Front End Engineer (React)

* Director of Engineering

* Full Stack Engineers - multiple levels

* Sr. Technical Data Strategist

* Sr. Technical Engagement Manager

* Sr. Compliance Manager

* Sr. Data Engineering Manager

* Analytics Engineer

* QA Engineer

* Infrastructure Engineer

* Security Engineer

* Data Infrastructure (Spark) Engineer

Product / Design:

* Director of Product Management

* Sr. Product Manager - Healthcare Experience

* Product Designer
Stuff like /* <![CDATA[ */ was common some years ago because of JS and XHTML parsers colliding -

https://magento.stackexchange.com/questions/164569/put-cdata...
They need to let you easily delete events without responding to them. I ended up deleting them without (I think) responding but not until trying two or three different ways which each insisted I had to reply that I wasn’t attending. And now I’m not even sure how I did it and will probably have to cycle through all those attempts again next time.
It seems that what you want is not an imperative API, but a more explicit one. I'm afraid the problem is that specifying the access methods or optimizations to use in the database is very product- or even version-specific, on the other hand you can already tell a database what to do using optimizer hints.
I read in an interview with the original USB instigator that he wanted reversible cables but in order to get a standard organized and agreed to they had to go for a non-reversible cable to cut BOM cost.
Just because OS upgrades stop after 2 years doesn't mean security updates stop. Also technically, 2 years of OS upgrades means 3 years of use since each upgrade last a year afterwards.
Well Uber could also go the other way and free the market that they oversee - allow drivers to set their own rates and make the cut that Uber takes transparent to both driver and rider.
FWIW when I refresh the page I get ads for monday.com [1] and visymo.com [2].

[1] https://imgur.com/a/cffTwf7
[2] https://imgur.com/a/Y1HoGBr
Thing I read about the history of oil is energy return on investment went from about 125:1 in 1920 to about 10:1 now and tar sands are worse than that.

If countries start slapping carbon taxes on oil, you can quickly see where that goes.
While the product is interesting it makes me sad to see it locked behind a SaaS business model
I'm not saying a drug-war like approach is the best method here, just that some degree of prohibition that prevents industrialized gambling is better than none.

For example, even in a fair game the house will eventually take a gambler's bankroll provided the house's bankroll is practically infinite [1]. That's a thought experiment, but it works in practice when you are dealing with gambling addicts that won't walk away from the table.

Secondly, those gambling addicts, or "whales" as they call them represent something like 0.15% of players bring in 50% of the revenue [2].

And lastly, I would have agreed with you a few months ago, before I heard this story [3] on NPR about how Big Fish was targeting people and using predatory practices to keep them on the game. It reminded me of a twisted version of AOL's customer retention practices that they were sued for a decade ago.

There's also the whole notion of casinos/gambling disproportionately impacting low income communities and how you can't start a gambling business without tons of capital, so it serves as an efficient funnel of money from the poor to the rich. And it's really naive to think that someone going broke affects that person alone. God help them if they have a family.

[1] https://en.wikipedia.org/wiki/Gambler%27s_ruin

[2] https://www.forbes.com/sites/insertcoin/2014/03/01/why-its-s...

[3] https://www.pbs.org/newshour/show/how-social-casinos-leverag...
I was curious whether this was a thing and apparently it is: https://photonicsentry.com/

Seems like the laser technology is patented and they are aiming for fixed defenses though, so it won't be in drones anytime soon. Also lasers have more safety concerns than insecticide.
Modeling Multi-Action Policy for Task-Oriented Dialogues
Good info! I had no idea it was a subsidiary of Mozilla.
I was even at pockets website and I didn't see any obvious indication.

That still leaves them on the hook for sending your data to companies like DoubleClick. I hope it also means the data the pocket guys are collecting will fall under Mozilla's policies because I've been trusting them so far not to sell my data to anyone willing to pay for it, while generally I wouldn't put that kind of faith in a targeted adverting company.
What I don’t understand about this is, if you’re FIPS compliant you can’t just use the PRNG of /dev/urandom? You must use a FIPS as well?
I can barely remember my interaction with anyone I met yesterday. How do you remember three distinct taxi (and therefore trivial) encounters from years ago?

Do you work for Uber, or do you just have an amazing memory?
Contributing bugfixes, sure, but that's different than providing a project you've written yourself for free to others and continuing to invest significant work in maintaining it.
What other business models would you recommend? We are still pretty new and are open to suggestions. Moreover, we are still a very small team and it's easy for us to change our business model. SaaS seemed to be the best, so we went with it.