skysight-inc/HackerNews huggingface dataset:
It's the author, look at his writings

https://www.nytimes.com/by/charlie-warzel

"Before that, he was a senior technology writer at BuzzFeed News" (that alone explains a lot)

And almost all of these are posted here
Try Sneklang Online
I wonder if they just didn't check their email or were on vacation that day. That is a HUGE payoff to just ignore.
Stegasuras is convincing work and the quality looks excellent.

I wrote a steganographic tool in this same spirit back in 2011, called Plainsight.

Back then, we didn't have deep learning, and the "Imagenet moment for NLP" had yet to arrive.

My Python code, with examples, is here: https://github.com/rw/plainsight

Unlike the OP, my Plainsight algorithm is 100% invertible by construction, and accepts binary input. (I verified the inversion process with "roundtrip fuzzing", a technique I still use today.)

Plainsight uses each bit of the input message to generate tokens. Bits are used to decide how to traverse a Huffman-style n-gram tree, weighted by frequency. This tree of n-grams is the model used in both the encoding and decoding steps. The drawbacks to my method are that the output 1) can be verbose and 2) does not convince a human that it's plausible, except for short messages.

Stegasuras has orders-of-magnitude better output, and seems to solve the problems I couldn't solve eight years ago. I would venture that their new result has as much to do with advances in language modeling, as it does with the particulars of their encoding and decoding algorithms.

I'll also note that I'm glad these researchers were able to use grant money to do this work. As a non-academic, I applied for an AI Grant to support me in upgrading Plainsight to use deep learning, but I was turned away at the time.

Finally, one of the ideas I picked up back then is that spam can be used to contain secret messages. Send enough gibberish to enough people, with your intended recipient included, and you'll look like a spammer--not a spy:

$ wget https://spamassassin.apache.org/publiccorpus/20030228_spam.tar.bz2
$ tar -jxvf 20030228_spam.tar.bz2
$ cat spam/0* > spam-corpus.txt

$ echo "The Magic Words are Squeamish Ossifrage" | plainsight -m encipher -f spam-corpus.txt > spam_ciphertext

$ cat spam_ciphertext
(8.11.6/8.11.6) 3 (Normal) Internet can send e-mails until to transfer 26 10 [127.0.0.1]
also include address from the most logical, mail business for your Car have a many our
portals ESMTP Thu, 29 1.0 this letter on internet, <a style=3D"color: 0px; text/plain;
cellspacing=3D"0" how quoted-printable about receiving you would like width=3D"15%"
width=3D"15%" border="0" width="511" Date: Tue, 27 Thu, 19 26 because
zzzz@localhost.spamassassin.taint.org for

$ cat spam_ciphertext | plainsight -m decipher -f spam-corpus.txt
Adding models:
Model: spam-corpus.txt added in 2.57s (context == 2)
input is "<stdin>", output is "<stdout>"
deciphering: 100% | 543.84 B/s | Time: 0:00:00

The Magic Words are Squeamish Ossifrage
>We've already seen where software encryption went to hardware encryption -- the result is that the encryption is mostly transparent to performance

Yeah but are you really sure that hardware encryption is safer? Are you sure that it's not secretly saving the key somewhere where it can be extracted? Are you sure that the hardware encryption works at all and that it's not just writing the data unencrypted?
No, this doesn't reduce the security of the password at all, if your first fast hash is well distributed.

Eg use the first 72 bytes of SHA256, if you like overkill.
Because the hardware is implemented with software.
Editorials are very clearly separated from news content in nearly every newspaper, but definitely on the NYTimes.

They have sections, and the op-Ed’s and Eds are only in the opinion section.
Sure, if you want to ensure 100% that's there's no collateral damage to any other memories than what you try to delete, more refined methods like optogenetics will be needed.
* CI tooling (ie for git push master to be automatically deployed to kubernetes) requires eg git + travis which is somewhat expensive for eg personal development, or manual devops work, which is somewhat expensive work-hours wise

We're using gitlab which can integrate and manage with one kubernetes cluster with the free Gitlab CE licence. Now we did the minimal integration with it (as in we're still deploying our own tiller) to be able to use kubectl and helm from within gitlab-ci.yml scripts. It works quite nicely especially to test stuff in a personal capacity or in dev/staging.

* CI deployment time for eg docker builds on Travis can take 3-5 minutes, which is not great if prod breaks

We had the same issue that we somehow solved by building new images on top of existing ones to reduce build time and having sensible image tagging so we always have a rollback at hand without rebuilding inside gitlab's registry. This has been proved useful more than once when dealing with production systems.

* setup time for each microservice is just on the boundary where it happens infrequently enough to not get scripted, but each new one takes an hour to set up manually

That's also something we struggled with so we extended the time we were allocating to building the helm charts and so on but still no gold. Only semi-effective counter measure we found to this is to work on an internal helm scripts boilerplate of some sort to base all the projects on. But it helps since we are working on projects close one to another and with "preselected" technologies. But yeah i feel the pain on that one too.
Yes, it's a real issue. Kubernetes burns too much RAM and CPU even with no workload.
Lots of them also ban space.
I think the hiring bar at places like Google and FB is astronomically higher than almost all other places - they definitely have generally higher skilled people there on average.
> the brave new gig job world is different: less training, more inexperienced drivers, more layers of contractors and subcontractors, drivers under very aggressive time pressure, drivers in vehicles with which they are unfamiliar, and drivers on routes with which they are unfamiliar.

This seems to apply to Uber drivers in the UK - I've never been in one, but as a pedestrian they are terrible drivers compared to taxis, I frequently witness them driving through zebra crossings and red lights while pedestrians are using them... taxis are the complete opposite, they go out of their way to be nice to pedestrians, after all they are potential customers.
So now the requirement is not just to run a micro benchmark, but to run one with inputs that approximate the distribution of production inputs, along all possible axes. For many sorts of projects, this is totally unreasonable. It's easy to figure out how the code performs with a given input, it is much harder to figure out what the inputs really are like.

In this particular case I'd expect the change to be motivated by profiling of the real production instances. And that makes it pretty obvious how the change should be evaluated. "We're spending more time than is reasonable in linear scans, so the worst case inputs must be worse than expected. Switch to a data structure more suited to large inputs, and see if CPU use improves in the next rollout."
Maybe Tech should stop being so terrible with our data and privacy.

There are maybe 2 or 3 major companies (Mozilla, Apple?) that have shown any interest in protecting their users privacy and not abusing and mining all the data they collect from their users, who have unsurprisingly not understood the implications of the massive amount of data that can be collected over the past decade or so.
Filter, Map, Reduce in 1.5 minutes [video]
It's a naive approach, and also honestly, in my personal experience with banking software, these rules are not selected through some careful secops research, but are usually arbitrary picked to sound smart to managers and be easy enough to implement by devs. Bad passwords should be addressed specifically, because having "ijk" or "777" somewhere in you 40chars long random sequence is not really a vulnerability. On the other there are many bad passwords that are not made of sequential numbers, say "qwerty" or "asdfghjkl" or "sunshine". There're so many data dumps these days that it's easy to create a blacklist of popular passwords and block it, without giving headaches to users with password managers just because their safe random password happens to have a wrong number of these or those chars.
They are some ingenious ways to make that judgement without storing plaintext passwords.

But you are right, that none of those companies do that.
Heh, me too, and some random guy on the other side of the world actually bought a clock with my logo on it. Other than a few mugs for myself that was literally the only sale I ever made. I often ponder what became of that clock.
I fail to see how an alleged threat of universal cloud platform compatibility was neutralized by commoditizing the services you mentioned.
Defer all decisions until you have to make them.

Leave the code in a state where it's understandable.

ie don't over specify - not just simple things like interfaces, but also things like premature decomposition, that's exposed at the higher level for configurability.

While on the face of it, having everything as small interacting functions means to change any function is quite easy, changing overall behaviour might be very hard - hard to understand all the moving parts, and even worse, if the code split is wrong for future needs, very hard to change.
It's not being the victim of a crime that would be illegal, it's the response to it.

If you are attacked by an unarmed person and you shoot them while defending yourself it's fairly common for that case to go to trial to test whether the homicide was justified. Presumably people have gone to prison under just those circumstances.

You could quite easily frame a law around justified ransom-paying, how fair it would be is unknowable.
Why do they write the years like "01819", "00819"? Never seen that before.
It should operate how the judicial systems operate in Anglo-related countries. The US SCOTUS has used legal rulings from the UK and vice versa as "guidance" to their own legal rulings, but not as authoritative. The FAA/EASA/ATSB/* should refer to each other.

To quote Ronald Reagan, "Trust but Verify".
Our journey to type checking 4M lines of Python
And yet... Every smartphone on the market bundles a browser and none of them make it possible to disable or remove the browser from the rest of the OS today.

History has proven Microsoft's argument - a web browser is a core part of the modern operating system.
Just bad code where they took the actual key codes being pressed not the characters they map into, which made the code reject anything with shift pressed.
I'm certainly surprised I don't see a mention of http://www.coboloncogs.org/INDEX.HTM anywhere.
Mirror: https://outline.com/nJ84Ea
Nordstrom is a great store, I shop there and used TrunkClub quite a bit. My local Nordstrom even has a bar, so if I am shopping with someone I can grab a cocktail and relax instead of counting down the seconds.
Location: Dublin, Amsterdam,, Paris, Berlin, London

Remote: Yes

Willing to relocate: Yes

Technologies: Python (incl. Numpy, Pandas, Scikit-Learn, Tensorflow), Java, R, SQL, Prolog/Datalog

Resume/CV: https://drive.google.com/file/d/12SNY-LFMKraxGarYsACUeXR6zyR...

Email: kamisligul@gmail.com

I’m a master’s student in Computer Science at Oxford (graduating in September). I am enthusiastic about data science and machine learning with an interdisciplinary education in industrial engineering and computer science. Interested in a full-time position where I can utilise my current skills and knowledge, and I can further develop these skills in a practical and fast-paced environment.
Well, tools is probably not the right wording. But solutions for making systems accessible over web APIs. There's usually in-house solutions. But IBMs own, "IWS"(https://www.ibm.com/support/pages/integrated-web-services-ib...), is probably the main one I've heard of. I can't really remember all the solutions to serve up html pages.

It works. You pass stuff in and out through what would best be described as ARGV. Some Java middleware and so on analyzes the program to determine the amount, name and length of in and out variabels.

The process is that you choose to deploy a service, choose between SOAP and "REST" and point to your program. You then get to specify the resource name, description and a regexp for your path. The resource name becomes a part of the URL. You then specify which variables are input and which are output. And after that assign some generic settings and choose which variabels are sent in as a part of the path and not and so on.

Works sorta nice. Some drawbacks are that you'll still need to add rewrite rules to get actual restful URLs, since the URL of your service will be along the lines of http://example.com/web/services/<resource name/<your regexp>. If your program is written in COBOL instead of RPG, all variable names will be in all cap. There's a max size to how much data you can send in or return that's not super small, but around a few MB unless my memory fails me.

I mean it's almost there, just not really good if you ask me. It could use some love. Also anything you're unsure of results in you having to dig into the hell hole that is IBMs website. Not exactly made easier by some buffoon naming the platform as such into a three letter name of one of the worlds biggest companies followed by a space and a single letter. So google is worse than useless.

I've found most in-house solutions to be more reliable.
How to Generate an Advanced Search API in Spring Boot
The city was ready to pay $400k. Or their insurance was, at least. Insurance was looking at it from the coldest perspective possible-- how much would it cost us to fix this otherwise?
Nothing wrong with using goto, sparingly. It's the preferred way for error handling in C.

Nobody has code like this anymore

10 I=1
20 PRINT "HELLO "
40 PRINT %I
50 IF (%I > 3) 10 40
30 PRINTLN "WORLD"
45 PRINTLN
42 I=%I+1

Notice no goto statement, yet lots of implicit gotos.
Sidekiq 6.0 Released
But how are we supposed to tell whether a given bitcoin wallet is controlled by terrorists?
Just use Docker.

Let others run to Kubernetes, it doesn't sound like the right tool for you. That's ok!
That's not hard. The hard bit is adding capabilities for when people leave obstacles in the hallway, or little kids are running around and playing with it, or some arsehole decides to tip it over, or the bin is damaged, or is over filled, or isn't positioned correctly, or the dumping spot is full, or the stairs just got new carpet.

The problems with consumer robotics rarely are to do with the actual mechanics. Most electrical undergrad degrees have a module where you program a robot to follow a line or course, and it's quite simple to do. The problems occur when you take it out of it's test environment and 'leave it to the elements' as it were.
General Motors Developed a Competing Standard to Ethernet That Almost Won
> Personally I ended up writing my own autodiffing tensor library in C++

But this will not be a general library right ? You must have only included certain subset of functions of TF or PyTorch or whatever. Autodiffing is also included in certain proprietary libraries like ones from NAG. But I doubt its possible to achieve 50x speedup without compromising on functionality.
Porsche Taycan configurator: The 11 details that stood out
They haven't. As an example of where this lack of efficiency comes from, recently I've fixed an issue during which I've discovered that the Etcd component of k8s uses periodic (10 sec) liveness checking, where for every check (launching of the etcdctl client), the `runc` binary (from container.d) is executed 3 (three) times. You can imagine this probably just scratches the surface.
> The end result of this? If I decide to accept Google's offer to migrate my Nest account to Google Assistant, the part of the Haiku app which integrates the fan and the Nest controls will stop working. The fans themselves will also stop communicating with the Works With Nest APIs and the Smart Cooling mode will cease functioning.

Is this not precisely the sort of hogwash that prompted RMS to found the FSF?

Capitalism is good, but it's predicated upon the concept if competition.

As with paper ballots, we really need to awaken to the concept that there is more than one dimension--efficiency--to many of life's challenges.
Show HN: Taken Photos – Free Stock Photos Annotated by AI
I literally couldn't apply for an American Express card about 15 years ago because my (ISP) email address was too long. I wonder why they chose to restrict it rather than go with the standard email max length; they had to put effort in to pointlessly restrict new signups. Odd.
I think it’s a sign of the times that NYT is willing to hire authors specializing in covering tech with a skeptical perspective. Newspapers would first criticize the government, then during the Industrial revolution they branded the entrepreneurs as ”captains of industry” or ”robber barons” which was a sign of how they wielded huge influence over the population.

Now we’re in a similar place with tech. Tech entrepreneurs have been branded as ”disruptors” saving us from the establishment for the better part of two decades but now there’s a bigger diversity of spins on these tech stories, leaning a bit on the negative side. I think the pendulum will swing back to positive if these companies get their act together and do more to protect users, and especially if the governments bust their monopolies. That would maybe generate a lot of sympathy.
I am in favor of a new discussion about existential philosophical differences again. Almost missed the systemd drama.

I use systemd on pretty much any linux machine but am very sympathetic to the arguments of its detractors, which to a significant degree results from the behavior of its proponents and the inability to see that you actually do loose flexibility in theory.

You could argue taht GNU/linux could be called GNU/systemd/linux.

I couldn't write a better init system than systemd, but I like the idea that some people could. And I am pretty sure there are people like that.
I dunno, like when Facebook tried to launch it's own crypto-coin a bit back, it always help to remind the general public - and 'general public' is the key term here - how horrible and untrustworthy Facebook is.

If it's not in the public's face at least semi-regularly, they'll forget.
Love the triple pane.

I'd argue such a file manager is meant for people who prefer and are used to Vim shortcuts. I just tried Ranger. Got image preview and Solarized theme working, but it does hang on previews it seems.

For a GUI one, I can recommend fman (fman.io) as it uses the Sublime paradigm (shortcuts plus a command palette). It isn't FOSS though.
Can "Differentiable Programming" be related to "Differentiable Privacy", or have we now one word (and acronym!) to describe two different things?
They are replying to another comment who had questioned the need for yet another loan service. It's fair to point out the persistent problem of access to capital, even if it's obvious to many.
Can anyone offer a good guide to DevOps for people who don't directly use these tools but work with engineers who do and would like to learn more? The whole ecosystem of servers, cloud infrastructure (and all of the different offerings there), Docker, Kubernetes, CICD tools etc is a bit overwhelming to get into.
As a fluent speaker of foreign I can confirm that is racist.
How can a VPN be local? If there is no vpn server at the other end is it really a VPN?
On iOS you can use "parental controls" (Settings > General > Restrictions) to disable Safari. It removes Safari's icon from iOS's app launcher / home screen.
Once Apple introduces an API,Apple has to support it for years even if it’s not the best. See Microsoft’s cluster of bad APIs and a dozen ways to do anything for a degenerative case.
I didn't realise there was a competitor.

I wasn't promoting one over the other - just unaware alternatives existed.

Also didn't know it had ads, because all ads are blocked in my browser.
Why Testing an EDI Platform?
Last year, he was still at it too!

https://www.wsj.com/articles/the-battery-pioneer-who-at-age-...
Versioning Web API – Asp.net Core
What are the actual business opportunities for cobol programmers? Are there chances for remote work, freelance consulting per project, etc. ? Or it's just office jobs in banks?
If you believe that ransomware doesn't exist for macOS and Linux I'm afraid you've been misinformed.
> taxis are the complete opposite, they go out of their way to be nice to pedestrians

You must be living in a different UK to me (and everyone else based on the general consensus of taxis)!

Uber drivers have to drive well else they'll be reviewed poorly. If someone leaves a 1* review for their Uber driver saying that they drove through a red, there will be serious repercussions. Try complaining about a similar thing to a taxi company and see how that works out for you.
Soviet Laser Pistol
Thunderdome?
Lenovo’s New Displays with Reduced Eye Fatigue
Loads of places do that (both methods). What's wrong with that? It provides (some) protection against keyloggers and means you have to type in fewer characters.
I'd recommend web server log analysis with GoAccess or AWStats.
Ask HN: Do you recommend React and Firebase for a social network project?
Some are pretty trippy. I like it.
Running a Newsletter with Better Metrics
Like all platform owners, Apple gradually commoditizes its complements. The most extreme end of this behaviour is when they release a free app or feature that wipes everyone else out (or drives them into tiny niches).

iTunes was a famous example: It instantly obsoleted indie music apps on the Macintosh.

We had a good time discussing this fifteen years ago(!) when Cabel Sasser, cofounder of Panic Software, wrote about the demise of Audion at the hands of iTunes:

https://www.panic.com/extras/audionstory/

My own take on this is to think of building apps and services on top of a platform as sharecropping:

http://weblog.raganwald.com/2004/11/sharecropping-in-orchard...

This doesn’t mean I countenance Apple’s behaviour. Far from it. It simply means I think of it as inevitable that platform vendors will court indie developers and partners when they need them to grow the platform, then turn on them when the vendor thinks it needs to commoditize their work.

Twitter and its indie clients is another example.
Kubernetes seems to be intended for large, complex environments but yours seems to not meet that category. What have you gained by using it?
"Password cannot "resemble" username or past password" So they're storing passwords in plaintext somewhere then? Otherwise how would they know?
If you say:

> Each siting location by definition is worse than the one before.

How is that not true for nuclear power plants?
If we have better tech, we can remove old panels and wind turbines. With nuclear plants the place is lost forever. Let alone that there cannot be a safe place to store the waste.
>I really hate to do this (especially since I am not an expert in this field), but this really seems like a philosophical argument against scientific theory rather than one actually backed by evidence.

And there's nothing wrong with that.

Science is "philosophical arguments" (epistemological axioms, assumptions, theories, etc) + evidence, so attacking the first still makes sense.

Evidence alone is just objects / the world unfolding, not science.
Maybe they expected you to label it as a Google Pixel color: e.g. `really red`.
I worked with token ring, but not token bus. Back in the day you had to sit exams to show an understanding of the electrical characteristics of networking. I remember the realisation that packets are not really send down a wire, instead the wire segment basically pulses the binary.
The world of invitation-only airline clubs